{"report_id":"11be5449-c6cb-4b60-a6f0-a317cd8d9dcf","version":0,"status":"done","tags":["coinbase","crypto","phishing"],"date":"2026-06-30T21:56:42Z","url":{"schema":"http","addr":"max-coinbse.com","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":0,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"final":{"url":{"schema":"https","addr":"max-coinbse.com/","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"title":"coinbase","dom":{"size":498304,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (63197)","md5":"41fe0e223dc4f6496f5622954509168e","sha1":"e3b3c23dfe369ccc1285d9ccf57534583f6ecacb","sha256":"90c2cf9516dd6798e638237386d389462bf930b69e23515de230178de29b9fc9","sha512":"7cab56cf03a0d1019b0ac4d8d27a6382ff0f0cc69cff3d220d178edcf7848f26657c00b07c164ab10d45fa1cc24bca04f36ab9b7ae82fdd6d1a02595f2fc8bf6","ssdeep":"6144:NJfBrZZK8WY1yeBFcHCEZ9wcparlJmm/wW3wC6RTO19x4iYFBVcT5FIh:NnrJVBFc7Z9w+1Ns6RTO19SYTfm","tlshash":"86b4d0b02115007e652783f0bb74aa4c26bb925ef157c468b99e5bf81bc3ed0ed67c90","dom_hash":"domhash31ae432240aa86eb4555cc07c6517727","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"max-coinbse.com","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":0,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-04T21:56:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-30","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"max-coinbse.com/img/top_bg.CsRyxjoM.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"max-coinbse.com","ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"domain_registered":"2026-06-25","domain_rank":0,"first_seen":"2026-06-30T17:31:42.687798Z","last_seen":"2026-06-30T17:31:42.687798Z","alert_count":645,"request_count":92,"received_data":12573602,"sent_data":42460,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api.optionsmarket.top","ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-21","domain_rank":0,"first_seen":"2026-06-30T17:31:42.693258Z","last_seen":"2026-06-30T17:31:42.693258Z","alert_count":0,"request_count":27,"received_data":315632,"sent_data":15704,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"jiaoyisuo.thai2570.com","ip":{"addr":"104.21.6.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-08-10","domain_rank":0,"first_seen":"2025-03-22T15:52:54.102334Z","last_seen":"2026-06-30T17:31:43.577971Z","alert_count":0,"request_count":6,"received_data":174897,"sent_data":3582,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.reown.com","ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2000-01-28","domain_rank":0,"first_seen":"2025-09-26T22:04:59.160341Z","last_seen":"2026-06-30T09:36:50.695511Z","alert_count":0,"request_count":7,"received_data":338045,"sent_data":3780,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-06-27T17:15:02.349049Z","alert_count":0,"request_count":4,"received_data":2299,"sent_data":2213,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cca-lite.coinbase.com","ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":2742073,"first_seen":"2023-08-12T20:47:03Z","last_seen":"2026-06-24T13:54:21.799217Z","alert_count":0,"request_count":2,"received_data":2292,"sent_data":1083,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-06-27T18:40:22.638981Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":599,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BRJtM4JU.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"95d19a7ca411a54063ccca2248efa884","sha1":"3c7450f32752bcaa996d80c644edb59d6d1b2b21","sha256":"b7ac93da8cfa5f1f9b2830cb82bd9d08cf5c7c23429ec7b5df07a71fca9bd28d","sha512":"dc1d33c02c02b904002d237b3fd846d735f46d9f614ff1cf953fc4a3b7defa6f7f41a9d782178b0e958d62fdcc1342905fd2ef542b5514b53170749a53d234ce","ssdeep":"96:jw2+5Rp5gLLJqBWQkTJMFuIM8PcY4/+Ru+66YPT1JCsy+oky6CfQGCoGwJl6Orv5:0/b5gPJIMTJmuI6+Ru+6vp8vlX62jCZa","tlshash":"5fc1b5f072ab45f4c6c9199c7c166b14413881b8e41dc029bfdd54eec9aa6c2ce8ff92","size":6015,"data":"","first_seen":"2026-06-30T17:31:51.485119Z","last_seen":"2026-06-30T21:56:58.778615Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/0826628a-82c2-44b8-aec5-105a6376eb03","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"","is_inline":false,"md5":"dea2b84bc0d51bffc92170d32bff8a8d","sha1":"0ba8e3b3cd083f604951338bab4221ff9a6e9087","sha256":"a5180628c01079691f3d21afc8086479b923f6127b860cad410a5c48c6bf4ad5","sha512":"38cc4ef0c3084612b264aba03ddf5dc5706261764b47e81438b3f4fee2a82eafc16c0200a5580bc2618a29940c94beba91657ebd77dd988f3b19d1d6b83bd0a2","ssdeep":"12288:FCJap2vBQxZ3heWWqjV4PgXhYnxFG2w6Zr5E:YJap2vBQTheWiP8Ydw6Zr5E","tlshash":"965593b2714dfba327b50f3901cb78d34e1573336908250db7f5a5a6aab06c76432a4b","size":1322663,"data":"","first_seen":"2026-06-08T00:31:10.551159Z","last_seen":"2026-07-13T07:31:17.527591Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b30ab72ff037d3297e68d7ece22db695","sha1":"608d301c467cc110b68d9de1cd170d80c88097c1","sha256":"cb518e574eb65c75e7944b8751d98280f048a70b43410fdcedb2ac563b0e7a5e","sha512":"c368e3ae075c0b8ce0709c38d14f75be0f41fff1e11b070aec9742778fbfb1b6a822f7ed79175160fb72efe354b9d7c0877a2d1764d16e76118576dd329db8ca","ssdeep":"","tlshash":"bbc0808476d35441f63532a9564f9c459155d465104e1d582d49960d3fd147d50714d8","size":164,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.468423Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"109bb5d436340afa2c5b5c166f2c142a","sha1":"19f0b5e2e5e168b912e088a0f2d28d2577433183","sha256":"4e1dc655e4e4cfac9aa3811f4bad7dd298c5e5b2276508cea29e5048c090423a","sha512":"542fc2986a05fa0e4451ff3d557c048f7fcfaeffad18ae6d5a370fb3f23b348f67c8fff2a28c7e013f1c919725f80e09ef2ae37039cb6ec1e7e894a15405d3bc","ssdeep":"","tlshash":"9ec08ca46cd39890d23a53986abeee8a9334c83a308805a2d95ca0263f5267d42759d8","size":161,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.479487Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d9fb29984167482f62da39a7b70e64a0","sha1":"c24c691224187a9025ecf4b41876d3d3cab67118","sha256":"c00278f45ee31bd0b23f297772738eadeb416eec465c1f1bd16d2916a3834adb","sha512":"05c3c1c486a521feda51219e2d25c8e1262728c7fe966baac231dbccc87f7e0da9c046bbe925df740c1e5f8d1749955904b3b2c2916fa80572edafcfd2687f5d","ssdeep":"","tlshash":"d7b09b9875d3a191567221d8955fad8591348420208c1550545991557e6343d41768d8","size":119,"data":"","first_seen":"2023-04-27T21:40:59Z","last_seen":"2026-07-13T12:23:11.481045Z","times_seen":6007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d455dcae4e609964ed47767378e86862","sha1":"0ad536913e6dd736a7b4b596d127314e4e7b90e1","sha256":"54c77a491a55b571d4bde559d790495f57948e65e3377d9fbccabb199fe763ad","sha512":"7a36f940d727115adb38e8263d529c619a85f5e0232145e669fdb7b7b1347861610d0780be0fcbf87ff30228140371869d1606d2828acf74cb71b8f3f3b0cb93","ssdeep":"","tlshash":"3cc08c84e4d3d1874a3791ac454eee819024c42b308906a32448e0137f2347d80328d8","size":146,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.500339Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e534f8020ffe4114b27a9b02e9963516","sha1":"a55d29ee56eef317e03771a528b4d78788937c79","sha256":"e19ac815d1a448035c669deab6ece4e12ac4c1ad71331c84fca6696c730ca5de","sha512":"d60e012b4bc3cd0c3a8eee348db42844526a0ece83fa25078248f014b491ed57dc5b8cc9229c28549de6ad7c20f67a5e8c59d409628c67e5e406b1c08191fa3d","ssdeep":"","tlshash":"d5b092c833c3b660422377bc50bfa888b079e920348daa495201c2a67ef223d411386c","size":122,"data":"","first_seen":"2026-06-08T00:31:10.50924Z","last_seen":"2026-07-13T07:31:17.542882Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a33d9feee1a1276cc3a4844e7df6296b","sha1":"81129fc453c669f817e94aa821c5a4eac55aa260","sha256":"7cd4548151d87b93ae3a822207b93cdff3b31f7fd6a98b9b6e97b040d9c5fd6c","sha512":"97e55e80385ff9533f3bac085cecdbc65a751f871698d5c1b3b7e7ee1a00dc489de6b6be14b15249478b9cd4205700b5d5cee2a0c1ec883e5ee01cf83c545c4c","ssdeep":"","tlshash":"37c0cc803ac3a082ba3022a8228fac8ae028c028208f0c282c08a2083fc203c80308c8","size":161,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.488439Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"10a905592fc5f84dc0542a39fe2220ed","sha1":"98ba99b604490a25c4883164507f8c1bb9bd7e14","sha256":"44d032c5c1baf308569440b666938f3fe8650b974d9157dec72a19d76b079140","sha512":"d340a3c6a53ed3316249b8bb984b6dac0b68ca1476d5b5525cfd232312daf5f7b6b8b73dfa0301e51e03bf323c3bfb1cd7dcd7da916a52090f25f7d0f4bf03b2","ssdeep":"","tlshash":"06c0c04275c35042f53103e8424fdc4580a4c020108f1d0c1c0465043fe307c00718c8","size":169,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.502849Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"05211137fafbbc76d61b8aa0943658d8","sha1":"00ec0d719ca8c791624ec6673ee6b5e881f87d74","sha256":"144506e476be2f1f65fb374d4c3033c74e6cc7f43a4c99d165a6e48e94eecb59","sha512":"531c2b928748ecbb9105e51ac7171bbf7a38b095b53270d5c5fd04985c71f75f2a24838afc6beebfad2a4675dffa38cbeffccc377919ed82742cba09493d996b","ssdeep":"","tlshash":"d1b02b8464d3908142311188754fac81d024c42020cc0650144890013e1203800314dc","size":121,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.569129Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"66f90eeb37dbe7275a05a385e440c529","sha1":"e9498aaeb5e960168582b2a25ffdd70c4abb90a0","sha256":"d3cd187f21a64f72418c2e5b8f18c2d8087f285b126ea7f066e18e598e9957b7","sha512":"836c07722b6b635907cdb1f182db2cb3719b9c2b8210939b2417c37509c33aa17a04d93616dfea403ca525b6e361279cbdb70bdb1828f29b28f904239a3d5629","ssdeep":"","tlshash":"98c0804455d35151a63513a9564f5d859125c875104e15541c5495097fd203d40b55d8","size":155,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.584311Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c823cb85664066871374dbcdf42caacb","sha1":"1930996b47b33cc0b3f71a1ebcc9ec2377238bbb","sha256":"def1773348027e591601591f882bf1ee3aef70884cab338157e10a88fb1aaaed","sha512":"2f5b350871bee17a8614a683adfaf0e3fd99016ea168c7a34627a85c8d030fc94d6b97a3c680e8dcd078a1acad05648f094702edac21a87498c84f5c4518c5f0","ssdeep":"","tlshash":"2fc0c0802ad3d8c2f7b012bc070ffecdd01ac0b1207e10a41c44a1883fd153c00316d8","size":184,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.499465Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"09c711aa1df50005ab9bef3c418fe3cb","sha1":"7175d50e8980a26a70b707da828d3962c34992f5","sha256":"25285d3fbac3c3dd8f7c79d74d037d9031370466750c81a1fa31c10dfd9d0005","sha512":"1334435ce535a5c8f36e8985ebf465d7c6c24238e01954dc726868e80a683ed9e202d70c105a788d155643c5b08e558efc1379d2a2c807a614a091b5a91a0dca","ssdeep":"","tlshash":"9ec08ca866e399847235259d864eaec1a024c424248855e8248ce04b3b6783a803a9e8","size":152,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.542076Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e926152bd63c206321c37d30a3f5baa7","sha1":"90aba98950daaf9f44ca89eadac0677d02b4eaa5","sha256":"129260f47bb6abe1b17e6d4604c75b1f19ba563dfac0d40bcd004af423306cbc","sha512":"001f81970cc45cb2be5aa576479e001070b655e6a136ea1c3aa91a8e04ae8e6751c637ec7d5da158cf6b156ca81cb50b8e5d8294ff1891fbeeefbad1535660ab","ssdeep":"","tlshash":"85b02bc435f3d587927611d8467fbdc1d134cc30108c49502448e0153e2307844775d8","size":127,"data":"","first_seen":"2023-04-27T21:41:00Z","last_seen":"2026-07-13T12:23:12.602842Z","times_seen":6553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b303246663f5cf558ba61529d7a2a81b","sha1":"cedc7c79b06ed0bb2cdf4d47b097368bd31ebd43","sha256":"015d2edfcb6ef22009ec49735df0041e895faa94554b7f71e949176675fb76de","sha512":"c2f73826212cbbf89d7cec7081719de963b6f9b55b68b870c90236b37850930d383291e0d97d4473ffd0c52884098b0ec6ef488108d695a48f879962db4bab6a","ssdeep":"","tlshash":"6fc09b8c32d3711042137b7c502f6cd8f479d990304c454e6111cd917fe113955338dc","size":139,"data":"","first_seen":"2024-08-20T04:53:20.522079Z","last_seen":"2026-07-13T07:31:17.587791Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94840382fac714e1a3197d8e7918f8e3","sha1":"f1a50e16582af349182f301ae0d6265374117de0","sha256":"1d08d1971dbabff55a4fa923b74e3bec82b85a0e9b080c40274e91209f61faa8","sha512":"ea44987b1972c1dfd405cb66adbbbcad7f797246edc841b330d863e9fb86a9ea5d05cc1c575ec388e24dfab76b93e0dcc6a8affa0972554612b0702ee354a4dd","ssdeep":"","tlshash":"83c08c9466e399847232218d854eae81a024d825248846d8249de0073b6743a803a9e8","size":151,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.537319Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5cee35c005fbf5e16840609014ea9e12","sha1":"f24fc871b948496233b44756140977c6e8d73415","sha256":"79ba40fcea2f9d789040e53c15d582d0a660601880f04eba7e96dfa2d0302b78","sha512":"b68af055e70af549aad2baa7fa57e6ba4ae2f2560af8ecf53ef8fd5163b06de4315b93648cc76f733ec86d6ac3fc9c73002aa880ca693ae9049f2a42a2e23e76","ssdeep":"","tlshash":"fac0c08015e35883e23022b8021fbe4e9016c4b5104e15840c04d04c3fc143c01710e8","size":171,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.562166Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"13e0f6074fd109283821c5e1901a1095","sha1":"9c38c907e63bd33ee293a32b602dda03e7887643","sha256":"414472fac2f28d9f12ec9cc2c1710fc0abfac5423fdc640f536f4141b86f27ae","sha512":"33cf2ff54fee661861600bd1d85b4d21d6af057142d7b1f047801db41706d9e5ac69476f0f0579beef03b1d7035cc564df3947f47b4fa947cc9f670de57e14c6","ssdeep":"","tlshash":"95c0c0c415f38883e23022b8229fbe4e901ac8b9104e16c40c4890487fd143c41714f8","size":180,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.469893Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"35d46e45e327ac5108e60a7fcada3841","sha1":"6c95736a6418cf1b0ea7c424cba240dd4abf5c0b","sha256":"64ca9231682aaa6c23cf40300206834e7d06aa14e0d6de006c756811d813b6f5","sha512":"484f9236d062cc2af32be9cb5d38e914aadf688f284062293555a2f8235639551c6527081ab6fb59a569a5ee1e5bdc0bfe7df697dc4259f9c20c0110d5d142d7","ssdeep":"","tlshash":"0cc08c946ae39482b63132b9574fbcc99029c479209f1d682c48a50a3fd203d80714d8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.46759Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f757781efb9aa2e0411815e2c02227bd","sha1":"41c6f6ef24856cc5d7dad916897d82b77f60ea78","sha256":"d525a001c5908d6370b2a10133b96a09307da03f48b35b75ebb4dbed65d6d6ff","sha512":"e193917e0d93d2a4441ee2ea1f3ec6c4176a485f70a9f1790265725d196b1a1036a2c77aa0796ada1cce94e5a23bd4eae8acb1c23c76e9beba97f64d0f9566f3","ssdeep":"","tlshash":"f7c0c04465d3a042b13003e9170f9c828139c071208e09050c8491083fe203d80720cc","size":170,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.509312Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b4770037f1bf7e6c0b2116c0d761f0c8","sha1":"4a1dfd45edb7681f5bd6186a05ebe034fa25ab49","sha256":"595646a58bc190d588c929994ffcb8d2bb3d3a3eeb47ec33a0650b876329f08e","sha512":"9a8a53d3919e14695ddca2b12c66de0bfe4b4f1f4af6555f83c88e4725a7a732a2bba14100c6f3226fc7090c2d40b71d01c195e0a8e09b0299380d6ff57352c4","ssdeep":"","tlshash":"fbc0c04415f3e042b13003b5230fdc42802ac030108e0a481c44d1047fd203d80320c8","size":166,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.525635Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7dcac239266913a131d1e3090751f1b4","sha1":"0cf4469d43555c440b8ff92ef3205c30e58aded1","sha256":"56d8b162001c5fbab8c201334d3840d4f6e822d36e07533418ce37da8a32192c","sha512":"25f7512c470504d1957a41192c2eab96705ad324c3ebff2c00f6b2f5bc2d5d76bdd6926e8a109b49f28b7117c3cf1cbadf2e9576c31d3dcf3e3e1755cba13f28","ssdeep":"","tlshash":"20e06810b9960a860ee312512c5ea91d8126cd306908eda0110de4021aebe3295a3187","size":346,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.476859Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0c44a3fe66b5ccc3292d9af290317c9b","sha1":"66541b6c107e1b823b5df02157d4923b48eff6bf","sha256":"33323f14ac666ee63bbb0d8eed6ee6f6ec1ad1fe9c6c7179fdbfd056c5dad359","sha512":"61bdeaf87264669ae4b04e8e1f49f1f06494390c9762c2a45a6ee1a0edc153c753aa608001d361af10edabb3652f3ca09362b1b78de97f24a5634bf6a0633891","ssdeep":"","tlshash":"29b02bd425e39182427211c8890fac89e134c430108c1980244c80013a2343891714d8","size":123,"data":"","first_seen":"2023-04-27T21:41:00Z","last_seen":"2026-07-13T12:23:12.782781Z","times_seen":6667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b2e7c2cf81944e3fc755e399d843f7e1","sha1":"43b8d2df29b72b866bc92fe704cb1fbefbc7062a","sha256":"b74959bf5065a9a55af8eba3bed8b187bd7b014bf76db2b2f461fce80a354653","sha512":"612603c9beab4837df1df57cc874c6a23285021c6e00f02a06a7c936a973114d095a27e119596d9da5d65130a01bd78a0178eb4fc1a5bbb72a375f7e15f0b731","ssdeep":"","tlshash":"7bc08ca868d39891c27a52886aafee8aa334c825308815569a4ca0223b12a7e40719d8","size":156,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.574162Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"56aab4db03922b81415ebb90f05a05ff","sha1":"100ea913359af2ee18f2bd396d717eddb5a60f0e","sha256":"078c662533f2da775faf030e8556b3370d6269872d663e9a7497585c82f5afbf","sha512":"dbf9c55118fcb7cc745a06f01c32fbfdf3a5a271eaf3372933ba82210916d16126d7d37b498d54b282ef549e44a42ed968a9907e667a70666b7ccec9fef1681e","ssdeep":"","tlshash":"14c08c8c6ad39192e63a13a95b4fad869039c8b5208e26581c48a509bfd303e40b25d8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.486526Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"96427a5ee1f5edcf3913fc04d15065be","sha1":"167a99bec2ebc797bfca4ebfbdd0592ab768d4a0","sha256":"9f460bd790267459b3b4b2f658878353949f33a8c1e563d645ad0d4637f1c6e2","sha512":"0ec4c120b70bfe3e6efd0ce3c85d95b8444e900bc2cf53d0fd1cf5ee27940f1fe2fb724daa255bfc5bb61447a85703917f0df1407bab29b6e822f4d4609cf17e","ssdeep":"","tlshash":"adc0c04416d35042b13012e5230fdc428028c071308e09040cc495043fd203dd0310c8","size":165,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.503684Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b0384fa2262044a3f588bffc03df7155","sha1":"6a89bbf96afc3dc890cafef739b517a8efb3fa5f","sha256":"4cf88657f3684f421f31e9888663d709ab5bcf159ce5493f0ea56399f57e78df","sha512":"97ed144a1728d36d98799808ff086f87d29e499b84b5dee978c875b6e7df95c48fd1226a6f57187832e78559e85184a4e5b7aa6817f15be964e6d747045ff1bc","ssdeep":"","tlshash":"bdc02bd4a4d3e0804232318875cfae81d02cc424208c0e50144de003bf3603dc172cd8","size":138,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.492017Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bdcd7d5132050c542667f8ae4e8573cf","sha1":"952077769e98c2d8e602362819d5625e4488d1ce","sha256":"38f15821bf3ddb5813f53a22eed37127527d39da193976544bc9ef81ae9af34a","sha512":"17e226fa9b4c4eb8bdd0c543fdd37405ef988d1fea9b56520c988dfd2de35249ab82ebe5cc14dfa2aba140373207a2b77092074919a0e8b4f7980ebbf75ddb30","ssdeep":"","tlshash":"37c08c84e4d3d08b9a36519c454eee82a124c42a30890ba33458e0123b1307d40379d8","size":153,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.55578Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a20c8d377b07394e5a057455fb9f0df3","sha1":"0f2f6a707b59420d7fca7c04799a09cb4c5c15f9","sha256":"33271e2a24e00dc102b8177f3b5f9109183b66b109f8be65f8a62f841e56ead8","sha512":"0c5830cc294a331cc8008582da94d28fb3ffa7efae505a85886c6a7482bee1f2253d5900a5a53de4df92aa8f6cca5f1d1a1c75131a46f274981603996437646a","ssdeep":"","tlshash":"0cb02b9434d391805331128c464ffdc1d134c430208c0660144890063fd243c00715d8","size":123,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.515461Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ee72e3e085e9da07e618b3d76615f736","sha1":"863b4466b8470b6d36279b3145292ec96e479148","sha256":"d3e9867aa4044acff33037ecca46ecfbb471677a45fdfa591c43a40c80d96564","sha512":"a8969660231e49a76d8d8e7001ef1358d473b514a2cea31f3247a586e12413c4a437b3cf13f6c1ebcd6a2b512755c00c549ae4526a77a491d76a902bf026ebff","ssdeep":"","tlshash":"12f0051435d01a539fe201a5384edc6f4132de182944de60721cfa0621eea31c5923ca","size":494,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.497039Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.C1c8tQCX.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"066581e5535b750e379ce104658cdeb3","sha1":"0b932e9d22ee021abaa605586df63ba2d1279e3b","sha256":"af08855b5d7c6b7e2feb7cac77fc8008c2b5e174217ad33a9ce63f5f40958682","sha512":"74be28dc0cd68e90342933a69503a14ae3abed1f9934e5ad2a528076fe9b92e04cc8e6c18c48af9e844d7abbb00a9ea3724edc93568ca4b7699733a07e1f9c92","ssdeep":"","tlshash":"8a21754251a5d9f00a55c990d3e968029131216b4b34c0a03bddd2dc0f2bac1d6e8b37","size":1346,"data":"","first_seen":"2026-06-30T17:31:51.457538Z","last_seen":"2026-06-30T21:56:58.85116Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/i18n-messages.oHpfHAaG.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"407a340ae468e17728200267e2f3b623","sha1":"88622522aaee58d9d0f6f0eb5c9d5478be6b36e3","sha256":"6d43b51e6c015b92d03e7cfcb73972c3d929b93e9541e2fd5eb0fe6cffdbb91c","sha512":"bacb7993f03a515f2a978cdc43009b077ed9c62a7477c866632c15f6f17a82da07504e5497b92ac756911e4202277e9aa2a8451168a49f7185d01a9d8a101c42","ssdeep":"12288:+v/l6PGdtLf9lfeYuPmcDFzTcz8hTqRrJ/nGsiqtlJz2avY11qdg4stHfo3vW559:9KrJ/n5kqdgVxTTa1dOSYtKWwEn","tlshash":"369516a9a0cbda8003c99a41549a32f5b20d4d967944f7d3ccb89e3aecd25f1c977f18","size":2058217,"data":"","first_seen":"2026-06-30T17:31:51.579882Z","last_seen":"2026-06-30T21:56:58.930841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fdccc0d7b94ee7f1397e6fa8770ff519","sha1":"23136e4fec7949360dfe02f36e9f5e38bbe6ce57","sha256":"ad7276976a8c37b22e2d7479290618e0c2c67d564a31cac5b49062a414314901","sha512":"955e085bc2e2c9e66fa713b1b8691cfe1b685379249c9793b84610acfb0c3654d993ea8b4a1335f5e411e70a115827716b128e02f4423a6e4063d7f1559eb4df","ssdeep":"","tlshash":"d8c0c0402ad35542e67002e8030fec458024c430105f15641c48d0047fc103c81704c8","size":167,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.511778Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe939cf3f0791aa4393c2e098237378a","sha1":"45a838d73a4c606d484413fc4cd18f297f525b78","sha256":"373bcdaea9398c1f586404f0a39045e09a11949d361ec9c58a46ca5e010f75a4","sha512":"b37d1247e638dc4a9390521e286cb785b14762697361c79d70d05afad9cf8b920e149817aa036b409f55b7ab888684589b5fb98bab250946a3e15d01ee8e9a74","ssdeep":"1536:vKoxoAlcC30xcdayrkrWkhAW87hPsrRET6kjOWDWX:y94c80adayQrW9mdX","tlshash":"d883289cf385b23543f75075e52f2602773b1e09e849c4a4e166eac52cb94ce6223b7e","size":83300,"data":"","first_seen":"2025-07-30T09:26:14.123327Z","last_seen":"2026-07-13T12:25:08.338266Z","times_seen":2085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DBgjEAIA.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fc89ceeafb525c3b595a22924a2cc14","sha1":"95803bc775cb4dbf6acd1b3cde4626f8c6c3e871","sha256":"1c46c08333b3e7d959483522524e68f559bb8b9c5661d9226ec2392702194abc","sha512":"6f36f2a2ed843639597824b8f70ea06062ed32cab491e3ad593906158a5a80b98ad91321b79acce451bbb90d052e27e1d706ab051021e539b57abe277a129740","ssdeep":"192:y0KJIvCx5KucBhAkwJYmNj9r4JKB4gKHVW0yqi5IUO:yRJTx5EBKh9rWRgaA0yqi5s","tlshash":"9c12f96531b1a80a1de751a863be481283305077a414c5febfac64d6cf4edc36ae7b38","size":9618,"data":"","first_seen":"2026-06-30T17:31:51.545375Z","last_seen":"2026-06-30T21:56:58.851942Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0be72ff25d7833aef35e7de0d88552d5","sha1":"a051c09a89bc0b418ebf899ed557038f82a2bdde","sha256":"ca976c6f7800262afb7bbc791740fc88d7d1d85d0c94424b61f61778121260b3","sha512":"a7a939af571e2dc56e5d10ca04fc77865a8cedb694c2b7bef953002e7d2250f186d98041c3643a0d02f502202f23b3ddbc5b69446c2da366687101938a6556e7","ssdeep":"","tlshash":"0bc0805475e358887131118d454e5f41a134c454158845d4245de0077b77436403dae4","size":158,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.487513Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6e715b1bb534c2a6d92ba292d79a327c","sha1":"2811bff01ff8c3f071308cfe0392c0adb5221e91","sha256":"9a3ee7d9b6b25a8e16c23d7b515594b37e77e3eb25a1a13ca6047c9a0737f0be","sha512":"1531a8ffbceae22d14f4845c38d79b2e12fe8455c9a5e86e48013be27aa2d8c2e6e342fc29242afdb42060721378743f4f4ae73ad3be5b906036f6975bcd48a6","ssdeep":"","tlshash":"69b092c833c3b220466377bc502f9888b03ee920308c9a4a5204c6a27ef15394113868","size":121,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.47772Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"59077f48da8a2b5bcd10f79e4edd4c7c","sha1":"eb245409e8fc5cd37dcc0a317211a43c52c15a4a","sha256":"605e893c966214bb603c2c797403a76b3d32ea81b0df05d83437550f9a8df40b","sha512":"f6f68762fd0e9ed4f45b6d63bb5618cf5b0c5119c23ec0b096d153b36a207f7776918debe3449b268425cd579634a59b19f5d7fc01222296e35b500671696f25","ssdeep":"","tlshash":"6fc080c45ce7644356711194555e6d45d175c474305d19506844513139624bfdd715d8","size":161,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.485635Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DcnLUjMo.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"97d45c181fad2440de13b45113d5738a","sha1":"c6a360d14ee7c913c7172695086a6611173e56b2","sha256":"5e6c57b1b402fc3bde8aac7ac50320330c7f3cfbfeb983fb14974be10e244745","sha512":"1260762db5df0b5b7a609186dc94258de71ce9012bd617d4bd4246241cc016c76cbfafae5d18bf0ee5b1187bf3fb785c3732163d4f1ca9cddb51afdbbe11b55b","ssdeep":"","tlshash":"5e81c5827330d561165a8ab467fb0906773a20374521c8ec7b8c9ae45fbfd859b30b34","size":4066,"data":"","first_seen":"2026-06-30T17:31:51.533422Z","last_seen":"2026-06-30T21:56:58.832943Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"755615758878c56e4c82bbff99efab12","sha1":"fe2e6b96ca27b3d43d1185b491266cc4a53fe0e9","sha256":"2423b41ee59898a9366138c7b2690ff2c4bf5a698165c81dbc5e0475b35756e0","sha512":"741102114b1dc06fd276c5c5bc10505bcf79aaf079ef4d575266579be84f4742225e111ad434c301726731960f73f345246358b67ceffd796158f199afcd0b97","ssdeep":"","tlshash":"fac08c886ad79582e63a23e95a4fac8a9029c8b5208e26585c58a519bfd203d40b14d8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.583489Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"78c46ec001a103db5622904935d42e58","sha1":"21abdde014f3a89bc3eca3cff92832f7a21bdcbd","sha256":"ef92be9db81b5b7403d31f7188489766faf8c9b7aa06a0a61488190bb98b2dd8","sha512":"3848c9068336ee1de85118dd20deeef83a4353babad280003eb58610656b0498c43a1a5438f7b1b978369af59f499478bd5c57d260bcc966fadb8e850ab5617b","ssdeep":"","tlshash":"21c02bd8e5d3d0804731318865dfaec1d02cd42420cc0e51544ce103ff76039c171cd8","size":142,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.538183Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"46688733db7e3e47ce050fc505c66320","sha1":"29364058b17d29e6403521db35df98ab3de7a385","sha256":"25d164d9cce9aa7feda884fa9024ff897545d179d9582c4b0485c10400320c6c","sha512":"359c922bef0761e1f3c2e0b1ccb965fe77d3071d462caf1ba600b6122335dc14f8c0c79c274744ecf806be723ae1c3796c3bbccf5e57a95623e69fc5984f8f94","ssdeep":"","tlshash":"a7c0c04429e3c0c2e93103e5575fac44c234c424209e06841c4c550e3fd153d50309d8","size":175,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.58014Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"58a9757890badbe15285db70b63795a6","sha1":"7d125c255d2edcaf885f72d724b96d736de442b5","sha256":"5b36280be241bfef3b85d267851aef786df47f7d3d6a55441083700309f28620","sha512":"9bcda0ca1b1c1cb73fb032b556898606985753c75c45c548cc0f9f16cf8a7ba5249e22b55ca9b89fec311fe948954a864f4783fdcdd719bb7b7e7bd19672111f","ssdeep":"","tlshash":"3dc0928833c3b26042237fbc502f6898b47de935348c894d5102c6a67ef023d4123c68","size":130,"data":"","first_seen":"2024-08-20T04:53:20.524247Z","last_seen":"2026-07-13T07:31:17.578298Z","times_seen":386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e6f53d43d5088cc7ef253a06564fbc27","sha1":"0649e8d1e736237b0af77b8da7b5c0761a266c76","sha256":"7b09bf37b360511f6d845e7f0c2a63839c44f5f7ac14efae174d6a6ded883456","sha512":"ca73176e0f853bc9c2de47d3cae9a49b0791c41833c9811a7a3346a59ba13acf3d439315b53de99e0bf8ed22b348bc2399f9591aa3e271f18131fc8e5a8833c1","ssdeep":"","tlshash":"1cc08c8d6ad39192a63613a95a5fac86d029c8f5208e26681c48a909bfd203e40b18d8","size":155,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.567178Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8af018f17b030b6d3f2fbc1723ab3ea2","sha1":"80b3a3d23feb7bcdbdea4e0e3e0fd94d1632ccf6","sha256":"c5a0e64f59e19c6127214270f8d58473d932f0ead89d2296690ce48ed985597e","sha512":"9c465c94f1649c8ee0f669dafa0614761bc02de0cba886a9c8612134a35ae7df67669c42396ccead6fabc2c2b7a8b0e4fe673e816b351ca9d7085a76701a4e79","ssdeep":"","tlshash":"50c0c0c427c380c1a73322f4128f9c488028d024104e06541c44ac043fc103c90b00cc","size":168,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.560727Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b28941de4a15dcaf479789d65dfca91c","sha1":"9d0d22ed6c903d34294041d6cf2c2b3f2f3c5651","sha256":"a014cbbd0d47fc13a39c82f99e44008a23a7105953a086481a0ccbc2c9587ded","sha512":"7065a84b2d68e892b0423b2ad1abfefde0cdae5c2852e67cac743c2ab0bf21fa89809f988a8655e37ba2507f68a655d39b01e4e70d653a90fcbcdd3f34e3dd34","ssdeep":"","tlshash":"13f00e2434906aa35f9201642c5ead5e4032ce395608e960710cfa1213f6b36d4a22ca","size":486,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.590436Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DZ1tqmwK.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"717304d6faf4a6c26c397c6189d86bff","sha1":"86fca1bb599e1f7d7622c3861cd38055db0916f7","sha256":"dfc2b28b8b05b2a188b22cb483df49a55277ec62d14d5c4ca1779b484013ba1f","sha512":"d7bb723c65b65c7e64b6231372dfa0154046f1811be0c82c232e13fa6c91fc39d14289aa1c681a291d61e1ff533e64f25f960bd251683708b805e4b31d62c31f","ssdeep":"96:v7E4UcA7NV6pqHSmHlYWBqHfdHm5bNqHhqFz76ss:v7nUVV6pMSmFzMf4Mhqp6ss","tlshash":"aaa1e798a1f3ef89ce534490c7a71d00d275402fa62cd864f7ed03e5cf69189d9db2a5","size":4831,"data":"","first_seen":"2026-06-30T17:31:51.418669Z","last_seen":"2026-06-30T21:56:58.79218Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6bd98d04fa90600efb3059ffbb48b177","sha1":"7e22070d5ca3e98fa14328c395f153965be18ca3","sha256":"ba97f03ad75d71d06a7c4546ab3d85b71d347d39aaa4844477962d8d0824907c","sha512":"d39f21ae64b51a617744cc28b5ca23704207e05de0c8f5af98d3fbcdebc9199f9bd32d9e4f14de5fdfa8c47a2455751b1964c031e52b6268d79f7eff5f4cd995","ssdeep":"","tlshash":"d8c0cc883ac38082ba3002a8028fac82a028c020208e0e282c0aa2083fc203c00320c8","size":160,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.532098Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e7feb6ba7737aa0e66d5142e8e3f2a5a","sha1":"510d7a6b363229b47abf467cb3b0b0c67b1f7903","sha256":"aeee4f7d371ec05cc97ba3b17012dfdfc04b81ce2e6b2ff9ead45c3f89c1e6b1","sha512":"0946531e9c52c15aa4f5db186352ce3fcb53405e8e429d7203850d11ba05da0051290266378d3a4896d079371baa7864f9344e3e82a1936f68abb4ffaffb5e5a","ssdeep":"","tlshash":"2fc08c9869e3b482663151a8a64fec86903ac474208e1a552888a22a7a3207fd8b65d8","size":158,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.535589Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8215d421b99821788ab25462e2c3ac4f","sha1":"4dfe59cc2b5857cf9635c0ade3b6245c739166eb","sha256":"351f51914dc382b91d3fce92cacfcdfa0127d7d1b2a083ee80d24e31ce8c1ebd","sha512":"c65ce521ad49ee00defabf16188e6870cfab0ee71b019309f3601086590a197f53a749c466b5a26d458517139f92cd5e65c16f4cd47b9105ce837d751163f3cb","ssdeep":"","tlshash":"03c08c886ad39982b63613a95a4fac869129c8b5208e26581c48a90abfd203e44b24d8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.463018Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b1c60a6f88fddd03d865979047587d8f","sha1":"d15c8ca6f1bdd199d20117fd7c1a07948d8032d4","sha256":"fb44b9d800f1241abe8145994a6574c2211d462edad4a00032a6fefca8f9ddc1","sha512":"a298ac373fe5f2b4a6dbf7b529f74b025404463f2329c4660c78a6b74bf62f209607b1cc685520accd7f1aecf61446359d8af28f88a408b620f9652e2e5019e0","ssdeep":"","tlshash":"0fc08c84e8d3d0874a3a51ac454eee829028c83f318806f36448e4563f130bd42768d8","size":152,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.476Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/localBatchGatewayRequest.DXnM657F.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4f272cbf3a3f86b556134d766e73b1c","sha1":"abc058db113384c5a4b1b5da264b81a951e0a970","sha256":"5690aa25f91640e78af6814084fce27f81c3e2700e18ea41e20b6f5c00141b59","sha512":"cfde3e055b9d30e324b9776d3a5be476e42e08bea04b7769c304fd9090688ee53b514bec258b830f35a5cb68eaf591b152ad9ee4e00a8a93ed09da1c0364b8b1","ssdeep":"","tlshash":"4a3161c9ba1a5b71649f2db2e41fb01099303b05bd2b84d1c51f29f35e30ac59b6ed0c","size":1764,"data":"","first_seen":"2026-06-30T17:31:51.389179Z","last_seen":"2026-06-30T21:56:58.882341Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c542147f84452bdcd6a4fbafd14deba5","sha1":"b3451f279f9cb19d6157004b6e5fbeb757136fdd","sha256":"7c2f44e3b96627b8ab1b575f7eb7bc1f32c803b4ef5d60b36b21f0aab37a8e69","sha512":"0aa6ea943d4f820cb578357fc38e9e161e5526d01d53ab03f6e2c33d05d78cd6041051f13cc24bf202dfd43e7fc96529c2ad2bd51310c10d35d0316333e86635","ssdeep":"","tlshash":"54c09b8c33c3711042137b7c512f5cd9b0b8d960344d454d6101dd917ef013d41378ac","size":139,"data":"","first_seen":"2024-12-20T20:57:11.554336Z","last_seen":"2026-07-13T07:31:17.480348Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"821c9420a7369f1e3b23957c30f683ff","sha1":"24cd7b3432d5701e83ae4627a2ba615e1200d48c","sha256":"a6afe49a3ba88124f5c4f2b9f7deabca29a988f3d695dd36af31438deb27a725","sha512":"a9383cf1fba65639e2eee914248a051077410bdbcf6525cc50d9eb8717c5f3340708e75f8b10062c05d68aa046bcc01a134c07ab717483001b22611f699d9d2f","ssdeep":"","tlshash":"6de0c014b9964ad74ef31265285f9c1d9236ce20260cdd61110df4011eabe36d553089","size":342,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.546955Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bdd928ba5461450d581053c85666b854","sha1":"29a08c780eb6e102067cb6fdd53b3b84a594c4e0","sha256":"e9da21bb9df6f82055382665381f238a6e37242c3f02e707f410f7ce6c2a9bda","sha512":"e4cc1caa4643367c9d690c018596e375f9343d73121f30785e97a69118241c7103e4fdde2568cb899ac1342d66722c1980bff35eb98ca01ce4199971593f8f8a","ssdeep":"","tlshash":"99c0804865d35151a53513a9564f5c85d025c875104e35541c54b5097fd243d40715d8","size":155,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.546143Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"43a240254b204d127f211ea916986faa","sha1":"857a634254ecb4392046cd7b3aaa097037825bad","sha256":"81d57c64bac8f348ddea6923f74334382501b25200789169133e00f659a595ec","sha512":"1f4e5ffe5629a7c56dfaa8a00860b21a6faea91957ee5c5330d27f94d7d98851e7bb31d832b122bfa59f98435c84ffda24ce262cbba5160f7b7f21a2dd8aea9b","ssdeep":"","tlshash":"9ac02b8426d398847231258c458faf81f024c424218c45d8348ce0033f7703b407a4d8","size":138,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.541269Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bea2e5bd00682040e5cbf3585d725c12","sha1":"feab685a1b0d15c972058b024cbcbf30c1a5ee3a","sha256":"6386ddb181b6d35f76512fb0e2c869f02a101b89e7c56399f18146d023b64e7d","sha512":"f0f5b4bc12e9c19a1d1e1305b04dc6041ae2e503c9c64ff67d8b5e273fe6b03618cfa62fb41554c0173b99df4be062ec692c3cf591c8db855d88f82ad86918c1","ssdeep":"","tlshash":"21c0805475e358887131118d454f5f41a124c454148845d4244de0073b7b437403dae4","size":158,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.482918Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/scroll.CvCbITXT.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9479bb482f7e03b739374eb002a79d37","sha1":"c1b1614ca71f235201a7ac5e3c4eeb069c57d221","sha256":"9ebe7fdfbab41a01930794e11780ccd681dc62bdf6bde3fcad5a49c4e6ce37d8","sha512":"0ca8db4e1137e3c206df54e86b1c3cfd36c69606ed0b50c1009f0069808f072e2fee51b36ca19d781eaae6d8c0d1271eff62b6f2d20961af521c87557561e8f2","ssdeep":"","tlshash":"8ae08c0974d3326082ff6468e17bac9d623f8289b6f14cc8f1182fd49e136a9500bca8","size":297,"data":"","first_seen":"2026-06-30T17:31:51.347394Z","last_seen":"2026-06-30T21:56:58.837449Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"35812b66ed66f4ad3ed3b7157d59631f","sha1":"c7ee699f4e15f0ec0e6f38b49b25547c79002518","sha256":"3fc1628feae1f3d9cdb72bbe740d8a46c0a86ee47ceff0bfad55d8470b55cacd","sha512":"9850f57a2e2b0ceb200954e9fe2cac6a8927f12380d924480ddfe582512cf7376596ffbad6a57f5ee8eb78654a3fb7dd155b8bb55ae00cd21887d8913d405adb","ssdeep":"","tlshash":"1cc08c886ae39182a63613b95a4facc69029ccb5208e265c1c48a609bfd203e40b15d8","size":155,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.534721Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c26aee41c32ca111ec5c5699fee2d950","sha1":"7c80494dc9ab093fc11f9ad45aced5e574b0f515","sha256":"9bf3d3e25d7fa5abc6806499c42011142c3696146add84d31d8281d530a9be07","sha512":"950bf8038a2b72d53772ab98ec8281624170379bf44ceeb74f96b9332bf68186e9da0c0935a5bcdc11e8cea571e6dbbe3666860ea647608a7439673a52c0c496","ssdeep":"","tlshash":"e2c02b842cd7b082563111d8954fac85d039c47820ad15907848a1217f3207fc9714dc","size":140,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.572438Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cc361c9c4a428ec065d569ec3338984d","sha1":"a7b4451015426fa8709eaac908d75e1a8770c8d4","sha256":"927c72f248e96eb34cef963bf29da3f3107fca4ebf5d7af8b68da983e58dcef0","sha512":"f567397b1011d0eff7f40d46b2745e9c998fad9097c495954e51a240795e0d97665c177de60671693e0c79bc865ff8811958726ed79f7309de1ad6d56936291e","ssdeep":"","tlshash":"5ac08c9466e399847232118d854eae81a024c425248845d8248de0077f7783a803a9e8","size":150,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.466232Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"66b9a47b23015dc9a845797272d0cfb2","sha1":"e778ec8f297e5ec95e5df80e68a15ccb58d550f3","sha256":"4e3f13c83c8e18de6bb2bdea31132eb65562edb0782d18184154cc393fdd3632","sha512":"9f66c1e68d55d7fd7e6662fb9bcd11e53302d83859f1809115a6970ea51ddb249faecd5246d8ca294ed312f12a5f52add441f18b8d0e9f9af27fa7ad69084008","ssdeep":"","tlshash":"89b02bd526e390c252712188450fac81d034c43010cc4d40544881153a5703981314dc","size":124,"data":"","first_seen":"2023-04-27T21:41:02Z","last_seen":"2026-07-13T12:23:13.836744Z","times_seen":6669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d3bdcba9b992447c6d124fb2a11cbece","sha1":"ffc5f13c2e8ccc3758cadace302d6894af76e49a","sha256":"aba8ee5b821fa58c52d91cdf6ac516d93e810990a6a2eaf7bad73a56a7a0b799","sha512":"0ef372a048b81cce4e3141e143a75822cee5413b55c8b080c3e65437afaed569e97a5a2e9786c4a7eedc12d5890ae49f86242f598e9489dcd683d5c06d08b85d","ssdeep":"","tlshash":"23c0808455d36141a53513a9564f5c859125c875104e16541c44a5097fd203d44754e8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.523668Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a9c31c1bc2161fad36ba0091fd36fa60","sha1":"8aaa6ca308f40da1d180621d7c24b54decd3455e","sha256":"bdf022dde035a234cbd0e9498f8725d7f19d60b30ec41d16905ea0b170ca8231","sha512":"11d7501a4c777ea85bcfdbe9d481e570eea2651a6c852cff74ad08fe3959ea1f20be30b3fefde2c4e58de8e2e218d317bac4509fdc0f7d23bb1b4045214c19be","ssdeep":"","tlshash":"60c02bd4a4d3e0805231318865cfae81d02cc434608c0e50184ee003bf3603dc172cd8","size":138,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.49865Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"51ebe398d5a2a4321365c2e3ed30de3f","sha1":"7c8a3aab8cff78e4cc58774a273bb077c8458528","sha256":"821cb53f29fb3822973c1d951af3ba7cb8f70dde82cd662f5cfd40fa53dbf077","sha512":"8b54a99a8bfed25383597617a50aa2b483f581bf58dce1e8bceea8232a2aaa8de1e2cdeec40e4861e381ce2518bc96876a04e64d655bd2faf5c977a2c3c2ea19","ssdeep":"","tlshash":"d6b02b8474e3d08142311188674fec81d024c420208c07901448a1113e1203800315dc","size":128,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.570741Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"84734c9af75e1592a5d097d6d9716fc4","sha1":"e7675042f7ee4e91ce0a424eaa9b4d2a1c185dbc","sha256":"249081f71ef4145811b3f630b51d308a48c74a7b3eacc8340d8a2b2199b09af7","sha512":"5046be65bdb76d20769192a3b54b520c9e5baab54ea297e03760b79f8117727ea878b585894f142d183c05e98ba4b52fcb5e9cdb4e1d1429ad7c3c4ec76ed7e4","ssdeep":"","tlshash":"d5b092c833c3b650422377bc607fa888b079ed21348c9a495201c2a67ef123d421386c","size":122,"data":"","first_seen":"2026-06-08T00:31:10.590136Z","last_seen":"2026-07-13T07:31:17.520734Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6652478900324b659032adff078feee7","sha1":"06f00c3eda53fbb894d2de2c4a22e822f68444c3","sha256":"4488141c8d1f10108d8dcbde2305413518c2d0e6c32901bebae2fa7418cee9a0","sha512":"769b7e3569514ba96872e290402aa776028ece8a5316dc37bc31abf64849d7673a93c116fb61053a26ea3a8a3a3219a9d319317208fb83ab2c2961408808ed1d","ssdeep":"","tlshash":"02c0cc882ae3a082b23002ea230fac828028c030208f0a880c88a2083fe203c80330cc","size":161,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.536449Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9e9a3db2cc886e632280a866d4f7ef22","sha1":"3c7731d4fd00a5b8e54cfba250b4e31934c44179","sha256":"8ef997f769b7f0ca7b0aaf7bfebf49e3b1727c0be6bf313e61eff1b208497e0a","sha512":"cd9030da2120a311d42aa0d2a7d36916e3beb6f6b7356c2c489ae89933a5573a37a2d6c462603ad67e769d4a60386d5abb4ae8cd10b87301ae69e7d3023b0361","ssdeep":"","tlshash":"bbc0928833c3b26042237fbc502f6898b47ded34348c894d5102c2a67ef023d8123c68","size":130,"data":"","first_seen":"2024-08-20T04:53:20.66091Z","last_seen":"2026-07-13T07:31:17.53384Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/if-defined.BZzW6Kl7.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab9e5d9a8d77d7fe7dc466a659a7ede8","sha1":"15bdc581f8a2dc2850e5aa34d2a5aacbfc636f42","sha256":"dd02c7fc30ed1c91a44a94bbfe067dc96980fb22ff7e0852be36ca5f7113857f","sha512":"f44d46ba6d7d99c2b761f5825ab9cde9d198491cd2e69cc9085e0ea1073018ba0674237a9c935a3b70fe3fda700c304e508c91c0b107263148d8ffcd9274e100","ssdeep":"","tlshash":"77a0220300e03af000cf08c802a0cc800a30083a2302c28800023a3002200ca820ce2b","size":72,"data":"","first_seen":"2026-06-30T17:31:51.470439Z","last_seen":"2026-06-30T21:56:58.807819Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/w3m-modal.Cejol0k8.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"10e916b0329c3e4035c1a749eb0f3ba8","sha1":"f8cf27bf46c66cb3212126fb623f5bb8a534516c","sha256":"ceaf1abb5d4a49a003822394ca99ab0c851bfd0744de13a152ebeda9ac122941","sha512":"db059bf9b8405c7a85bed6c8b055b393069f72c5292949b0ae357d206aaaec761accf0e0023a556eae266f122fabbdc689e61f77b573eeff07fbafbb069931ab","ssdeep":"768:/3vG8iIr0v8erUKTLoCr3QynYurchrhr0AFxjsBumPdGTCoSkhChO5Y55e2W9rky:GHIeQsoCLnYurchrhjDjw1GTCoSkhChO","tlshash":"db231a446eb724682553c199bedb4e10d330900b6429cdbebbec52e58fd5a8c396f372","size":45888,"data":"","first_seen":"2026-06-30T17:31:51.524594Z","last_seen":"2026-06-30T21:56:58.852762Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"456f78508a5c89218a284cc04d9655b8","sha1":"6edffc56ef4e1087d8ccef6c5b4200bbcc89a41e","sha256":"f1d2af8e9e353dbed5cba3ca87066b950d14da136e25a1d196f46414010c1fa4","sha512":"9aa8e5d97fe2d8d41b0fb386b43de85712d754c88dec53421396a7772a749f897242a2ec0690d748faf7455559894dc51f0f95a2263c39d3454e0b5fbb28bc6b","ssdeep":"","tlshash":"98c08c84a9e3a183673121b8554eac86e079c46420ae2d903888a1213a221bfcc714d8","size":152,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.581019Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"531a0dae12191099c256ade83a350748","sha1":"806c39a5dfb3a5e898e24ea727939a4ae5035de4","sha256":"82164b1b49046f7dd0668bc5e68a53d6f4052c95aeaf836562e13349ca763d91","sha512":"e494f21a4d2d7b2834dd87ef8113c06cae2e00612086f0045b1c6495f020ed74bcb733dd697dfbae6be00284b67574cc2434d650c705a57dc91ebafc9766962a","ssdeep":"","tlshash":"8eb0928c36e37210512377bc516fa848b039d92030c8894a5000c2a27ee01695553868","size":113,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.552863Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e1cef15d5748aacd7a3e1f56601fed8e","sha1":"e276a4c5b4d5f942b7a2b72f71dbb67a7ceb61f5","sha256":"a25ff910ca8c78396f1c41902297cdc87bcdb037bd053e932f5b92346fb6faf5","sha512":"707348671c847c653c7867c174fd3455651eb098134e23db0b63d1cc1266c1ef961d7c69b54e207380cc0d48d56d6e792bc781aecf28ec186da42892809e2cf8","ssdeep":"","tlshash":"bbc08cc468eba68396b11298554eac85d43dc4b420ad59613858a2613f624bfccb65e8","size":158,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.586925Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1440758177832a67a0502405e37bbb6a","sha1":"3016c7af2be74edd244c9fb5264b74fd8f643ab8","sha256":"4713c0ff2f42f7bf940dedc7d09e3a3de2ef13cfcf47bed6022333e00d4f103e","sha512":"573bcfffc8152ca4260837f9cb377b2a76459b9db5f6e0d2ed84abc593d79c528095df0f757e175076f92174d7954ecd90a6c9ae04ad6a8142b564703860bb7e","ssdeep":"","tlshash":"17c0c0843bd39483b13043ea934fec43c124c024108f13882c4955a47fc303f00734c8","size":176,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.464957Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BjHhMDqs.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"392bf4357c00eb0cb24c7797b752739b","sha1":"278cb90f9e56c4e9a45c707a83739e263294dd2b","sha256":"186e9e63e6054b57eebcb8c4b438747606f7d5eb8055353d0bbf62690b60d5ca","sha512":"0178544194c3be84cfa532eb78a5debc697695bcfab4f5f943520ea4130e57955271772d77600bd690b4b76dd04dc1f3db35291e52617007a43f790ed03a0c1c","ssdeep":"768:BOgJWnobFoOG1HNQTDi7ZplicM07pFHvX3e4W938tkWIm2FqtNKRVIJju6n:anCTSOx3Obn","tlshash":"30d20998b391707a539751d6003f0405e2bda824341a54bdfb4ca8d3bf75eaa90bbf38","size":28302,"data":"","first_seen":"2026-06-30T17:31:51.492684Z","last_seen":"2026-06-30T21:56:58.908294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BqC2g3av.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9ff8bc26e9a11857e8fc9d57410ebe6","sha1":"d5971e6adf4304ccc079f184321e3facfd0d9bef","sha256":"c4c3c0a634d77d74ecf76cd0cfbedba3ea682df5ade821377953105103096e72","sha512":"fe344ec10d53efac6d155a725d0b621b873c55ee02961a9efd56ca1d3bc84c06d202a2510d244b3bff26ee75a810f5651b05467c5b26a4d3128e25d51b2823b8","ssdeep":"","tlshash":"bf31930456286cf841c4a2e2e8924a005031056c620f88947bbce2f19bda6cedfef37b","size":1869,"data":"","first_seen":"2026-06-30T17:31:51.482122Z","last_seen":"2026-06-30T21:56:58.831202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"906ec3840a32b142e340dcedb772d7ad","sha1":"801a13ce875a765bced83cb2ef48ddbc0e45b728","sha256":"ea5dd239d70e8766b1fcb2d88fa06c9d1bf18238650ced8a2a691f90960ebe28","sha512":"add210c3aea5db019041132093188f1a2d66c66b3c869ca075068e5d8c365eb72576eb347384432e1cc2d0776e798e80380a6f82c69bcc3c4838aa178332bce9","ssdeep":"","tlshash":"5dc08c9476e398887232118d458eae81a528c4a8288c46d8249de00b3f7b43a803eae8","size":156,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.544559Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8c77579986492a872478b4937c34212a","sha1":"1ec66807e794d59a3f6f1a333c164d3923608f0c","sha256":"ba4f931e53709fbe9b8a9279d7cc424c601804a88794421dd83c6a1f4cd61e43","sha512":"412e8eddccbd37601b11685f2146f678587f4f6a3682d2c4db734f82d710e8bf730e0942c29a1db64eda0a0806183ac72609a86c90c33e74da34bcb112dc1901","ssdeep":"","tlshash":"05b092c8b3c3b220426377bc506f9888b13de920388caa4a5210c2a27ee113a8113878","size":121,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.495302Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.B4lblbJ0.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c608e14754e6c80ea3cee22ceac831bd","sha1":"53fc53da269e00df17e0df397ac2dfa554e2b582","sha256":"0f6cb56ac5e504029b47de511ff96b15b37c3f69c0ac9ac26775e034bb585bf3","sha512":"86864203cae9635407fbc4605beabed5e54ed010a532b869d26720c2d11db2ea89bb2ae6e78908f469ff267eb09e624a1afeed94f7d71c89d99f318031dde582","ssdeep":"","tlshash":"4521754a2b26d5f0896180a58f29340132326017633fd5493ade66bcdf0d1ca96a97ba","size":1378,"data":"","first_seen":"2026-06-30T17:31:51.471315Z","last_seen":"2026-06-30T21:56:58.84188Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cb0151af565eead6b191ee4a969baab3","sha1":"75562562b84812d6227dba721a5c235f8feb31e4","sha256":"755cf3e431731538a5f33f3de6fe0ba9413a78aa5fd890f0ba27a181a85cef31","sha512":"6148b4d89a4800040e5390c1f8d545b7fe256785e0779b19faaea94710360ec14ba17a85d069e6cba79b4e9874dd97ed6679d7d5234262cee7a9c27cf0235a72","ssdeep":"","tlshash":"7ec02b8478d3b1826a3912ec5acfed86d079c474208d1d557849e2297e728ffc9718dc","size":151,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.491124Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"fb3625d1122b95e5b812bf63487e10f4","sha1":"b273fcd46a47d5d26cbc9e85bd3f3cda5c83d410","sha256":"ddec3a8dba005293e02991dda853c997bdd4abd99ab89cffacc68f53267c5601","sha512":"f5f091ce19ee447d63c79580162041e49ac6b804137540d8b41554834a422c9430bb1b39166b7f24a9c14fcfa3b79c7622def8dd953ee6aa4a014ada502c1f97","ssdeep":"","tlshash":"69c0808458e7a54365711154554e9cc5d07dc464106d5d51385451213e225bfcc755d8","size":158,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.577375Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b091fa048677546e429545c28eb832b9","sha1":"d78d3e5eefbe473da1aaf0d19b7725f7f586de40","sha256":"88505f466df50a4b5e560a855ded4328bf073b35c2de79bf3e49e10630a9b77d","sha512":"73c9f8bad592d447c442d5a636bca8ab879ab38deee63f2a374f1f7377405c5fd60b1c61110c5214d11d99154476bc41e0cb413b7f37d19ee2751f16710a8734","ssdeep":"","tlshash":"dfc08ca468d39490c23352886aafee8aa334c42530880556994ca0623b1267d40329d8","size":156,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.549409Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f7a1d5cdafe9893497787a170dc35b1","sha1":"d1260411929267c48b71126efe1a02f81f0d0a73","sha256":"9d48920e0d99a49c0363db470aad126408faaa5b63e131e2aeb3bd1b7c747b6c","sha512":"f52ba170c7ffbc01947f514f10f2363622945ce7938c0acde72d32fadf7032f07ec1d5eb35a67e38be76b3ed345b635a73c04fb989e7f5c84aea80a12625721e","ssdeep":"","tlshash":"34c02bd4a4d3e0814231318865cfae81d06cc424208c0e54144de003bf3603dc172cd8","size":138,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.5575Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d6017944f04f1ade5a3630d773bfebfc","sha1":"de23a0008fd868d212d379a694ddcd8806f1d844","sha256":"415c644ed86cf33fdb17687f9fd0831b3e25e58c7e8a6c02184ad135d0950841","sha512":"6b8d3c8188c2a6b60857ffb02c95d3c311b5d47edc9b030afc0d0922edd49707fb1a654ed7f56a0b724d392b48e9b9a6534463f54aa3d1468499b50729a0c397","ssdeep":"","tlshash":"93c08c857ae3e082ba3113a96a8fad86a169c465208e1e586c49aa193fd247d40724dc","size":162,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.592195Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BgmI2Z3a.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"783686ab268b012cdde8d9c87b8c01d9","sha1":"1b486d91906edcaf3f3b1e09165021ca11b92bcd","sha256":"fe10b15caeb3b4c563a341850aee9ae1ec4d3e5158927845cf3abde5e40c9314","sha512":"710370e7950c9d56007ed12d1bec61fe9a6073e90bf40962e7ef430cb565bef403985d5cccc5e09cd71f0293f4b92cc7cc8e84aaf8292a41feb6a30d52c0381c","ssdeep":"96:YZcifgh6pyNx0m3kRp6C5cSnR7yZ5iV4MKQyghl/EXIPIEG4n7sLfhnDdB:wfgGKxX3kRQEcSnR7yZ5iV4MNjvmI24A","tlshash":"15a1d7e53480f977873895cea0a001d0876567d8312bc7ee71ae0e0b3a48ce955bea07","size":5078,"data":"","first_seen":"2026-06-30T17:31:51.535277Z","last_seen":"2026-06-30T21:56:58.893866Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"637764fe54ee6dea4980152455613a2d","sha1":"22bd63aab1c427a6c31d88d179f80c6f51839306","sha256":"830534d9e2d46967be42d1c24f0679fe2f89da59e0b64bd083b07a6dde8fbae1","sha512":"5468224f03babcfbf66e9553b00b3273777f5d46cf4c42a9c663de3c52534e5283f6d0f151a15674be64a0ee35cb1abb89e3bcdd1e9a80bcb566e09319ee9094","ssdeep":"","tlshash":"b7b092c837c3b220466377bc502f9988b03de920308c9a8a5204c2e27ef12394113868","size":121,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.522309Z","times_seen":388,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f61674836da7a8761c0a8e15b6844379","sha1":"89677058bc35059d873aa52e77407a37a2ef03cd","sha256":"12db2d0fd5ae99098308b2426021e42581b1d7d5d978dcb38df5a355b86e7f88","sha512":"a3d30b5a5893b275d319b4a0f4053f99c48ab8af27e67a585da863b1dedcc58273c8f81e275d18089aa2ca1f6d291fdd824b7482ee22eff8dd4c033fafc3769e","ssdeep":"","tlshash":"40c0928833c3b2204223bbbc512f5899f03de934308d894e5101c2a67ef01398123c6c","size":130,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.559171Z","times_seen":244,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"324e63650dae9e78e2fe8b9dcee72bcd","sha1":"5421d86b284bd69eefb718f6f3cc80f45336a7b8","sha256":"9767711786890d03e82c6e7c646b70adef444f11aa2691fdb5899a7875ec6126","sha512":"11d43c662abbc72c7797c7a2bde009828c2e2a17a38da7addb4b72de9582976ff597211e4ab7b7ebf613630132bc8b965ad691baec4fdab4fc435c672eec42b1","ssdeep":"","tlshash":"1ec08c84e4d3d0874a3a919c454eee819024c42a308806e32489e0163b2307d40728d8","size":148,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.551633Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"93d9f58b4406d63fb2fd564eed2f5fb2","sha1":"03b61080b625d78063ea8b77ba0a0b1ad5bcdd87","sha256":"73dd297f02650e0dbff170f06587667288525b1a1753fa0b0b747a820569455e","sha512":"b96bfd0dcf5bcdb69d8564d9eeeb4e97d66a1f20f74ee9d3bb5b02b577f80e156ff02e21713a851a3eb242ef45a41a69cd44fbb339510fcb8ac990d6054ef137","ssdeep":"","tlshash":"89c0928833c3b2204223bbbc546f5898f03de934308c894e5101c2a67ee01394123c7c","size":130,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.511018Z","times_seen":389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a782014ea59ea77a78bc1b0c35052901","sha1":"5aaf7356ce109b83e3a60405afb339e38f20ccf0","sha256":"2f5bbe7a598f95b5281b167a946f690c0001134f8a9df171036c9844e272d6ec","sha512":"3013e39fa3b624fa4b39dc0d9a197d2a28d75240a40fd28bc1b346912a3331c941f1d9ff5942444b4952f29490234aa5fb79afdce1fe75c8940875f4d0153d28","ssdeep":"","tlshash":"10c09b8c72c3715142137bbc542f6c98f479d994304c494d6111cd917ee1139453389c","size":139,"data":"","first_seen":"2023-04-27T21:41:00Z","last_seen":"2026-07-13T07:31:17.547752Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"89495dda163f72d8644847cdc1e256c4","sha1":"e795c7f7a35f5727c5e788c7d862ef79d9bd8281","sha256":"9c9148ed7505b155989327a13baf763459c1edf6c9fc901cb4bed25cdfb28acf","sha512":"372d37b0cbe41cf32e70bd0f4583792dbd28a2d1edd102d65280830292d896694cbe5f50d194641732842018445d1abbec8a4dfe6b6b4fe3249a839999ce3770","ssdeep":"","tlshash":"4dc08c886ad39192a67613a99b4fac869029c8b5208e26585c48a909bfd303e41b14d8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.502004Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f0612657d3e6322d60c4444f679380fe","sha1":"34dcd6114a19eb3acda1439b7155fd86a4344864","sha256":"8bff025da2483aa84fcc67a2f3c619fc5121c9ce3b452c0d9d2a14fdfa64a60b","sha512":"7ba3f5ed6d92564319b7056c290cc75bd75dcb76e5a6c8bf186530da374f1a8b6d8ba7dc4a573c18711d4e8e76ccd59554b90e56c542ee37ce0ebf9674d76e9c","ssdeep":"","tlshash":"e3c02bd4e4d3d0814231318866cfae81d06cc464608c0e50184ce043bf3a039c2b1cd8","size":139,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.501204Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ZxSvg.MKRNcQtn.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"89c43af8ab64c7c00d87ff72ac1c3604","sha1":"f68008fb6d4b1169b99cc5ddc6a6eeac7e02c1e4","sha256":"b452cf6486d55cc32802cd99466a7eb3fa858c4b28889d9f55fd309d3d3cdf11","sha512":"e7d7ec33cb74bd8e90b62511b3837a0a85af221e9f7bc2a7fc6dd138acb74f3e0b328b0791f4908c1e3e38caff62936932a65b22ee861121a46dc1df895e8a58","ssdeep":"","tlshash":"dc110e176908c7b74beb5c8c11540049154ac60ede342a73e2f2d030f735b50da0cbda","size":986,"data":"","first_seen":"2026-06-30T17:31:51.412612Z","last_seen":"2026-06-30T21:56:58.857207Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0d217ab8692c2acc8c9d2123398f12bd","sha1":"e467e41906db632e4caf3e2b6fde8623754865dc","sha256":"684a2e9baad2ffa0577393cf6db3d16f5cf6391f1bf57d556bccec68286313d0","sha512":"8f979d04ebdaf1d250b48361c34a9729ca6d30dcd22ad073efa60e868ff0961c98255776a062e463926c09b16b94625b9d5fb9397c3086e43e93225d89cf64fb","ssdeep":"","tlshash":"00c08ca466e399847231218d454eae81a128c46424cc85d8289ce0173b6b83b803a9e9","size":152,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.513815Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8e947d68cb30fca18031e7e2e9747b26","sha1":"4f5df7fd37213902cd6f3c74687bea3085bde3d2","sha256":"149bb4967cca0b3a1084b02129f55e3e160adc678d081b32cc85c5bfc8d0415a","sha512":"79227e9a64d8b53286ae3214f05505628a4e9196a64bcc138efb28e8bcd36320716c394a4d1266ab563ddfd8e185d46b36d2b7c0b13b70a4dcaae149cfa866da","ssdeep":"","tlshash":"a7c0c04015c340c3a9300368130fec84d029c47020cf02441c4c92093fc343d40384e8","size":165,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.494467Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cdcc0b8e39f8a7013d132ab830fbd376","sha1":"aef092da2b7a92e849e500191d2b53788c4f14f5","sha256":"b298b637d70db24b5a27c8da9ef8697cd05e4e58bb81fa6af9355cb1d3c13d58","sha512":"b8c33e9c11f51f793465cb0f5552c54f4af1b6aa92d3bc0fbc91d3deb93f0e8c6f6c527ef5a010f94e709d796a10b03efaa2cfcceb697f8f011bd4589712e8f1","ssdeep":"","tlshash":"67c0224469e3a082f57122a9130b9c468038c034208e5d450c4891143ea203980320c8","size":180,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.582652Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"409363cc3dd3d3414b1867850cd1281e","sha1":"d8e94e21dd5515f2a9bdc9d6d6eb7d1b6fd93fb2","sha256":"d15f46b59159e58cce4fc35e56a5590fd49adfd04b741c3b958ec6d485fac552","sha512":"d59db8fa5a6e061ddc5d8232e4486aba268f826dc5501c5fec96b4698f0e63d1a6a61f8a34b951128f79f0930c1b85f701d41b96712a5bd1385fd746470f50ff","ssdeep":"","tlshash":"9dc0928833d3b2204223bbbc502f5898f03de934308c894e5101c2a67ee01396133c6c","size":130,"data":"","first_seen":"2023-05-20T20:03:54Z","last_seen":"2026-07-13T12:23:11.55338Z","times_seen":409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a63f5ce80511bd15eb45e7b088c853d5","sha1":"095a8e797d70041cf834784e792729452a31d70d","sha256":"d708ee41f50b8b07b4ee7f2e001dbc29a4be66a22b946f07387c28a4585fc22a","sha512":"d1a593e56c13761dff1ad2ca62d85a0cf23710b89a823b655751cf4d7d5450ded12d2aa1347f4d65a0a972c5b81ad949be66f27e666e04f8bba05220e0da2019","ssdeep":"","tlshash":"cac0804477d39142b63512e9574fac87d055c8a5309e1e5d5c49a5097fd543f40714d8","size":170,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.591309Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4f0dec55107ee7c99569ca8cae17794a","sha1":"5cfa685ff4574896d77c85c8a8ad45b4584d1ce9","sha256":"a4694b6e7705217ffa671ad51505f86da44e025399b8314ee0e905d2a912e62d","sha512":"741a147eee86fbcc1fb5640173b98f588f21649a6f5b43b513762e71d808068ab3f3ecec49fdef21fdd7e11b09f089b4f89c9a9ade69f881d830d08f62b5edad","ssdeep":"","tlshash":"ece0f10474f55fd34ae39065388f6c6f50338b282709eab1304df712267ab32e15328d","size":404,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.569937Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"df282bba1473dca7c52cb83a5764eec3","sha1":"cd84d6b893d7028590662fe810edbc5c733ef5a7","sha256":"23834433b45cea135c613cb47e0a1dafba535b8c31120c64ca10992c62cbfa38","sha512":"c1f8cae1e2018f4522a6089418fe7ae5e3de5276b34f5f4254e92843cb5c31c872a240f7976629254c91bdc8f9a83a4793220259141db8f6048a46105ae1ee54","ssdeep":"","tlshash":"c2f0021470d81fbe8f8200b2a889ad6f61a68529570cef70f00df92331ea670d1d7287","size":605,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.532954Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/transactions.DdiXwk7O.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"65a57207ba52f064ba88300447aeb803","sha1":"7bd3ce43ff28727f568d2966009732f1004e1f97","sha256":"bd9dc221cb4569952214dbb6d7ace47302abda5c65f620e78c58d35edac930b3","sha512":"c54e984605708f4a203c7cc28113331ca95e9324d4440b4774cbeebd7adf0f683a16dc7529c0ba784159d177265addfa625609d4ef617306d109c06d31334a85","ssdeep":"","tlshash":"4b21514b657065e4049395f1f651e8114037812b0be8d5b1f7cf53e88f682ee889e227","size":1223,"data":"","first_seen":"2026-06-30T17:31:51.427332Z","last_seen":"2026-06-30T21:56:58.878881Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.bRFCacBS.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"29149539db45314b2fc450af31a690e1","sha1":"1943d589584ad8d3d7039c8adca65605bf442ed7","sha256":"92d113b8b50a0af5967a0302fa7bdfede75b973fe1edd2e6288ebc6f957b6d0d","sha512":"a5947f8f0575b44acac45f71da2b47b41c0380714c6814225d115a3c00afcd47aa634cbdcad2e7e26f35760ddc465e510785df1716095abe03ea2ca2b367ac6b","ssdeep":"3072://2SV4bmbbYfj1BT5VAdpfkF62AdpfkF6z1MroTF9oGnjERvQeYjj4c2+vX0fB7u:2SVbaBC9o8jERvQtjj4c2+sfGAim6","tlshash":"cd24094057b5792c6b9382a488971a10d230940fd22d89bdf7ec92f5cfa9ac50dbe377","size":227430,"data":"","first_seen":"2026-06-30T17:31:51.546551Z","last_seen":"2026-06-30T21:56:58.892038Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.SuR6Z8Aj.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1835f3e037b4bf562e7975289483068","sha1":"a0f2cb31534e4fc357d2ec3178d221f1ab8311d2","sha256":"e08dd29a16359b936e5e440ff02d89a603ad36d21b90ea11f61364af17609612","sha512":"7bf9133af786b5f351bae5dd8c7a3a7b18ec1d3ac63a0f1b1daf18eb1af84c3fcc05212010c83b2b20a14fa2c8ef97db75e30f65f139b0b0b9c539309a0dee59","ssdeep":"49152:+N8T7pFPZHOgsAy7nevowdJ++Wrcdukb5kN2BC5i0T6cjcpz98LNZDxiR3xJFoH1:a+OgsAy7neaftiR3A","tlshash":"64759ea07291b03507d751e964361101f3385899700dc0acbaacadfbbeea989d67ff35","size":1631540,"data":"","first_seen":"2026-06-30T17:31:51.60081Z","last_seen":"2026-06-30T21:56:58.969645Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"019a5ba578b2cafdf1b09108e02399bc","sha1":"9018cda60a2735a829b6be32734b11f25454a0c6","sha256":"f98e26368def20ca99708023b63a3c43150047539d01031138e413a9ff2071e0","sha512":"8920a476c7ec39b1d9bb4e19b23459aa445ced4214ac59693443639d70a98b17da174d5ec7b1e4dd59d4547fe92a1750c003d79464e45a3473bc3b56ff0c2d55","ssdeep":"","tlshash":"83c08ce4a4e3988182362189a5ceae829028c52824890e90148ce00abfa6439c175dd8","size":148,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.507071Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"cdf8c25b2d3bf547b40fa3ee869d494e","sha1":"2f050adbe0653ac9bd5225cb4aa10daddfd3710d","sha256":"9c6d392db8553e862a3c20d327b0e84262212af46d53b5b98d310d9b084657d4","sha512":"5346cc734f3d0f6a93c715d51381cab0ea22397c1be9df7ac7ce2f3d7b0a1f77c8cfca3767ea4cfd2dea6f7f3a0e9f92c9a3cba1afd02c4e6826bea8a41bab64","ssdeep":"","tlshash":"44c0c05466d39042b63103b9130fec82c135c030209e0f040c4891043fd303c80310dc","size":170,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.58956Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ZxDivider.B9rbY7UO.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"afafaa547c9eda104d146df27ca52eb2","sha1":"76e3ba0341dbd4c9ff3f6f63f1c3abc98cd7b507","sha256":"a09c529fd5676b1795de559ad7c11640913abdfd0d5aded1ae52167d4f09786d","sha512":"307ef22ba1c3d361eef5856b00589b4acb394e9608fa38039b3469b183f31a1e63d7bad4ca7bc062ab4605c58cf1f8fa7bcccd6c1b20232f6ea8383d55c609bb","ssdeep":"","tlshash":"eed0979ccc36cef784eb8888cf15a00502045fec6b3c0ba0d3970335a902449270d62d","size":248,"data":"","first_seen":"2026-06-30T17:31:51.35785Z","last_seen":"2026-06-30T21:56:58.765418Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.C6IGKBVg.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"db6d8c04fd9aaa032d30236f3a258571","sha1":"06560255799de7768d6cbbb9a95cc0cec0e7a457","sha256":"e8bfdd683a2fe5cead0faf5d088bd24da62fb3168b784ce9b0abc9c843689d6b","sha512":"37c3c6f9d36fd1ee423a7f482840d293390c19256a791d6cead05c6658d82100e079e6a75b1be507e4666d0f1c5e8aa9fc89240d6254f35237170f3cdad31cd9","ssdeep":"96:yj4ru0eWq6OWC+N+DF5siVqnNTyX2lpb0RkIMtz/y0uixKh5r7+Q:y+u0K9+N+DF5siVTXIfzuJ","tlshash":"ded151d13f756d181613c934a7ae9c45e332a0778c29cd7d77cc92e08f4aa405aadb32","size":6276,"data":"","first_seen":"2026-06-30T17:31:51.554581Z","last_seen":"2026-06-30T21:56:58.907508Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ac202d4502cc1492e9c87e9b443e721a","sha1":"469a05a24071a1a2bfd5aeb7bcc7776a80911db0","sha256":"df0d5fff7cbec6774ac22826fa83577f0552af2f2bed1249912fe1868aa31a54","sha512":"ce007309208fd795a808fe2c02e5b46c471b304a1777de7ac87c700cac4818aa5994a7ec82683a0e137db6d8094bc691fde8b6a40c0f4cb71691d9392b2057a6","ssdeep":"","tlshash":"c5c08c886ad39182a63613ad5b4fac8a9029c8b9208e26581c48a90dbfe203e40f14d8","size":155,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.463635Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"693cde786664e637db86ba86995748d8","sha1":"2ac910420f1d7e92a49fda1c4ce1707a8269e688","sha256":"6e631731bf467c9e9a38a563e58a91796dbfd13e5eaa8b197ae41799cb362e4e","sha512":"9bb3e002a01d1ea80f2235f1f2bbfa9df85f79db1c60152a5a83f8b5a9f6e344ea0b85da7baca860c242bac67f4d3f4fadf2be660b79bd5e03a8bd8919c30286","ssdeep":"","tlshash":"26c0c048a5d39043f13603aa130ffc428235c07030cf1a441c44d1043fe303c90b21c8","size":172,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.465565Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DCzNYnWi.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"420940d252b1412022b7e665c8f410f8","sha1":"3cc24c52ed48c9fbe887b7f145de6432b18f3ae6","sha256":"e997c1212afa6fcfe4cfb6523f7010a17851135da040d3578bd193800843519f","sha512":"2b175243172316e68a692c7b5ddea55d188780f5f2b0ebff0510d83af46144153951b154aa062a3b58be50de950cb9d422f01fe853cc068d219eeb3758118943","ssdeep":"","tlshash":"1c51718591b1586e6703c0a9c77f0c01933be49fc4298ebd76dce0f08f9a98125ba332","size":2996,"data":"","first_seen":"2026-06-30T17:31:51.443565Z","last_seen":"2026-06-30T21:56:58.883021Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c98f435ad8626355a893e9fea19deefe","sha1":"cb84fb2b340b6facce80399d5f2c54d226ffeeba","sha256":"65d5271e3e8321c6ed93a0f52c9d21e0f61218f3958d2ce9533a6c284d9a5995","sha512":"1cf82512dffe2cb13079be26f11fb1c89eb44473839c736e35379c1dd8d99a304f0886244ca3c7a81b73f1898c2e9232691b5800baddcfcbca27890922c3f494","ssdeep":"","tlshash":"20c08c8aaad39182fa3123ed568fac869069c875208e1d682c89a64a7fd247e40714d8","size":160,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.504657Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"97cfb2f111501a3c46629abaf9babe2b","sha1":"4effa5273649302849d834973a228e8eb95aa15f","sha256":"eec12b7d59597f337b4448c2df761fb7a1fd0c45caf633316245d4473a757ee9","sha512":"4503140dae238056d71f85336d25a44473bd5a49ee62b92e563365c72f08a1523eaf22bb1eedddd35cd39864e46308590a26dd3b5971532d9a426d347514c6f9","ssdeep":"","tlshash":"b7c08ca46cd39490c67252886aafee8ad334c42530880552994ca0227b1267d40329d8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.579312Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ed6dd8f90b363614e24ec3f31cf89f12","sha1":"2ec94c52eb28f0496f3feac5b48326ee09aa41ad","sha256":"05d4fa545acf14bf448031164bc819d58eed83fd3627082407032843d7911db4","sha512":"95521583bb9483de72d2fdcf581efcb2d7de513ea4ef556a846834db9fd7c87fde9d810d0a0fccf0186b5df42950f60f6510e1214533e94cca9ab878c552c23b","ssdeep":"","tlshash":"ccc02b8427d3a8857232119c464faf81f028c424208d45d8344ce0033f3743b803a4e8","size":138,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.585995Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"859d7bdfbda8056eb89cc0ee14cb4e72","sha1":"bcc121338b53861a9d458524d6d5a0acc9e51a2d","sha256":"391f0870ba16e0b28a7e4b9506266d4a26a695a0fd9e9012ef533fce9b34c42b","sha512":"26fb27b0c4e75bbce04f82d651088649948e2f9a6156ee46b13216dfb33630e4d29fe382b9ca5d556cb8aeaf9414004bdc5a546ccde912f8be744b0b12f464d4","ssdeep":"","tlshash":"b4b092c833c3b650422377bc547fa888b079e920348c9a895200c6a67ff113d4113868","size":122,"data":"","first_seen":"2026-06-08T00:31:10.53738Z","last_seen":"2026-07-13T07:31:17.492752Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/project.BN3mjQBV.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbb19bc5238dadfc3235e9cf92c4dc93","sha1":"7c3ba7c9783ba4d53b411e4dcb057cc1ed10beff","sha256":"a79db698f46c2f6109ffba9fec5cbaf5114b190865e5aab19b092dab33e85420","sha512":"c82fd06e525666053855cf669959d7a5ff3a48524c5fd19eab9500e9d17dac85c7c6903e503888164efb4447e3ea5b0be6d9b93fb9c32ee96740a475cf4ee915","ssdeep":"","tlshash":"2a31f6c83253e97103fac60959ae602fe6fddbc0c43d69a3be1051833da5d3c61268d5","size":1669,"data":"","first_seen":"2026-06-30T17:31:51.449503Z","last_seen":"2026-06-30T21:56:58.896077Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/HelpersUtil.BKQYOQMn.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"65b003f14db3d440ef1e06a8ef4b6d8c","sha1":"64ecb13792a617003794436bcf9a2bd0b8413f0b","sha256":"b6ee82792095af1174ecfe5eb414f33f708df29b99d3f360c83faaf73c0eb674","sha512":"545f26b728e0b72f85226f194befdc06d4760387855b09f5b9a67907428efd740c013756db1d96fb35d3ea655cb02d20843a102220512df2548058bf106f02ed","ssdeep":"","tlshash":"c15163c9f3be7e65354700a9c9add920a33ab01a1915ef3e3bdd63e54f0af817856420","size":3135,"data":"","first_seen":"2026-06-30T17:31:51.356856Z","last_seen":"2026-06-30T21:56:58.898099Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/socials.-ESjOjBk.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d537a5349f6ad24c97a38bbd3d77f2ad","sha1":"cf12faf90c49a4062036f484cd6e3b6d6e1605b9","sha256":"aa5a7bbb8d881886491e80de4b3cb9bc6df0f46e1fce636d05dcb8ff7f32e379","sha512":"01f132b6c6f6253b1f3a9d7b762385001b361a34dbb4394296d6dcf8f35cd03ca8c5479611fee6c7a03226b8e9602ea4d0ff59f4726d2cb604e4eaeb563d7b93","ssdeep":"384:hdW7YLIri1XONUt6AQUCh3D3CUuF0wuQbLPyrHFNh1a+58:h07YLMi1XO86AQUy3DSd0IbLqrHFD1aN","tlshash":"9e82c555a7b06e1c5aa30158a8570e40c1389047933d89acbbed11f2cfe5b856db73fa","size":18127,"data":"","first_seen":"2026-06-30T17:31:51.393168Z","last_seen":"2026-06-30T21:56:58.797019Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.B19X-eE6.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c2272a850e86a6ba1e7600b87205b5c","sha1":"f004057021360c999597bb8769760be399adad65","sha256":"f90eb4bd2761be9e3493562be6ff4f9cf8f0426ec581f01ff0d78bd7371b915c","sha512":"a35382fb1d09a74cef5d9a00f2598026cb894474e205c7453a4a92520e1e50c8a6eb48e5ab07faf9e85d054101581565652a8fb454c34a32eaf4384c636ae0da","ssdeep":"","tlshash":"472184c412abb228b51ba09447680702d13680625628ca2d739d73f48f490c9c0ba361","size":1228,"data":"","first_seen":"2026-06-30T17:31:51.401465Z","last_seen":"2026-06-30T21:56:58.891367Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.CvutTefE.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2348830a89f397655c020bfbaa1a296d","sha1":"bab537df74d679f18ff01ad1d8f42a177d7ec906","sha256":"ff0ccba3cfbdc910d2f5332b71e9e69b920545cc3b07bff84400676020c38e3f","sha512":"5a4d57be2658c03668b774b7386a42247a7c7b40ee1542553267e04e8d11d51f3288e03418c00e4772fe7e5efcdc7af58181340e7daef4f001fa988f50dcccf1","ssdeep":"768:TW1zlEdXq4+EpmB15q9lIhMaITdTrlM4jNHF40GbQu1jfSs0XJDSdkg:ezlElv4HhJ0VfjNHF9Gbv1DN6RQ","tlshash":"37e2ea8175d6b02e2763e1a8596f0900f23a8806a51ed97cfbecd2d35f749c884bb774","size":32446,"data":"","first_seen":"2026-06-30T17:31:51.360084Z","last_seen":"2026-06-30T21:56:58.782292Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9f01d4265d3037fb1b9e3d9bbeeaa23c","sha1":"5741749fd7d2fb7b04d7b9bee99ace25def633cc","sha256":"d66ccf525a0b6bd23aa7a5ca22f6ac7251105cc8cdca27cfd1fd3dd85293f2f5","sha512":"582bad3178e99d37265ab73f7bbe98146c63f080a86d69b8ab12506cb2a0c2eb7dd7cf68bef7453467dd57f713c4029e7ad69769fcb54f8006a160dcfe97229b","ssdeep":"","tlshash":"d3b092c873c3b260426377bc542f9888b43de920348c9a4a5210c2a27ee113a4113868","size":121,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.512589Z","times_seen":383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/swaps.BafOF0iJ.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dfca4ff5370e07ce1c8a12722cdefc7","sha1":"14bd3f148ba9724a625f4f50585add4df146655d","sha256":"739003547ca850c9bf3eb8392ff42df90f7eb5c1551874089f3fd68527879fd9","sha512":"6d927c9303630910a04f10c1ff8af50637d2fff41528415e0500b3a3b5d5ad99341e2649ececa6f9f46dd173a6393bc330c3f5948dc1e283266e82b3e1c86c9e","ssdeep":"768:pwmHmVhjbL4vrdA9vXJV5dUFP53JrbUGjuaMp67luIGsJiJ6bB2XxF51TnerBXUS:1HgLmdA9ddk0Gjs67lTGsJiwEXxFuXT","tlshash":"4c33daa073a2286d7916a199dde75d005231d00bc029ddfefaec82e14f96e4b19f7372","size":54924,"data":"","first_seen":"2026-06-30T17:31:51.480864Z","last_seen":"2026-06-30T21:56:58.900598Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"45468d7918743bce638dec099f039fae","sha1":"d613bab1c58ce56354d3d89d1a374552894576fa","sha256":"09f3056dcf181b080b041a94cb69fe643b11f654baa51716d277c5b7cc67a26e","sha512":"6b717692133211545f10edf332612cf92b18c5d267c0792b53a916d682f631679893892700556089e7f775f4c2faa7c90fb65cd9e15ca5d70be2cec3af23e9e8","ssdeep":"","tlshash":"9bc0c04815f35443f23102e5270fac468024c030108e09150c4492043fe103c80314c8","size":165,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.497841Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"05d6ff721a543ae58331b198d6a29e79","sha1":"6501278fe02f2c0017ee45fcd9f609cbcf973184","sha256":"67a4ba3e0c344cdf498d26581b0973c1dfa632497245d272d46fdf33ba298b11","sha512":"789af442c89228530526557d41f6ac718f1066ef559171e748d93c749993764f7631ba7aa8740d7d433db14c7d555757f55d0858a098be0e16f4dbc8866f1873","ssdeep":"","tlshash":"33c02b843ad39888723511dc454fae82f024c839228c49e8744ce0073f3703b427e4d8","size":144,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.529579Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ea53af8b73f3a21dcb83add0cb3b60fd","sha1":"c2c6af657429d508d3ce73a9a211e6942f7d4122","sha256":"6d325ffcbfb4357eec38a356ec4bff912b13434ba26278e3d6dd204bfd526402","sha512":"35c6fbfb5750a8e480552509bb854ce8382552c6848dbe6f10eff2a6a7fc2d3c015dfd8d16930b42b47175c0508a0f289acfa80f5c6947c0e375682ee1841937","ssdeep":"","tlshash":"a0c09b8c32c3712043537b7c502f5cd8b4b9d950344c454d6115cd957df053d413789c","size":139,"data":"","first_seen":"2024-12-20T20:57:12.122304Z","last_seen":"2026-07-13T07:31:17.4838Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BgiyL68S.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9affdc20c51b1cf40d2408faf7463200","sha1":"68f331db9185d3950abfffcf5bb9bdde698cedcd","sha256":"e1529c818cccae2f93074fc831e1a6faeca72406f956db33f7e54dccc19fad99","sha512":"935917d1b415613369b476be5240e4bb95cbeaa6f979d4d4bced89787e89ccda24af36ba4077fdc7629979fa11c9868165f180177038b39be9e30f2479c6f3cf","ssdeep":"","tlshash":"a3817899ba772868781f42b4fbdd5b245131700e0a27dd78f3cc12e5cf58a68ab4b231","size":3911,"data":"","first_seen":"2026-06-30T17:31:51.515722Z","last_seen":"2026-06-30T21:56:58.790913Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BoIy31qJ.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5e54138cee283c778c13d794821f548","sha1":"cd0b449d1da5d879d3b379ada54498e2e6d696b7","sha256":"4a87f581de027a385bfb0bb5657ca0ba3df383c05f46b50284992bc23f6ec636","sha512":"a70b5202ab3753f39a90d39647f421ebbb3b8bccc346b8c6b6841068f34041204fc35b88745632f5033a5dbd497b4bb859ead97266beb47cc952ba88bc3cb15d","ssdeep":"","tlshash":"c9517440bbf6386c2a728025a9aa58104332d007d378cbadf99da3f94f99a4155e7377","size":3038,"data":"","first_seen":"2026-06-30T17:31:51.395895Z","last_seen":"2026-06-30T21:56:58.77273Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bd15bad6a7b622a7437a4bd874ca4fa","sha1":"d4d336953ca7d66adf52cd681cbcae5b997cba47","sha256":"e9d7fcfd0b0bdda15eea2e0b923d4814e2574e49c35784826dc315def875f038","sha512":"6624e3afbe52849de8c7282213ea1174588d061e7623d5d476f2260693a0eb493142b198beb91a05e065e1eac73ff048f6e5aefd733493c5742a9907272ed165","ssdeep":"","tlshash":"4df0be1b62f695f0907ff37ca76fa740663240d7a008ee007d1e5e80af206384ba0acd","size":634,"data":"","first_seen":"2026-06-30T17:31:51.58711Z","last_seen":"2026-06-30T21:56:58.979294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":true,"md5":"06cb2bb3d27be44a7047d7282b87c287","sha1":"c71eaae2e4496a11b102b889ab8866844cbd629c","sha256":"a53993059bbd452d07cf0dc3a8e81c564230c57932fade815878456bfda671d0","sha512":"3ea847b152f3adea4bfec7c0d56b3344b463c1fdfaab647f4ef64d3707dfe7bacc11b5a2d2b8ea453adcb63f0b33155a1b7ae0162a90fb6fad673fcaa994b925","ssdeep":"","tlshash":"52e0d8736b5425715563e06e637fb7203537116b4240cd06b62c858c0fe0a57566d6ca","size":411,"data":"","first_seen":"2026-06-30T17:31:51.588464Z","last_seen":"2026-06-30T21:56:58.980419Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"782fb0c2860690359ab4e4086e555fe6","sha1":"e2e5f1a3648a34964c2a203faa7a9dd6829d03bb","sha256":"760e860eeaa1bf43858dae985a13c4749d6bf134d0736d2f4636062ee9878d72","sha512":"357905e91206eb4e07312b9dfce7ee2428822bdf849322b290b701d6fb0b601dbcf6a8f37abb282b00d1e0eaa043d319b27415488af10b0ea516ea80618e02f9","ssdeep":"","tlshash":"39c0cc8828e3a282aab0008ca08fae82c038c0a0208c08003808a0203e220bf88b22cc","size":158,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.566269Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6d890a57cfd7a20bdceebe36ff6f062d","sha1":"787bd67e4956dfb174ea2c1d46ae15577b196c84","sha256":"616d82b294ada4fe42b69ce5544084378d5628ff17508d3ab290f2e8f0faa3d2","sha512":"55022525d5818a4973415ae2a9daeb8e142c30c7a0eb111e7191de93bc3e77a9cfa6d235f5582194b16d759b33a9a220d2421fb67658c03edadd6cf7ee95228c","ssdeep":"","tlshash":"9dc0928873d3b2604223bbbc542f5898f43de938308c894e5201c2a67ee41394523c6c","size":130,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.575008Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c7c2e0410082fe6d6ef4c06db76355f6","sha1":"8187cb25534534e6f95d7489c8129e5dec466aa1","sha256":"26bfaebe2effc95d7bf92c79358b3f06066ba03d5d32bfc085a0c6a199b5900e","sha512":"d8e4d18172584b4f753fe9f5723551368999ce989e199a75df87b385ed72d4673a6839f0740fa7783c1a053ec48f59fe7cd6c2c572c9584013a4d11509117780","ssdeep":"","tlshash":"f4f0734475d42fe70e9280b6388d5d7f50bf95290648da50f00dfe3339bb971d25629e","size":629,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.508354Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"dbe9f19b443f47e67067599e062791ef","sha1":"efcb9d4e422a747eefe87931ac96308f30418365","sha256":"c44653f2b51674c1a1f3b9df7945290f052d1cec4b1b5482199dafaaaec604be","sha512":"0107c66687f56cdac630203c475f0f61c669c7b4b550c168c89c9419fb640aaf47a421d5ab366cdb8b0d9686bedeca7cd6682d4fac597990423a85c9dd544848","ssdeep":"","tlshash":"50c08c882bd39882b63112aa974fac869129c469208f1a582c8aa6697fd203d44764d8","size":155,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.531286Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"4eed03638866d94436fb9b9c796c0f3e","sha1":"396bb0a55b042e9805e4925d737a572708fdf237","sha256":"7927270e2cb6b349d781dcc4110e404f04777c7921eb8983c282e01d522db306","sha512":"561fab752db497f6f8085677a8ae017ea96fd33780b7af90a4d2ccdcc0fb1d54823a6954cadf89a50c5a73e8d998a2802b7ea1b2c83bdbb7df1f210668d105a1","ssdeep":"","tlshash":"42c04c8c32c2b15046577a78542f5c98b47999903049854d5151c9967ea013d4173c9c","size":147,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.519455Z","times_seen":390,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a61279c403b6040b20955b003df8af","sha1":"37b0372f0d755185ae8094cb04d150927d4ca93c","sha256":"7e5476ac04e1fb4a4b4970ccfbafbd906baa51f34d209fcb4b89f38657886dfc","sha512":"6499ea30f1d966672aaa59732174f41b7e05be214f0c1a95de84a883595d65a79034caff80fb77fae1d39c978952e7b3482864f827bc5dc00ba92a4a01c8fbc4","ssdeep":"","tlshash":"99c0804465d35141e53613a9564f5c859025c875104e15541c4895497fd203d40755e8","size":155,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.524672Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6f9aac5f71403c8579810284334d29e3","sha1":"9932296fb03cd3720def84f713a1a41738673227","sha256":"221212d504048fb2b51fda5e3006b844794069d3418bb699d02ae1db06453468","sha512":"d87eec67e54bb6f886661fb03795e908479ba44b0a6f23f56b46f09f22d10bf76c762b843742ee4b914b9447b569f11f241502fe1e3e145fb3721ab4ba1cfb9c","ssdeep":"","tlshash":"c7b092c833d3b220426377bc502f9888b03de920348c9a4a5210c2a27ee153a5113868","size":121,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.469198Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"db7a70f785e3c9e5e2141ba2788b6a5d","sha1":"40cd946b858fce7a951ac33486d5fa397a3d9a5c","sha256":"4859e80ee47de955a50b650bfc1346807a7b2c69aa0c479945cff3c1224e1a8e","sha512":"9a79e6c26c11e5f2131d0b87d879c7fc82b682467bdb58c02b50d4c95d35c9dd685629947c3ee890e6c356b1a65f1dfd0e6c4fbaa48a51e451baa749892eb9ab","ssdeep":"","tlshash":"e1c08c8868e3a083563111a8664fac85d039c4a4209d69503849a1353a228bfcc755d8","size":149,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.554164Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2fb2dddebbe412df3391db64ed7c32d3","sha1":"2304decf03fe83be2f3022275c9f1fe7ce6fb40b","sha256":"e93d4ba174a3265bd72b5e4a64bb0c5a14faef01a9406016c26ea284d91b97e2","sha512":"d4c25d431a140b8b43e0a273f9168566f2e3281a7bc4d9283a207db130a1d4d35a5db230fd3745e7d70479288de7997d38c2d0a7c2a9908d7ec8f611d357f5cd","ssdeep":"","tlshash":"03c08c8426d39488b2311588454eae82b124c42434894999345ce0023b6703a413a5d8","size":145,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.571589Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bda988a2e8e1791f9419fdbe5af16489","sha1":"8997a1bc2536434672536d9a1d67c65f4d10c564","sha256":"52fa9670068b9d3da32e4b0762b78edbd7416952d71cd6638992b026fcea94c9","sha512":"875b854f69c26173acdcabd173b2b93a802948d07ea3a07ddd6ec5fb0400539fee9086b8e07f0b472028271dd4c3af1020ce7bcec140390b744bdb4a96ec11ca","ssdeep":"","tlshash":"66c08c947ae398887232118d458eae81a528c4a8288c45d8248de00b3b7b43b803eae8","size":156,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.56812Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e369aaf0dde6a0fb7b8f4be3df4a3129","sha1":"efb8998d3935ad8669bb1a9b246500dc6b55b397","sha256":"fd102936a1808e10ef183e455d4beb7e732aaf06be1f25fd7f563819b6ae0fd7","sha512":"7f897c50e6098fd157130ad7b6fd0eafe849d3080eaefd2b414d6afb88e50088a71f9a340abd539731c626a4500b250f209c00438a4212f7c5e6560875dd7826","ssdeep":"","tlshash":"d9e06810b9964a974ae312a5286ed92d9226ce202688ed65120df4011fbbe36a5a3089","size":356,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.518106Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BqpKi2_R.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f02ae18e21f3fc4f77a61bd349289ac5","sha1":"87b86e47fc7a80734b76ee6f3904750aa95ddea2","sha256":"1c9592a9747c097889f497667619cb50a7bcbe2480d856a5b59481dec9ccc895","sha512":"6ff0225c1b1d5d87a239de12b04585cbdb49fb387b8d3f662e9ffb3645d9761db275b02461c24963384a47e4a9dbb66d30cee2f42b95155ef4150e6ee3fe1a89","ssdeep":"768:ejfLEFQZ3z9/RxMqI8PYiedT32ESIyYC5j9Ge76gb74FsS2Hm25Sy7oBy3bX5ejg:GHpD9vMwSmxwsGc","tlshash":"3523d74ab013ef7e91f780a4b4681454b00c2f9dc1a6d467b2fe8d692bc6cba764473d","size":47975,"data":"","first_seen":"2026-06-30T17:31:51.472966Z","last_seen":"2026-06-30T21:56:58.883703Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/mining.BfTrWBRs.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"320f8ed4625958f9febd3009f28f196a","sha1":"a80a486989fe632009c6fe7a98e650c65d87f7b3","sha256":"b293f54fa1b256df2d6e14e49fd3d1036f7bcbdf8645253af776b5b3a6e100c1","sha512":"c0cc1695a70a63d8e678a73d8a7751611072bc9da2fc052d3e544c414939dcc2dc223a285242f65e7360416e5f9f8734ace8ec4ac3e1394e5f5dc583cbac6d0b","ssdeep":"","tlshash":"19f0a74d6657dcb123598408865e251ffbbac2c0803d69717d0095513ca0c7e712e58a","size":449,"data":"","first_seen":"2026-06-30T17:31:51.361721Z","last_seen":"2026-06-30T21:56:58.910767Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.FdC_BL4c.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a7c4ab9c8a5d104b6a356645b2ec19f","sha1":"bca9c4bce9d137c374d03ff855a787906d47c9f6","sha256":"fe760a5ec706971a6aefd029fe1ffa8ef115648aaa22d6a0e998576bbb1af764","sha512":"43e3c41317de38d67001eb85d5f8386601260538fcc0e48422d998b51f0f797d2802f6fd5449c7b07f3c1d05517d581bf3c67e45b248fcc03136df1112d41843","ssdeep":"","tlshash":"16314a1599d4c37cd51f8cf8d1079244181a5eb56742d6c4ddb61c242f541f87558b28","size":1567,"data":"","first_seen":"2026-06-30T17:31:51.462728Z","last_seen":"2026-06-30T21:56:58.822791Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ExchangeController.CHHfRoy6.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2d76b9a07c2c20f98da5412734cb20d","sha1":"f804f46d2abd6a72461f0d2a86c220e03ee0a53c","sha256":"971320b1cef3da85366e8bc2d57f650a1ee4067ff2c43b8527fe7e3cfd3006a6","sha512":"7901cab60bd0a26a5ea2b14c6eef62ba9362fb7538167fa2d82a9c08bd59990d428f0042b26f25a2c36bfa73d27a679f33f1ef6412160c610be757a604b4cd79","ssdeep":"96:TWJ5iYkHf2WnZoSuolTLQhsl30RtgF+lvW+7GRC0TSOrGzA9:TWDiVf2Yh9mfgolnCC0TzrV","tlshash":"9ca1a60070f2b036d9e4296029b531314b3d4fecf0a6c5d9d7bc5da91a40eab8e2de30","size":4665,"data":"","first_seen":"2026-06-30T17:31:51.420198Z","last_seen":"2026-06-30T21:56:58.869122Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"42b48bce850ad2e475ad3bb9a192305e","sha1":"877a4697854bd43b127b1ec38de7c82ed2b9c34b","sha256":"f9a636cf60be9263d11abc99b09bc62cd187c05b000b764b9ff1a92b4e33a588","sha512":"77a70d85fb55b5581a3448c5251e8d20c9d70f3f6b8d7a687228313f8283160c3213b6d089444ea3df1e0774f57d8ef3844db590af3a55e5fcac4979cabde3f5","ssdeep":"","tlshash":"98c02bd4a4e3d0805231318866cfae81d02cd424608c1e50184de003bf36039c271cd8","size":139,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.545348Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/app.DmfTu__A.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"004309e5dba62fe1bb762411cfa3d068","sha1":"4662c96efedd264958183d8c73000ecbb0c2a0ee","sha256":"ebd5c9c4ef1e8af6faf89b6c6ee021fb5de9e4ac4e525aa910feb35c937228f8","sha512":"a630164cc2bc5252f8082ca91597d88b93ac0d53ede7e2bbb2a1841364261d74fe902e34ac4dcb3bd42f47d80c9356faf3b8cfda1d1ab8608e1bb5683607602d","ssdeep":"3072:/hVtQ3g8JB1bt2eTzJO2JnhIzhkF9Y2z8rm1/76fwaj/2Oosi82jJk9c+0eQ:/hVtQ9IzSF+frm1/76fwaj/2Oosi8U8Y","tlshash":"23e35bd67341b47c16bb46e991af2600b0744f45e48dc0e0f668ecca26f546d6277fb8","size":147645,"data":"","first_seen":"2026-06-30T17:31:51.410192Z","last_seen":"2026-06-30T21:56:58.793297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/registerSW.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1872c500de691dce40960bb85481de07","sha1":"b83dfcba8d2c57ca8837324bf395f34748033a50","sha256":"9742073ef7fc795e7673d98f272992843298426a0ffd8cb3507784df5143608b","sha512":"bf592ecb654fd8c3dba5db1816c3e454d72e3ef9cf078ca71314b68782e8f564b585ef21d7ca0b4a69540d2843ec713058d86cf40419b6b099f58df5f6f82041","ssdeep":"","tlshash":"2cc02b4fca4dc93e0830e0324c0b7b03331f0385c080049007f2030850c3414d1ae481","size":134,"data":"","first_seen":"2023-03-11T15:21:23Z","last_seen":"2026-07-13T15:24:22.899687Z","times_seen":14159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e1fd3156724ecba11c1be0745c633226","sha1":"3e32eb07f92bbf53c8225e80f0fb92f2b84f8d55","sha256":"4a23d13029663e6597a3f32aae130fb96c21574a85210949d4db991d5e0cccb1","sha512":"d57032668649678a64b44893c6e8ac3466274b38624dd8160525026d37e60788683487aca51bc0e36a903ce2ca6cfc8180a90898d20c73ebaec7385fd1e1ba92","ssdeep":"","tlshash":"f0f0e11430d40eb75f924076384d9d6e50768619178cef20a00dfa3735faa31d1d338b","size":555,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.540381Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/NavigationUtil.DmfK5sOV.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","size":69,"data":"","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-07-12T13:53:06.510959Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9379b8cfd1b5cc584e44556f5bb31830","sha1":"b9080365ae22214ea518eaaf1de6eb8641c4b477","sha256":"3b3e7eaf586607a66ed0e281efd3aad3fbc0377d977d92097c45ba7f16a50b82","sha512":"94224407f14e5bca95c26fff59b3a6c6dfd0f678a3a9324d8e2b17e558c76a934865c6822dfb18afc0b2c635a758067510644bdb68a33ef210da67bfbcf6e423","ssdeep":"","tlshash":"0cc0808436d35442a5353265564f5c859115c4a5104f15585d54a5057fd203d80754d8","size":156,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.585084Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"324e53d71899e9b2a83194eb0502042c","sha1":"c1e7698fa13824d6a01c27f14497d793acb881f8","sha256":"35af4de32c50d996d6d7edc1e0ffe686e3802333f7851381e749a24e8a42d918","sha512":"718b708245cee2042205ce98d60e521b89b75adc43a7f4c0fefd496eaa2d9f316914baf63bf783605b9b6ae7492e472023736d5443bdd09ae569a95711bb054a","ssdeep":"","tlshash":"54c0c04456d35043f2711379124fec408025c060304f1d581c44d1083fc303d00740c8","size":170,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.588683Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f3d33e0ce0ff894543fbdb60492408e9","sha1":"db53bf1da033950113e2396fa0adaacc7dbd9b48","sha256":"b349ad6e7a1cff998a1cab366034cd34e3489455a33c0a76e0e8d83148a01a58","sha512":"f6bfe28d43eb1d0064b50fa88bfcbb287c573eb5ad9bdeae7a41eea047c465e836232ff92689e49d81a13dd4d92c88316ae56d57cdbba066b8c7c4c6d0dca75b","ssdeep":"","tlshash":"d1c02b8826e3a8847232118c454faf81f024c428208c46d8344ce0033f3743b803a4d8","size":138,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.474258Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"926ffad034b408caf787255a76d2079d","sha1":"90611cbe2f4a4bc283cb09fdee332bfc445b4e4d","sha256":"71fc4fae5065fe222396b05f0a012ef2943ff0e698e6249834de2bec7db1c8ea","sha512":"49e7fcb520d21418c4e79323eb0367595ea1fce2b7fffdba47b3c12e7f23e78c40f3cf9829ec7291752715b0da5fdd90541ed5e2f4067746ca5685938420a0c0","ssdeep":"","tlshash":"76b092c837c3b65042237bbc547fa88cb179e920348c9a8a5200c2e6bef113d4113868","size":122,"data":"","first_seen":"2026-06-08T00:31:10.598908Z","last_seen":"2026-07-13T07:31:17.565009Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.lFrzwWW5.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7be7d3f632d7f063d352ced980d9889b","sha1":"96f2ae93b3f3970bc0e9a6fc1987028bcd8bc246","sha256":"aa339ef0de442d3d4f077fb1953217baa59b6105cfd2ca349be65a4c5735bd7f","sha512":"fbe4e4e9dea6958c621d79d4fb7ffc5740c9a4255abd09f0a580119928d6161d74b765b55e4cfb182ea25fc7418da934f5f81a3784f7f446643fa14c584669ec","ssdeep":"96:23jqTUPxFXFxo44hMLDsCYbvTh7LDGqEMQXewqXoYocqEM7BgVbd4Q73Kn:23kUPLXFxo4UeDstbLh3DGoQXetoY3oF","tlshash":"dc81e768737870bcaec390144e7a1d05c334402ad02dce96779c61e78f656ca5db7372","size":4109,"data":"","first_seen":"2026-06-30T17:31:51.344434Z","last_seen":"2026-06-30T21:56:58.859883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/onramp.uoe88F52.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2ec79c6978e271b45ddc7d11207cfd0","sha1":"4dce6b1d52e4a6506ed1a21ad4f2bd8ad472b9e5","sha256":"8bedf4dd0dcf5dfc336c7d3911e7eb76100fa91f940e179666822c278412ddcc","sha512":"9eb382aee3fc8a16e63d7dca4ad984562dce1f74e180fac8a318f8f83c8a21d6db6d52ddbb7d8fc982ce2d0ba093d9b86e8e88b0f338a0aac5a8d8ba8dbaf12a","ssdeep":"384:mgEXWwV2INu09ji3So4jI1VPCodF1iRfiL/NMHxYvHzsW6:gmsu09ji3SBI1VqUF1isaozsX","tlshash":"ffb2081469b26c6c996291a5dde60d00c231900f9129c9fcfbed92f58fcae498ce7773","size":23756,"data":"","first_seen":"2026-06-30T17:31:51.372272Z","last_seen":"2026-06-30T21:56:58.854937Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d08642044d74335283ebc984636a9ac2","sha1":"f091878e09462662adc758711bd6004cad564760","sha256":"fdb47601eacd8ce68b410e350ead3629ce0f3c0cc6f2121e483a152149b4dfe3","sha512":"7db57ffe4a2c880e8d0ed78fd9754796937d246ab82600b65f5e25b6c3b8755e7cd8f370c7418332f0b0baa680587a8d40ee9080f60f3eda05528e90df817033","ssdeep":"","tlshash":"f9c08cc42ad3b583a63122f9676fbc8ad129c869208f16581eb8e6593fd203d40714dc","size":163,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.526511Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DaigQDVZ.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f053f3615eb7462466136902f1100033","sha1":"c519bfd593f7c6ea6eceec611a158487cb2ea7e7","sha256":"e2df3287644583c2299a413aea359e202405539323562cb1bfe76224f2097b43","sha512":"eb007f2051e101f03c2bd22e407271987499319cebe871f85da31f5d796cd1e1e6e82bfcf8ca2d34a35c1c06d69aebb3450730de07ac75bb6f393016777ddcef","ssdeep":"6144:bUN04QnSPjJBWMOLtTZZupzIkQ6tRSVIL9u5ObFKIXo2KHuFPLE551OiWntSWI/r:k04TPtBWMXQVILBo26udLEDkIau","tlshash":"46646c84b241b0788ee721ea60372105f235ad51b4cd8494f7e8eae72de988d5357f3e","size":317219,"data":"","first_seen":"2026-06-30T17:31:51.340677Z","last_seen":"2026-06-30T21:56:58.896695Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"340df2f64ced2684638d811492aafa3e","sha1":"7a74b7885f728ab221ff01682301f1e4ee135ddf","sha256":"040d7145252f2ffe7697c3355a34728cfe1f93f2523d57c318e10404b56ce6c8","sha512":"1aeb2ae77e6357848e75f057f8ace3a7fc5105d0ebbf37553a1409e107fe0d3068628be3d2305d423a40ddc04d14cea40a3d7212ffdc52036a82f3d207c9b769","ssdeep":"","tlshash":"3fc0c05036c35041b93412a8168f9c81801cc0a0304e0c481c4465043fd283d40300c8","size":167,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.490257Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"38676d888befde6b7907f140e345c11f","sha1":"1451f85e7270c9965a248dad00258cdafdc9b784","sha256":"96465e33260524895a47fc6f63a993dc46bea45084fb7bcaee69006e2615c6a9","sha512":"5d4074daee3c8808073e6a97086aa99658877086b08a63f4c56a7817201ca10dddaae3f58e93cf1c6a38cbbff89eb2a17898793d31917e82388269c5065cbb19","ssdeep":"","tlshash":"24c0c08476d39042b13033ad130fad429135c03120ce09140c4491043fe203cd0314cc","size":168,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.581806Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e298ee22bce971648a4b2e452e4d0d26","sha1":"2dbfdea43281de7b3be988b6d7e1411318ba8d89","sha256":"357c54274df492fcfe3e1f6d3ae44e0abc98508eb6218deb460d7e6ff80d0c9f","sha512":"217aa97ace78bc63a33de6a111e113bfd131406d5fe6cb6438f9770fb4a27af5e6e9987cddb309542e44d1e4a3e6598303bb48a56baa8b0c7254fc9c7ddda2c3","ssdeep":"","tlshash":"02c0c084b6d39052a27222a5570fac83c014c4a070ef11281c04e1043fc303d40710e8","size":174,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.493612Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"3acc4cf51b5d3320be1c02e7eca6451e","sha1":"affaade5ebf510c9f619393f2ed322150e5bb420","sha256":"5d6973c29de5218205717d689c97c6676e8330252f2354cd57aa1531988c4541","sha512":"1efb96f161f2a0a0abf037ca3ca56db2e0baa5041841c4c0193f86576788f6dfe6c82514dba33b8ea014fa9367a2a15bee1730a37669d803856e393a2719e8bf","ssdeep":"","tlshash":"d4e0f11434801fd15fc390650c4eee7f51378a181509e830300df54b17f9b33d2d2286","size":377,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.496162Z","times_seen":270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0b1087a37479f305ff5e23de0c9638b7","sha1":"78201e4e98f69c03da111cf470c8ea07d37f07af","sha256":"e50533749cbc36f4c15e594acc2d6133ee49ed330769b2492fa2851836c92dc9","sha512":"74daccf6cdeb0a8b6ffd9f85f43e832c9c7e06ed74d602a10d6f6ebf32b8ca41202fd7b4b9c0d0861e342f0720d3962db161b48da740f4232598b15ba593add7","ssdeep":"","tlshash":"8ec0c0401fe39083b13103b812af6cc99124c426204e114d5c8890043fc383d02310c8","size":174,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.57337Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/footer.D6Axs-c4.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d318a5758c3b069004dd72d02e0b9c60","sha1":"2f366afb005d557ebefe1082ee66c896eaaacdc3","sha256":"f15928c1398b7d039527f68a713581f2399a5cdfc2564db160365dd0e716cd93","sha512":"e68e0ada933a3301f6f6597dd362f57482c3ff42bf0aae3868f3603ee28e1e82c715017a41477888515a6694f2a53bf0a82d1eebd7c38fcefeb163fb1c828cf9","ssdeep":"","tlshash":"c971730efa51ca7da1731514a0485864e0697fe8d171bccaf3fc86242bc6c799a0ae39","size":3814,"data":"","first_seen":"2026-06-30T17:31:51.543368Z","last_seen":"2026-06-30T21:56:58.794551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ref.EDT9vPYW.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"ddf4b608304955b1f91299723ac831f7","sha1":"68b048d4ca6cfb978173db948d3ffc6a2f8f82bf","sha256":"f6c28469bc6d21d31853cf15309b9f7f0f72ce8aace075ab95e3669b7478a9d1","sha512":"e022fe2019db5bfdf7ee95430af99ee4d75bb167fddd772003cb1a25f698d9808a13bec7df0c2b792df983e48ee6c9014c25bb954a7ae34182fb8100acff3f38","ssdeep":"","tlshash":"d231128722d101e452cb84e6ec37083ae021705435a584ac309ebbf7dc25acba07bd79","size":1867,"data":"","first_seen":"2026-06-30T17:31:51.47954Z","last_seen":"2026-06-30T21:56:58.866866Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BPucXlFe.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20d0876a1c404218d3a14e7e933ba34","sha1":"9b45a64dd5fa2d86884d629dfa2d03f3ff34df90","sha256":"3adfb4854c09049c432dc405546236e707ac2cd1eb677c25ee149c6f1e99e548","sha512":"f5aa2d95d74c2a27c80199f8e9ce1685b36c691922c40055202712c1671678f545d57325e2b9654410a8c41b2925bb53d49df605e4f3a72060c68abaf18820fd","ssdeep":"96:Tqere/ioSNJrWM+qyWQRlFohVmwFgjLqMZnDjpWpiegFm0v:Tqere/ioSTWM+qXQRlF0iXB4piVmW","tlshash":"97c142d5bdfd2e7a3517c024b19e49a8e334b0279424df3e77ac61f84f55a42581ca22","size":5641,"data":"","first_seen":"2026-06-30T17:31:51.52714Z","last_seen":"2026-06-30T21:56:58.89883Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BdagyPaT.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"16414d5057e653334f514ca6cfd59000","sha1":"18ed3af61402cf2493ec64e43e69e8efba82e600","sha256":"4799e1f0adff3f38859e03f0d67fb7c7034cc0214baa09dadf0b6f9ee5fc1112","sha512":"e76e2ddfda65b4f30bae061c70f6b92c5789efec9ea59e35bcdf23f3aac4f590ba15a027897a37b0cc6937c7bde8b995fec3227439ef454ec221acabb642a83d","ssdeep":"","tlshash":"71513184bfb43d67376bc065e06e8521e335a0399828ee7e734c92f80f59a83556c932","size":2973,"data":"","first_seen":"2026-06-30T17:31:51.399567Z","last_seen":"2026-06-30T21:56:58.899957Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DXmaE5fs.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0eba7c4809a9ca040a217466a8b7c3e","sha1":"3832100ccfa15043954f0475c4a74097c0ca8e72","sha256":"4c6ea10eff9fae5cc8e0b8c7d10d99af3a6993b96d35fb10a4ee6ea64d662b68","sha512":"fd63ec445cd5e7839b1d363ca6853e5cca9db8e1b498dd09c8cca921ffce8bd31c8f0aa429ed5f8694d6b4acf1b6e0dcc8ed0571536385d9f2de53cb8bbfabef","ssdeep":"768:XjGgMoVKCobDj8kxu9mKMHPT0Yrtj1vGaA7nf1G4/RDdn47kXiCowQtB:TDMoVKCogkI9rgP9UaAfT7RSCowQT","tlshash":"36333be077b9b86494430f247f2f6221132a187f3246c1a9f74d6f945fc62c9ab49b6c","size":54944,"data":"","first_seen":"2026-06-30T17:31:51.539662Z","last_seen":"2026-06-30T21:56:58.894939Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BtwVhbUY.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8c0ef54a7fefb586b9539fdc17b158b","sha1":"ceabcf1939e9acaeba5b7a9f8c3c03d1c7c617e2","sha256":"0414e001ff2f301929936cbeb1d4a6d316ee6137e90c9e505f91410233cc3df8","sha512":"33a5e10867567e78fb8baff59597d56579f02224caa581535b2adc821dc72dbbe6ed3713c0d0539996b27750e8319076b8a5b45301a6054384f144466554ef6c","ssdeep":"384:9EVoVmgkZadumMgkttiUBaLgkvSfgkfgP:9EVoVmgkZa4mMgkniUBaLgkvSfgkfU","tlshash":"5a72b8e83693ba286a835bec67e54550f6343806802e897db6ddc3e28f55d845cf33a1","size":16922,"data":"","first_seen":"2026-06-30T17:31:51.45204Z","last_seen":"2026-06-30T21:56:58.871811Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/SwapController.C87228D9.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"faa25c25a389659b96b66f18d36cf00d","sha1":"117d524114ba0c6e889268c5e9c5cf9cd0335162","sha256":"49267a337a5c3fcfab805e1b34ab9f35016d58b907407e5a9222eae6eb9afe7f","sha512":"ac9d251bc9d6751f4acf2a43e3f11c4975d527d8a0400529f7c54ea8970e8a84d7def3e66584305414cc0d2916c30c80f4e1d539d30e68f76adfd0d532e3fb2f","ssdeep":"384:V2KRZ4Fe6Vl9aUraC0lxN5Xodzy3pTckYzajYn:VtMFRHgSaCexNixyNckYzajY","tlshash":"de5295b273607a36831d71986af5131011622c94d86ee4edf9ad06e30ff159f1ecf925","size":13805,"data":"","first_seen":"2026-06-30T17:31:51.417638Z","last_seen":"2026-06-30T21:56:58.878175Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ffddf61133ee8046055e7d2bb1fa8b02","sha1":"69ac6865ccb87de33e25e64b972b74afed2f1d48","sha256":"82e79cb4df3eb5473f39b3061f32a7447ab2b372a66b5401337a799b679f67e8","sha512":"674c052b682b40174c3cd74210d9250765601e845ef317140f459286b7fdf0c3db12da88628522247b9e4fbdc897b00c42dbc786314d1d657b75500aa7efa6c7","ssdeep":"","tlshash":"b0c08c886ad39182e63613ed5a4fac86a129c8b5208e26581c48a909bfe203e41b18d8","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.481229Z","times_seen":269,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/send.Bt8Mc6Dt.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"68d97fcbacd726302bb46ffbce970398","sha1":"8da59f1c728689b895e6b8dbf9abb1911d304a52","sha256":"1c5813975eca1d3034561030b46c253eff18936154e689e1bcb9c3e7ebaf01b7","sha512":"d36185155eb3285b84b946deb11901a0cab319813c5e815590f2769bc65f0bbe09a600d7aae0bdbc48df8a41b90a388b768a75055d5288d63fe0d89931d43c21","ssdeep":"768:WnYqUGMTUjflzIU3Tu7cLRAVqqnausABx00U6qboVXH0Le4N8hc5hZOqMs:WYqUMzIU3qdNVXEHGh6hZEs","tlshash":"5de2e89073fa380c29a79169eed64a0063316017811cc5fdfaeca3f58fa9e4659f7271","size":33145,"data":"","first_seen":"2026-06-30T17:31:51.411116Z","last_seen":"2026-06-30T21:56:58.770617Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/vue-vendor.DEjyxqss.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"da472dbdc9c2911c63c71f5aea5c6b3b","sha1":"f143bbc43d873883ea359362e2058de0df43acab","sha256":"79c4e719b3fd636e9df477df45f57285003ee8d68afd3e50a97360a398affd08","sha512":"d270a709ad840c319dfcf40c1fda4ee5e2a53d75f9f6df8b92a92774600b668721b88f927c8e45e15a30e1f78ea467f9a541a2c6520aacf74f3026cd41c4f3c6","ssdeep":"12288:NLGHq3d/DUmJPGjp39/V/nrJVBFc7Z9w+1Ns6RTO19Sf:pAqt/DUMPGjn/nVBFc7caN3TO19Sf","tlshash":"bfa4cfa53486b036a7bb22f210770101b33d1945b40e84a8b1adb9eb3d779d991f7f6c","size":460751,"data":"","first_seen":"2026-06-30T17:31:51.483377Z","last_seen":"2026-06-30T21:56:58.753501Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f4d2eac50ca6f61603a45bd964cae9ab","sha1":"f1229fb4f60ea19d8d570df9c5cf7747684406df","sha256":"ee1f3f388caaf638fe4e4dc910bbf348e96a2721d7865727d330e587314d82b4","sha512":"c5b67811dfef3151c51660070de12a366e548c5ee35e2d2bbcb3ff02af2f8b9c907b4441b769298c841fb8ca221077a9550d18ae5841bb64c2f87bda52a2d58b","ssdeep":"","tlshash":"ecc0c044a4c3a1429975108c604f6d82c039c0e0304c2000280490103a6303fc5f14d8","size":166,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.466925Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/useHomeNavBar.D2oNeRV-.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c4c7d3f4f09d0a12dbd374379a5b82d","sha1":"3e75bdc8c030bc1023e33ac8dff4551f499dd2b1","sha256":"18652bfb6dd2973264554dcbede7cadb0f47053d14767751b08d2e396b1a77e2","sha512":"698cc794fb93ce0c5771a5802108c2d6be7ab73061415a87e2ada6de95bd76139253e23fc0387e3dc5b25d87e4efc6fc4fa2c4cdba60c61254a3314961b650f6","ssdeep":"","tlshash":"4681b608700a9dfa5bd70465b8694442c19a5fcdca70b8da70ff641773cbca8cbca358","size":3951,"data":"","first_seen":"2026-06-30T17:31:51.339753Z","last_seen":"2026-06-30T21:56:58.902026Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/dijkstra.CkR1O50I.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ef97bcbd9c7a52be8a72a1bc4c721bf","sha1":"3e729ec9f18a5a4879b90b58a4b273e686a6f463","sha256":"85742f76fca76cbd8a9905fa55a89e52ad7e3709001fc1728c87d6ec6264fac0","sha512":"f55fee3fa86e5e185fa7c04f9ff0398fbf59842d2ebf8fd94bc7660e93e94ed0a910c353cb1bbea23171187ddcf0bb194a1ff6af05689d735397ab9f086d0214","ssdeep":"","tlshash":"2c11d0e8f1d751b64773956b863bb857fbba6980b2a80b80d351c4cab4a59cc001bc2d","size":1102,"data":"","first_seen":"2025-06-29T04:33:04.571198Z","last_seen":"2026-07-11T01:51:23.614519Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Dqns-ki2.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7f0c77d62b1417b297848305351dd0b","sha1":"ade935052bcc9586453e1cb0bfcd61ab5bbf9d01","sha256":"305b40c3d2aaf16eca2d6892af5dcc532d9fb69173f602ecca156d4926d18f3e","sha512":"b9ec10ca89b4cacdc684ed986bdb6686548450a5e424cb639128a56f297a9b77452bd3ce73b81499cff9fc62b1c0990c8f678e9129dce7f736692a677d85ee00","ssdeep":"","tlshash":"5431d789a37a3878306bd0f102688d402238741502268f7d77bcf1f54f59a8ab53b323","size":1542,"data":"","first_seen":"2026-06-30T17:31:51.542104Z","last_seen":"2026-06-30T21:56:58.819655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BqapkgQG.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e513686503c3da05ae4797915f8fc1c","sha1":"741d3f05ed587e11c80a5e662deb5bf1788956da","sha256":"6237d13a7676f8d217bac318e52cad23b79a3c343709932b9d7ce4d54f6dbd84","sha512":"328f7739af3cb93769982113ef7956fab025300599d5331a7ff46577c9e1ba377d02dc9f2740233c5a097eed237de91d2f7e55dc46c87de5456f685c0728c3a7","ssdeep":"768:ofyXCiw7UB4Z4UsHvDYfHbh+8zSyQ767sBqy+ry4Iz07:QywyUALYb867sAIz07","tlshash":"1d23a4a063acd2bce506836cdb1a3071271f24ff77458144f29e9a709b1618edd6bcda","size":45931,"data":"","first_seen":"2026-06-30T17:31:51.477533Z","last_seen":"2026-06-30T21:56:58.864021Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a89f588e77aad66c9fe157019d17d937","sha1":"199c38fe72d42e919b4d09e266fe2443bffcc76e","sha256":"949208fc0c0511357391f56e472a7faf9c4a9e308053ec0b124a564c31750419","sha512":"38bc4aa737d6e24f992ddabdce2409f20c9051514714edc18d59b33fa7a6b39598d398c11f3194429eea75d034a6564614f7fd1918ac2fabab7d1b5cd54a337e","ssdeep":"","tlshash":"b6c0809854d3704165311199554f9c469475c474108d5e512444915139b147fd47a4d8","size":157,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.510198Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"39d383c161aca9600f49132c8d85227b","sha1":"8d42f6023c29600bd2b00c36fed3322080526e49","sha256":"17fac17b68594444e52acb5e30f17805d0fd8fabac680898f93c586e55dfb691","sha512":"90561c8abf76f25d7b3cf79c77d558705fe70ab517fbd5e65fdc53d70c22552be172dd84fca7b95d7a700003614ee35c2b00c397802d8bf42a2bf0f56b2fe9b8","ssdeep":"","tlshash":"eac0804415d39043a63612a5574f5c86d015c465305e165c1c54a5097fd143d40715d8","size":159,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.464278Z","times_seen":268,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.B-nnjuEX.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"33f45c3b3fc273fc9442cc36c721a98f","sha1":"34b5106765604524c72093ca6f8a765d905569d2","sha256":"72ff42537b2bac1e53589c634a0e2254ec112ed28ac77247bde193164d0175fb","sha512":"764d88ca6fc0852a6e5839945747cb79a5cd1640b2e368af8e26e5a76686a7a573c5d46efa880ccf968616dba2e0da9a076e78cf247d3ac5def8b8594fe21148","ssdeep":"","tlshash":"d35174c6672b60b86113d0d01f5a8a005223f12b5421ee6d7ddff1f6cf9a7492969332","size":3097,"data":"","first_seen":"2026-06-30T17:31:51.49167Z","last_seen":"2026-06-30T21:56:58.817634Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/receive.DWDsov7E.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"593b817221c33b120287809a5ea18823","sha1":"52ba12e67286e945268c7beae60fc17d97a37c42","sha256":"93947d9949d3efc8ba129f331b748d18cb3a9bde292663c18458f030e0f8f02d","sha512":"74dc61782325ea4339cf14167d6d3fc0dc8a04b79cb26dc4a03be8e330009be697afdb407f6f121f4f6c67ea5015e4f7aba8d773c4bb49c9e6d843b9efbd3a8b","ssdeep":"96:7QX9EpFH9KKjVYqrCgJkPX6n/BqrCkYvax3DvX4SsqmpqNy7xEivyHFOwirvX:7nFH9KKjVY2cmJ21YvaxzPHmpqLTAX","tlshash":"1cd1c94659f6389cbd12d0a85e869a00c131404ba139cafdfbec83e58fd558695ef322","size":6705,"data":"","first_seen":"2026-06-30T17:31:51.374679Z","last_seen":"2026-06-30T21:56:58.820897Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"048f0a55d288e9e62b07376e7107a723","sha1":"d23b675f5c894d87d462468b499852c2514a34c7","sha256":"6af531dae2742b407cd107d7fb310d72d8d6f439f7c4506aec039b5f3894f03a","sha512":"4d28c0104009f0868977915e4f80ff1454d72df00225cf7285a377d8c34a516e747bf8008fcb4a5925f895f53f2d1d7a363f403d4dd6b9e6948ed3e070ccb33f","ssdeep":"","tlshash":"82c0808475d35442b53213a9568f9c469065c469109e2d591c55564d3fd147d40754e8","size":166,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.489331Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.COzITpmd.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"d48b02e16478b0e058afa0ab440560e2","sha1":"c9b5503c730975e0fcf69d57e138cc170b178fee","sha256":"93c34ee0c01252e9546bac1c82acb37fe5074b3b9b56b6cd52712545b52c80c0","sha512":"f15f6d28b494caedb282df52920bfd9e6e96c08965227e8950f532228c2acdba7e04cfc2fda8814851227b7bec3f18949a3f2178696cfef7cd44200ddd1a2618","ssdeep":"96:7QUUV7o9KKKPhXLcK/RWbAoI3qbcsCyB4gEQhMJyqQN4:7JUV7o9KK8ZDTQlAQTu","tlshash":"13a132c22daa25393a91d099ae5a4d01e331d007d219cebdbddca1fccf99583147d722","size":4692,"data":"","first_seen":"2026-06-30T17:31:51.394629Z","last_seen":"2026-06-30T21:56:58.860646Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/5a724b8f-ef3a-4bb0-a6b8-e296a47de334","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"","is_inline":false,"md5":"dea2b84bc0d51bffc92170d32bff8a8d","sha1":"0ba8e3b3cd083f604951338bab4221ff9a6e9087","sha256":"a5180628c01079691f3d21afc8086479b923f6127b860cad410a5c48c6bf4ad5","sha512":"38cc4ef0c3084612b264aba03ddf5dc5706261764b47e81438b3f4fee2a82eafc16c0200a5580bc2618a29940c94beba91657ebd77dd988f3b19d1d6b83bd0a2","ssdeep":"12288:FCJap2vBQxZ3heWWqjV4PgXhYnxFG2w6Zr5E:YJap2vBQTheWiP8Ydw6Zr5E","tlshash":"965593b2714dfba327b50f3901cb78d34e1573336908250db7f5a5a6aab06c76432a4b","size":1322663,"data":"","first_seen":"2026-06-08T00:31:10.551159Z","last_seen":"2026-07-13T07:31:17.527591Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0418317d79ab1fa1d56359b23519bfd2","sha1":"59fca914b46215c152478c4685c0d97ec2bedd1d","sha256":"dcd67b1c250ea530019526e11fbafd3fc3558c14c190dae1615fbe097850a113","sha512":"4c8ee22d92eae6af01debb3351fc90772fd373494660cb5b39989cb6c175c4b549f1a85da179903e44038a8b58c0f65cf7079ac9f19fc0719a2911bacea1be44","ssdeep":"","tlshash":"ddc08c886ad39582a63613aa5a4fac86d029c8b5209e26581c48a90dbfd203d40b14ec","size":155,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.482055Z","times_seen":266,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/embedded-wallet.B6Y5f39V.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f269422568c8b8890a09fdf8b9390433","sha1":"0e4d24aa5dfb022cb9e83fc19601da9b647302ac","sha256":"8bb73ad2c0b870f59e2de46a78aafe13b9a78163c57f9ca8d1b5e89c734ec90a","sha512":"8bdc65571bf0d201f25fda372a3053cb1a64e78382dbb204bbf46928ecedc1a3dc204dd1828eed2a8b85dd8ffda7d31f87aca715b13ea480fed7a8f244b8948a","ssdeep":"384:7qAovphR6sy5ID38XpdcQ0iDsOctE208PYdSuf2wcrRJbexWTszP1lsXXFH8od:7UvTRI5ID38XpdcQ0iDsRtEP8gdSuf2V","tlshash":"7cb2f7413db669ad2843d0a4def64905e231a00f9424892eb7fca1f68f99ac514ff335","size":23404,"data":"","first_seen":"2026-06-30T17:31:51.425009Z","last_seen":"2026-06-30T21:56:58.906772Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8f5d707e6ecc157f77a4b0d21ee0c2dd","sha1":"8eda77f4d6e51a13bf996a299fbaf7ddbccceec6","sha256":"3f852d8e3e39cdc4b59f06cf7f3945c973c7398de8be8de9b56b010007ce2e82","sha512":"2a82726fc860c0f33cac1120804101d1c48d9d9da3407d34135b4218ce61310c736ec55e6024e318c140428ffdbb77b822bf180ef0c6684bb1e94ddb743eefe2","ssdeep":"","tlshash":"a8b092c833c3b220466377bc602f9888b03ded20308c9a5a5205c2a27ef11394513868","size":121,"data":"","first_seen":"2023-06-14T02:52:34Z","last_seen":"2026-07-13T07:31:17.543728Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"580fcdb45a357be163a1feeec1f25f9a","sha1":"2005081e728ff13d6e43d47c2d07e369ce6d2212","sha256":"0674c61ff2f40e7379cc96408915508f2dd7869a01b498006ba080cd11dcdf0e","sha512":"2737ad8a9d17e354534d7ec7120668c95dab880c0d22839d75a06070d3f0517d899daadd053bd00e9e6c9829856adfcca03ae3fd1c62dff10b97f6d7aa245ee2","ssdeep":"","tlshash":"39c0804855d39152a53513a9564f6c859025c8b5104e19581c54950d7fd203d40754dc","size":155,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.516961Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/MenuPopup.Dk_MokuL.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e011f7af26bc5f7ba10536d25a59557","sha1":"bb63cf00238a9fb1e6de2dc640b2b1a96c5024ee","sha256":"971e4aa261543bccf4b821ff3ce1da12f51676d3ecfd7d8a46e632f8f0e322b6","sha512":"ad2c0705936e2b3c0e530b983fe6672d6241c8edeb6f043993c145e4ce43faf66d34298e4e566cc3c0b4d36928e0c9f7c1be4dc4937c0405cd795b3a8d5fac52","ssdeep":"192:FjJphcK5deMFq/0O71L1AKla9kZgDuF+dRyQU8WdryEddrxS/vK:ZJpyKCM4F7jAKY9k9FCyQU8WdmEftQy","tlshash":"b512e94a7429c6f9e3eb2435f4591080a50c3ff8d6bb861b62fd29013bd6c26968837d","size":9371,"data":"","first_seen":"2026-06-30T17:31:51.355745Z","last_seen":"2026-06-30T21:56:58.875798Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Cy9bsC5i.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a61c6cf38c3759d9992db50f2ec844b","sha1":"d1b4d3eff1423921542ff2f58e34b1a46bbd92d0","sha256":"8f7fb98d49e7b396344fddde9861d5e396634af213b0b53b1c5bc1f3bac1353b","sha512":"2523cb0f0e15b30656e9bb138ac7805b3c09a230420c35170cdd38f2835f59813a1bd1e2f880d2c007fbaca5dbe8680ebf6f5cba67160ec51d08fba58b0b64ea","ssdeep":"","tlshash":"6e51ddc1ffb4a26abb4bc0be559ad910e333b00550295f7e3bd922f20f49584241eaa4","size":2947,"data":"","first_seen":"2026-06-30T17:31:51.434133Z","last_seen":"2026-06-30T21:56:58.863186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DKgkK9MN.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b9e3abc7c0dac514b2728fcbf353b03","sha1":"76148dcc013cc819189e7e948704b930c5fcd5c1","sha256":"97c788821d4dfdb148f8ac865621598af8e97ad3d4e662b9303c96df86655892","sha512":"5aa3d8f63125c02e5d8a8afdee7bdf20e32298b77dcdb6a411a5fb853caa28d0f6fba7b32b2116f761ba7a72778f87eb7b95c95466ae0feb1ef78afaf1af2243","ssdeep":"96:vChfbMTdcJa3nmKwhVqIsDYdomgmCzly/JVqIsHbX+77z8U:axb+mKaV6DQgXZyRV67X+77R","tlshash":"ecd1a6bf3d662445aa32c1605f828c15e231901767188c797bfd25b8cf8edcd7aaf264","size":6479,"data":"","first_seen":"2026-06-30T17:31:51.426019Z","last_seen":"2026-06-30T21:56:58.81161Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Bc-PImnr.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d5cb37b22a1ef7078a7190219659a95","sha1":"53d2a9103e2663676a894f6a9b872a7c8543a414","sha256":"4325b04e3594b6a6b3c0a1fcddbcb6d334916f3995a4c165ddb1858265a79f2b","sha512":"9d7768a9a77175d22f8523b430ba686ec82883bf879d553144e8ec5ecce05f0c587f0e7fa1ffd0364d0890227c6d5825767591280639f0473d78e494937d18f0","ssdeep":"","tlshash":"9e51b7d3f33a1178385192a05b6e1dd4a323f01b611cde3e7fdda1e44f866856839632","size":2987,"data":"","first_seen":"2026-06-30T17:31:51.528582Z","last_seen":"2026-06-30T21:56:58.872664Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ae6719e488613f49c8d14410ff723223","sha1":"a470d26ec0c57d3abb80468e8dc9a61b2442daab","sha256":"ee8174e44a99fa671341ee8a09878c460fcdba2d3244be45fdf238231c9c4942","sha512":"a7bd4badffb92efe3c376da0c3c14110838a112523e1b1c9dee5bc35e2fd27ab5f6d88c5b8a11e75a91ca4aac235119d6c160cdd205aa1baf68ce9daa08dc49d","ssdeep":"","tlshash":"c8c08ca468d39494c2b252986aaeee8ae334c42530880a62994ca0267b126bd44329d8","size":155,"data":"","first_seen":"2023-06-14T02:52:35Z","last_seen":"2026-07-13T07:31:17.563534Z","times_seen":239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/heic2any.CYtHHoD1.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd81cbd8f58ffe6ea64981a55207310a","sha1":"206325a60815c575756402d9750fe3a72be44650","sha256":"628c75322c1a5d2f9cf445c3b2c387216487fda88a9f135fd85f066908f941d1","sha512":"236c36be08e5a6865855b9ea83428efdd1eff2d0709518ed93422adae6fb814678f3c7e45e3134620ea25f926fba332024a3904ae0e2d8f9d69c4cb54cc5224a","ssdeep":"12288:H18Jap2vBQxZZHeWWqjV4PgXhYnxFG2w6Zr5U:HGJap2vBQFHeWiP8Ydw6Zr5U","tlshash":"c455a4b2714dfba327b50f3901cb78d34a1573336908250db7f5e5a6aab06c76432a4b","size":1352432,"data":"","first_seen":"2026-06-30T17:31:51.716125Z","last_seen":"2026-06-30T21:56:59.007473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BiIvCXYa.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e8e26b778e95317191751d4ae8ea7b3","sha1":"917da3a1ad7ecae3b72592b3ec5f0b795a2c6e6d","sha256":"00588adc491ee932f6662490cb786ef31907290c90681633fd508368f0e0ccba","sha512":"d2c8b6256bb2c6793a2af35e50f991a27cea155225f9fed3b0d93fdf4139d6aa22d404d04d28ea08fa5e32407f7c29bdca7035461da2456bd238b3680be7504c","ssdeep":"","tlshash":"45512385b113a4fb345152f90a9f9215652438160bbcd67878eca992cfce7dfb434523","size":2478,"data":"","first_seen":"2026-06-30T17:31:51.555783Z","last_seen":"2026-06-30T21:56:58.8564Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Dh9NT5w7.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"9789d94102794b1d673b0939d42696dd","sha1":"3f9912600cf54f225a2f25678f7e99df78e88c00","sha256":"64aad59748e801cc2537ae215b82def776d6fbea6232cdde3e2164cd2ff0d334","sha512":"68cfd856fed04cf20ae312483cc942870e2f2eb92da8b15e6dd79806473a4632e48b93b582f96a6b7076be9464cf488bbdd3c3263430838cfc5cf0fe9244de02","ssdeep":"","tlshash":"0781d913927b51786991d2f14fee11883220643b5628c47d7ed962f18f873bc7838bb2","size":3856,"data":"","first_seen":"2026-06-30T17:31:51.461091Z","last_seen":"2026-06-30T21:56:58.809323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/hashTypedData.TcUZwAvS.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"47a5f3848eb572ab04a212f230d86345","sha1":"5a9b64cf4b8bbe3a9f61eb30c95be64e1e873e25","sha256":"eadbddf6f11db15c4b684e99caabb527711ed95b7b089424711658a0468298de","sha512":"4775bcf22b7848e9ff988fe5e3fb8845d11dc79b7d2c86ad06a367f148e7608ab628a0481a1852a37dc39736bf87fed10da8b4f0132d2e1f1b6ef24f55df1563","ssdeep":"96:nobm3nh2/oyzL9ydost6nSwVP92GS3Pg5n2Jn2hn2fi20iNsXlXNVxr4/3VkD:nobm3nhcV39ydost6nxfS3Pg5n2Jn2hR","tlshash":"0381008d7011f6b81ec919e9e0da6202e2a8ec25f47588e3f1f860f335f286c907971c","size":4150,"data":"","first_seen":"2026-06-30T17:31:51.36257Z","last_seen":"2026-06-30T21:56:58.839581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/parseSignature.BAKqOPwg.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"99509e5c5147b57d5dcb626ce67c8720","sha1":"3af71a630cf58cdc87a0174d904386106f8c1430","sha256":"c491fc2a6e7cd01eb55ee1486689e727b11d3305d948d01190914baadb67df98","sha512":"82e793a3140b7a382752afd7e9c0dd110563a48925a6ce419e81e0ccf8adb1d4e983ad574a7a9c01af404107219187624371a171d80a7bd3e3e75227b4a4ae11","ssdeep":"1536:loYiNKTHDpNMZZzAsrl4kGxLmuWKeK2B+3knEdIf:6YiikesrlSxL5neK2Bw5+","tlshash":"db93289572a5b0b587c179e520670101f138adc6b40d40e5f3acddab3efb888d9eae1d","size":89826,"data":"","first_seen":"2026-06-30T17:31:51.397399Z","last_seen":"2026-06-30T21:56:58.785316Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BJGbpCr5.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"729862f64c6ff239dd1e9c91aea39db1","sha1":"f4b5e1106a716714cedcca96a87b637b3978e32c","sha256":"e66f3d6f64135026b1a6f3b98dfe403415f90af9840c80e6cb3358038baa0e65","sha512":"4572d68626233a55b7479edcdfcb221a36b57e158c6e848e7ed2c34243232346723f6c0115e777d4c7324a1b9c9db02d9b629a38633095218c1e7e13906e365f","ssdeep":"","tlshash":"795142c576643a753b538065819e0d45b325b03ad438ff2e3a9ea1fccfa5d836829633","size":2766,"data":"","first_seen":"2026-06-30T17:31:51.540904Z","last_seen":"2026-06-30T21:56:58.781403Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.D78JmQQy.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c1e556a0de7b3eb05751d1a7f8a1dd94","sha1":"b2cb9baa915dfa2ebd87035e904ad8398d43921c","sha256":"dba4cec27aca7ae1dc05baccf51379a044645375a8716744983b35b1c6e617b4","sha512":"6bfce3a41876280722f302ff92917dd66d4c0ea2682cd006d3edc8c3ae215dcf1218bb264108edc23f0608172b35f3ffcae89a295da67d9a98d510802f332e1b","ssdeep":"48:yJXx40Z9buEQM7ooRKhJwi7flqobwm5g2r+K2/KVv:yVaUgEQM0o8hJwixqoUm5g2D2/Uv","tlshash":"7481f2c57eb826e53703c061a99e4c16f330e026a425af2d7a9db0f88f55a43781d773","size":4129,"data":"","first_seen":"2026-06-30T17:31:51.34531Z","last_seen":"2026-06-30T21:56:58.855649Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5eda06d6ad452c6738bf7ffde9da594e","sha1":"d5f821a8d0dfdbda99ffaeabcd54c37eed8d3b81","sha256":"d2c857e7f79002893d5db757193a2223bf9761b33c44141af084ea2b157cffd4","sha512":"f7d96d2d77745172e748436384150270becfb3b8b438bbfc6e1ec7b2bfaf8eff109406e69d0cd2675e6d1af040c9525d67fb8e404d9c40e404885647f7500bd2","ssdeep":"","tlshash":"38c02bd4a4d3e1804231318865cfae81d02cc434208c0e51144de003ff3643dc172cd8","size":138,"data":"","first_seen":"2023-06-14T02:52:33Z","last_seen":"2026-07-13T07:31:17.550284Z","times_seen":265,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/email.B8BZgwyv.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ca0bca7b586a9fbd26d494fa875db7f","sha1":"a677cbfe7df368e1d997af40ab3f68100ac35e64","sha256":"b52c2f12b8f30ca8730ef9b4f659c7bbbe7d727ad45b1a64a1384cd2edc81dfd","sha512":"2a15539037d614108c1c023813a1344f922180a85974ebfccc4cd3e018187790e3e8fb0201c1d361aeb72660a93b36afe49867fb1e6f531839186a47d659c4ae","ssdeep":"192:YFY2JwsssdHHY60TCvY67vhIJ0u//Z/Y62PWcPmGYSko6+/PY6fSUQ+/4Y6+Y6Zj:SYWbHHqTCvpvhIeu/5zcPBYSX5SJUbj","tlshash":"5022d71922f8a8fc9ec741e8b0755801c069145b4ebd801dbb1c56eadfb4ec66cb937b","size":10619,"data":"","first_seen":"2026-06-30T17:31:51.338613Z","last_seen":"2026-06-30T21:56:58.762424Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Bu7NvJOT.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"introduction_type":"scriptElement","is_inline":false,"md5":"14a0c1af99ea0978e41347a3975dbfc0","sha1":"2b6d1b51b5b08b0fda116b4812a55ebc48516ed5","sha256":"d9d5e9eb502b6ac88005d9fd389fd6b129565a24c5dc9f510728cc3cf24b7851","sha512":"1c631fe6c0c061bc5e4fdf2fc6c82ef3807be4f32bcf5f5eb8480fba86491d571738f315aab82b0f83cb57e408e65c892a721070b665436ba305f421dc9f4bcc","ssdeep":"96:KdKHliUqZAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqvpw:KdKHliUxfRKl0ZKdmj2xRf1gSMipia1C","tlshash":"85a1b4f77166e3e0952787f1dcf73811651b3cb67b064e0aa58c9ad8de06589868ce20","size":4806,"data":"","first_seen":"2026-06-30T17:31:51.490655Z","last_seen":"2026-06-30T21:56:58.867777Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"max-coinbse.com/js/vue-vendor.DEjyxqss.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.933Z","timestamp":1782856572933,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/vue-vendor.DEjyxqss.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 460751\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-707cf\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":460751,"size_decoded":461016,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da472dbdc9c2911c63c71f5aea5c6b3b","sha1":"f143bbc43d873883ea359362e2058de0df43acab","sha256":"79c4e719b3fd636e9df477df45f57285003ee8d68afd3e50a97360a398affd08","sha512":"d270a709ad840c319dfcf40c1fda4ee5e2a53d75f9f6df8b92a92774600b668721b88f927c8e45e15a30e1f78ea467f9a541a2c6520aacf74f3026cd41c4f3c6","ssdeep":"12288:NLGHq3d/DUmJPGjp39/V/nrJVBFc7Z9w+1Ns6RTO19Sf:pAqt/DUMPGjn/nVBFc7caN3TO19Sf","tlshash":"bfa4cfa53486b036a7bb22f210770101b33d1945b40e84a8b1adb9eb3d779d991f7f6c","first_seen":"2026-06-30T17:31:51.483377Z","last_seen":"2026-06-30T21:56:58.753501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1515,"timings":{"blocked":-1,"dns":0,"connect":215,"send":0,"wait":430,"receive":649,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/system-setting","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.524Z","timestamp":1782856575524,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/system-setting HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENErrWaj%2Fq3gpy0zkmG2OicAEyVcWIQu11UB0PGV1N5qGOvIEs95tvo2QbBa%2Fn%2F4YUlGKvYRmumgRkp4puzjGr9wB7EcScJWib%2BvHZAHZtOaKwmw2UkKt3L7ImBg6rqGxQ0tNNUxUnw%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:15 GMT\r\ntrace-id: d9fd10ca-e790-4478-9271-c66fc6ed9bb0\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b7d5d01b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3340,"size_decoded":2103,"mime_type":"application/json","magic":"JSON text data","md5":"135471188f5079f5af465f1132ab28e3","sha1":"43e11c4bae19b9544df85e5777a9cdd4ce6cc8af","sha256":"7f9aa97af8e99ab8d84957b0527f4a22f2c417efa453537dfe399f373633daee","sha512":"7096f45a54f0a747f95f6beb53af2bb55042f77095e1cc3b9a942169e122f43c14668ff45bb7365442a97f409fd888b2c787c81e083028233e6210885f7f97cf","ssdeep":"","tlshash":"5661dc3589ace8b706c18885a85f3d5a8f4f8333d450bc2ea768cf1c60f5af5927551b","first_seen":"2026-06-30T17:31:51.464442Z","last_seen":"2026-06-30T21:56:58.755848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":35,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/img/home-bg-all.97Fd8Vif.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.469Z","timestamp":1782856576469,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/home-bg-all.97Fd8Vif.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 729471\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-b217f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":729471,"size_decoded":729723,"mime_type":"image/png","magic":"PNG image data, 750 x 916, 8-bit/color RGBA, non-interlaced","md5":"b85c3acef3da49d6550199e667bfebbb","sha1":"5d79921941b5ba3e41a3cae00537286438971416","sha256":"f6255f9d6a845f92971cc96f524b36bf92a0aea8b6541b65b7ee1e081f694a51","sha512":"0f63c25198363fcab561ded5b42a209fa4d950c20204b96d04368c48ad39ea87398f98b9f71f3a1b3fbcbe6e1aba96dd075b22e0b64266ce5aad30d5c0030d71","ssdeep":"12288:/j/Fg/i4rDyuqb1Gg+XoIr2TYvkdFzX0kVtLasK14w:/jtgaNvH+YKCFzX0kHK5","tlshash":"a3f42394d8be9ffdce1bad1e08566eb5bf20031601e49bae69b6f8bc1484724c0d3751","first_seen":"2026-06-30T17:31:51.407036Z","last_seen":"2026-06-30T21:56:58.757828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jiaoyisuo.thai2570.com/images/2026/04/10/TeXTLQzM424YUDtab1gLzQgpx99G4onctE4g5DCk.jpg","fqdn":"jiaoyisuo.thai2570.com","domain":"thai2570.com","tld":"com"},"ip":{"addr":"104.21.6.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.566Z","timestamp":1782856576566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b06f25be.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 00:01:56 GMT","end":"Fri, 04 Sep 2026 01:01:45 GMT"},"fingerprint":{"sha1":"34:86:6A:80:8D:1A:71:5F:5A:22:46:AC:DF:AA:6C:07:10:DA:A0:C9","sha256":"3F:06:3E:A3:8A:B2:AA:09:21:1B:B3:01:4A:9F:54:63:82:49:F6:7D:C0:04:67:F6:F2:54:66:2B:90:3B:43:40"}}},"request":{"raw":"GET /images/2026/04/10/TeXTLQzM424YUDtab1gLzQgpx99G4onctE4g5DCk.jpg HTTP/1.1\r\nHost: jiaoyisuo.thai2570.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49636\r\naccept-ranges: bytes\r\netag: \"175697e6ffd5ccf70ee3d98764d43ca9\"\r\nlast-modified: Fri, 10 Apr 2026 14:33:18 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SruKYF%2FINN5ZA5VsP9jXjorNkn2Dl%2F9bZBGj6US5Fo7wLo13jAQixs4taWmLYF42YhYCWnVEqx42CHNEfvftIAN7DeBqo%2BWSrQFo304LVjw5J%2FT193N8KiBzqVQSFMK9ZykXxGhRHBVd\"}]}\r\ncf-ray: a1406b8389d98be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49636,"size_decoded":50330,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 1200x610, components 3","md5":"175697e6ffd5ccf70ee3d98764d43ca9","sha1":"d6f82e86f0d0ff74d2ae5b835b130f63fd2f207a","sha256":"4d7f17b3cfa04f390fd7d7f2fae21f071a8782ccae585a46899207b1daa51fb4","sha512":"c22ce429b66096aec54de3ebf4afbeab738525860f4d79f99f74202b183a39b815e0e7a77e02514365bb39f9df114ac5ae222731a5704bd039228398f813606e","ssdeep":"768:7PLP+VOX22CEIp51jkzo5xXhL8XXlzKxY0EQpT50rTkQxTe3sCSYyP:7PQREIz14MbXhXNqBopSYM","tlshash":"0f2302260eb5eec7e2dd7eb8a0d24aa13b0d09c47256020488dd393d469b2ed6f1df17","first_seen":"2026-06-30T17:31:51.341958Z","last_seen":"2026-06-30T21:56:58.760498Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/email.B8BZgwyv.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.161Z","timestamp":1782856577161,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/email.B8BZgwyv.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 10619\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-297b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10619,"size_decoded":10882,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2862)","md5":"6ca0bca7b586a9fbd26d494fa875db7f","sha1":"a677cbfe7df368e1d997af40ab3f68100ac35e64","sha256":"b52c2f12b8f30ca8730ef9b4f659c7bbbe7d727ad45b1a64a1384cd2edc81dfd","sha512":"2a15539037d614108c1c023813a1344f922180a85974ebfccc4cd3e018187790e3e8fb0201c1d361aeb72660a93b36afe49867fb1e6f531839186a47d659c4ae","ssdeep":"192:YFY2JwsssdHHY60TCvY67vhIJ0u//Z/Y62PWcPmGYSko6+/PY6fSUQ+/4Y6+Y6Zj:SYWbHHqTCvpvhIeu/5zcPBYSX5SJUbj","tlshash":"5022d71922f8a8fc9ec741e8b0755801c069145b4ebd801dbb1c56eadfb4ec66cb937b","first_seen":"2026-06-30T17:31:51.338613Z","last_seen":"2026-06-30T21:56:58.762424Z","times_seen":2,"resource_available":true,"data":null}},"time_used":692,"timings":{"blocked":476,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ZxDivider.B9rbY7UO.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.542Z","timestamp":1782856575542,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/ZxDivider.B9rbY7UO.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 248\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-f8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":248,"size_decoded":507,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"afafaa547c9eda104d146df27ca52eb2","sha1":"76e3ba0341dbd4c9ff3f6f63f1c3abc98cd7b507","sha256":"a09c529fd5676b1795de559ad7c11640913abdfd0d5aded1ae52167d4f09786d","sha512":"307ef22ba1c3d361eef5856b00589b4acb394e9608fa38039b3469b183f31a1e63d7bad4ca7bc062ab4605c58cf1f8fa7bcccd6c1b20232f6ea8383d55c609bb","ssdeep":"","tlshash":"eed0979ccc36cef784eb8888cf15a00502045fec6b3c0ba0d3970335a902449270d62d","first_seen":"2026-06-30T17:31:51.35785Z","last_seen":"2026-06-30T21:56:58.765418Z","times_seen":2,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/homeTopIcon4.BI2KLGjF.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.554Z","timestamp":1782856576554,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/homeTopIcon4.BI2KLGjF.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 6688\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1a20\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6688,"size_decoded":6937,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"3fd298f9ab6db392cf765f3bec4c8825","sha1":"4b107c268b0038a64f7415d6018eac8d0a206cbe","sha256":"cdb72583a87a4dc3b67ac81c5f4f188c235937383fdd7145486eb2252a24f9ff","sha512":"6c04f187cfe2b851a02eaa5fd392c0f0f57de2e19eb6cf180122d24b2a9566de3627668d3994c206f7f6cdc77f000b717af7f49a65682e619818d541ca4354c7","ssdeep":"192:AdheXgfu7a/Vi8C83OfjTa5RPD/w+g5XRmtILVNef:ch9fuW/v+fjTavD/wfXR3LVA","tlshash":"a1d1afc472af52e9ed103d308f02a59b52c8825b41017e155c452bb0fe166ea5ef2bfd","first_seen":"2026-06-30T17:31:51.455953Z","last_seen":"2026-06-30T21:56:58.768056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/send.Bt8Mc6Dt.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.183Z","timestamp":1782856577183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/send.Bt8Mc6Dt.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 33145\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-8179\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":33145,"size_decoded":33408,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1684)","md5":"68d97fcbacd726302bb46ffbce970398","sha1":"8da59f1c728689b895e6b8dbf9abb1911d304a52","sha256":"1c5813975eca1d3034561030b46c253eff18936154e689e1bcb9c3e7ebaf01b7","sha512":"d36185155eb3285b84b946deb11901a0cab319813c5e815590f2769bc65f0bbe09a600d7aae0bdbc48df8a41b90a388b768a75055d5288d63fe0d89931d43c21","ssdeep":"768:WnYqUGMTUjflzIU3Tu7cLRAVqqnausABx00U6qboVXH0Le4N8hc5hZOqMs:WYqUMzIU3qdNVXEHGh6hZEs","tlshash":"5de2e89073fa380c29a79169eed64a0063316017811cc5fdfaeca3f58fa9e4659f7271","first_seen":"2026-06-30T17:31:51.411116Z","last_seen":"2026-06-30T21:56:58.770617Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1218,"timings":{"blocked":1002,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BoIy31qJ.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.186Z","timestamp":1782856577186,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BoIy31qJ.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3038\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-bde\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3038,"size_decoded":3299,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (530)","md5":"f5e54138cee283c778c13d794821f548","sha1":"cd0b449d1da5d879d3b379ada54498e2e6d696b7","sha256":"4a87f581de027a385bfb0bb5657ca0ba3df383c05f46b50284992bc23f6ec636","sha512":"a70b5202ab3753f39a90d39647f421ebbb3b8bccc346b8c6b6841068f34041204fc35b88745632f5033a5dbd497b4bb859ead97266beb47cc952ba88bc3cb15d","ssdeep":"","tlshash":"c9517440bbf6386c2a728025a9aa58104332d007d378cbadf99da3f94f99a4155e7377","first_seen":"2026-06-30T17:31:51.395895Z","last_seen":"2026-06-30T21:56:58.77273Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1336,"timings":{"blocked":1120,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:20.304Z","timestamp":1782856580304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oAHg8ABBfF%2FhTbCPHzli7N1xQs0ieVCXVdJiS%2BPnoVUW4uOuInOA1fG8gbUEz86s3iz6RukZeAyWsc46WCJIJd1XypsKlTw35k5Qf9OuVp4vSRrDbcoOwksJOE9aMV2pr%2FuP%2BfWb8s%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:20 GMT\r\ntrace-id: e1bcf3e4-ec6f-4eda-a45a-966d343467df\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b9aeacbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23061,"size_decoded":4037,"mime_type":"application/json","magic":"JSON text data","md5":"ae7eb87197230343651631c62c319f81","sha1":"76496509dede1a82853d91d29681ea14a781fd62","sha256":"80855fb478a887bd0f704252e5e2a296a4b16453a966058df424b6f7d2d0be9f","sha512":"bcfd8ff0ae3bb34b10341dadc5bbfb0f3b8f17864f0799ab8aedb310b45003902a144f2db47f828822b5550f60b37ac750bb2b76ff8d0850db605ceb50ee748c","ssdeep":"192:q7ZkZIZxZcSZKZ5ZNZHDZdZv5Z/Z4Z0ZaZkZ1ZGZysZVZDZ+Z+oZ71ZO0ZtZkwZ3:q0zpUTmjl3","tlshash":"8aa23b561778e830d58868835057bbd4b0dc765b68cbcdb4fbedce9c80f02661a0fa66","first_seen":"2026-06-30T21:56:58.774809Z","last_seen":"2026-06-30T21:56:58.774809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":304,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/css/app.CUhdakyo.css","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.938Z","timestamp":1782856572938,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /css/app.CUhdakyo.css HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:13 GMT\r\nContent-Type: text/css\r\nContent-Length: 1036\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-40c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1036,"size_decoded":1283,"mime_type":"text/css","magic":"ASCII text, with very long lines (1035)","md5":"cc98290399c3ef17c08ea181ab79ea26","sha1":"f3bc9daeb77c019c7d21eb11fc451615ffce82d2","sha256":"f5ccc725589454f885f4ea7b8c33a42655af669e93d480074ac7bcc7ea144a6e","sha512":"0819a9cbef4af8b8f04b50931a231751c7b07af4440bd504156fc0c416a46a6f88fcb698af0736fa124696ca902db543c2117c8ac111165ac2558064197ec7d4","ssdeep":"","tlshash":"9911e230dc60027ed27bde0374d74a8d033dd500553fd5893f446a9586879481c9df9a","first_seen":"2026-06-30T17:31:51.336019Z","last_seen":"2026-06-30T21:56:58.777332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":221,"send":0,"wait":221,"receive":0,"ssl":225},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BRJtM4JU.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.246Z","timestamp":1782856575246,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BRJtM4JU.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 6015\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-177f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6015,"size_decoded":6277,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5517)","md5":"95d19a7ca411a54063ccca2248efa884","sha1":"3c7450f32752bcaa996d80c644edb59d6d1b2b21","sha256":"b7ac93da8cfa5f1f9b2830cb82bd9d08cf5c7c23429ec7b5df07a71fca9bd28d","sha512":"dc1d33c02c02b904002d237b3fd846d735f46d9f614ff1cf953fc4a3b7defa6f7f41a9d782178b0e958d62fdcc1342905fd2ef542b5514b53170749a53d234ce","ssdeep":"96:jw2+5Rp5gLLJqBWQkTJMFuIM8PcY4/+Ru+66YPT1JCsy+oky6CfQGCoGwJl6Orv5:0/b5gPJIMTJmuI6+Ru+6vp8vlX62jCZa","tlshash":"5fc1b5f072ab45f4c6c9199c7c166b14413881b8e41dc029bfdd54eec9aa6c2ce8ff92","first_seen":"2026-06-30T17:31:51.485119Z","last_seen":"2026-06-30T21:56:58.778615Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jiaoyisuo.thai2570.com/images/2026/04/11/RxutlEWGwjyKmhgXV3YQ2XnIMzP7cGcYgCUd07SU.jpg","fqdn":"jiaoyisuo.thai2570.com","domain":"thai2570.com","tld":"com"},"ip":{"addr":"104.21.6.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.546Z","timestamp":1782856576546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b06f25be.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 00:01:56 GMT","end":"Fri, 04 Sep 2026 01:01:45 GMT"},"fingerprint":{"sha1":"34:86:6A:80:8D:1A:71:5F:5A:22:46:AC:DF:AA:6C:07:10:DA:A0:C9","sha256":"3F:06:3E:A3:8A:B2:AA:09:21:1B:B3:01:4A:9F:54:63:82:49:F6:7D:C0:04:67:F6:F2:54:66:2B:90:3B:43:40"}}},"request":{"raw":"GET /images/2026/04/11/RxutlEWGwjyKmhgXV3YQ2XnIMzP7cGcYgCUd07SU.jpg HTTP/1.1\r\nHost: jiaoyisuo.thai2570.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6190\r\naccept-ranges: bytes\r\netag: \"60b047d43af3a9de82b91963c7a0929c\"\r\nlast-modified: Sat, 11 Apr 2026 21:53:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wL8f6mVBZdqtdlE2%2F6y5q%2B8302QvI1iLpXONKHRsmANlfCi0HlmAu7gtTai6vnVH5nfQa65nIvuz4gZExmRkTjYlBly7Uq0kJKZk8sSp9ZNlCdPk7RD9T5%2BcD4DaCyd%2FuAb%2Fual4A8fB\"}]}\r\ncf-ray: a1406b83697d8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6190,"size_decoded":6885,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 320x320, components 3","md5":"60b047d43af3a9de82b91963c7a0929c","sha1":"70d1b35655635245e204b0386dfdbc61fb7a2529","sha256":"6111258580e2097ee5c10331c2875d5eeeb09567dc87f87da7fce55ade9b57f5","sha512":"a91277e645a1167806da7a02e098195ff4182bb4e54f1a898967bc61ceb20affc6e98aef9472c3f4ccee26cfd82e2561b83372246356d98b27c063c46e361028","ssdeep":"96:ldPx51Hz+VUAYNvH1aXXnlKM0Eeddtlfpu2FIHnT6szY4OwbvAH29:3p+VUA8onl10EEd3pkTsKYW9","tlshash":"c3d17d582b588d04fe3c433cd16efd6286304c08667588daff6e61bd9f728a896f1044","first_seen":"2026-06-30T17:31:51.421688Z","last_seen":"2026-06-30T21:56:58.77962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiaoyisuo.thai2570.com/images/2026/04/10/zErvPek95FhioDD8CgUb7NbewSdPUTnWYURPirba.jpg","fqdn":"jiaoyisuo.thai2570.com","domain":"thai2570.com","tld":"com"},"ip":{"addr":"104.21.6.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.567Z","timestamp":1782856576567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b06f25be.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 00:01:56 GMT","end":"Fri, 04 Sep 2026 01:01:45 GMT"},"fingerprint":{"sha1":"34:86:6A:80:8D:1A:71:5F:5A:22:46:AC:DF:AA:6C:07:10:DA:A0:C9","sha256":"3F:06:3E:A3:8A:B2:AA:09:21:1B:B3:01:4A:9F:54:63:82:49:F6:7D:C0:04:67:F6:F2:54:66:2B:90:3B:43:40"}}},"request":{"raw":"GET /images/2026/04/10/zErvPek95FhioDD8CgUb7NbewSdPUTnWYURPirba.jpg HTTP/1.1\r\nHost: jiaoyisuo.thai2570.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 52883\r\naccept-ranges: bytes\r\netag: \"66fa7e19e8e8ad021137eb01d68f2c0a\"\r\nlast-modified: Fri, 10 Apr 2026 14:33:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jnavHv3bX5JrziC7me6cQPHIhydzQYXn5HVw7KJ2ni8uwsF3zYdctYLUQasiZ8NoqiaDhTr02XMUaVPWXF8hO16bvjz%2F3F0kPUb6ojfZUg6mWhOow35Lh3h8txIlvcndOGq1M%2BFkzkHd\"}]}\r\ncf-ray: a1406b8389dd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52883,"size_decoded":53573,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 650x364, components 3","md5":"66fa7e19e8e8ad021137eb01d68f2c0a","sha1":"7ccb941585326a58d98184b751bf9c27c3661228","sha256":"7110858d5088e612e26e08ddb0eadbf550cc7bf746db1dde03651a9238c0359c","sha512":"dbc196c14ec4c68cb855833f6e7d58b1843eac7d53681304b3d073e9f76ab4b0860fb09e923dbc8e91c2d9e61baee5750851dbe1762b7b7b4eb700b7343ee788","ssdeep":"1536:P43HR+9toEU04IV3BxZkpdYsblq87KONv:g3HRUGyxMYsbD759","tlshash":"0233f171b2574830f75ea530184e67f5774e11c6b07ba29c9cfa4326cdad62bf988b80","first_seen":"2026-06-30T17:31:51.416361Z","last_seen":"2026-06-30T21:56:58.780588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BJGbpCr5.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.153Z","timestamp":1782856577153,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BJGbpCr5.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2766\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-ace\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2766,"size_decoded":3027,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (502)","md5":"729862f64c6ff239dd1e9c91aea39db1","sha1":"f4b5e1106a716714cedcca96a87b637b3978e32c","sha256":"e66f3d6f64135026b1a6f3b98dfe403415f90af9840c80e6cb3358038baa0e65","sha512":"4572d68626233a55b7479edcdfcb221a36b57e158c6e848e7ed2c34243232346723f6c0115e777d4c7324a1b9c9db02d9b629a38633095218c1e7e13906e365f","ssdeep":"","tlshash":"795142c576643a753b538065819e0d45b325b03ad438ff2e3a9ea1fccfa5d836829633","first_seen":"2026-06-30T17:31:51.540904Z","last_seen":"2026-06-30T21:56:58.781403Z","times_seen":2,"resource_available":true,"data":null}},"time_used":490,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.CvutTefE.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.198Z","timestamp":1782856577198,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.CvutTefE.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 32446\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-7ebe\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":32446,"size_decoded":32709,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13279)","md5":"2348830a89f397655c020bfbaa1a296d","sha1":"bab537df74d679f18ff01ad1d8f42a177d7ec906","sha256":"ff0ccba3cfbdc910d2f5332b71e9e69b920545cc3b07bff84400676020c38e3f","sha512":"5a4d57be2658c03668b774b7386a42247a7c7b40ee1542553267e04e8d11d51f3288e03418c00e4772fe7e5efcdc7af58181340e7daef4f001fa988f50dcccf1","ssdeep":"768:TW1zlEdXq4+EpmB15q9lIhMaITdTrlM4jNHF40GbQu1jfSs0XJDSdkg:ezlElv4HhJ0VfjNHF9Gbv1DN6RQ","tlshash":"37e2ea8175d6b02e2763e1a8596f0900f23a8806a51ed97cfbecd2d35f749c884bb774","first_seen":"2026-06-30T17:31:51.360084Z","last_seen":"2026-06-30T21:56:58.782292Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1646,"timings":{"blocked":1430,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/homeTopIcon5.Cq0pko49.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.556Z","timestamp":1782856576556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/homeTopIcon5.Cq0pko49.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 17301\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-4395\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17301,"size_decoded":17551,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"42c4a10257ee6d641da463a5750fcc61","sha1":"50ac93c774c37c8995b223d571c071ec09009aaf","sha256":"877b03a6f510437a98ecf66a8273c3d431e8955b8f197c9d94c1f35c9595b93a","sha512":"2939ecddfedaf05f8814ba81c1aa509296a6f902e8823e756170ccb91502e69a0efd53d9e1bd8799c4d61bd2ed4b64f1f85f528fecfce5ef5937819bbaf9a8a3","ssdeep":"384:5FSBwgWrdfXq4AJoyC8IHpoxS9/7CW3xODZ2voH:nSBwgWrdPTSC8SCIsN2voH","tlshash":"2672d1de46f5014136e80232fa8e3489f1f5c96e53fb2d4233a6d6778746a096c0c78e","first_seen":"2026-06-30T17:31:51.454236Z","last_seen":"2026-06-30T21:56:58.783333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/parseSignature.BAKqOPwg.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.642Z","timestamp":1782856575642,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/parseSignature.BAKqOPwg.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 89826\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-15ee2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":89826,"size_decoded":90090,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"99509e5c5147b57d5dcb626ce67c8720","sha1":"3af71a630cf58cdc87a0174d904386106f8c1430","sha256":"c491fc2a6e7cd01eb55ee1486689e727b11d3305d948d01190914baadb67df98","sha512":"82e793a3140b7a382752afd7e9c0dd110563a48925a6ce419e81e0ccf8adb1d4e983ad574a7a9c01af404107219187624371a171d80a7bd3e3e75227b4a4ae11","ssdeep":"1536:loYiNKTHDpNMZZzAsrl4kGxLmuWKeK2B+3knEdIf:6YiikesrlSxL5neK2Bw5+","tlshash":"db93289572a5b0b587c179e520670101f138adc6b40d40e5f3acddab3efb888d9eae1d","first_seen":"2026-06-30T17:31:51.397399Z","last_seen":"2026-06-30T21:56:58.785316Z","times_seen":2,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":323,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/project-categories","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.573Z","timestamp":1782856576573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/project-categories HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=asn7O5Bsg7B9ANrTZOP6la99B0fsf0dQWeLG%2FWXs5k0m6SKu2HzEv2isIY0XoXGi7Z3jNyL6MynU8sU4JS335wEOt7ATqabDmVIodUwfqz5fZTuyME2aKqSWHbf3CkpvXjGs0dweZrg%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: ecab2159-5daa-4c61-9765-341457b216cc\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b839e20b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89,"size_decoded":859,"mime_type":"application/json","magic":"JSON text data","md5":"590f1dfeff19cdd36c3324db9d05366f","sha1":"babbc6459a7ace115a8f236bbfa1f63a6e45f4f5","sha256":"a2f6fdaec3d83b788b6c745dc9b763a67ac9d2ad9a766f06824ab006181a9a64","sha512":"54a34dff3aa24be42b418b8a1d23481829419303f4ae22984d6cbc61ea998aa1ffc0a90caddac037545f4effb47f4bca15478c746393602df31cca602b72e6da","ssdeep":"","tlshash":"48b012102c4929801f0340852007190853d470d245341c69c4cdc924cf88039b601810","first_seen":"2026-06-30T17:31:51.473965Z","last_seen":"2026-06-30T21:56:58.78869Z","times_seen":2,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BgiyL68S.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.179Z","timestamp":1782856577179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BgiyL68S.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3911\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-f47\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3911,"size_decoded":4172,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1079)","md5":"9affdc20c51b1cf40d2408faf7463200","sha1":"68f331db9185d3950abfffcf5bb9bdde698cedcd","sha256":"e1529c818cccae2f93074fc831e1a6faeca72406f956db33f7e54dccc19fad99","sha512":"935917d1b415613369b476be5240e4bb95cbeaa6f979d4d4bced89787e89ccda24af36ba4077fdc7629979fa11c9868165f180177038b39be9e30f2479c6f3cf","ssdeep":"","tlshash":"a3817899ba772868781f42b4fbdd5b245131700e0a27dd78f3cc12e5cf58a68ab4b231","first_seen":"2026-06-30T17:31:51.515722Z","last_seen":"2026-06-30T21:56:58.790913Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1110,"timings":{"blocked":894,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DZ1tqmwK.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.194Z","timestamp":1782856577194,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.DZ1tqmwK.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4831\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-12df\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4831,"size_decoded":5093,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"717304d6faf4a6c26c397c6189d86bff","sha1":"86fca1bb599e1f7d7622c3861cd38055db0916f7","sha256":"dfc2b28b8b05b2a188b22cb483df49a55277ec62d14d5c4ca1779b484013ba1f","sha512":"d7bb723c65b65c7e64b6231372dfa0154046f1811be0c82c232e13fa6c91fc39d14289aa1c681a291d61e1ff533e64f25f960bd251683708b805e4b31d62c31f","ssdeep":"96:v7E4UcA7NV6pqHSmHlYWBqHfdHm5bNqHhqFz76ss:v7nUVV6pMSmFzMf4Mhqp6ss","tlshash":"aaa1e798a1f3ef89ce534490c7a71d00d275402fa62cd864f7ed03e5cf69189d9db2a5","first_seen":"2026-06-30T17:31:51.418669Z","last_seen":"2026-06-30T21:56:58.79218Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1552,"timings":{"blocked":1336,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/app.DmfTu__A.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.937Z","timestamp":1782856572937,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/app.DmfTu__A.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 147645\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-240bd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":147645,"size_decoded":147910,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (58847)","md5":"004309e5dba62fe1bb762411cfa3d068","sha1":"4662c96efedd264958183d8c73000ecbb0c2a0ee","sha256":"ebd5c9c4ef1e8af6faf89b6c6ee021fb5de9e4ac4e525aa910feb35c937228f8","sha512":"a630164cc2bc5252f8082ca91597d88b93ac0d53ede7e2bbb2a1841364261d74fe902e34ac4dcb3bd42f47d80c9356faf3b8cfda1d1ab8608e1bb5683607602d","ssdeep":"3072:/hVtQ3g8JB1bt2eTzJO2JnhIzhkF9Y2z8rm1/76fwaj/2Oosi82jJk9c+0eQ:/hVtQ9IzSF+frm1/76fwaj/2Oosi8U8Y","tlshash":"23e35bd67341b47c16bb46e991af2600b0744f45e48dc0e0f668ecca26f546d6277fb8","first_seen":"2026-06-30T17:31:51.410192Z","last_seen":"2026-06-30T21:56:58.793297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1300,"timings":{"blocked":-1,"dns":0,"connect":216,"send":0,"wait":431,"receive":433,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/footer.D6Axs-c4.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.545Z","timestamp":1782856575545,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/footer.D6Axs-c4.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3814\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-ee6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3814,"size_decoded":4075,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3799)","md5":"d318a5758c3b069004dd72d02e0b9c60","sha1":"2f366afb005d557ebefe1082ee66c896eaaacdc3","sha256":"f15928c1398b7d039527f68a713581f2399a5cdfc2564db160365dd0e716cd93","sha512":"e68e0ada933a3301f6f6597dd362f57482c3ff42bf0aae3868f3603ee28e1e82c715017a41477888515a6694f2a53bf0a82d1eebd7c38fcefeb163fb1c828cf9","ssdeep":"","tlshash":"c971730efa51ca7da1731514a0485864e0697fe8d171bccaf3fc86242bc6c799a0ae39","first_seen":"2026-06-30T17:31:51.543368Z","last_seen":"2026-06-30T21:56:58.794551Z","times_seen":2,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":406,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=ETHUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.583Z","timestamp":1782856576583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=ETHUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzRafOnl0usBBwiQv%2FgdLKODyvI67TbQ11759n2UT9ZRpnIDGn%2Ft9dSAY%2FZa6MLetDHixn4yS2%2Fku3fsv%2BX%2F1F%2Bl9kh3wrePrriMWmW0mPU33huR9Z7Z9cHjaryRGVnxKjPFhQYQBmc%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: d33fd802-597b-459e-a1ad-403c3e7abfb5\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae28b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10048,"size_decoded":2748,"mime_type":"application/json","magic":"JSON text data","md5":"ed941c6927ea5b2f1719bc35b02df365","sha1":"129457218d2481824529362bb3edbee3ade22d93","sha256":"f0c1f941107a6a11722cb16cd10516c885ed98cc0c7a4bca23a0e1268e64b6f6","sha512":"684ab0530579c26c87f74ba46f994bd90c2bc17773734389974b94d87539a109f9f99ee2d4b3beddaaf8dc6a8464657b62884f46bd92e733a89c8e1f7d8fb113","ssdeep":"96:gSv6R1urK1AftqPFhho/5CvxZdSeoOheTT2EI5wCpdd55ym8Tx0/ZWzyQoiBiVSX:gz0UHwgkmwWQMvpdAcUd","tlshash":"97224a21e33bbc65956676d14293bfc5560db40f20c30899bb998fc00ce5933bb6e66b","first_seen":"2026-06-30T21:56:58.795594Z","last_seen":"2026-06-30T21:56:58.795594Z","times_seen":1,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/socials.-ESjOjBk.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.166Z","timestamp":1782856577166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/socials.-ESjOjBk.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18127\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-46cf\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18127,"size_decoded":18390,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2966)","md5":"d537a5349f6ad24c97a38bbd3d77f2ad","sha1":"cf12faf90c49a4062036f484cd6e3b6d6e1605b9","sha256":"aa5a7bbb8d881886491e80de4b3cb9bc6df0f46e1fce636d05dcb8ff7f32e379","sha512":"01f132b6c6f6253b1f3a9d7b762385001b361a34dbb4394296d6dcf8f35cd03ca8c5479611fee6c7a03226b8e9602ea4d0ff59f4726d2cb604e4eaeb563d7b93","ssdeep":"384:hdW7YLIri1XONUt6AQUCh3D3CUuF0wuQbLPyrHFNh1a+58:h07YLMi1XO86AQUy3DSd0IbLqrHFD1aN","tlshash":"9e82c555a7b06e1c5aa30158a8570e40c1389047933d89acbbed11f2cfe5b856db73fa","first_seen":"2026-06-30T17:31:51.393168Z","last_seen":"2026-06-30T21:56:58.797019Z","times_seen":2,"resource_available":true,"data":null}},"time_used":787,"timings":{"blocked":571,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.149Z","timestamp":1782856579149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Light.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42308\r\netag: \"5e30cfcb50ec25f79fffffaac2364f7d\"\r\nlast-modified: Wed, 13 Aug 2025 15:26:01 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a1406b951eb856ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42308,"size_decoded":42709,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42308, version 1.0","md5":"5e30cfcb50ec25f79fffffaac2364f7d","sha1":"76653a388d2ae80ba98b047a9fa20e02ec460eb0","sha256":"1a42c3e5b778748710613a6f6bd648758d2d8ee02f467d3432ebc36f82b54f84","sha512":"c8c6145cfbaec98627143b7a01df0ee5b215e35b0a3afd1594eff09432eef419b3367006d53ffeafdd19f6a25b4892d15461d055a64c213e3330c1f99e189fbb","ssdeep":"768:TDMkmH7mSCRTgwe651Yt9/+KBR6RGrowfrR0szvT83n0/JhHmR:HdmH7w/e65e9XmRGrRfrR0sbT8inmR","tlshash":"b713f2f61a673ecc22be9e1c16834dd9ad85737d4ad23f1074b8b0c2c27c68968da611","first_seen":"2025-09-26T22:05:13.131598Z","last_seen":"2026-07-13T15:13:49.731684Z","times_seen":537,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":72,"receive":1,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-setting","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.521Z","timestamp":1782856575521,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-setting HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EfZxHUc9J26g3ntA8uj8C1xPRqYx%2Beb72KpjQYSV59a2mkFgbkYE6wJW%2FmyCyu7rJ3XgeZKysIt1yyNY%2B6su4Q0GAd4HTotfFNvCFg6UlPkvM6LtffLUIfQ6WJKkr3YjIdtX6MectfA%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: 83b4ba11-7122-4516-a91c-75e82173fe1b\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b7d5d02b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":910,"mime_type":"application/json","magic":"JSON text data","md5":"6ec94e054382209c9fe8a1af75ebf468","sha1":"b4cdd604b84b7e20d37ca9f56d5e68a7ed94bb23","sha256":"77900cd836fba8272b4fcffb6b7a956a52b09d64a2943b4d51475d796904fd6b","sha512":"6632dc61e056d6ab4111fa219e469573152b2270a5537dd846f87fc713c22bfdcfff01decdec0845a9f6e5d385aaf28361a792464d822402fb49251a72cbf05e","ssdeep":"","tlshash":"22c0c0100ce4b0a41ad7d10c253a2c2216c8b4f119003c12c4f9403c8ec80350141c00","first_seen":"2026-06-30T17:31:51.531015Z","last_seen":"2026-06-30T21:56:58.798674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":-1,"dns":38,"connect":0,"send":0,"wait":445,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/css/index.Bm614xKu.css","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.549Z","timestamp":1782856575549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /css/index.Bm614xKu.css HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 1579\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-62b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1579,"size_decoded":1826,"mime_type":"text/css","magic":"ASCII text, with very long lines (1578)","md5":"c34d2e111d1194afd562803a69eebb46","sha1":"3d0fd805021112dbb7cdc66efa70a6dc9540eaa9","sha256":"0ae6822867713814bd0ed2f094a14d4fbdc09d190733cb6778c2bfd533c7ced0","sha512":"7d630591e6a2b2aaf852c0a8f77abb0d0452040e9e9c1b67372d30f29118f802f4d4df4c3aaa6b244f58e792d0a8413b8ad7ca31178efa358086e7fcdd489085","ssdeep":"","tlshash":"2931e3a4778441fcbe02a157f35b59c8bb2e58b7bd42c8eba45934e038837fc1913621","first_seen":"2026-06-30T17:31:51.423849Z","last_seen":"2026-06-30T21:56:58.799611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":632,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/homeTopIcon2.BV1yw_ee.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.550Z","timestamp":1782856576550,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/homeTopIcon2.BV1yw_ee.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 18045\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-467d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18045,"size_decoded":18295,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4907c8c08df94b2cba70e8e31dce965a","sha1":"9d3cbd8a666c842603b507bba58132c0cec36dd9","sha256":"1e7dedfe4b0dbdd509bb6215dcb74613df83f79023dc8f6cd44ea787f27ad609","sha512":"81f4141676b7daf5cdf7a2146e00f2afcaefcac049b9f4cceed103f2cc3f2c4ad28a1615e6ce7e89f7648aaf17c3e16f8257b0c5536c664a8460abdcd9c72373","ssdeep":"384:dE1etKUwORQrr4K+PrKdlezLQCDPWbGFA1R4JrDtzN:dEHoarr43ZQCD+bq2RIrDtx","tlshash":"3282c042b0b13d566b6e6b83ef21073a8a97fb4413a8440c566f16acf52f1b344563bf","first_seen":"2026-06-30T17:31:51.500385Z","last_seen":"2026-06-30T21:56:58.801054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=BTCUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.582Z","timestamp":1782856576582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=BTCUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GelXhySbWwB%2FraIQCISvkDd%2Fg1BlhT8boIq4Qjkthr89q%2FjgGcEiGmN8Uyde63czfFvVE9zgQiZMd%2BA7mmNLkAON%2BzJgyieGU8eI%2BCi4Q2FmhsqWTyekG38ffw1JLZgMS6gZ41USx%2Bc%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: 0c3ddee3-1b74-4f88-a820-1a045e24ea6c\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae27b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10130,"size_decoded":2849,"mime_type":"application/json","magic":"JSON text data","md5":"154c907a6de76576f350cd304354b8d2","sha1":"04f0f0ceffe160a2752843526e44c8b2727d2e30","sha256":"164901c51e5632f63880cb7653e91489ea1dd0ce84e452eb60e34cb7bcc3686d","sha512":"47722575e2588cc240435abd186e28f7b18e5957d651fca20b9c4a1fea895287c0018767e7345c8f6b351dce619f67a99554f2abafa753f7518ae527ab3013f0","ssdeep":"96:GeMTWKEkXhhrN2Pdfhont9jrCE997HiOsW7xUsiPawS/obygMnwOHTF4k2NjaPYZ:GfPHOEUsn/gI5DzKd","tlshash":"ac225e21e33bb925997675d14aa3bfd8550db84b10834c4dff9d8fc00ca4963bb1e26a","first_seen":"2026-06-30T21:56:58.80231Z","last_seen":"2026-06-30T21:56:58.80231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/img/top_bg.CsRyxjoM.gif","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.559Z","timestamp":1782856576559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/top_bg.CsRyxjoM.gif HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/gif\r\nContent-Length: 4586137\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-45fa99\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4586137,"size_decoded":4586391,"mime_type":"image/gif","magic":"GIF image data, version 89a, 642 x 362","md5":"9c881aa4b0017e99b63c7c447906cdc5","sha1":"eb21ac6acf017138ff4e34d7629fd45318e91a5a","sha256":"f89bb3dba0860108f01ebc5b1f63cdc49411e4c0830f1d3a2ee0af55b94e5ac7","sha512":"c2381486af7c377de6b6a3391c2d9ce458b63db7d64666dfc42f08b568c39efd553d179ac6711357458e4dcd20c12b8115e88123193991525307ce07534cd3ce","ssdeep":"24576:cxL4zLrZZmtIn5eEOChKcqdd2QJbW8YZfNHNKn1WueI:7zLNZmtIn5eE79GJbW8YLHNG1z","tlshash":"f22533b35a3b558d7b6124b083da41e0add2203ec655ae2eb9773f74c1241eafac314d","first_seen":"2025-08-11T01:08:48.762458Z","last_seen":"2026-06-30T21:56:58.80385Z","times_seen":27,"resource_available":false,"data":null}},"time_used":897,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":219,"receive":478,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-30","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"max-coinbse.com/img/top_bg.CsRyxjoM.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/option-contracts/list?filter%5Bstatus%5D=true\u0026page%5Bnumber%5D=1\u0026page%5Bsize%5D=100","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.577Z","timestamp":1782856576577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/option-contracts/list?filter%5Bstatus%5D=true\u0026page%5Bnumber%5D=1\u0026page%5Bsize%5D=100 HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYBRIsha10nFFwdoe97pmWGuKFBkV9zKJ9k2R70MNtm%2FWCyMy2We2ooCxIrILYcN75bkDJtnCs17NzO67VLucYy0DaP7sPvJTPhcq%2FlFpgLbWEaN%2Fuag1Lt6oxrxyXJbnAT8UqNUMb8%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: fc390f52-69ae-4c6b-aa2a-e05eb89c6965\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b839e24b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":1092,"mime_type":"application/json","magic":"JSON text data","md5":"575d200597313aeea29d2ddb2c8485be","sha1":"d2336e976b76566b67de24366d0e3e3c9b2965f8","sha256":"b46e3977f0bc8f8ebb27f4b2332a7bf5b11f67a5af52d1b3a18881b0178c0392","sha512":"57bfdc13ccc4e0f6ce7b3d8594495cf79d9692dafdf4e5fbe1506d76eec9ab5ba6b7ae942169306dd27fd8ddacddd51555b4e650892f0f35600690e16edfbc6b","ssdeep":"","tlshash":"e01127643bba2ee096f321c1c94afa707add7d4a944fcd82bfec4e1c1465197891e903","first_seen":"2026-06-30T17:31:51.553342Z","last_seen":"2026-06-30T21:56:58.804556Z","times_seen":2,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=AVAXUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.590Z","timestamp":1782856576590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=AVAXUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxFD3AW0njyz2A1MZUlRFCwrTjPyLK%2BLl9oUzgi9R1t345eNCuAbe65nS4D%2Fb%2FuDrgTx4qwZFS48CNaccMB3R58HPhI7ULMrEg6%2Fh%2Bz5nNGghA%2BZMKGNw5Lynq%2FRltV7Zjv1t8phEuk%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: ad37430c-2f65-48c1-ab68-1893de534051\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83be2db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9757,"size_decoded":2569,"mime_type":"application/json","magic":"JSON text data","md5":"ce0a6b98db847594babb73d5571973ec","sha1":"b0db25d428e55c9f202e8fa57680884e88a9d81a","sha256":"556b6fc6ad92aae873a018ba013ed14fdde0f0ef1618cf7bee40c87706fc2167","sha512":"bc0796835b0cc0b9c54c96d5efcfd5219152601b7140be8ace0f90c316190563a6d33f4bbb319ee1de8931489413f36dca88c6378289977303a5ca2aad9fed09","ssdeep":"96:ZyKCTftElZ/FEvUMa/h8tYMRXjtvtE/abm2IuYPGNU15PSWfKTGIEjWndYgaTFxx:ZMREeJhxmKqKBNgI1QLd","tlshash":"d8128b26a33bec1655667ec146a3bfd5110db45b20838f4a7fc98bc008a28377f5e25b","first_seen":"2026-06-30T21:56:58.805773Z","last_seen":"2026-06-30T21:56:58.805773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":618,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/if-defined.BZzW6Kl7.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.138Z","timestamp":1782856577138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/if-defined.BZzW6Kl7.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 72\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-48\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":72,"size_decoded":330,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"ab9e5d9a8d77d7fe7dc466a659a7ede8","sha1":"15bdc581f8a2dc2850e5aa34d2a5aacbfc636f42","sha256":"dd02c7fc30ed1c91a44a94bbfe067dc96980fb22ff7e0852be36ca5f7113857f","sha512":"f44d46ba6d7d99c2b761f5825ab9cde9d198491cd2e69cc9085e0ea1073018ba0674237a9c935a3b70fe3fda700c304e508c91c0b107263148d8ffcd9274e100","ssdeep":"","tlshash":"77a0220300e03af000cf08c802a0cc800a30083a2302c28800023a3002200ca820ce2b","first_seen":"2026-06-30T17:31:51.470439Z","last_seen":"2026-06-30T21:56:58.807819Z","times_seen":2,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Dh9NT5w7.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.207Z","timestamp":1782856577207,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.Dh9NT5w7.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3856\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-f10\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3856,"size_decoded":4117,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1682)","md5":"9789d94102794b1d673b0939d42696dd","sha1":"3f9912600cf54f225a2f25678f7e99df78e88c00","sha256":"64aad59748e801cc2537ae215b82def776d6fbea6232cdde3e2164cd2ff0d334","sha512":"68cfd856fed04cf20ae312483cc942870e2f2eb92da8b15e6dd79806473a4632e48b93b582f96a6b7076be9464cf488bbdd3c3263430838cfc5cf0fe9244de02","ssdeep":"","tlshash":"0781d913927b51786991d2f14fee11883220643b5628c47d7ed962f18f873bc7838bb2","first_seen":"2026-06-30T17:31:51.461091Z","last_seen":"2026-06-30T21:56:58.809323Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1789,"timings":{"blocked":1568,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.web3modal.org/getAnalyticsConfig?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.167Z","timestamp":1782856579167,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /getAnalyticsConfig?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=1800, s-maxage=900\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1406b93d8b832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55,"size_decoded":403,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d624ae72d5da08a9698cf19ed1004a52","sha1":"d2da4fc91b5567dfa523c551f8b8501b43d0384a","sha256":"68df83e68b02e91713d9e5b52a22c297d98ec2d5acda0c37cb47162547cf35db","sha512":"90aa31b4915827753f86420e7b64e4f7685df1bf06908974128eb66b8699e549781120077589005dc68e9fd726c8904fb322695755e997ba1dd28a0b90e77d58","ssdeep":"","tlshash":"9a90020520487596c052c631c21157075d258e732d1460345025090990bb4750841823","first_seen":"2024-07-15T21:15:20Z","last_seen":"2026-07-13T12:25:08.252636Z","times_seen":590,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiaoyisuo.thai2570.com/images/2026/04/10/mSAjXq3bJtR0UiqElT3F6eNPoscPZKuhOt64hPK6.jpg","fqdn":"jiaoyisuo.thai2570.com","domain":"thai2570.com","tld":"com"},"ip":{"addr":"104.21.6.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.407Z","timestamp":1782856576407,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b06f25be.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 00:01:56 GMT","end":"Fri, 04 Sep 2026 01:01:45 GMT"},"fingerprint":{"sha1":"34:86:6A:80:8D:1A:71:5F:5A:22:46:AC:DF:AA:6C:07:10:DA:A0:C9","sha256":"3F:06:3E:A3:8A:B2:AA:09:21:1B:B3:01:4A:9F:54:63:82:49:F6:7D:C0:04:67:F6:F2:54:66:2B:90:3B:43:40"}}},"request":{"raw":"GET /images/2026/04/10/mSAjXq3bJtR0UiqElT3F6eNPoscPZKuhOt64hPK6.jpg HTTP/1.1\r\nHost: jiaoyisuo.thai2570.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6190\r\naccept-ranges: bytes\r\netag: \"60b047d43af3a9de82b91963c7a0929c\"\r\nlast-modified: Fri, 10 Apr 2026 14:32:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mrFZOd%2BWZlnpk6s%2FwNwAK%2FwQPIgtf7IgO9jpZ2YhE4ApQMIe3i6efxqKfzSEN%2Fy0FB3teSyasXOR6AwvML1qk9LDG0dMrOR2Ohu%2B2t5cAWqGbzJ0OYN8BMDx9SdJ1%2FK%2FZMLyEjfNAtBf\"}]}\r\ncf-ray: a1406b82efcd8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6190,"size_decoded":6889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 320x320, components 3","md5":"60b047d43af3a9de82b91963c7a0929c","sha1":"70d1b35655635245e204b0386dfdbc61fb7a2529","sha256":"6111258580e2097ee5c10331c2875d5eeeb09567dc87f87da7fce55ade9b57f5","sha512":"a91277e645a1167806da7a02e098195ff4182bb4e54f1a898967bc61ceb20affc6e98aef9472c3f4ccee26cfd82e2561b83372246356d98b27c063c46e361028","ssdeep":"96:ldPx51Hz+VUAYNvH1aXXnlKM0Eeddtlfpu2FIHnT6szY4OwbvAH29:3p+VUA8onl10EEd3pkTsKYW9","tlshash":"c3d17d582b588d04fe3c433cd16efd6286304c08667588daff6e61bd9f728a896f1044","first_seen":"2026-06-30T17:31:51.421688Z","last_seen":"2026-06-30T21:56:58.77962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":54,"dns":57,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DKgkK9MN.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.168Z","timestamp":1782856577168,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.DKgkK9MN.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 6479\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-194f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6479,"size_decoded":6741,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (696)","md5":"2b9e3abc7c0dac514b2728fcbf353b03","sha1":"76148dcc013cc819189e7e948704b930c5fcd5c1","sha256":"97c788821d4dfdb148f8ac865621598af8e97ad3d4e662b9303c96df86655892","sha512":"5aa3d8f63125c02e5d8a8afdee7bdf20e32298b77dcdb6a411a5fb853caa28d0f6fba7b32b2116f761ba7a72778f87eb7b95c95466ae0feb1ef78afaf1af2243","ssdeep":"96:vChfbMTdcJa3nmKwhVqIsDYdomgmCzly/JVqIsHbX+77z8U:axb+mKaV6DQgXZyRV67X+77R","tlshash":"ecd1a6bf3d662445aa32c1605f828c15e231901767188c797bfd25b8cf8edcd7aaf264","first_seen":"2026-06-30T17:31:51.426019Z","last_seen":"2026-06-30T21:56:58.81161Z","times_seen":2,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":575,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/registerSW.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.941Z","timestamp":1782856572941,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /registerSW.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:14 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 134\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-86\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":134,"size_decoded":393,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"1872c500de691dce40960bb85481de07","sha1":"b83dfcba8d2c57ca8837324bf395f34748033a50","sha256":"9742073ef7fc795e7673d98f272992843298426a0ffd8cb3507784df5143608b","sha512":"bf592ecb654fd8c3dba5db1816c3e454d72e3ef9cf078ca71314b68782e8f564b585ef21d7ca0b4a69540d2843ec713058d86cf40419b6b099f58df5f6f82041","ssdeep":"","tlshash":"2cc02b4fca4dc93e0830e0324c0b7b03331f0385c080049007f2030850c3414d1ae481","first_seen":"2023-03-11T15:21:23Z","last_seen":"2026-07-13T15:24:22.899687Z","times_seen":14159,"resource_available":true,"data":null}},"time_used":1506,"timings":{"blocked":1289,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/css/ZxSvg.bIzX555s.css","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.535Z","timestamp":1782856575535,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /css/ZxSvg.bIzX555s.css HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: text/css\r\nContent-Length: 307\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-133\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":307,"size_decoded":553,"mime_type":"text/css","magic":"ASCII text, with very long lines (306)","md5":"b0af201df43639712facaeb09f7ea4c6","sha1":"4e543fec4326256dcc587fb9bec9934bf16d1b9d","sha256":"0c6c2cb10083d56ad57a49fa476babf3a6e8e5d3c5f7de57e82b88241816645d","sha512":"f335d1b95665330f11e4c22a0a5c949e9ad103baabe808eca66ab26800bc9e46477673c482649bd176c399c63b4f0e13b2b00012b6145ec2fbc68a6032f0ede1","ssdeep":"","tlshash":"7be0262bb2a44232843b8a0007c9c2bc17339322a7870775a5055630172f19e3d50822","first_seen":"2026-06-30T17:31:51.334071Z","last_seen":"2026-06-30T21:56:58.81404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/css/footer.DWKKuufm.css","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.546Z","timestamp":1782856575546,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /css/footer.DWKKuufm.css HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 2784\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-ae0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2784,"size_decoded":3031,"mime_type":"text/css","magic":"ASCII text, with very long lines (2783)","md5":"7705f16775c61b0fd23014705363d58b","sha1":"df5715598dc3350cc319ef8af2ad0cca2f8c4b48","sha256":"7e9076ffff52a5c3155a1192ed3fe95e8f1a23e1df269899bda29e987019d0d9","sha512":"3ab39fe9fdcd4f9dea56eeb26feb2be55aa064937415133094c1d8335cd9ad6b1eda94326176863be26a34c612325108aa4ebf753ce4715e317b75fb65436b42","ssdeep":"","tlshash":"96512b39356d26064036e113b8ae624c70fcfe25816b21fabe3df12dfd4728679525ca","first_seen":"2026-06-30T17:31:51.468219Z","last_seen":"2026-06-30T21:56:58.81544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":425,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.628Z","timestamp":1782856576628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /appkit/v1/config?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1406b840e7b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":502,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c3a4908ed2367c1c7aa4becb3405028","sha1":"38ae3e154b0c6327abe105b076013b1bbdfd6cc6","sha256":"b8dbbceec8a5443a9a13f936934d90172636d6481952765b2b803dbb876c208b","sha512":"2a169854233efc51af48e78395a576108b5b1dcd5a2cf741800bce6f2d55ac8f5acc922b1d3c6db9b188930bf103eebbcaa85e62f4d71071edc822275202b832","ssdeep":"","tlshash":"71f05427598c39dac546cd73d64397430fae4bb7ea05ed2cd81c9a0913deab11120d3b","first_seen":"2026-05-23T13:27:26.606318Z","last_seen":"2026-07-13T15:13:49.726368Z","times_seen":810,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":116,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.B-nnjuEX.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.136Z","timestamp":1782856577136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.B-nnjuEX.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3097\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-c19\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3097,"size_decoded":3358,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1035)","md5":"33f45c3b3fc273fc9442cc36c721a98f","sha1":"34b5106765604524c72093ca6f8a765d905569d2","sha256":"72ff42537b2bac1e53589c634a0e2254ec112ed28ac77247bde193164d0175fb","sha512":"764d88ca6fc0852a6e5839945747cb79a5cd1640b2e368af8e26e5a76686a7a573c5d46efa880ccf968616dba2e0da9a076e78cf247d3ac5def8b8594fe21148","ssdeep":"","tlshash":"d35174c6672b60b86113d0d01f5a8a005223f12b5421ee6d7ddff1f6cf9a7492969332","first_seen":"2026-06-30T17:31:51.49167Z","last_seen":"2026-06-30T21:56:58.817634Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/NavigationUtil.DmfK5sOV.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.160Z","timestamp":1782856577160,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/NavigationUtil.DmfK5sOV.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 69\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-45\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":69,"size_decoded":327,"mime_type":"application/javascript","magic":"ASCII text","md5":"c9cd9d2c20279fdf761246957d3a505f","sha1":"d1f44d5203bf40f0a65b70c0765975ba2e07dabe","sha256":"bea381487371ba0896cc5f68f17ad809c2fca077805f8398045379b9a5700e02","sha512":"1c2a27c871a6c5459103f9db386625d1320dd1d1186ea181b27e4e3c75b93f7a0cea764e65ff60b8c139f5f64a97c8b1137d2a8c23c0751c5abdf9f4cf7c1b63","ssdeep":"","tlshash":"b5a022a30a200a33c303088ca30002bc3808a008fb2002a0830c3a8002220f2280ea03","first_seen":"2025-10-13T05:05:56.969222Z","last_seen":"2026-07-12T13:53:06.510959Z","times_seen":82,"resource_available":true,"data":null}},"time_used":603,"timings":{"blocked":379,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Dqns-ki2.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.174Z","timestamp":1782856577174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.Dqns-ki2.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1542\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-606\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1542,"size_decoded":1803,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (830)","md5":"f7f0c77d62b1417b297848305351dd0b","sha1":"ade935052bcc9586453e1cb0bfcd61ab5bbf9d01","sha256":"305b40c3d2aaf16eca2d6892af5dcc532d9fb69173f602ecca156d4926d18f3e","sha512":"b9ec10ca89b4cacdc684ed986bdb6686548450a5e424cb639128a56f297a9b77452bd3ce73b81499cff9fc62b1c0990c8f678e9129dce7f736692a677d85ee00","ssdeep":"","tlshash":"5431d789a37a3878306bd0f102688d402238741502268f7d77bcf1f54f59a8ab53b323","first_seen":"2026-06-30T17:31:51.542104Z","last_seen":"2026-06-30T21:56:58.819655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1003,"timings":{"blocked":787,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/receive.DWDsov7E.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.189Z","timestamp":1782856577189,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/receive.DWDsov7E.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 6705\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1a31\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6705,"size_decoded":6967,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (951)","md5":"593b817221c33b120287809a5ea18823","sha1":"52ba12e67286e945268c7beae60fc17d97a37c42","sha256":"93947d9949d3efc8ba129f331b748d18cb3a9bde292663c18458f030e0f8f02d","sha512":"74dc61782325ea4339cf14167d6d3fc0dc8a04b79cb26dc4a03be8e330009be697afdb407f6f121f4f6c67ea5015e4f7aba8d773c4bb49c9e6d843b9efbd3a8b","ssdeep":"96:7QX9EpFH9KKjVYqrCgJkPX6n/BqrCkYvax3DvX4SsqmpqNy7xEivyHFOwirvX:7nFH9KKjVY2cmJ21YvaxzPHmpqLTAX","tlshash":"1cd1c94659f6389cbd12d0a85e869a00c131404ba139cafdfbec83e58fd558695ef322","first_seen":"2026-06-30T17:31:51.374679Z","last_seen":"2026-06-30T21:56:58.820897Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1434,"timings":{"blocked":1218,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.FdC_BL4c.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.540Z","timestamp":1782856575540,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.FdC_BL4c.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1567\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-61f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1567,"size_decoded":1828,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1566)","md5":"3a7c4ab9c8a5d104b6a356645b2ec19f","sha1":"bca9c4bce9d137c374d03ff855a787906d47c9f6","sha256":"fe760a5ec706971a6aefd029fe1ffa8ef115648aaa22d6a0e998576bbb1af764","sha512":"43e3c41317de38d67001eb85d5f8386601260538fcc0e48422d998b51f0f797d2802f6fd5449c7b07f3c1d05517d581bf3c67e45b248fcc03136df1112d41843","ssdeep":"","tlshash":"16314a1599d4c37cd51f8cf8d1079244181a5eb56742d6c4ddb61c242f541f87558b28","first_seen":"2026-06-30T17:31:51.462728Z","last_seen":"2026-06-30T21:56:58.822791Z","times_seen":2,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"jiaoyisuo.thai2570.com/images/2026/04/10/mSAjXq3bJtR0UiqElT3F6eNPoscPZKuhOt64hPK6.jpg","fqdn":"jiaoyisuo.thai2570.com","domain":"thai2570.com","tld":"com"},"ip":{"addr":"104.21.6.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.406Z","timestamp":1782856576406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b06f25be.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 00:01:56 GMT","end":"Fri, 04 Sep 2026 01:01:45 GMT"},"fingerprint":{"sha1":"34:86:6A:80:8D:1A:71:5F:5A:22:46:AC:DF:AA:6C:07:10:DA:A0:C9","sha256":"3F:06:3E:A3:8A:B2:AA:09:21:1B:B3:01:4A:9F:54:63:82:49:F6:7D:C0:04:67:F6:F2:54:66:2B:90:3B:43:40"}}},"request":{"raw":"GET /images/2026/04/10/mSAjXq3bJtR0UiqElT3F6eNPoscPZKuhOt64hPK6.jpg HTTP/1.1\r\nHost: jiaoyisuo.thai2570.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6190\r\naccept-ranges: bytes\r\netag: \"60b047d43af3a9de82b91963c7a0929c\"\r\nlast-modified: Fri, 10 Apr 2026 14:32:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 933\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y64Y%2B3tBv4v83vBR5BshSuKyPJNTAZ2ICW%2Bxv1Xz5dhIJCU1oX35VChRFpzmXcEM7RDaxJxq9o3WW9VMGpFzvXTzoJMhtmmcjfklJxm%2BltJnjew84L5ua%2FEGrc3l3fm23awp%2BDRYYR%2FM\"}]}\r\ncf-ray: a1406b82cf658be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6190,"size_decoded":6897,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 320x320, components 3","md5":"60b047d43af3a9de82b91963c7a0929c","sha1":"70d1b35655635245e204b0386dfdbc61fb7a2529","sha256":"6111258580e2097ee5c10331c2875d5eeeb09567dc87f87da7fce55ade9b57f5","sha512":"a91277e645a1167806da7a02e098195ff4182bb4e54f1a898967bc61ceb20affc6e98aef9472c3f4ccee26cfd82e2561b83372246356d98b27c063c46e361028","ssdeep":"96:ldPx51Hz+VUAYNvH1aXXnlKM0Eeddtlfpu2FIHnT6szY4OwbvAH29:3p+VUA8onl10EEd3pkTsKYW9","tlshash":"c3d17d582b588d04fe3c433cd16efd6286304c08667588daff6e61bd9f728a896f1044","first_seen":"2026-06-30T17:31:51.421688Z","last_seen":"2026-06-30T21:56:58.77962Z","times_seen":2,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":28,"connect":14,"send":0,"wait":292,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=UNIUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.591Z","timestamp":1782856576591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=UNIUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMOrmxyvpce%2FaZA24MCKMBM9NufTNfjH7872AWqAz8AHnayOS0ZnoOOy883LD7IIoXtKdKLYQfmKFYAxgWM57uzjuYA4lCuzbH5NsBJcB2yDBJ6Bh5RYVk82A4cGrCGjGVhil7td2Jk%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: 2a79f0e4-1dbf-4ba1-8a77-396ecb24f7b9\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83be2eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9733,"size_decoded":2573,"mime_type":"application/json","magic":"JSON text data","md5":"44a27b567bc0e441b17f6aa1fea2e4af","sha1":"6eed6404a30077ec66bb4143cbb8daacbfb5de7a","sha256":"d6a8d103ed57abbee9113b4d94f636b677b2166321f569b6b38f332cce872f21","sha512":"d665b15a1127a54dd2eff9f8287dfb9d6b10828ea679b9bcf09c9aae5ff8a5f8bdbe567783d6534dc7248eabfae4fe98ff29700c0b59d23f522e15ae9dba4feb","ssdeep":"96:FlGNrHtzOLO0AJKCGPqcxW6FuKwF769M83MwBjt0huXoJ8QgX9xBK6MtOlNanpcM:qjajxbqu8tl0PbP3Hsckd","tlshash":"d8128d51e33bbe5995656ec141a3bfd9290db84b10c34f4a7f888fd00ca0a737a1d26b","first_seen":"2026-06-30T21:56:58.824437Z","last_seen":"2026-06-30T21:56:58.824437Z","times_seen":1,"resource_available":false,"data":null}},"time_used":693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=XRPUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.594Z","timestamp":1782856576594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=XRPUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PCV7MrMS4fF598aNPJhLCrPOG7l1GBtpy%2Bq85ZflFlqjWfEht2EywpgpOz1Deh9x5%2F%2FOFt6HtXx5fGPw305eT%2FD4WyJ4Ip6bhPDHwoR9IO0gD24NqBCT7yefPDz2hKB5QWEN8X9OIl0%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: e043d419-57e0-46f0-bd3f-f3b19d6dd64e\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83be31b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9898,"size_decoded":2587,"mime_type":"application/json","magic":"JSON text data","md5":"63c0ca8071f72487e0d8484ee73e78b6","sha1":"441af79119a3b5911b8cc651a58b2b89fdb5077b","sha256":"de9f03c18e0e2d9dd89576e3c14b03b8cf6cc030f5e044678005929f48024bc2","sha512":"e62fee8e4f04e39331018b736af5f8ccc9131c7aa334c2a8af3b19309843706c738cb81d601d129b8be6d0bab9adfcd707915b4d25e444127c422b7e723304b0","ssdeep":"96:U52UkCVk/xbhRufLoLzQxNqP39p2S4S90eXhKl6IqLpA5rtxJS/A0UrFLRd:KmnyAe51Bhdd","tlshash":"36124921b33fa91699677ec14693bedc514db84b10835b497f9d8fc40ce4833ba1e26a","first_seen":"2026-06-30T21:56:58.82654Z","last_seen":"2026-06-30T21:56:58.82654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BqC2g3av.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.176Z","timestamp":1782856577176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BqC2g3av.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1869\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-74d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1869,"size_decoded":2130,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (656)","md5":"e9ff8bc26e9a11857e8fc9d57410ebe6","sha1":"d5971e6adf4304ccc079f184321e3facfd0d9bef","sha256":"c4c3c0a634d77d74ecf76cd0cfbedba3ea682df5ade821377953105103096e72","sha512":"fe344ec10d53efac6d155a725d0b621b873c55ee02961a9efd56ca1d3bc84c06d202a2510d244b3bff26ee75a810f5651b05467c5b26a4d3128e25d51b2823b8","ssdeep":"","tlshash":"bf31930456286cf841c4a2e2e8924a005031056c620f88947bbce2f19bda6cedfef37b","first_seen":"2026-06-30T17:31:51.482122Z","last_seen":"2026-06-30T21:56:58.831202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1031,"timings":{"blocked":810,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DcnLUjMo.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.185Z","timestamp":1782856577185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.DcnLUjMo.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4066\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-fe2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4066,"size_decoded":4327,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1001)","md5":"97d45c181fad2440de13b45113d5738a","sha1":"c6a360d14ee7c913c7172695086a6611173e56b2","sha256":"5e6c57b1b402fc3bde8aac7ac50320330c7f3cfbfeb983fb14974be10e244745","sha512":"1260762db5df0b5b7a609186dc94258de71ce9012bd617d4bd4246241cc016c76cbfafae5d18bf0ee5b1187bf3fb785c3732163d4f1ca9cddb51afdbbe11b55b","ssdeep":"","tlshash":"5e81c5827330d561165a8ab467fb0906773a20374521c8ec7b8c9ae45fbfd859b30b34","first_seen":"2026-06-30T17:31:51.533422Z","last_seen":"2026-06-30T21:56:58.832943Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1325,"timings":{"blocked":1109,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.519Z","timestamp":1782856575519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bzutm0tY5ZaZ6gUuc6kD9pSJ738wH%2BHtk732HSPhbX%2FDcVIiLegoiEvEPe6Kn60VRd%2BzTUGDROn6wLQp98caFPfEwhWLmyUDRaMGmibxNVEkrNvV2sbaTxR2xFtvtNJxgjBt13%2FLQcg%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: c571e319-f93d-419f-b02b-b279d3248326\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b7d5cffb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23063,"size_decoded":4041,"mime_type":"application/json","magic":"JSON text data","md5":"ff06176bc93476178b0f3869d42a611c","sha1":"b2d5eb06b255b6498f4f9db38b2cfb0eb52174b0","sha256":"136ee7d6e41b82acbc528f1ca73d34c4214191da3132513d0765bd659a8fcdba","sha512":"9c808cc91da8802b50f77c2a51e4a69e391a5bbd60ae0e24df93d2d8adda123d05546ec6c82a28279960c85bf4df1ee56ecf68d5c41a55378702242855b44bb7","ssdeep":"192:zLZ4ZIZxZcSZKZ5ZNZHDZdZv5ZbZ4Z0ZeZgZ1ZGZysZVZDZ+Z+oZ71ZOnZeZkwZf:z87eyhmaOw","tlshash":"cca23c961778e830d58868835057bbd470dc765b68cb8db4ffedce9c80f02661a0fa66","first_seen":"2026-06-30T21:56:58.83448Z","last_seen":"2026-06-30T21:56:58.83448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":701,"timings":{"blocked":-1,"dns":39,"connect":0,"send":0,"wait":480,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/scroll.CvCbITXT.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.543Z","timestamp":1782856575543,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/scroll.CvCbITXT.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 297\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-129\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":297,"size_decoded":557,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"9479bb482f7e03b739374eb002a79d37","sha1":"c1b1614ca71f235201a7ac5e3c4eeb069c57d221","sha256":"9ebe7fdfbab41a01930794e11780ccd681dc62bdf6bde3fcad5a49c4e6ce37d8","sha512":"0ca8db4e1137e3c206df54e86b1c3cfd36c69606ed0b50c1009f0069808f072e2fee51b36ca19d781eaae6d8c0d1271eff62b6f2d20961af521c87557561e8f2","ssdeep":"","tlshash":"8ae08c0974d3326082ff6468e17bac9d623f8289b6f14cc8f1182fd49e136a9500bca8","first_seen":"2026-06-30T17:31:51.347394Z","last_seen":"2026-06-30T21:56:58.837449Z","times_seen":2,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/hashTypedData.TcUZwAvS.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.645Z","timestamp":1782856575645,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/hashTypedData.TcUZwAvS.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4150\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1036\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4150,"size_decoded":4412,"mime_type":"application/javascript","magic":"data","md5":"47a5f3848eb572ab04a212f230d86345","sha1":"5a9b64cf4b8bbe3a9f61eb30c95be64e1e873e25","sha256":"eadbddf6f11db15c4b684e99caabb527711ed95b7b089424711658a0468298de","sha512":"4775bcf22b7848e9ff988fe5e3fb8845d11dc79b7d2c86ad06a367f148e7608ab628a0481a1852a37dc39736bf87fed10da8b4f0132d2e1f1b6ef24f55df1563","ssdeep":"96:nobm3nh2/oyzL9ydost6nSwVP92GS3Pg5n2Jn2hn2fi20iNsXlXNVxr4/3VkD:nobm3nhcV39ydost6nxfS3Pg5n2Jn2hR","tlshash":"0381008d7011f6b81ec919e9e0da6202e2a8ec25f47588e3f1f860f335f286c907971c","first_seen":"2026-06-30T17:31:51.36257Z","last_seen":"2026-06-30T21:56:58.839581Z","times_seen":2,"resource_available":true,"data":null}},"time_used":545,"timings":{"blocked":325,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/loan.BzJGykXJ.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.564Z","timestamp":1782856576564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/loan.BzJGykXJ.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 15035\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-3abb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15035,"size_decoded":15285,"mime_type":"image/png","magic":"PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced","md5":"2fe61872caf4ab07d55f3b7ba99d4ed2","sha1":"76dc486eeb34cc0ff86b7d32487996a468ece4c1","sha256":"ac8ff6de356c74d67b14139ed7a44818217c3911cb1d120f5c31c94b62e3a4c5","sha512":"8a64bfc480c38713b45c1b978f67283393919b3271683d8357a82911298e46419d5288ef5ce545711b460d44a775b55511f13712bbd5318db17fa3bc9e8c2601","ssdeep":"384:7bf8tRf1cezarPnIsZSAr7SNVxSGT0obvceOHn7m8c:7ItJWeGPnI5bxn0oOHn7E","tlshash":"3f62cf83af28d2acd6ea4d7e5cbc97729881089e16614fc3fdd9a34a8401dcd1854e32","first_seen":"2026-06-30T17:31:51.53858Z","last_seen":"2026-06-30T21:56:58.840799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":339,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.B4lblbJ0.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.171Z","timestamp":1782856577171,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.B4lblbJ0.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1378\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-562\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1378,"size_decoded":1639,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (518)","md5":"c608e14754e6c80ea3cee22ceac831bd","sha1":"53fc53da269e00df17e0df397ac2dfa554e2b582","sha256":"0f6cb56ac5e504029b47de511ff96b15b37c3f69c0ac9ac26775e034bb585bf3","sha512":"86864203cae9635407fbc4605beabed5e54ed010a532b869d26720c2d11db2ea89bb2ae6e78908f469ff267eb09e624a1afeed94f7d71c89d99f318031dde582","ssdeep":"","tlshash":"4521754a2b26d5f0896180a58f29340132326017633fd5493ade66bcdf0d1ca96a97ba","first_seen":"2026-06-30T17:31:51.471315Z","last_seen":"2026-06-30T21:56:58.84188Z","times_seen":2,"resource_available":true,"data":null}},"time_used":894,"timings":{"blocked":679,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/amp","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:21.681Z","timestamp":1782856581681,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 03:56:51 GMT","end":"Sat, 15 Aug 2026 04:56:49 GMT"},"fingerprint":{"sha1":"8B:9E:B5:5F:87:EB:1B:7D:0C:57:42:9F:46:3F:31:3C:74:5D:BD:DF","sha256":"9B:AC:83:89:C1:84:1D:3C:9B:E7:80:80:B0:23:CB:AA:F3:F2:3F:A9:6A:58:76:B1:06:05:A6:7F:5A:B6:50:C2"}}},"request":{"raw":"POST /amp HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 7490\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:21 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 7\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 3128745608040421511\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zogX5ZAZyShXnnXG2RCRB9DitQHaDmUO4I%2BCjZRsyHd%2FwO67e%2FugVJcnLyKFTyCdLGZOo19pcWESTaH0cHM7kFGZaOADbk6Kr2jY2giiB7Liw2ullCLMIt4GWock%2BIboClyvpblTHw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=40aafb6e-b7e7-4e86-a6f2-e2883b9175ea; Path=/; Domain=coinbase.com; Expires=Mon, 30 Jun 2036 21:56:21 GMT; HttpOnly; Secure\n__cf_bm=KGC5bL9TiljevLemUMeC.WIyiJbfxhY1bXZntuOSEKM-1782856581.6981525-1.0.1.1-aKgoeM65gUh5dBfr3AYM2KfX1SbDNrQjkwXNe6frA1V9GMToCZKL1gzHpy_rWYcJKnQR7HHnnbQRZrU8taEAxjLiXWplIcwqySCmyvschLy46iCRCxn8nVwRyLxEiqd8; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 30 Jun 2026 22:26:21 GMT\r\ncf-ray: a1406ba39cce56c3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7,"size_decoded":1171,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"260ca9dd8a4577fc00b7bd5810298076","sha1":"53a5687cb26dc41f2ab4033e97e13adefd3740d6","sha256":"aee408847d35e44e99430f0979c3357b85fe8dbb4535a494301198adbee85f27","sha512":"51e85deb51c2b909a21ec5b8e83b1cb28da258b1be227620105a345a2bd4c6aea549cd5429670f2df33324667b9f623a420b3a0bdbbd03ad48602211e75478a7","ssdeep":"","tlshash":"c0400003000000c000000000000000003000000000000000c00000000f0000000c3000","first_seen":"2023-04-05T04:46:42Z","last_seen":"2026-07-13T15:04:53.501696Z","times_seen":35566,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":4,"send":0,"wait":129,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:23.699Z","timestamp":1782856583699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OUY2AoPWykip7114Jvk7UhS6HgV0FZ5LRjqlVo%2FuYGQ9JnmwHVYm8AKARM9YzijGM84o%2Bu74wIKgaM%2FJvhpOKIGs5O4GS41tnlJBhxZFD0kui64kDVDa7lbX8WkWJF4f9N1DuMX5zik%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:23 GMT\r\ntrace-id: 7b0d4add-b5b0-4bb9-a804-84f605319fad\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406bb02de2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23058,"size_decoded":4034,"mime_type":"application/json","magic":"JSON text data","md5":"cadc86cad52b280131ba4e017773a31c","sha1":"5c03dfa3d8f493793ca58dc3b7bc1d117a156734","sha256":"2085c48157ac40d012457bdc0f236adeb16ed98c002b236eb09cfef5e59359c8","sha512":"32d99b75793ad90dd0b87a761d4c451bd52679dca038b473dffb475d3c60b43d4c3597fbb191cc55418f5d92bc6db76d829fa4d7a68a26cd6ce2027a2447e7fd","ssdeep":"192:8LZrRZIZxZcSZKZ5ZNZHcZdZv5ZrMZ4Z0Z3ZrlZ1ZGZysZVZDZ+Z+oZ71ZO0ZtZD:8eQHkmmNt+3","tlshash":"c8a23b561778e830d58868835057bbd4b0dc765b68cbcdb4fbedce9c80f02661a0fa66","first_seen":"2026-06-30T21:56:58.844778Z","last_seen":"2026-06-30T21:56:58.844778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.155Z","timestamp":1782856579155,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: application/font-woff\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"944c37658ddfd015ec2d26ace1d57e62\"\r\ncontent-encoding: br\r\ncf-ray: a1406b93dd3a56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51936,"size_decoded":52276,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 51936, version 0.0","md5":"944c37658ddfd015ec2d26ace1d57e62","sha1":"b809229ab132914e716ab1b9863cfaf6696f14e5","sha256":"5a17138e7eb4cdebda94066b8081d3a6f5065bedede63136510877c5a8fd23db","sha512":"8a8cb3e83d9a0353c9ab77c4d40e879b24948abb5f170d1c66507cc2e07f3060d75e6d12829d1cd98d6164875c1080610fb71ca1b75bb559d294eae55741d6c9","ssdeep":"1536:yV/p2LNmMiTXr23hA/g0IRuEWNh5tUp/Coue:y6crGhKxEktaQe","tlshash":"c83302482c1b555343f3a6f21ea869e90f40914b776cef0e9d9ea9a6d0852f4c31c3b7","first_seen":"2025-09-26T22:05:13.143105Z","last_seen":"2026-07-13T15:13:49.759499Z","times_seen":541,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:37.404Z","timestamp":1782856597404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bv%2FQBvnWzu14TtGYP8NOyHa0zc0bbRgNfxJOa73wmDJa8EC%2FB1Rvwvrr8fEuxAmA9OHk5v1XiJA0QmkctJWB2ybzGCoSz7syNvJapadeh0Ij8TygPpaJkJm%2BDcV1EfKd0DfikqOjR%2B0%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:37 GMT\r\ntrace-id: f2b710c7-12ba-4323-9862-1a33cc81c69b\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406c05ce77b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23064,"size_decoded":4018,"mime_type":"application/json","magic":"JSON text data","md5":"523f0eacc4c71b3dabb5af3bafc09ed5","sha1":"ea8d87b8c08ecc15e03a6d92b409291b55c35a17","sha256":"035528f72b3f6b6770203d18daa4c2abb16fb5dfef5818344287bcb1bce87ab2","sha512":"60680ac9c04639480f07d374a72be5e9847be6a3dd80a6c44e2b1475b227c1002eb46e690c288205cd02d31fa05f0192182cb69b074cd290142c8b956f97c1ac","ssdeep":"192:8BZ0ZIZxZcSZKZ5ZNZHxZdZvCLZPZ4Z0ZpZ0Z1ZGZysZVZDZ+Z+oZ71ZOLZ2Zkwl:8Q9PkpmN4E3","tlshash":"4aa23b562778e830d58868835057bbd0b0dc765b68cb8db4ffedce9c80f12661a0f966","first_seen":"2026-06-30T21:56:58.847161Z","last_seen":"2026-06-30T21:56:58.847161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/img/homeTopIcon3.BiICTGpq.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.552Z","timestamp":1782856576552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/homeTopIcon3.BiICTGpq.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 8002\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1f42\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8002,"size_decoded":8251,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"251b73e9fbf598f697e853d7690f6e3e","sha1":"28269b1869bf6e33fbf09d30129a60ce5327e087","sha256":"ff0c1eb379d99c0c017bc59a5729a717840c29ffe38c3fef9c92084c0547d30e","sha512":"0906091c40fbc5c77f91d1f3706f884e9b8fbf9011a0d108e0a1f5925b68d82f33e5d4b6273175239f4fe4105604f07166801dd85f974dfcc480c646ed0b972d","ssdeep":"192:eMVve5jGd2JHnZeOjCd6hcZX7Fab/Rfl5U7WVOjonFPo:eM5aj82dnh+6heqRflCWaonFA","tlshash":"12f1af64088fb672d5df495ee37ca7c5e781fcc16a4a94df229dd8dc8d231040236992","first_seen":"2026-06-30T17:31:51.373516Z","last_seen":"2026-06-30T21:56:58.848566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Light.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.152Z","timestamp":1782856579152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Light.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: application/font-woff\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 13 Aug 2025 13:41:57 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"c8b441e434443e5317dbd52ced7d2e6c\"\r\ncontent-encoding: br\r\ncf-ray: a1406b93dd3f56ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60472,"size_decoded":60848,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60472, version 0.0","md5":"c8b441e434443e5317dbd52ced7d2e6c","sha1":"8b6f5b0e3d541db54c76c47c931195ceb9026d6e","sha256":"88a2ae5e48febe008bb609679f0aed5928f67812ea621baf377d457fd589ad96","sha512":"0561615f9ee8e935c10b44a10e0a0ea1924920e85da08517753bcf6e79727e5e6220ffcf596ed0a2a98b54dce5aec96a4fd264cfb41919710e4becf24270da3a","ssdeep":"1536:0VyKJVaNbn9d4u3jnVnbFdKs0UggxNSlIyq:0VrQ5ImNH0YgIyq","tlshash":"494301603958ccc8bc96eaf95b2da37d393e322941661401cc8dfdc296a71d7dd4a24d","first_seen":"2025-09-26T22:05:13.226599Z","last_seen":"2026-07-13T15:13:49.742628Z","times_seen":540,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":75,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jiaoyisuo.thai2570.com/images/2026/04/10/t9MlmcOetdj1YjcLqdLaUyxGm8baTXeE83X1HfL7.jpg","fqdn":"jiaoyisuo.thai2570.com","domain":"thai2570.com","tld":"com"},"ip":{"addr":"104.21.6.141","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.568Z","timestamp":1782856576568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b06f25be.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Jun 2026 00:01:56 GMT","end":"Fri, 04 Sep 2026 01:01:45 GMT"},"fingerprint":{"sha1":"34:86:6A:80:8D:1A:71:5F:5A:22:46:AC:DF:AA:6C:07:10:DA:A0:C9","sha256":"3F:06:3E:A3:8A:B2:AA:09:21:1B:B3:01:4A:9F:54:63:82:49:F6:7D:C0:04:67:F6:F2:54:66:2B:90:3B:43:40"}}},"request":{"raw":"GET /images/2026/04/10/t9MlmcOetdj1YjcLqdLaUyxGm8baTXeE83X1HfL7.jpg HTTP/1.1\r\nHost: jiaoyisuo.thai2570.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49629\r\naccept-ranges: bytes\r\netag: \"fae9f1fb72eba2436a987db8e29c6e44\"\r\nlast-modified: Fri, 10 Apr 2026 14:33:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yTIOfEzDRqVUsqAwSOtU9sZYykYXu%2Fpk8EFjUWVCmh0GsaaqiAKYNxgTJ5Gq3XLy%2Fjq%2BO%2FquZNyDM3WbLYRYbBb1sHa8rnn6VLtQzzpT4BA2jj8QmFfxnylBAe5MLlkvdjxdaQH2mq2L\"}]}\r\ncf-ray: a1406b8389e48be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49629,"size_decoded":50323,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, progressive, precision 8, 810x524, components 3","md5":"fae9f1fb72eba2436a987db8e29c6e44","sha1":"32ff82b80b15119990d896e06e3a59eabbc7156e","sha256":"2c56acb761446bae9162556d5f855271df4c95755048097a674f5f0a6fb77391","sha512":"f6fc58d2dc4b0adf7beeed76eec2e090c741f597c9c82dfabb2dab192a41fcdf6bd14dd9219a04b3a77e64bc4c4a285953b82d0bb89fd63028d4138b7d6a107d","ssdeep":"1536:NSZJyZ/ATnNUWL+FOmRJs7aaNCXC8t/MMTacckk7W:0LyZ/AKWL+AauaaUXZMM2Bkk7W","tlshash":"e523e10e1bd003a1d8dca3b47b1b4b771fb35aeccb70b5474b864d2a9a21f41be50669","first_seen":"2026-06-30T17:31:51.358875Z","last_seen":"2026-06-30T21:56:58.850261Z","times_seen":2,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.C1c8tQCX.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.164Z","timestamp":1782856577164,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.C1c8tQCX.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1346\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-542\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1346,"size_decoded":1607,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (423)","md5":"066581e5535b750e379ce104658cdeb3","sha1":"0b932e9d22ee021abaa605586df63ba2d1279e3b","sha256":"af08855b5d7c6b7e2feb7cac77fc8008c2b5e174217ad33a9ce63f5f40958682","sha512":"74be28dc0cd68e90342933a69503a14ae3abed1f9934e5ad2a528076fe9b92e04cc8e6c18c48af9e844d7abbb00a9ea3724edc93568ca4b7699733a07e1f9c92","ssdeep":"","tlshash":"8a21754251a5d9f00a55c990d3e968029131216b4b34c0a03bddd2dc0f2bac1d6e8b37","first_seen":"2026-06-30T17:31:51.457538Z","last_seen":"2026-06-30T21:56:58.85116Z","times_seen":2,"resource_available":true,"data":null}},"time_used":695,"timings":{"blocked":479,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DBgjEAIA.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.162Z","timestamp":1782856577162,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.DBgjEAIA.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 9618\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-2592\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9618,"size_decoded":9880,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1512)","md5":"9fc89ceeafb525c3b595a22924a2cc14","sha1":"95803bc775cb4dbf6acd1b3cde4626f8c6c3e871","sha256":"1c46c08333b3e7d959483522524e68f559bb8b9c5661d9226ec2392702194abc","sha512":"6f36f2a2ed843639597824b8f70ea06062ed32cab491e3ad593906158a5a80b98ad91321b79acce451bbb90d052e27e1d706ab051021e539b57abe277a129740","ssdeep":"192:y0KJIvCx5KucBhAkwJYmNj9r4JKB4gKHVW0yqi5IUO:yRJTx5EBKh9rWRgaA0yqi5s","tlshash":"9c12f96531b1a80a1de751a863be481283305077a414c5febfac64d6cf4edc36ae7b38","first_seen":"2026-06-30T17:31:51.545375Z","last_seen":"2026-06-30T21:56:58.851942Z","times_seen":2,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":480,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/w3m-modal.Cejol0k8.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.209Z","timestamp":1782856577209,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/w3m-modal.Cejol0k8.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 45888\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-b340\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":45888,"size_decoded":46151,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3533)","md5":"10e916b0329c3e4035c1a749eb0f3ba8","sha1":"f8cf27bf46c66cb3212126fb623f5bb8a534516c","sha256":"ceaf1abb5d4a49a003822394ca99ab0c851bfd0744de13a152ebeda9ac122941","sha512":"db059bf9b8405c7a85bed6c8b055b393069f72c5292949b0ae357d206aaaec761accf0e0023a556eae266f122fabbdc689e61f77b573eeff07fbafbb069931ab","ssdeep":"768:/3vG8iIr0v8erUKTLoCr3QynYurchrhr0AFxjsBumPdGTCoSkhChO5Y55e2W9rky:GHIeQsoCLnYurchrhjDjw1GTCoSkhChO","tlshash":"db231a446eb724682553c199bedb4e10d330900b6429cdbebbec52e58fd5a8c396f372","first_seen":"2026-06-30T17:31:51.524594Z","last_seen":"2026-06-30T21:56:58.852762Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1862,"timings":{"blocked":1641,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/recharge.C2RfS_TS.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.561Z","timestamp":1782856576561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/recharge.C2RfS_TS.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 18185\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-4709\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18185,"size_decoded":18435,"mime_type":"image/png","magic":"PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced","md5":"5c615ac13f26f383a33958b242e0213c","sha1":"9da2dbd125f2d57dc72231c46e5b34a758cae511","sha256":"abd940390357c0e65e7d907b6124cb9c269df882cd9c3c813f8df4c1f28dbc9a","sha512":"2367fe30958e8163743f7871e044bb4814c215134c8dcf29055ff4b191923e1a31dbd2f2c5570537a14c0ade6556d0ea59487f69a9958527ac21afce256b62aa","ssdeep":"384:/QQ8hFM5iwhlpeL1h9zDJoQvir5Yvco0WvYwCwX5cxJad5qk:/QjzXwhlpo1h9z9PWiMWxCwXgJ7k","tlshash":"f982e1a908340988cc4feef6630b424f5f64b8deaef675dcb62a18a11077db21807e45","first_seen":"2026-06-30T17:31:51.537393Z","last_seen":"2026-06-30T21:56:58.853634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/project-limits?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.836Z","timestamp":1782856576836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /appkit/v1/project-limits?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1406b853f7c56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78,"size_decoded":389,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"03be7f0313898ceae9f735dc566deaaf","sha1":"5f44cf75e93a71363cf4ff43fd8eb5a348b93f34","sha256":"6f9193a6c98db0b87cd82891b32b06e23661bd8ec7f2f07a074d1fa9cf6e07fc","sha512":"d1eb17853dd62fead1218eaa906bec465b55a1724324dab5a334c77d4c01d73bf710fcdc5cdccdc62141a33ba8c6fc21b33c027361e794de3ac4ddd1f55854ee","ssdeep":"","tlshash":"0aa0029828178e9d148646c682918f9655393050be37f964b35e953531cf34cd92434f","first_seen":"2026-05-23T13:27:26.803935Z","last_seen":"2026-07-13T15:13:49.753299Z","times_seen":213,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/onramp.uoe88F52.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.190Z","timestamp":1782856577190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/onramp.uoe88F52.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 23756\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-5ccc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23756,"size_decoded":24019,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (1362)","md5":"c2ec79c6978e271b45ddc7d11207cfd0","sha1":"4dce6b1d52e4a6506ed1a21ad4f2bd8ad472b9e5","sha256":"8bedf4dd0dcf5dfc336c7d3911e7eb76100fa91f940e179666822c278412ddcc","sha512":"9eb382aee3fc8a16e63d7dca4ad984562dce1f74e180fac8a318f8f83c8a21d6db6d52ddbb7d8fc982ce2d0ba093d9b86e8e88b0f338a0aac5a8d8ba8dbaf12a","ssdeep":"384:mgEXWwV2INu09ji3So4jI1VPCodF1iRfiL/NMHxYvHzsW6:gmsu09ji3SBI1VqUF1isaozsX","tlshash":"ffb2081469b26c6c996291a5dde60d00c231900f9129c9fcfbed92f58fcae498ce7773","first_seen":"2026-06-30T17:31:51.372272Z","last_seen":"2026-06-30T21:56:58.854937Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1438,"timings":{"blocked":1222,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.D78JmQQy.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.210Z","timestamp":1782856577210,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.D78JmQQy.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:19 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4129\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1021\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4129,"size_decoded":4391,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (543)","md5":"c1e556a0de7b3eb05751d1a7f8a1dd94","sha1":"b2cb9baa915dfa2ebd87035e904ad8398d43921c","sha256":"dba4cec27aca7ae1dc05baccf51379a044645375a8716744983b35b1c6e617b4","sha512":"6bfce3a41876280722f302ff92917dd66d4c0ea2682cd006d3edc8c3ae215dcf1218bb264108edc23f0608172b35f3ffcae89a295da67d9a98d510802f332e1b","ssdeep":"48:yJXx40Z9buEQM7ooRKhJwi7flqobwm5g2r+K2/KVv:yVaUgEQM0o8hJwixqoUm5g2D2/Uv","tlshash":"7481f2c57eb826e53703c061a99e4c16f330e026a425af2d7a9db0f88f55a43781d773","first_seen":"2026-06-30T17:31:51.34531Z","last_seen":"2026-06-30T21:56:58.855649Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1905,"timings":{"blocked":1684,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BiIvCXYa.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.188Z","timestamp":1782856577188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BiIvCXYa.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2478\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-9ae\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2478,"size_decoded":2739,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1261)","md5":"5e8e26b778e95317191751d4ae8ea7b3","sha1":"917da3a1ad7ecae3b72592b3ec5f0b795a2c6e6d","sha256":"00588adc491ee932f6662490cb786ef31907290c90681633fd508368f0e0ccba","sha512":"d2c8b6256bb2c6793a2af35e50f991a27cea155225f9fed3b0d93fdf4139d6aa22d404d04d28ea08fa5e32407f7c29bdca7035461da2456bd238b3680be7504c","ssdeep":"","tlshash":"45512385b113a4fb345152f90a9f9215652438160bbcd67878eca992cfce7dfb434523","first_seen":"2026-06-30T17:31:51.555783Z","last_seen":"2026-06-30T21:56:58.8564Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1354,"timings":{"blocked":1133,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ZxSvg.MKRNcQtn.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.533Z","timestamp":1782856575533,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/ZxSvg.MKRNcQtn.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 986\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-3da\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":986,"size_decoded":1246,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (985)","md5":"89c43af8ab64c7c00d87ff72ac1c3604","sha1":"f68008fb6d4b1169b99cc5ddc6a6eeac7e02c1e4","sha256":"b452cf6486d55cc32802cd99466a7eb3fa858c4b28889d9f55fd309d3d3cdf11","sha512":"e7d7ec33cb74bd8e90b62511b3837a0a85af221e9f7bc2a7fc6dd138acb74f3e0b328b0791f4908c1e3e38caff62936932a65b22ee861121a46dc1df895e8a58","ssdeep":"","tlshash":"dc110e176908c7b74beb5c8c11540049154ac60ede342a73e2f2d030f735b50da0cbda","first_seen":"2026-06-30T17:31:51.412612Z","last_seen":"2026-06-30T21:56:58.857207Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/css/index.CFAGxxSh.css","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.548Z","timestamp":1782856575548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /css/index.CFAGxxSh.css HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: text/css\r\nContent-Length: 3833\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-ef9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3833,"size_decoded":4080,"mime_type":"text/css","magic":"ASCII text, with very long lines (3832)","md5":"f8108a2031f8b5714033b02e631437b7","sha1":"106ee0e83d8ddd498a40cf8c94c789cae2350443","sha256":"fa43c9377020743011c54da0a1796c81cd8baee20002b341245bd9c4e9d1f358","sha512":"547257c6616733ee59933cba2124475096d2313fa7943c0be7c897fb9ac8cba88175da03d1d47b77bd5104e810cb60caf4307256eebc27b44bfadb1c19c17749","ssdeep":"","tlshash":"dc813279faa4523c9e7b80715fd70dc5f73eb0218f322499b9a391588dc32f612719a4","first_seen":"2026-06-30T17:31:51.487527Z","last_seen":"2026-06-30T21:56:58.857977Z","times_seen":2,"resource_available":false,"data":null}},"time_used":838,"timings":{"blocked":622,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.579Z","timestamp":1782856576579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rK1UXQzVb0e7094%2FTcI4zVdiY%2B1rZtQzuq50KI8GyvKtH7V30nCO3SYQHzQ0rzeP6aVG0PSFV%2B7s3dnsSI5xI52IZ9uZQOM9CGj6kWtnbv5%2BBJinQCGyDtGO7GkpnB3uPb9HLEgE0Vg%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: 683c1e8d-d4a2-4342-8978-a713539fb081\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae25b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23061,"size_decoded":4122,"mime_type":"application/json","magic":"JSON text data","md5":"7962763727b6fe507e5da3196d2aaa55","sha1":"306e902b9a7a67b9dac4bb372ff295e33b2dae50","sha256":"ee09bdbd679b72d0b94bcbc89919bbe203a6f0ca02abe3f3e328753754c9894d","sha512":"ca4472f067f38a891a11f82f823cf9dc48abbbf0ac235b9f703711993f0a5c557a342af8c542264fe9c6f54c9cf86c239e4acfa142b049b7430c99e7641255da","ssdeep":"192:q7ZxZIZxZcSZKZ5ZNZHDZdZv5ZsZ4Z0ZeZFZ1ZGZysZVZDZ+Z+oZ71ZO0ZYZkwZS:qnIY/YmFow","tlshash":"3ea23c561778e830d58868835057bbd070dc765b68cb8db4ffedce9c80f02661a0fa66","first_seen":"2026-06-30T21:56:58.858748Z","last_seen":"2026-06-30T21:56:58.858748Z","times_seen":1,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.lFrzwWW5.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.169Z","timestamp":1782856577169,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.lFrzwWW5.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4109\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-100d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4109,"size_decoded":4371,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1683)","md5":"7be7d3f632d7f063d352ced980d9889b","sha1":"96f2ae93b3f3970bc0e9a6fc1987028bcd8bc246","sha256":"aa339ef0de442d3d4f077fb1953217baa59b6105cfd2ca349be65a4c5735bd7f","sha512":"fbe4e4e9dea6958c621d79d4fb7ffc5740c9a4255abd09f0a580119928d6161d74b765b55e4cfb182ea25fc7418da934f5f81a3784f7f446643fa14c584669ec","ssdeep":"96:23jqTUPxFXFxo44hMLDsCYbvTh7LDGqEMQXewqXoYocqEM7BgVbd4Q73Kn:23kUPLXFxo4UeDstbLh3DGoQXetoY3oF","tlshash":"dc81e768737870bcaec390144e7a1d05c334402ad02dce96779c61e78f656ca5db7372","first_seen":"2026-06-30T17:31:51.344434Z","last_seen":"2026-06-30T21:56:58.859883Z","times_seen":2,"resource_available":true,"data":null}},"time_used":811,"timings":{"blocked":590,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.COzITpmd.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.181Z","timestamp":1782856577181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.COzITpmd.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4692\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1254\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4692,"size_decoded":4954,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (619)","md5":"d48b02e16478b0e058afa0ab440560e2","sha1":"c9b5503c730975e0fcf69d57e138cc170b178fee","sha256":"93c34ee0c01252e9546bac1c82acb37fe5074b3b9b56b6cd52712545b52c80c0","sha512":"f15f6d28b494caedb282df52920bfd9e6e96c08965227e8950f532228c2acdba7e04cfc2fda8814851227b7bec3f18949a3f2178696cfef7cd44200ddd1a2618","ssdeep":"96:7QUUV7o9KKKPhXLcK/RWbAoI3qbcsCyB4gEQhMJyqQN4:7JUV7o9KK8ZDTQlAQTu","tlshash":"13a132c22daa25393a91d099ae5a4d01e331d007d219cebdbddca1fccf99583147d722","first_seen":"2026-06-30T17:31:51.394629Z","last_seen":"2026-06-30T21:56:58.860646Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1134,"timings":{"blocked":909,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-30T21:56:11.624Z","timestamp":1782856571624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:12 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a1fe103-12c2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4802,"size_decoded":1817,"mime_type":"text/html","magic":"JavaScript source, ASCII text","md5":"fc73807c64bf6fd41f1c0c0a1349ecfb","sha1":"a5fd23650c50c6d39fff4529b6457ac95d6f88bb","sha256":"8f586f6a3f436ff82023d6b4a2b49eb2d078454acdc816f3a8d823cf123e5929","sha512":"39d0ebc2832460a6e888e0cf150da97d22582ee19f861097eac4550b83afd9b6d8a2996d899de6e73f5c0aee850adabbb9167200d134abacd35164cc9db4ffce","ssdeep":"96:/uKZWKZ6ZNZOBUTBQUp8H4B3uksDiOSHuxJsAP/CudJ4i7/8du7xOfaJF:2yU1QUp8H4B3bs7SHuxJsAP/CudJ4i7N","tlshash":"58a171b745fa94875213b1687eaeaa086d75e087c949dc0379ad02dc4f80fa2cfd3168","first_seen":"2026-06-30T17:31:51.353575Z","last_seen":"2026-06-30T21:56:58.861336Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1093,"timings":{"blocked":-1,"dns":205,"connect":220,"send":0,"wait":221,"receive":0,"ssl":447},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/announcements/all","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.576Z","timestamp":1782856576576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/announcements/all HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cHbDODcS6%2BW%2BZ65IK%2FqBF%2BD%2B2MSCkMYkZXMgJQSSQKdjoKIaJAx3v28Zk0i5LJPP5sdJBYVqtdtT1anqbb9RZ1mo6E9GVlwwOjMkifYw3hS2juYcbKomxTyMwU6WsMA2Cne0EkmgOnU%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: 47f02c88-43fe-4fc4-bceb-930af3039327\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b839e22b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":856,"mime_type":"application/json","magic":"JSON text data","md5":"e748958fcb45e09971c85a400e20382e","sha1":"63342eecb2e3ab3fe3947585154e518833797a77","sha256":"ba50a52eec37f1b9a6e43b3ef1f9114b713d1c6e72cbf64a5b685f5fb0c6a3d9","sha512":"dc71a0c2a7d0960a4f7e88170b55628e9c6b674526ab5e72aa5604c63a938936a0815b013c6c2907d258b7dd3d2f5713b30c5550057b30d76143c24b74bc1361","ssdeep":"","tlshash":"55a022220c8a3c802e032000200b0e0c22c8b0c282380ccac88c8e3c8f800bbf802820","first_seen":"2026-06-30T17:31:51.552213Z","last_seen":"2026-06-30T21:56:58.86248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Cy9bsC5i.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.157Z","timestamp":1782856577157,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.Cy9bsC5i.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2947\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-b83\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2947,"size_decoded":3208,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (540)","md5":"2a61c6cf38c3759d9992db50f2ec844b","sha1":"d1b4d3eff1423921542ff2f58e34b1a46bbd92d0","sha256":"8f7fb98d49e7b396344fddde9861d5e396634af213b0b53b1c5bc1f3bac1353b","sha512":"2523cb0f0e15b30656e9bb138ac7805b3c09a230420c35170cdd38f2835f59813a1bd1e2f880d2c007fbaca5dbe8680ebf6f5cba67160ec51d08fba58b0b64ea","ssdeep":"","tlshash":"6e51ddc1ffb4a26abb4bc0be559ad910e333b00550295f7e3bd922f20f49584241eaa4","first_seen":"2026-06-30T17:31:51.434133Z","last_seen":"2026-06-30T21:56:58.863186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":585,"timings":{"blocked":368,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BqapkgQG.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.193Z","timestamp":1782856577193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BqapkgQG.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 45931\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-b36b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45931,"size_decoded":46194,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2308)","md5":"0e513686503c3da05ae4797915f8fc1c","sha1":"741d3f05ed587e11c80a5e662deb5bf1788956da","sha256":"6237d13a7676f8d217bac318e52cad23b79a3c343709932b9d7ce4d54f6dbd84","sha512":"328f7739af3cb93769982113ef7956fab025300599d5331a7ff46577c9e1ba377d02dc9f2740233c5a097eed237de91d2f7e55dc46c87de5456f685c0728c3a7","ssdeep":"768:ofyXCiw7UB4Z4UsHvDYfHbh+8zSyQ767sBqy+ry4Iz07:QywyUALYb867sAIz07","tlshash":"1d23a4a063acd2bce506836cdb1a3071271f24ff77458144f29e9a709b1618edd6bcda","first_seen":"2026-06-30T17:31:51.477533Z","last_seen":"2026-06-30T21:56:58.864021Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1541,"timings":{"blocked":1325,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/batch?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:25.638Z","timestamp":1782856585638,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"POST /batch?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 669\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 403 \r\ndate: Tue, 30 Jun 2026 21:56:25 GMT\r\npriority: u=6,i=?0\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncf-ray: a1406bbc5ec156bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T15:17:53.208588Z","times_seen":17215495,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/img/mining.ixrSodcN.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.562Z","timestamp":1782856576562,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/mining.ixrSodcN.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 8958\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-22fe\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8958,"size_decoded":9207,"mime_type":"image/png","magic":"PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced","md5":"00c7d802c2026a7227a2ee542e3bc4b5","sha1":"9f95bdb7923700c023ca85e76c22791c9185b4fb","sha256":"53db53b82fa4f294f9f674b1553cd68eaba8c65cb6626504b8236549a4c78dd7","sha512":"ee2e2cbb2e3894ac3a02378e96a0a9fb1d9c55b05a6d8a8dd46a34fa14091f76962929fe683503e065b51bfbae009e7386b62ff5648acc37144efbeaf4be4fe7","ssdeep":"192:ZxKQIVlFBVwMbpb/XQKOhbt7AFEpQNl1XGdO3RP:ZMRlFBLbpb/Ohbt7Am+wO3J","tlshash":"c0026c97e0bcebeec4c8a2fa890b64e2252563ecc55f786764cc8110cb5cd8ab650154","first_seen":"2026-06-30T17:31:51.39126Z","last_seen":"2026-06-30T21:56:58.86538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.web3modal.org/projects/v1/origins?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.013Z","timestamp":1782856577013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /projects/v1/origins?projectId=b56e18d47c72ab683b10814fe9495694\u0026st=appkit\u0026sv=html-wagmi-1.8.14 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, s-maxage=300\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1406b865e8032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":446,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"78097234880a5e6efbf473b748014f13","sha1":"de81e7c244c73a38c74c1fb8e4645fc63aaddd6a","sha256":"7d3e045abad491d9ff5de68555f27399bc294cb5848b2da820ecae6530a8a587","sha512":"355317f15c85abd14b8072d8a5d3cbc7536129d93342d723c54036bd001b9c6208a9345293ad251dd53dd0b5926e36ff5fba2f989e085a2a55ea528bff7cc828","ssdeep":"","tlshash":"2cd012af1d87f8251634c7cd1eaa2c0dfd8701ce544c4dd78531c72642243bd3100584","first_seen":"2026-06-30T17:31:51.43271Z","last_seen":"2026-06-30T21:56:58.866079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ref.EDT9vPYW.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.140Z","timestamp":1782856577140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/ref.EDT9vPYW.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1867\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-74b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1867,"size_decoded":2128,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1866)","md5":"ddf4b608304955b1f91299723ac831f7","sha1":"68b048d4ca6cfb978173db948d3ffc6a2f8f82bf","sha256":"f6c28469bc6d21d31853cf15309b9f7f0f72ce8aace075ab95e3669b7478a9d1","sha512":"e022fe2019db5bfdf7ee95430af99ee4d75bb167fddd772003cb1a25f698d9808a13bec7df0c2b792df983e48ee6c9014c25bb954a7ae34182fb8100acff3f38","ssdeep":"","tlshash":"d231128722d101e452cb84e6ec37083ae021705435a584ac309ebbf7dc25acba07bd79","first_seen":"2026-06-30T17:31:51.47954Z","last_seen":"2026-06-30T21:56:58.866866Z","times_seen":2,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":70,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Bu7NvJOT.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.144Z","timestamp":1782856577144,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.Bu7NvJOT.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4806\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-12c6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4806,"size_decoded":5068,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2981)","md5":"14a0c1af99ea0978e41347a3975dbfc0","sha1":"2b6d1b51b5b08b0fda116b4812a55ebc48516ed5","sha256":"d9d5e9eb502b6ac88005d9fd389fd6b129565a24c5dc9f510728cc3cf24b7851","sha512":"1c631fe6c0c061bc5e4fdf2fc6c82ef3807be4f32bcf5f5eb8480fba86491d571738f315aab82b0f83cb57e408e65c892a721070b665436ba305f421dc9f4bcc","ssdeep":"96:KdKHliUqZAJfRKli91pzbBKIimie2xRf1InSMipygea1qQn9mQyR2kxyhcptqvpw:KdKHliUxfRKl0ZKdmj2xRf1gSMipia1C","tlshash":"85a1b4f77166e3e0952787f1dcf73811651b3cb67b064e0aa58c9ad8de06589868ce20","first_seen":"2026-06-30T17:31:51.490655Z","last_seen":"2026-06-30T21:56:58.867777Z","times_seen":2,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/dijkstra.CkR1O50I.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.173Z","timestamp":1782856577173,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/dijkstra.CkR1O50I.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1102\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-44e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1102,"size_decoded":1363,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1101)","md5":"7ef97bcbd9c7a52be8a72a1bc4c721bf","sha1":"3e729ec9f18a5a4879b90b58a4b273e686a6f463","sha256":"85742f76fca76cbd8a9905fa55a89e52ad7e3709001fc1728c87d6ec6264fac0","sha512":"f55fee3fa86e5e185fa7c04f9ff0398fbf59842d2ebf8fd94bc7660e93e94ed0a910c353cb1bbea23171187ddcf0bb194a1ff6af05689d735397ab9f086d0214","ssdeep":"","tlshash":"2c11d0e8f1d751b64773956b863bb857fbba6980b2a80b80d351c4cab4a59cc001bc2d","first_seen":"2025-06-29T04:33:04.571198Z","last_seen":"2026-07-11T01:51:23.614519Z","times_seen":12,"resource_available":true,"data":null}},"time_used":909,"timings":{"blocked":689,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/ExchangeController.CHHfRoy6.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.206Z","timestamp":1782856577206,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/ExchangeController.CHHfRoy6.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4665\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1239\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4665,"size_decoded":4927,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4664)","md5":"c2d76b9a07c2c20f98da5412734cb20d","sha1":"f804f46d2abd6a72461f0d2a86c220e03ee0a53c","sha256":"971320b1cef3da85366e8bc2d57f650a1ee4067ff2c43b8527fe7e3cfd3006a6","sha512":"7901cab60bd0a26a5ea2b14c6eef62ba9362fb7538167fa2d82a9c08bd59990d428f0042b26f25a2c36bfa73d27a679f33f1ef6412160c610be757a604b4cd79","ssdeep":"96:TWJ5iYkHf2WnZoSuolTLQhsl30RtgF+lvW+7GRC0TSOrGzA9:TWDiVf2Yh9mfgolnCC0TzrV","tlshash":"9ca1a60070f2b036d9e4296029b531314b3d4fecf0a6c5d9d7bc5da91a40eab8e2de30","first_seen":"2026-06-30T17:31:51.420198Z","last_seen":"2026-06-30T21:56:58.869122Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1764,"timings":{"blocked":1547,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/heic2any.CYtHHoD1.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.936Z","timestamp":1782856572936,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/heic2any.CYtHHoD1.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1352432\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-14a2f0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1352432,"size_decoded":1352699,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c6ddd7dc389de15250c5fa3b2d8c8568","sha1":"5685807fdbb95be8de16a39d294ee7d6ff07f4b8","sha256":"c938d4233550ac07788d62506324f80e6639412faaf3b1cb9910bd508c77cfe9","sha512":"31649145cb6fa57c944161c54d92f4540e5c452419587080236d0e6e32d119245a5d8a2349416e992dec23f1e2235c457d7e8122ed1194e0e4175c904abf1597","ssdeep":"6144:AW/WG5hf0+18JlrIt9Fjp2vBQeh327lnjhLfm553itr1exI9uWsbH7GRriezDJLL:H18Jap2vBQxZZHeWWqjV4PgXhYnxy","tlshash":"cf25a2b2714dfb6327b14e3a01cb78d34e1577336908290db7f1e5a6a9b06c76432a4b","first_seen":"2026-06-30T17:31:51.351533Z","last_seen":"2026-06-30T21:56:58.869832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1958,"timings":{"blocked":-1,"dns":0,"connect":216,"send":0,"wait":432,"receive":1090,"ssl":220},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/system-setting","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.581Z","timestamp":1782856576581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/system-setting HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVAQXSpnpUnw9XGdcFkIHijlKPF7f88JeA8a3hhcS8yQk%2F0nexPJBtcOzaqjfnzBcnctdV5gxP4E%2Ba%2F4b86%2Bf40rCzkdTfZM7aRPWwEdYZ6IYHiSfh8V0vMIEV2JzfK4eGFjyHZnBtE%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: dad57ceb-7e63-439f-8d45-bcc629029b4d\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae26b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3340,"size_decoded":2103,"mime_type":"application/json","magic":"JSON text data","md5":"135471188f5079f5af465f1132ab28e3","sha1":"43e11c4bae19b9544df85e5777a9cdd4ce6cc8af","sha256":"7f9aa97af8e99ab8d84957b0527f4a22f2c417efa453537dfe399f373633daee","sha512":"7096f45a54f0a747f95f6beb53af2bb55042f77095e1cc3b9a942169e122f43c14668ff45bb7365442a97f409fd888b2c787c81e083028233e6210885f7f97cf","ssdeep":"","tlshash":"5661dc3589ace8b706c18885a85f3d5a8f4f8333d450bc2ea768cf1c60f5af5927551b","first_seen":"2026-06-30T17:31:51.464442Z","last_seen":"2026-06-30T21:56:58.755848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=BCHUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.587Z","timestamp":1782856576587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=BCHUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z1D2LN1TsjoofP0SGcukxpZdO3%2Bl1pMEd1mws9qqMmpzJJO9bKtB0udvrKW39BeeNIfm1y6EHZxCDoD6ttO0PMGDDXJPAutRTXuVpIjbSzPNx6T0E4mmBLP4H68GogtSkw6jvrJGvXI%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: 9d723e39-d332-4258-a1a7-a637a585bd9e\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae2ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9670,"size_decoded":2584,"mime_type":"application/json","magic":"JSON text data","md5":"08999bb2a1a3f4513b708fc657dfa545","sha1":"8761101dd91694e04b2d522bded7d0a84ee12262","sha256":"3689fab20abec6294b0c381dd3b6e1bd709df36d50f2d623da19cf5efd39f73f","sha512":"8d562fd04a9176402d9fc1b7e7c761df8069f047e124e184d435a90bd2adc611d4eac8244ec4366fc60007dccc39f322276777afe9af3f8e9ea0658706175df0","ssdeep":"192:6a4e2n32BoWbInSFhhxdZcmXyRxPWo+FL6qSWG76/StgIpRe520PcTp4C5Bg/1sG:GoeQdS7RyfCfm","tlshash":"e8123921e33bb926996676c25193bfc9254db60b10c388497f9d9bc10da0933fa1d37b","first_seen":"2026-06-30T21:56:58.870593Z","last_seen":"2026-06-30T21:56:58.870593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":696,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":696,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BtwVhbUY.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.201Z","timestamp":1782856577201,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BtwVhbUY.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 16922\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-421a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16922,"size_decoded":17185,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5609)","md5":"e8c0ef54a7fefb586b9539fdc17b158b","sha1":"ceabcf1939e9acaeba5b7a9f8c3c03d1c7c617e2","sha256":"0414e001ff2f301929936cbeb1d4a6d316ee6137e90c9e505f91410233cc3df8","sha512":"33a5e10867567e78fb8baff59597d56579f02224caa581535b2adc821dc72dbbe6ed3713c0d0539996b27750e8319076b8a5b45301a6054384f144466554ef6c","ssdeep":"384:9EVoVmgkZadumMgkttiUBaLgkvSfgkfgP:9EVoVmgkZa4mMgkniUBaLgkvSfgkfU","tlshash":"5a72b8e83693ba286a835bec67e54550f6343806802e897db6ddc3e28f55d845cf33a1","first_seen":"2026-06-30T17:31:51.45204Z","last_seen":"2026-06-30T21:56:58.871811Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1689,"timings":{"blocked":1467,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.Bc-PImnr.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.204Z","timestamp":1782856577204,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.Bc-PImnr.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2987\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-bab\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2987,"size_decoded":3248,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (772)","md5":"4d5cb37b22a1ef7078a7190219659a95","sha1":"53d2a9103e2663676a894f6a9b872a7c8543a414","sha256":"4325b04e3594b6a6b3c0a1fcddbcb6d334916f3995a4c165ddb1858265a79f2b","sha512":"9d7768a9a77175d22f8523b430ba686ec82883bf879d553144e8ec5ecce05f0c587f0e7fa1ffd0364d0890227c6d5825767591280639f0473d78e494937d18f0","ssdeep":"","tlshash":"9e51b7d3f33a1178385192a05b6e1dd4a323f01b611cde3e7fdda1e44f866856839632","first_seen":"2026-06-30T17:31:51.528582Z","last_seen":"2026-06-30T21:56:58.872664Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1753,"timings":{"blocked":1536,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/i18n-messages.oHpfHAaG.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.935Z","timestamp":1782856572935,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/i18n-messages.oHpfHAaG.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2058739\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1f69f3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2058739,"size_decoded":2059006,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (43485), with no line terminators","md5":"54208a83b1bfb08e512e3fd1d69d2ed1","sha1":"83a97ad36789000f9ff606bddfb4de99661ea6d9","sha256":"fb029ba75a48ad8c451083f579d16bbf28093f19e4fe94d4744fab7f03001829","sha512":"d842733fd065f538520528e5d403d9ab24227d65519f35ef0dcac5d8e7d25c318410f06dd704a7e7a0deb8882bef1c1c88839f7c66c9233b72c0bc37d6052cb6","ssdeep":"12288:+v/l6PGdtLf9lfeYuPmcDFzTcz8hTqRrJ/nGsiqtlJz2avY11qdg4stHfo3vW55W:9KrJ/n5kqdgVxT0","tlshash":"b335fea8a1cbda8003c89a81559a31f5b20d0c567548f7d3ccb89e3aecd65f5c977f28","first_seen":"2026-06-30T21:56:58.87379Z","last_seen":"2026-06-30T21:56:58.87379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1955,"timings":{"blocked":-1,"dns":0,"connect":215,"send":0,"wait":430,"receive":1090,"ssl":219},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/language?filter%5Bstatus%5D=true\u0026page%5Bnumber%5D=1\u0026page%5Bsize%5D=100","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.503Z","timestamp":1782856575503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/language?filter%5Bstatus%5D=true\u0026page%5Bnumber%5D=1\u0026page%5Bsize%5D=100 HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CsW5b8Xc%2BUZ9P2yuy%2Fbqwe5VL5N2cJ41NG4ElvApqqiu4kDB6YuV7w%2FI%2F1I%2BpAlieOT7A4WrWNoVUq1JHD0E9ei1%2Bc6kewPx2n7mBnFpvfl5i%2FSqEGpR%2Fyr23NwNR4gIlb%2Fp25oVYp4%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:15 GMT\r\ntrace-id: a1533e62-4c9b-41a2-a445-214f926c3300\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b7d5cfeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3258,"size_decoded":1403,"mime_type":"application/json","magic":"JSON text data","md5":"6939a76ec78910e5d68a365449f3017d","sha1":"e0087c1d7fc074c160ff06748a100e21cbaeb356","sha256":"a42a7fdc029f478edcb73260659aae0b7e91acf28866bc6394e6e72d05635a1d","sha512":"33c37bda2fbbc114a2d87c9c77bf941c4acddd4b23b948d8e02fb7d0e4750ccd47f980a0da00c8cc403e60b7dcea0b88fc3aa5e996085ebf82f74f2397611c08","ssdeep":"","tlshash":"136104ac7b3b6d658990a4428867ff8e77afb82e9cc14c86bfdc721c18255529d0e053","first_seen":"2026-06-30T17:31:51.536398Z","last_seen":"2026-06-30T21:56:58.874839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":56,"connect":18,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/MenuPopup.Dk_MokuL.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.541Z","timestamp":1782856575541,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/MenuPopup.Dk_MokuL.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 9371\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-249b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9371,"size_decoded":9633,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9370)","md5":"1e011f7af26bc5f7ba10536d25a59557","sha1":"bb63cf00238a9fb1e6de2dc640b2b1a96c5024ee","sha256":"971e4aa261543bccf4b821ff3ce1da12f51676d3ecfd7d8a46e632f8f0e322b6","sha512":"ad2c0705936e2b3c0e530b983fe6672d6241c8edeb6f043993c145e4ce43faf66d34298e4e566cc3c0b4d36928e0c9f7c1be4dc4937c0405cd795b3a8d5fac52","ssdeep":"192:FjJphcK5deMFq/0O71L1AKla9kZgDuF+dRyQU8WdryEddrxS/vK:ZJpyKCM4F7jAKY9k9FCyQU8WdmEftQy","tlshash":"b512e94a7429c6f9e3eb2435f4591080a50c3ff8d6bb861b62fd29013bd6c26968837d","first_seen":"2026-06-30T17:31:51.355745Z","last_seen":"2026-06-30T21:56:58.875798Z","times_seen":2,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/homeTopIcon6.BLpX_vor.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.558Z","timestamp":1782856576558,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/homeTopIcon6.BLpX_vor.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 7715\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1e23\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7715,"size_decoded":7964,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"2fc39e027b90c879c1a509b03bd9addd","sha1":"e2cff6a57bc5127dcea65cd3333b3ffa6547fb9f","sha256":"dc549b038a24bf702b67b6a2a489de926bf07e88ba444d1ef8fa092c71d0732f","sha512":"150b81c4491f44c1baee265fff6c20b0962226a08f1af0bad05d99e13265a30643c806ab4132aff731587b106f28c3fac832da205f5880c523c1d30c15712f72","ssdeep":"192:pqQ/u4C8/I80R9nK9sOBhpZAcA2IH+9WuqQSPIg:pqQ/DCMIvmB7wlH+9jqQSz","tlshash":"45f1cfa47ec521f4f7aa3ff31793219ea44b614a20fa57601bcdafdd51c32436861138","first_seen":"2026-06-30T17:31:51.439816Z","last_seen":"2026-06-30T21:56:58.876616Z","times_seen":2,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/security.CD9PSEkm.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.564Z","timestamp":1782856576564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/security.CD9PSEkm.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 11309\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-2c2d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11309,"size_decoded":11559,"mime_type":"image/png","magic":"PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced","md5":"7c9d325597505a65aeae4ab5b45c21a0","sha1":"235b08227eb657593800ba1d12980d53eac105cd","sha256":"38cb52362a5af4cc0ffdda4901d8d12a92d92601ec6e4f747c39f8f03843c79c","sha512":"ce1ec25960aabc4d5eafa5e3bba9629e293f8b078e5ad832d635c6c7bedcf0b391f277acbd42e9454fecdad96582269250fb5618a9570f8cc39db3b308a289ea","ssdeep":"192:Cy0xCpfZZZZZZZZZZZZdXR600jqwBkFloTU2MAxMVWt61HaAKFQ7O+cqC1GD0eX1:bQCvRF0jRtUoMVP1Ha5QS+cT1c","tlshash":"9b32bfef326cb484fb4fb0f061e779450800e720d42d5d6b88995a53cf640ba3eda962","first_seen":"2026-06-30T17:31:51.390235Z","last_seen":"2026-06-30T21:56:58.877437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":654,"timings":{"blocked":424,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/SwapController.C87228D9.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.179Z","timestamp":1782856577179,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/SwapController.C87228D9.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13805\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-35ed\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13805,"size_decoded":14068,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13804)","md5":"faa25c25a389659b96b66f18d36cf00d","sha1":"117d524114ba0c6e889268c5e9c5cf9cd0335162","sha256":"49267a337a5c3fcfab805e1b34ab9f35016d58b907407e5a9222eae6eb9afe7f","sha512":"ac9d251bc9d6751f4acf2a43e3f11c4975d527d8a0400529f7c54ea8970e8a84d7def3e66584305414cc0d2916c30c80f4e1d539d30e68f76adfd0d532e3fb2f","ssdeep":"384:V2KRZ4Fe6Vl9aUraC0lxN5Xodzy3pTckYzajYn:VtMFRHgSaCexNixyNckYzajY","tlshash":"de5295b273607a36831d71986af5131011622c94d86ee4edf9ad06e30ff159f1ecf925","first_seen":"2026-06-30T17:31:51.417638Z","last_seen":"2026-06-30T21:56:58.878175Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1121,"timings":{"blocked":903,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/transactions.DdiXwk7O.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.196Z","timestamp":1782856577196,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/transactions.DdiXwk7O.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1223\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-4c7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1223,"size_decoded":1484,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (410)","md5":"65a57207ba52f064ba88300447aeb803","sha1":"7bd3ce43ff28727f568d2966009732f1004e1f97","sha256":"bd9dc221cb4569952214dbb6d7ace47302abda5c65f620e78c58d35edac930b3","sha512":"c54e984605708f4a203c7cc28113331ca95e9324d4440b4774cbeebd7adf0f683a16dc7529c0ba784159d177265addfa625609d4ef617306d109c06d31334a85","ssdeep":"","tlshash":"4b21514b657065e4049395f1f651e8114037812b0be8d5b1f7cf53e88f682ee889e227","first_seen":"2026-06-30T17:31:51.427332Z","last_seen":"2026-06-30T21:56:58.878881Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1573,"timings":{"blocked":1353,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.154Z","timestamp":1782856579154,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Regular.woff HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: application/font-woff\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"f68d2c4950f0ddadd8e09e104ec4e425\"\r\ncontent-encoding: br\r\ncf-ray: a1406b93dd4056ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":60482,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 60140, version 0.0","md5":"f68d2c4950f0ddadd8e09e104ec4e425","sha1":"a776262129e9223ef9b786f44d8718f32bc7529c","sha256":"adc78a8fe0174e7e1f6d4b4a267f1e2f1742088923635f36acc4eae42f953c1e","sha512":"390be30d7fb7b01e15d8a7c4e4412ac8507fb07a88ae04ae418f4d288bef57cf9a7db4a66c44fc4df738b6a58b59b66a57cfbb00c8d2d0b32984bdd5659531a2","ssdeep":"1536:kXpFvtCoQwH0kJLLpdNUTaa0TdlDz1mzltKA:Qp3RSwDHA","tlshash":"594302bc5a0243cad09991c5cc4c6d0d6f8c379597bea20bc6723b9a1523ba937bf584","first_seen":"2025-09-26T22:05:13.170618Z","last_seen":"2026-07-13T15:13:49.793175Z","times_seen":541,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":3,"send":0,"wait":75,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/css/useHomeNavBar.DMpnGpYf.css","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.536Z","timestamp":1782856575536,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /css/useHomeNavBar.DMpnGpYf.css HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: text/css\r\nContent-Length: 746\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-2ea\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":746,"size_decoded":992,"mime_type":"text/css","magic":"ASCII text, with very long lines (745)","md5":"b45c500a9e8a2db71e35895f63e0937f","sha1":"d72c91b0ba7baad31fa96efdaf69cdeae50a2caa","sha256":"47229b7b273783a2e371af6d3afbe55b92d879a70e4cbceb1d978b0f1cf00f62","sha512":"658b217c9a1369e9912dc6bef9b80906a7dfb6a40f869144cef34980b403f2731962928aa2365440a3cc3c8062457d16210222398172b454a219fe85bbdf5a0e","ssdeep":"","tlshash":"b701bd04f93e3a085173e1a52cc96501db14a2b29f3a21ff79c01bee4d021953398516","first_seen":"2026-06-30T17:31:51.415001Z","last_seen":"2026-06-30T21:56:58.881363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/localBatchGatewayRequest.DXnM657F.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.644Z","timestamp":1782856575644,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/localBatchGatewayRequest.DXnM657F.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1764\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-6e4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1764,"size_decoded":2025,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1763)","md5":"d4f272cbf3a3f86b556134d766e73b1c","sha1":"abc058db113384c5a4b1b5da264b81a951e0a970","sha256":"5690aa25f91640e78af6814084fce27f81c3e2700e18ea41e20b6f5c00141b59","sha512":"cfde3e055b9d30e324b9776d3a5be476e42e08bea04b7769c304fd9090688ee53b514bec258b830f35a5cb68eaf591b152ad9ee4e00a8a93ed09da1c0364b8b1","ssdeep":"","tlshash":"4a3161c9ba1a5b71649f2db2e41fb01099303b05bd2b84d1c51f29f35e30ac59b6ed0c","first_seen":"2026-06-30T17:31:51.389179Z","last_seen":"2026-06-30T21:56:58.882341Z","times_seen":2,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":323,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DCzNYnWi.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.192Z","timestamp":1782856577192,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.DCzNYnWi.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2996\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-bb4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2996,"size_decoded":3257,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (692)","md5":"420940d252b1412022b7e665c8f410f8","sha1":"3cc24c52ed48c9fbe887b7f145de6432b18f3ae6","sha256":"e997c1212afa6fcfe4cfb6523f7010a17851135da040d3578bd193800843519f","sha512":"2b175243172316e68a692c7b5ddea55d188780f5f2b0ebff0510d83af46144153951b154aa062a3b58be50de950cb9d422f01fe853cc068d219eeb3758118943","ssdeep":"","tlshash":"1c51718591b1586e6703c0a9c77f0c01933be49fc4298ebd76dce0f08f9a98125ba332","first_seen":"2026-06-30T17:31:51.443565Z","last_seen":"2026-06-30T21:56:58.883021Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1472,"timings":{"blocked":1251,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BqpKi2_R.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.525Z","timestamp":1782856575525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BqpKi2_R.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 47975\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-bb67\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47975,"size_decoded":48238,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (47854)","md5":"f02ae18e21f3fc4f77a61bd349289ac5","sha1":"87b86e47fc7a80734b76ee6f3904750aa95ddea2","sha256":"1c9592a9747c097889f497667619cb50a7bcbe2480d856a5b59481dec9ccc895","sha512":"6ff0225c1b1d5d87a239de12b04585cbdb49fb387b8d3f662e9ffb3645d9761db275b02461c24963384a47e4a9dbb66d30cee2f42b95155ef4150e6ee3fe1a89","ssdeep":"768:ejfLEFQZ3z9/RxMqI8PYiedT32ESIyYC5j9Ge76gb74FsS2Hm25Sy7oBy3bX5ejg:GHpD9vMwSmxwsGc","tlshash":"3523d74ab013ef7e91f780a4b4681454b00c2f9dc1a6d467b2fe8d692bc6cba764473d","first_seen":"2026-06-30T17:31:51.472966Z","last_seen":"2026-06-30T21:56:58.883703Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=BNBUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.585Z","timestamp":1782856576585,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=BNBUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVC8kbInH01qX7MIhNeiTHvUOuvGteAgrqhdSQVxmKjwSfXlh6wNRqCWOpy%2Fog%2BGAaCnvRwUlw%2BTWwNjEbL2LhwJmIYpormXDaQZ0fPyWfRMhvcIOPIoEAj%2F0YP%2BskLhaYZXeyKk12c%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: 3500f611-11ae-44fd-be79-d9dafaa11a40\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae29b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9866,"size_decoded":2681,"mime_type":"application/json","magic":"JSON text data","md5":"1c264855104643ca29664a14c5a12811","sha1":"7843c38797cca8ecffa853310b1a0fdcb8feccec","sha256":"478f9ac63912fa6610cccb0d0ec52e909e48abb157dc51600793486a6ed0f976","sha512":"d0165f76116556db53ad4755e9b0bb57211f428538f8e3cad7a654ed47e67110b671cb29018bb73c5096d198421fb046f02562d333e98fd1d40f27bc37101bab","ssdeep":"96:ny1jFMnQd2pEhDocYKeUcwArqxuiYLZpmPfjTeyMeIGfXIjnrWVVRyqSjWHM/5lo:IZMQleB16jTbFpZd","tlshash":"04128c11e37bb9659966b5c14693bfc5211db90b10c3088a7f8c9fc10da0973bf1da6b","first_seen":"2026-06-30T21:56:58.884572Z","last_seen":"2026-06-30T21:56:58.884572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=TONUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.592Z","timestamp":1782856576592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=TONUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cdvV1r5iV2NabdG2vA%2FfPgyhsj0yr69kmcYKmahvyyjK9LwTqnuhzAnOatHQONzS2F82C023BNw16FyzVGShvcxLp3mNyWG52Q3zhMPL4P9YLSh%2FT%2B1o6CDVb9xLCfA55ehJIT99psQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: bb0e60cd-1248-4ec9-ae69-b38cc7f39827\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83be30b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9746,"size_decoded":2575,"mime_type":"application/json","magic":"JSON text data","md5":"866e86c6d5900668377aa7bb10129dbb","sha1":"424da26738e1fa5e62600d84441fe30a771f1694","sha256":"ba67e434a14ec582c8b5d8eb5218243bba4ca220d4b28a8bf6e6b37d0f8afc02","sha512":"29fe46b0b77167a68e7f3c0a33df44f759ba5158e96d7c7393e80d22e612e6525ac49870e1e98fd665f96d1cd785b947c93c0f1843ff2fc6a0f025a1468e5610","ssdeep":"96:18D6chss+YLJngJKJqj+yJBrpuJZL/JqRJDJRJNbJZJ62J5yNnsGiJNpKwQQnYGQ:hyWJf6fGP9z3cWiRd","tlshash":"f2127d22b337bc1a55666ec146937fd9151df80b10c34f59bb8dabc00ce4923ba5e26b","first_seen":"2026-06-30T17:31:51.35262Z","last_seen":"2026-06-30T21:56:58.885852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":604,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.604Z","timestamp":1782856576604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: text/html\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: W/\"6a1fe103-12c2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":231,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T15:17:53.208588Z","times_seen":17215495,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":164,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTekaMono-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.151Z","timestamp":1782856579151,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTekaMono-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35836\r\netag: \"d9f04a87559c7cb8fd4dc85e16f292c6\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:59 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a1406b951eb956ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35836,"size_decoded":36237,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35836, version 1.0","md5":"d9f04a87559c7cb8fd4dc85e16f292c6","sha1":"b1c409b4512757654e78381b461e4eae303bd5c3","sha256":"6f0fb7a71d24385e53113fd29c812c8923649e3063e12f8465d3e45a1b183457","sha512":"ee5be9d9cb4ac195c35f0285e971c4db7a6d0c26852ffc7d2c4eaf4c3b3ea311ffed98a20c1afbaf57c6159224cb108d9894a07c999b2f59615397040a28ef2d","ssdeep":"768:rhftQee8/9NOz7HTIMqJVDQtFDGHR91lSIO960XN1zu+aXw:DHe8VNOnzqV8GHj3S5XzubXw","tlshash":"bdf2e16bd8194560f9fcc87a0d8520ca2d81197635738d77f3999342bb9e33b21c789b","first_seen":"2025-09-26T22:05:13.133134Z","last_seen":"2026-07-13T15:13:49.790674Z","times_seen":575,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":79,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:27.139Z","timestamp":1782856587139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=stpR%2FMHo5LdtWAqb3tiDsKvFmkm1banG72vyyObLDxcDBI9KQEEZS5P%2FDXwx4nQRaPRQ92HM5Bc8tO4E%2Fm%2B2ixmWxpP6vpU73MRbFX1sjHEUZARPzP3%2FLwuktv0FD3ZM0Lh91yGdrpc%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:27 GMT\r\ntrace-id: 9c71ba04-fbda-48d9-afa9-b3ac7e261b0f\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406bc5aa3ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23056,"size_decoded":4042,"mime_type":"application/json","magic":"JSON text data","md5":"b305f6928d9fd4203c3ec838e13fb561","sha1":"2a95237b705e2a5aa01e8ada53841c2890240008","sha256":"71ea86057cfaf230c00875f5fa7a61f42c59263a8c4b6e1ffd22ba9edc986231","sha512":"2ee1db0f7208fbd964151a15df37d9b9ded6cba9a54cd5604114fe9663cedccfdf736a8efcd421b776cc469191bb096fd320482bc440ed934fc67300c3cadf49","ssdeep":"192:8LZpZIZxZcSZKZ5ZNZHrZdZvTZEZ4Z0ZoZ9Z1ZGZysZVZDZ+Z+oZ71ZO0ZDZkwZ4:8XN0k+m5K3","tlshash":"4fa23b561778e831d58868835057bbd0b0dc765b68cb8db4ffedce9c80f02661a0fa66","first_seen":"2026-06-30T21:56:58.887029Z","last_seen":"2026-06-30T21:56:58.887029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":432,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.B19X-eE6.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.184Z","timestamp":1782856577184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.B19X-eE6.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1228\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-4cc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1228,"size_decoded":1489,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (628)","md5":"1c2272a850e86a6ba1e7600b87205b5c","sha1":"f004057021360c999597bb8769760be399adad65","sha256":"f90eb4bd2761be9e3493562be6ff4f9cf8f0426ec581f01ff0d78bd7371b915c","sha512":"a35382fb1d09a74cef5d9a00f2598026cb894474e205c7453a4a92520e1e50c8a6eb48e5ab07faf9e85d054101581565652a8fb454c34a32eaf4384c636ae0da","ssdeep":"","tlshash":"472184c412abb228b51ba09447680702d13680625628ca2d739d73f48f490c9c0ba361","first_seen":"2026-06-30T17:31:51.401465Z","last_seen":"2026-06-30T21:56:58.891367Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1252,"timings":{"blocked":1031,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.bRFCacBS.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.199Z","timestamp":1782856577199,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.bRFCacBS.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 227430\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-37866\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":227430,"size_decoded":227695,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2314)","md5":"29149539db45314b2fc450af31a690e1","sha1":"1943d589584ad8d3d7039c8adca65605bf442ed7","sha256":"92d113b8b50a0af5967a0302fa7bdfede75b973fe1edd2e6288ebc6f957b6d0d","sha512":"a5947f8f0575b44acac45f71da2b47b41c0380714c6814225d115a3c00afcd47aa634cbdcad2e7e26f35760ddc465e510785df1716095abe03ea2ca2b367ac6b","ssdeep":"3072://2SV4bmbbYfj1BT5VAdpfkF62AdpfkF6z1MroTF9oGnjERvQeYjj4c2+vX0fB7u:2SVbaBC9o8jERvQtjj4c2+sfGAim6","tlshash":"cd24094057b5792c6b9382a488971a10d230940fd22d89bdf7ec92f5cfa9ac50dbe377","first_seen":"2026-06-30T17:31:51.546551Z","last_seen":"2026-06-30T21:56:58.892038Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1868,"timings":{"blocked":1433,"dns":0,"connect":0,"send":0,"wait":217,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Regular.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.148Z","timestamp":1782856579148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Regular.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42188\r\netag: \"a918aa94460a2a95ccfffcf7224df6e4\"\r\nlast-modified: Wed, 13 Aug 2025 15:27:31 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a1406b951eb256ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42188,"size_decoded":42589,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42188, version 1.0","md5":"a918aa94460a2a95ccfffcf7224df6e4","sha1":"9c690a4d67ca4f8fa4295524af06b4d061f8c8f0","sha256":"1491e6d9a713e703891bb7cff67f2f785c9616df0b81504a37be6c15a4706bc3","sha512":"7859869f84323541884bd97b25c2a8bb60af834457f17ef41ac12669fce15e442a5212acbc00a4f28fd6eb7bd2ea148f45de3b7195edc4b4f066f0a4e541fb39","ssdeep":"768:oIKoK4lzWnuGeZ660HRzqx1V13F3Eej9qtLzoq9Yps4me3Jw/GW6Pf:xKD+yu63ZqLV1V3ut/ENkGW6n","tlshash":"1c13f1a0590670217d2f91784a67d8cfbcb0b47e1e4a774f6c7cab5c0930916fcae585","first_seen":"2025-09-26T22:05:13.153365Z","last_seen":"2026-07-13T15:13:49.800807Z","times_seen":578,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":75,"receive":1,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/css/index.WTiqsHHo.css","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.940Z","timestamp":1782856572940,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /css/index.WTiqsHHo.css HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:13 GMT\r\nContent-Type: text/css\r\nContent-Length: 199658\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-30bea\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":199658,"size_decoded":199909,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"e3851be9b38a6a79005f737b039b35eb","sha1":"12846269a2fe7a7c5309f91791153f5a56d35cd8","sha256":"d69273f18a02b981163fa391f522a9c22a3c9a3e815ba5f360faadc0c9c4b819","sha512":"205d9faf2bf60639731a7a6d9fec57599fcc706ab373587e90b0cb994594f6d83bde1fc71d0a819cae79f22456c285f59428dfe9f179de0855fc074397033e0d","ssdeep":"6144:Xxsaw8cllrFyuCSXeP7qsmv+ycqjpZFyStMJcS5zxgMrWVCJIVognx:X1illrFyuCSXeP7qsZqjpZFyStMJcS5Y","tlshash":"93141974aad445bcae1bc256934a95dc762ef1b0df0279e1b101362487c73ff2863539","first_seen":"2026-06-30T17:31:51.529831Z","last_seen":"2026-06-30T21:56:58.893217Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1542,"timings":{"blocked":657,"dns":0,"connect":0,"send":0,"wait":221,"receive":664,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BgmI2Z3a.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.527Z","timestamp":1782856575527,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BgmI2Z3a.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 5078\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-13d6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5078,"size_decoded":5340,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5077)","md5":"783686ab268b012cdde8d9c87b8c01d9","sha1":"1b486d91906edcaf3f3b1e09165021ca11b92bcd","sha256":"fe10b15caeb3b4c563a341850aee9ae1ec4d3e5158927845cf3abde5e40c9314","sha512":"710370e7950c9d56007ed12d1bec61fe9a6073e90bf40962e7ef430cb565bef403985d5cccc5e09cd71f0293f4b92cc7cc8e84aaf8292a41feb6a30d52c0381c","ssdeep":"96:YZcifgh6pyNx0m3kRp6C5cSnR7yZ5iV4MKQyghl/EXIPIEG4n7sLfhnDdB:wfgGKxX3kRQEcSnR7yZ5iV4MNjvmI24A","tlshash":"15a1d7e53480f977873895cea0a001d0876567d8312bc7ee71ae0e0b3a48ce955bea07","first_seen":"2026-06-30T17:31:51.535277Z","last_seen":"2026-06-30T21:56:58.893866Z","times_seen":2,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-setting","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.574Z","timestamp":1782856576574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-setting HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXQncyxp7j2H0Tg67ome1GHtMo2MUfYwokh4XWLt9gpxgZJM1dZDSvBoywRT2W6I1oG%2FNKomyZExWE%2B0jok8xR23lI3T9wU0VLPSoJ%2B%2BgPCu9EFDZSfITXoYF0dbGGBqvG5t4wgdJzA%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:16 GMT\r\ntrace-id: cb1a6df9-c925-4aab-881e-4a26c6cc3d71\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b839e21b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172,"size_decoded":912,"mime_type":"application/json","magic":"JSON text data","md5":"6ec94e054382209c9fe8a1af75ebf468","sha1":"b4cdd604b84b7e20d37ca9f56d5e68a7ed94bb23","sha256":"77900cd836fba8272b4fcffb6b7a956a52b09d64a2943b4d51475d796904fd6b","sha512":"6632dc61e056d6ab4111fa219e469573152b2270a5537dd846f87fc713c22bfdcfff01decdec0845a9f6e5d385aaf28361a792464d822402fb49251a72cbf05e","ssdeep":"","tlshash":"22c0c0100ce4b0a41ad7d10c253a2c2216c8b4f119003c12c4f9403c8ec80350141c00","first_seen":"2026-06-30T17:31:51.531015Z","last_seen":"2026-06-30T21:56:58.798674Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/img/TON.CdniOtha.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.584Z","timestamp":1782856576584,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/TON.CdniOtha.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: image/png\r\nContent-Length: 8434\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-20f2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8434,"size_decoded":8683,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"3ec9b79f8ce355d514d89957318f2682","sha1":"6b4fbc8a17cbd0684416363e2846b92e81b12bdb","sha256":"e6c7988f064b561ad345a846c00b118d563305763f853d3f2bda63b5c745e714","sha512":"27af97fd9799f6aeb098531399b8fb88c9b9eb2643be8e79b518d1d7211a4c5490813b21c9c2f300bf702432d90ad6291a1edba83c4e501a92aef816e13ebe9b","ssdeep":"192:wd9fWTbtg7VJtpYqxzk4EunA8HaaHBQxG5btlozsvc1ecO4tH6sao2z9q:wdZotghJo4EC36aHBQxG5b/ozIcgcO4j","tlshash":"7f02b02316bf69bcf119dc9b48a48d41ec4102f55b8fa6d1931850ba03a9bcf2c975b4","first_seen":"2025-02-26T18:31:17.525824Z","last_seen":"2026-07-08T14:59:29.781942Z","times_seen":38,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":399,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DXmaE5fs.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.134Z","timestamp":1782856577134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.DXmaE5fs.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 54944\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-d6a0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":54944,"size_decoded":55207,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9049)","md5":"d0eba7c4809a9ca040a217466a8b7c3e","sha1":"3832100ccfa15043954f0475c4a74097c0ca8e72","sha256":"4c6ea10eff9fae5cc8e0b8c7d10d99af3a6993b96d35fb10a4ee6ea64d662b68","sha512":"fd63ec445cd5e7839b1d363ca6853e5cca9db8e1b498dd09c8cca921ffce8bd31c8f0aa429ed5f8694d6b4acf1b6e0dcc8ed0571536385d9f2de53cb8bbfabef","ssdeep":"768:XjGgMoVKCobDj8kxu9mKMHPT0Yrtj1vGaA7nf1G4/RDdn47kXiCowQtB:TDMoVKCogkI9rgP9UaAfT7RSCowQT","tlshash":"36333be077b9b86494430f247f2f6221132a187f3246c1a9f74d6f945fc62c9ab49b6c","first_seen":"2026-06-30T17:31:51.539662Z","last_seen":"2026-06-30T21:56:58.894939Z","times_seen":2,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.SuR6Z8Aj.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:12.932Z","timestamp":1782856572932,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.SuR6Z8Aj.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:13 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1631540\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-18e534\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1631540,"size_decoded":1631807,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63843)","md5":"48513f102b99b3b797b681e7d5579183","sha1":"cac6184eaa3924d5882a507c7d31cbf173b76bc5","sha256":"7e9d874ae0593c3db3f2a6eab198d4315b19a273d34672775ca823aadc4ab536","sha512":"b83dcb9fe35c30ae0bc3efb07b43188abad01daa98d9cb7e6cb5798df9b297f46eab44be5a337c191a019d7d15188e0109826ec060cee3b9665e52ef265472c1","ssdeep":"24576:+N855Xr1n8sAW7PZHOgsAy7nevowdJ++Wrcdukb5kN2BC5i0T6cjcpz9d:+N8T7pFPZHOgsAy7nevowdJ++Wrcdukn","tlshash":"af25afb07251b0654be760e5102b1001ea385d96b04dc0e8b6bcede77ee9d89967ff38","first_seen":"2026-06-30T17:31:51.469404Z","last_seen":"2026-06-30T21:56:58.895495Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1549,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/project.BN3mjQBV.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.537Z","timestamp":1782856575537,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/project.BN3mjQBV.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1669\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-685\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1669,"size_decoded":1930,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1668)","md5":"cbb19bc5238dadfc3235e9cf92c4dc93","sha1":"7c3ba7c9783ba4d53b411e4dcb057cc1ed10beff","sha256":"a79db698f46c2f6109ffba9fec5cbaf5114b190865e5aab19b092dab33e85420","sha512":"c82fd06e525666053855cf669959d7a5ff3a48524c5fd19eab9500e9d17dac85c7c6903e503888164efb4447e3ea5b0be6d9b93fb9c32ee96740a475cf4ee915","ssdeep":"","tlshash":"2a31f6c83253e97103fac60959ae602fe6fddbc0c43d69a3be1051833da5d3c61268d5","first_seen":"2026-06-30T17:31:51.449503Z","last_seen":"2026-06-30T21:56:58.896077Z","times_seen":2,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.DaigQDVZ.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.640Z","timestamp":1782856575640,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.DaigQDVZ.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 317219\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-4d723\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":317219,"size_decoded":317484,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f053f3615eb7462466136902f1100033","sha1":"c519bfd593f7c6ea6eceec611a158487cb2ea7e7","sha256":"e2df3287644583c2299a413aea359e202405539323562cb1bfe76224f2097b43","sha512":"eb007f2051e101f03c2bd22e407271987499319cebe871f85da31f5d796cd1e1e6e82bfcf8ca2d34a35c1c06d69aebb3450730de07ac75bb6f393016777ddcef","ssdeep":"6144:bUN04QnSPjJBWMOLtTZZupzIkQ6tRSVIL9u5ObFKIXo2KHuFPLE551OiWntSWI/r:k04TPtBWMXQVILBo26udLEDkIau","tlshash":"46646c84b241b0788ee721ea60372105f235ad51b4cd8494f7e8eae72de988d5357f3e","first_seen":"2026-06-30T17:31:51.340677Z","last_seen":"2026-06-30T21:56:58.896695Z","times_seen":2,"resource_available":true,"data":null}},"time_used":758,"timings":{"blocked":323,"dns":0,"connect":0,"send":0,"wait":217,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/homeTopIcon1.BUpVMNA-.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.548Z","timestamp":1782856576548,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/homeTopIcon1.BUpVMNA-.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 6730\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1a4a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6730,"size_decoded":6979,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"794439a9b8b2731606e8190bd77ec0d6","sha1":"3add0a1d8f8a38e69a38ba5ce77ab517cfe4d5f8","sha256":"0bf6376212acd57b719b16d9665153bf1d4394d1ec9207dc3ee631e5b31b82b2","sha512":"e2545dd6417a3187205b1790aab45c4aa8421cf031c4b5d5fc2db7a005c145199df2c508065720db9934f2587c6a569b6c182afadafd31f4079cecaa4a99ae87","ssdeep":"96:QHUHLH6IkdXYuS9LoUXV0Qdd/styKlvDEMI+POLG8Iy0elPWhSjMflpAoQQA4OU8:3WrYdLoEzd/sDvDEMpPgWhSYduoQQAd","tlshash":"57d19ee578d34ac4f4545e42a39a91e305bfd0ea28bf1146a2757b013a0530f0bc8b8e","first_seen":"2026-06-30T17:31:51.408283Z","last_seen":"2026-06-30T21:56:58.897348Z","times_seen":2,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/HelpersUtil.BKQYOQMn.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.147Z","timestamp":1782856577147,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/HelpersUtil.BKQYOQMn.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3135\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-c3f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3135,"size_decoded":3396,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (749)","md5":"65b003f14db3d440ef1e06a8ef4b6d8c","sha1":"64ecb13792a617003794436bcf9a2bd0b8413f0b","sha256":"b6ee82792095af1174ecfe5eb414f33f708df29b99d3f360c83faaf73c0eb674","sha512":"545f26b728e0b72f85226f194befdc06d4760387855b09f5b9a67907428efd740c013756db1d96fb35d3ea655cb02d20843a102220512df2548058bf106f02ed","ssdeep":"","tlshash":"c15163c9f3be7e65354700a9c9add920a33ab01a1915ef3e3bdd63e54f0af817856420","first_seen":"2026-06-30T17:31:51.356856Z","last_seen":"2026-06-30T21:56:58.898099Z","times_seen":2,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":180,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BPucXlFe.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.156Z","timestamp":1782856577156,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BPucXlFe.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 5641\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1609\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5641,"size_decoded":5903,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (724)","md5":"d20d0876a1c404218d3a14e7e933ba34","sha1":"9b45a64dd5fa2d86884d629dfa2d03f3ff34df90","sha256":"3adfb4854c09049c432dc405546236e707ac2cd1eb677c25ee149c6f1e99e548","sha512":"f5aa2d95d74c2a27c80199f8e9ce1685b36c691922c40055202712c1671678f545d57325e2b9654410a8c41b2925bb53d49df605e4f3a72060c68abaf18820fd","ssdeep":"96:Tqere/ioSNJrWM+qyWQRlFohVmwFgjLqMZnDjpWpiegFm0v:Tqere/ioSTWM+qXQRlF0iXB4piVmW","tlshash":"97c142d5bdfd2e7a3517c024b19e49a8e334b0279424df3e77ac61f84f55a42581ca22","first_seen":"2026-06-30T17:31:51.52714Z","last_seen":"2026-06-30T21:56:58.89883Z","times_seen":2,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BdagyPaT.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.159Z","timestamp":1782856577159,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BdagyPaT.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2973\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-b9d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2973,"size_decoded":3234,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (567)","md5":"16414d5057e653334f514ca6cfd59000","sha1":"18ed3af61402cf2493ec64e43e69e8efba82e600","sha256":"4799e1f0adff3f38859e03f0d67fb7c7034cc0214baa09dadf0b6f9ee5fc1112","sha512":"e76e2ddfda65b4f30bae061c70f6b92c5789efec9ea59e35bcdf23f3aac4f590ba15a027897a37b0cc6937c7bde8b995fec3227439ef454ec221acabb642a83d","ssdeep":"","tlshash":"71513184bfb43d67376bc065e06e8521e335a0399828ee7e734c92f80f59a83556c932","first_seen":"2026-06-30T17:31:51.399567Z","last_seen":"2026-06-30T21:56:58.899957Z","times_seen":2,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":372,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/swaps.BafOF0iJ.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.175Z","timestamp":1782856577175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/swaps.BafOF0iJ.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:18 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 54924\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-d68c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":54924,"size_decoded":55187,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3213)","md5":"3dfca4ff5370e07ce1c8a12722cdefc7","sha1":"14bd3f148ba9724a625f4f50585add4df146655d","sha256":"739003547ca850c9bf3eb8392ff42df90f7eb5c1551874089f3fd68527879fd9","sha512":"6d927c9303630910a04f10c1ff8af50637d2fff41528415e0500b3a3b5d5ad99341e2649ececa6f9f46dd173a6393bc330c3f5948dc1e283266e82b3e1c86c9e","ssdeep":"768:pwmHmVhjbL4vrdA9vXJV5dUFP53JrbUGjuaMp67luIGsJiJ6bB2XxF51TnerBXUS:1HgLmdA9ddk0Gjs67lTGsJiwEXxFuXT","tlshash":"4c33daa073a2286d7916a199dde75d005231d00bc029ddfefaec82e14f96e4b19f7372","first_seen":"2026-06-30T17:31:51.480864Z","last_seen":"2026-06-30T21:56:58.900598Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1223,"timings":{"blocked":790,"dns":0,"connect":0,"send":0,"wait":217,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/option-contract-setting","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.523Z","timestamp":1782856575523,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/option-contract-setting HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QqAOKInE1FxfYwTbN80VqoiXnLU1LFL4fFqJB%2Frg7MRggHXnlwEPVfwfWH9vaFtbYuAqFqLYD4AzVa8zhQvJUiA2RbBQLgR4OiWnGt40MiVkOuwZE7hubWP%2FyU2dCPp6QqHPO%2B8Wha8%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:15 GMT\r\ntrace-id: 0135c604-f9f9-4c30-b884-c755be4feb6b\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b7d5d00b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":290,"size_decoded":966,"mime_type":"application/json","magic":"JSON text data","md5":"83652ec1310ef9111611af11bb6b5ccf","sha1":"7743604d612710c4f373991e060367178efd9009","sha256":"e3fe1289cc4758550c8e84fab5fde4106746ee3d064d6f5e3777e18f817cc05b","sha512":"4bef6ae4b761050444384b71516605c57726f4aee8d91a41b676543c8adb069a5d19539c2423514d15d55baebf63a49a76fa46164824344fd33e97535796691a","ssdeep":"","tlshash":"ccd0eb043eceae00b7f70024c7c9a62013f4a682404cf808e9fc027401ba0cbb023803","first_seen":"2026-06-30T17:31:51.409291Z","last_seen":"2026-06-30T21:56:58.901275Z","times_seen":2,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":36,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/useHomeNavBar.D2oNeRV-.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.530Z","timestamp":1782856575530,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/useHomeNavBar.D2oNeRV-.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3951\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-f6f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3951,"size_decoded":4212,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (3946)","md5":"2c4c7d3f4f09d0a12dbd374379a5b82d","sha1":"3e75bdc8c030bc1023e33ac8dff4551f499dd2b1","sha256":"18652bfb6dd2973264554dcbede7cadb0f47053d14767751b08d2e396b1a77e2","sha512":"698cc794fb93ce0c5771a5802108c2d6be7ab73061415a87e2ada6de95bd76139253e23fc0387e3dc5b25d87e4efc6fc4fa2c4cdba60c61254a3314961b650f6","ssdeep":"","tlshash":"4681b608700a9dfa5bd70465b8694442c19a5fcdca70b8da70ff641773cbca8cbca358","first_seen":"2026-06-30T17:31:51.339753Z","last_seen":"2026-06-30T21:56:58.902026Z","times_seen":2,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/img/withdrawal.C1sxItyc.png","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.560Z","timestamp":1782856576560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /img/withdrawal.C1sxItyc.png HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 5891\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1703\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5891,"size_decoded":6140,"mime_type":"image/png","magic":"PNG image data, 810 x 810, 8-bit/color RGBA, non-interlaced","md5":"23250dde3e4b52fe96cf0d0eb9ad0f2d","sha1":"47428383736e229dc3dadd6a0ed170af8ba9a57c","sha256":"2aecf164836331202b6c8190fe6083a94e46ed70b18c9e58fada16651b825933","sha512":"4e1a4760ac1dd09aab7b0efa1ac93de4a8cf682cf91bb7d5ee815e66c013f5f74793a319a0dc3d6b28a534f6311d5a718bed4164ee8b4854e75c3f6195adfee3","ssdeep":"96:6bKvFnjevBcqrB3X50OLDK4cXzQTkOq3R:QKvpe1JJVLD9ccwR","tlshash":"66c1358d0b81f09ec971e1f0ff6d292114435d6fe8db6399bc691f5a830f6191a74ca0","first_seen":"2026-06-30T17:31:51.53219Z","last_seen":"2026-06-30T21:56:58.902736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=SOLUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.588Z","timestamp":1782856576588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=SOLUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GP1%2BR3biyx2qhIjGIS9MpIs1RTFhfP%2FWjq5voW3gRgC%2FaPyKFtWxUY60J5AXeYzVZnQMhXY44QtI0GQjhTg%2BCiRjjRhuwSIphU3%2BKECalKH7TVHcABT3vDl7zcsLWgSKF3dNw%2BRQuq4%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: 37f29c56-a441-4d7f-b8ac-786c174b4d0a\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9745,"size_decoded":2633,"mime_type":"application/json","magic":"JSON text data","md5":"bd3cee71ebc732a84b95ad377328ce25","sha1":"82e1fed26a683b530cd4f265e80a2864a04771bf","sha256":"dcc83146bd208e1c2de0fcb9df097f8c6df3312c93c6fb236cef39dd283694dd","sha512":"39e465d84bb20eac24cf61f6951459b1dbcd888d53012d73522830be8fdb7108116385a5bbddb6453166afe732557c014c9a09a1c6c6c867929ad0aff12dd2e9","ssdeep":"96:xvYLW1mH/jUHGHV0332YgJcy50bgUTmuD91beOhFDISz9+uXmkIk9A65jfv9IjvL:jmfyK+HD5XqoxSYUd","tlshash":"ed127c12e33bb8259576b1c14593bfc4655ef44b50c38c5abb89dfc488a0833bb5e26b","first_seen":"2026-06-30T21:56:58.903431Z","last_seen":"2026-06-30T21:56:58.903431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cca-lite.coinbase.com/metrics","fqdn":"cca-lite.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:21.667Z","timestamp":1782856581667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 17 May 2026 03:56:51 GMT","end":"Sat, 15 Aug 2026 04:56:49 GMT"},"fingerprint":{"sha1":"8B:9E:B5:5F:87:EB:1B:7D:0C:57:42:9F:46:3F:31:3C:74:5D:BD:DF","sha256":"9B:AC:83:89:C1:84:1D:3C:9B:E7:80:80:B0:23:CB:AA:F3:F2:3F:A9:6A:58:76:B1:06:05:A6:7F:5A:B6:50:C2"}}},"request":{"raw":"POST /metrics HTTP/1.1\r\nHost: cca-lite.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2014\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:21 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ntrace-id: 2619665634837138458\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nset-cookie: cb_dm=27bf0b9d-84c0-4a25-8a3a-ce5a66adac75; Path=/; Domain=coinbase.com; Expires=Mon, 30 Jun 2036 21:56:21 GMT; HttpOnly; Secure\n__cf_bm=6oRxBSI3scPVJo3MgpzPmf30okBXcUEW.Ot2rikHxoA-1782856581.6931145-1.0.1.1-NDIwz9AIr9VI1kSWM1ZYY0x5ZfG_7l25ELQqECRORnsG4UDzA0P35fS.mZhcXcFw_ZuOui6ra.OnmfN3XJ3EnSwp31BaNpKMKAMSSZe4WTqr7uLYn0TJYtbLiMa.4WIm; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Tue, 30 Jun 2026 22:26:21 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fuyqb5meO2GE794BMRPTGufxrIgctPZeQWwds49GUzODvMp2vHECr9d6ng4R9KZkeWwFB8XKtQeJSRF8QZ78y%2Fm5OT%2FKErumzrS0318hz67gJK6ynhrar4xjh1CCqpTVR2FvhZjw%2BQ%3D%3D\"}]}\r\ncf-ray: a1406ba398d956b1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":3672,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T15:17:53.208588Z","times_seen":17215495,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":5,"connect":1,"send":0,"wait":122,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:30.580Z","timestamp":1782856590580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BTa9DqzEjPzXb06humnWLuPKI%2BbPFtWZKKzmBMePHTKBuRjNFAtNQjChMuqhwljN5bAH%2FiBff98Ukjuknon%2BxMgtF%2B4QPoVvK1VL4QvQAnvskR6EoV%2B0FVspLrCd20yMU7Ky45eaQcQ%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:30 GMT\r\ntrace-id: 51f824f8-420b-4059-bcd5-112515054fd4\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406bdb2f5db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23059,"size_decoded":4039,"mime_type":"application/json","magic":"JSON text data","md5":"c9c25d43e730b517af789bd1af9ba991","sha1":"c7448b05e1d856a8d39a829b9a26165a2855fce7","sha256":"4f7b1fd9830b3b4164085ac0d226370a693fb3382ed484dc20be6db0a7f5fa10","sha512":"62b8c4d91e3c6b34a8097597d72c695d9dcc826230a08deda2d3c6c1e8fc32e3bd8239f083fecbb350f51f24f7e4b9b637849c33630ce5c66ec294eb42015f26","ssdeep":"192:jmZ5ZIZxZcSZKZ5ZNZHPZdZvyZUZ4Z0ZfZNZ1ZGZysZVZDZ+Z+oZ71ZOLZZZkwZ2:jEcOk5m5j3","tlshash":"5ea23b562774e831d58868835057bbd0b0dc765b68cb8db4ffedce9c80f02661a0fa66","first_seen":"2026-06-30T21:56:58.904676Z","last_seen":"2026-06-30T21:56:58.904676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":232,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=LINKUSDT\u0026filter%5Binterval%5D=1d","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:16.589Z","timestamp":1782856576589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coin-klines?page%5Bnumber%5D=1\u0026page%5Bsize%5D=40\u0026filter%5Bsymbol%5D=LINKUSDT\u0026filter%5Binterval%5D=1d HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrduGBS2z%2Baq6aqwKPYKTXc4WKg6Z5QhriFDLLx8Ryj%2FIe94BuWVOGFHRv9bf6vY1AKClvujV5N4qNFhelUnNUb8In%2FC2fwPnqjpqNpgaVEaVnTi05ldrZWz6qLZ%2FNw6ULMhJbWIeZs%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:17 GMT\r\ntrace-id: 3a99a3ab-72c4-4fac-9f22-bdd28cfdec46\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406b83ae2cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9764,"size_decoded":2589,"mime_type":"application/json","magic":"JSON text data","md5":"42c53fd9f0483333e1712e13945c652a","sha1":"00fa0b924caf01b62db75f3385a14302ec93deb8","sha256":"4dbd91a0833210da6e9840d28f3b86968afc5a30f9d926a40bc21aa14daaa6e7","sha512":"8b6a7082d137100c375dc9077cf0a42e75f9bbb36a5d9fee0b73d5446705151d3087318c702f6a7826f25059773816ee210bf82727887ece718425c8f9a2cd1f","ssdeep":"96:lDYgfDnIQmaWO2UglP7ZuUVrVMH/38R+cskRCwXqUibFCX/ixZ3sedakmTBlhAV4:Jbmg+KQ4bog6xFd","tlshash":"8f128f51e33bb81b65757ec141a37fc8956eb40b11c30e5a7b898ec40ce48777a2e29b","first_seen":"2026-06-30T21:56:58.905737Z","last_seen":"2026-06-30T21:56:58.905737Z","times_seen":1,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/embedded-wallet.B6Y5f39V.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.131Z","timestamp":1782856577131,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/embedded-wallet.B6Y5f39V.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 23404\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-5b6c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23404,"size_decoded":23667,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2624)","md5":"f269422568c8b8890a09fdf8b9390433","sha1":"0e4d24aa5dfb022cb9e83fc19601da9b647302ac","sha256":"8bb73ad2c0b870f59e2de46a78aafe13b9a78163c57f9ca8d1b5e89c734ec90a","sha512":"8bdc65571bf0d201f25fda372a3053cb1a64e78382dbb204bbf46928ecedc1a3dc204dd1828eed2a8b85dd8ffda7d31f87aca715b13ea480fed7a8f244b8948a","ssdeep":"384:7qAovphR6sy5ID38XpdcQ0iDsOctE208PYdSuf2wcrRJbexWTszP1lsXXFH8od:7UvTRI5ID38XpdcQ0iDsRtEP8gdSuf2V","tlshash":"7cb2f7413db669ad2843d0a4def64905e231a00f9424892eb7fca1f68f99ac514ff335","first_seen":"2026-06-30T17:31:51.425009Z","last_seen":"2026-06-30T21:56:58.906772Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.C6IGKBVg.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.150Z","timestamp":1782856577150,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.C6IGKBVg.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 6276\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1884\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6276,"size_decoded":6538,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (925)","md5":"db6d8c04fd9aaa032d30236f3a258571","sha1":"06560255799de7768d6cbbb9a95cc0cec0e7a457","sha256":"e8bfdd683a2fe5cead0faf5d088bd24da62fb3168b784ce9b0abc9c843689d6b","sha512":"37c3c6f9d36fd1ee423a7f482840d293390c19256a791d6cead05c6658d82100e079e6a75b1be507e4666d0f1c5e8aa9fc89240d6254f35237170f3cdad31cd9","ssdeep":"96:yj4ru0eWq6OWC+N+DF5siVqnNTyX2lpb0RkIMtz/y0uixKh5r7+Q:y+u0K9+N+DF5siVTXIfzuJ","tlshash":"ded151d13f756d181613c934a7ae9c45e332a0778c29cd7d77cc92e08f4aa405aadb32","first_seen":"2026-06-30T17:31:51.554581Z","last_seen":"2026-06-30T21:56:58.907508Z","times_seen":2,"resource_available":true,"data":null}},"time_used":494,"timings":{"blocked":270,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"max-coinbse.com/js/index.BjHhMDqs.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:17.172Z","timestamp":1782856577172,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/index.BjHhMDqs.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:17 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 28302\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-6e8e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":28302,"size_decoded":28565,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23863)","md5":"392bf4357c00eb0cb24c7797b752739b","sha1":"278cb90f9e56c4e9a45c707a83739e263294dd2b","sha256":"186e9e63e6054b57eebcb8c4b438747606f7d5eb8055353d0bbf62690b60d5ca","sha512":"0178544194c3be84cfa532eb78a5debc697695bcfab4f5f943520ea4130e57955271772d77600bd690b4b76dd04dc1f3db35291e52617007a43f790ed03a0c1c","ssdeep":"768:BOgJWnobFoOG1HNQTDi7ZplicM07pFHvX3e4W938tkWIm2FqtNKRVIJju6n:anCTSOx3Obn","tlshash":"30d20998b391707a539751d6003f0405e2bda824341a54bdfb4ca8d3bf75eaa90bbf38","first_seen":"2026-06-30T17:31:51.492684Z","last_seen":"2026-06-30T21:56:58.908294Z","times_seen":2,"resource_available":true,"data":null}},"time_used":904,"timings":{"blocked":687,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.reown.com/KHTeka-Medium.woff2","fqdn":"fonts.reown.com","domain":"reown.com","tld":"com"},"ip":{"addr":"104.20.46.121","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:19.144Z","timestamp":1782856579144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"84d97dd5.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 05 Jun 2026 10:43:51 GMT","end":"Thu, 03 Sep 2026 11:43:48 GMT"},"fingerprint":{"sha1":"91:40:F4:7D:C5:F8:DA:AF:EA:C5:00:CF:F9:DC:8A:48:7A:F1:78:4A","sha256":"B9:B7:11:8A:06:3A:30:B9:21:E3:D9:BD:D6:64:47:DC:C4:E4:19:81:FB:E2:BF:05:52:D9:64:27:58:50:2B:82"}}},"request":{"raw":"GET /KHTeka-Medium.woff2 HTTP/1.1\r\nHost: fonts.reown.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://max-coinbse.com/\r\nOrigin: https://max-coinbse.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 30 Jun 2026 21:56:19 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42388\r\netag: \"b4654ab0ae548e33ee07aa61dcffc61a\"\r\nlast-modified: Wed, 13 Aug 2025 13:41:58 GMT\r\nvary: Origin\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncache-control: public, max-age=31536000, immutable\r\ncf-cache-status: HIT\r\ncf-ray: a1406b93dd3756ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42388,"size_decoded":42789,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42388, version 1.0","md5":"b4654ab0ae548e33ee07aa61dcffc61a","sha1":"a76a9e6e214dbb1442d49384ddc04ab15f646f8c","sha256":"72b1a6bb274ab9bec5b0c7ffa3294d57aeb40e5e1ddcd636608f7b303a5a188a","sha512":"b4c066a098813b2c9ece27477bea99378b5e228b466c19175a01f75a324f3a28d8003b50ac4202263774492d90c7c32f3911987b79816eec3e86f146a4c703ce","ssdeep":"768:lvEK+O85aFN+GawIrhD6BC07w+/m29yWiaZMPhpEqAJhxyCd9/xk7VremoV:qK+O2aD8hD6BC07w+xqPEtJhxyCdxxks","tlshash":"2313e002c08249d79ed6913b3232aa1b3ab1b6d8d634e5fc42349df824e6c1f989d324","first_seen":"2025-09-26T22:05:13.166396Z","last_seen":"2026-07-13T15:13:49.729015Z","times_seen":577,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":74,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.optionsmarket.top/api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true","fqdn":"api.optionsmarket.top","domain":"optionsmarket.top","tld":"top"},"ip":{"addr":"172.67.154.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:33.989Z","timestamp":1782856593989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"optionsmarket.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 12 May 2026 10:49:00 GMT","end":"Mon, 10 Aug 2026 11:46:26 GMT"},"fingerprint":{"sha1":"93:C8:D3:5E:7B:DD:BD:48:B1:6A:FC:3D:FD:4B:CC:11:5A:1A:9D:BC","sha256":"F8:B3:4D:CA:1B:CE:D7:99:C8:96:CA:FA:9F:F9:7B:75:A5:40:E0:CF:26:D9:21:87:96:A3:D7:53:AF:4F:40:4F"}}},"request":{"raw":"GET /api/coins?page%5Bcurrent%5D=1\u0026page%5Bsize%5D=200\u0026filter%5Bstatus%5D=true HTTP/1.1\r\nHost: api.optionsmarket.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://max-coinbse.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyPsXsuXf04j5EPAQhqfdpzt0KFXdWgrCtwVJxnwlah2JZGVya7P5LXZy2VHsj4LHJsXDi6FZ2hthvWmsnlj2lx4m5t3nox8HezkPTZ5Q7CgwVa8a%2FRcW3mvcjOZ0Mrtzd3aF932O70%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Tue, 30 Jun 2026 21:56:34 GMT\r\ntrace-id: 5662e76e-79d5-4fc6-9e2d-ef396d9f0c24\r\naccess-control-allow-origin: https://max-coinbse.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1406bf07ae8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23058,"size_decoded":4041,"mime_type":"application/json","magic":"JSON text data","md5":"4b734c3c294b2e828a28a164a703da70","sha1":"9281ee371cda36982832757e2922ececa380cf60","sha256":"5a38f491474b4f126180ec0a59a4845ed56af55e7720fd611895d2e96b07c570","sha512":"1e1cee12a51a529b7807b16439ad9b38e4fe2e7da18091555291432a31d166f4a0ee422913df6cdc704835b1ab0c7617553a95dedd08ccb4740bda9b7f14c4ed","ssdeep":"192:jLZAZIZxZcSZKZ5ZNZHPZdZvtxZjZ4Z0ZfZPZ1ZGZysZVZDZ+Z+oZ71ZOLZBZkw8:j4erknm5y3","tlshash":"32a23b562774e830d58868835057bbd0b0dc765b68cb8db4ffedce9c80f12661a0fa66","first_seen":"2026-06-30T21:56:58.909647Z","last_seen":"2026-06-30T21:56:58.909647Z","times_seen":1,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"max-coinbse.com/js/mining.BfTrWBRs.js","fqdn":"max-coinbse.com","domain":"max-coinbse.com","tld":"com"},"ip":{"addr":"18.229.199.206","port":443,"asn":16509,"as":"AMAZON-02","country":"Brazil","country_code":"BR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://max-coinbse.com/","date":"2026-06-30T21:56:15.538Z","timestamp":1782856575538,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"max-coinbse.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 25 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"04:14:D1:61:CB:2A:64:71:A2:F2:76:FE:15:9B:20:9A:80:A1:81:4E","sha256":"20:F4:6D:25:CC:0A:C6:CE:2F:0F:AF:4A:29:CE:52:DA:12:DF:8A:7F:8D:B3:E5:5B:F1:61:41:1D:8F:7B:89:8B"}}},"request":{"raw":"GET /js/mining.BfTrWBRs.js HTTP/1.1\r\nHost: max-coinbse.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://max-coinbse.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 30 Jun 2026 21:56:15 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 449\r\nLast-Modified: Wed, 03 Jun 2026 08:08:35 GMT\r\nConnection: keep-alive\r\nETag: \"6a1fe103-1c1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":449,"size_decoded":709,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (448)","md5":"320f8ed4625958f9febd3009f28f196a","sha1":"a80a486989fe632009c6fe7a98e650c65d87f7b3","sha256":"b293f54fa1b256df2d6e14e49fd3d1036f7bcbdf8645253af776b5b3a6e100c1","sha512":"c0cc1695a70a63d8e678a73d8a7751611072bc9da2fc052d3e544c414939dcc2dc223a285242f65e7360416e5f9f8734ace8ec4ac3e1394e5f5dc583cbac6d0b","ssdeep":"","tlshash":"19f0a74d6657dcb123598408865e251ffbbac2c0803d69717d0095513ca0c7e712e58a","first_seen":"2026-06-30T17:31:51.361721Z","last_seen":"2026-06-30T21:56:58.910767Z","times_seen":2,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-06-30","alert":"Sinkholed","trigger":"max-coinbse.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}}]}