{"report_id":"15b39802-bd86-4d75-b001-0c1b5f980074","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-02-03T11:42:21Z","url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"104.21.75.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"title":"Receive payment | Coinbase Commerce","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"104.21.75.68","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-10T11:42:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-03","alert":"Detects file containing Telegram Bot API","trigger":"coinbase.poiymarket.us/after.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-01T22:14:44.580478Z","alert_count":0,"request_count":1,"received_data":8834,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-01T22:17:46.954894Z","alert_count":0,"request_count":1,"received_data":5478,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"coinbase.poiymarket.us","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-09","domain_rank":0,"first_seen":"2026-02-03T11:26:50.541028Z","last_seen":"2026-02-03T11:26:50.541029Z","alert_count":1,"request_count":13,"received_data":8250962,"sent_data":6270,"comment":"","tags":null,"fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"esm.sh","ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-06","domain_rank":47501,"first_seen":"2020-09-23T23:39:41Z","last_seen":"2026-02-02T18:32:20.286089Z","alert_count":0,"request_count":2,"received_data":67719,"sent_data":931,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-02T03:27:59.599518Z","alert_count":0,"request_count":2,"received_data":815972,"sent_data":836,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"coinbase.poiymarket.us/after.js","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"83a3318e9c2bb837655edcb95fdc2878","sha1":"3e55908908bc366ee906e6f81e0fb8dd0073ab54","sha256":"8dac9b1183df09f663d69e431a64c9eb7509e2882013b3c23100e94106a863ed","sha512":"e351af6c591eedacf798388aa958f93a0279a5b0aea11b3292792bd6e74ae567a683608022b1e10d283261765e4080156f9f46578fd246b28eec1216eaf18f9c","size":4844480,"token":"8208090838:AAHo4ZpN32TcBv_jdN_uRQ0-ZiBb51wakdU","is_revoked":false,"bot":{"token":"8208090838:AAHo4ZpN32TcBv_jdN_uRQ0-ZiBb51wakdU","user_id":"8208090838","username":"shushxhxjdjauth_bot","first_name":"e auth","last_name":"","chat":{"chat_id":"7775364742","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":1}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-07-28T13:54:00.95665Z","times_seen":734672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-28T14:02:05.987734Z","times_seen":46924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/after.js","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83a3318e9c2bb837655edcb95fdc2878","sha1":"3e55908908bc366ee906e6f81e0fb8dd0073ab54","sha256":"8dac9b1183df09f663d69e431a64c9eb7509e2882013b3c23100e94106a863ed","sha512":"e351af6c591eedacf798388aa958f93a0279a5b0aea11b3292792bd6e74ae567a683608022b1e10d283261765e4080156f9f46578fd246b28eec1216eaf18f9c","ssdeep":"49152:E2D1dy5WhVnigxGLrBVkiCIZYhK5QgRjxVTT4SYjJHuzAET3cSjgU62AXXurc+R7:+rGwe8xUql","tlshash":"0c263b40b3e035b8268b4be6e627b0e4e02f185b758c4cabf15cbd656fe5704dae9530","size":4844480,"data":"","first_seen":"2026-02-02T12:56:40.837499Z","last_seen":"2026-02-14T09:46:26.426955Z","times_seen":6,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-03","alert":"Detects file containing Telegram Bot API","trigger":"coinbase.poiymarket.us/after.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/config.js?v=25","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6063daf9467970f363253f7da728e6d3","sha1":"c9f162abf3e05a3ca2e23b9e90de1159111c4cd6","sha256":"bf289876d3f6e846422aca1f750092a70dabcabe54122c715da553b0a9437c3b","sha512":"28e9870e0924ee70ef9ac943b10d8503ac404f5f096e2676e1f99b333d48e734cc43eb8c2d2e7dac4e1239af18ec5a1b1eef172889821fd971d5550110ef1dc5","ssdeep":"","tlshash":"b74139df1d0eaa5593f0904ca277fd1bca123717e4a92137b73c82345ff261099e8629","size":2185,"data":"","first_seen":"2026-02-03T11:42:26.725057Z","last_seen":"2026-02-03T11:42:26.725057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-07-28T13:54:00.955714Z","times_seen":236415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4364761e021145268d5d6391681369f1","sha1":"e0502ca41dc02c3179939e73f888be5271481359","sha256":"c045b3e9d8d516a2e277cb6e980625386c41511bdbc8f6e79ef09cecb69e6de2","sha512":"0d336b3a67072369ee9828870dd56d4b522c83bf6bb247f89be7a8a9cddef4d8345b32d1400eec93521297ecf8a4758ace59052b857e74efa540e15dfcfac662","ssdeep":"","tlshash":"8811026331d1b894d71751225f2f700ff8a45e4359a94490e6338ad9bef063e83a6e24","size":1000,"data":"","first_seen":"2025-10-17T14:17:56.298393Z","last_seen":"2026-05-28T17:45:27.041769Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-03T11:41:55.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyESxYxbg2s9eCfbvqdLcDsX1ovkIt26w%2B4xy3Q2mQc8GG79ras%2B5sDKGuP9gPXkAglc0743c1lioIJZNASOZ0YMHqAk%2F122CdLHnbsczhfg6xHyk4M%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c81a97869b71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9908,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"5b808550dba1f21c9547f43761a74d44","sha1":"10a1ccada566e03f8454cfb1c3c5941a8b30e949","sha256":"31318782d6cb31ee14a984fdfd0946ba815e1d6ef20179495f330f9bbdf7f9cc","sha512":"cb65009baf42b3e178fa1200609fd808cce67a5476d44beddd6fc942b05d04b904d64c55bde96e249ead57599bb577c4ea814dcc972983ced79b8f1888287453","ssdeep":"96:NkhaCzhrY3EzTMjMyxyoLv/VcHAXWJS+FeY6L6bs2p9NhSW03Fe5oiE2oxn78d:mhaKe3/RQoLv9cHAPYm52pDwbA5a2m8d","tlshash":"ad123f7254e5447640bbc0d6a9aabb5afee98247c34b9544b2ed63c31ff3d40ec83160","first_seen":"2026-02-03T11:42:26.712685Z","last_seen":"2026-02-03T11:42:26.712685Z","times_seen":1,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":57,"dns":34,"connect":1,"send":0,"wait":271,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/config.js?v=25","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /config.js?v=25 HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-889\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KP0zFZCmcGB1%2Bk6sIMcpgQgzD0nsHZf2v4vjGjjXYwc%2FVtAajC354ryB609IFVo7ZOEnpybRGj%2BeTOWlPc%2F2Aks6hwwFYiTCMTzbFo9%2FWox61rgJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97b1cfb568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6063daf9467970f363253f7da728e6d3","sha1":"c9f162abf3e05a3ca2e23b9e90de1159111c4cd6","sha256":"bf289876d3f6e846422aca1f750092a70dabcabe54122c715da553b0a9437c3b","sha512":"28e9870e0924ee70ef9ac943b10d8503ac404f5f096e2676e1f99b333d48e734cc43eb8c2d2e7dac4e1239af18ec5a1b1eef172889821fd971d5550110ef1dc5","ssdeep":"","tlshash":"b74139df1d0eaa5593f0904ca277fd1bca123717e4a92137b73c82345ff261099e8629","first_seen":"2026-02-03T11:42:26.725057Z","last_seen":"2026-02-03T11:42:26.725057Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/minijs-2.2.9.js","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /minijs-2.2.9.js HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-32faaa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kL3RfOltfAc8m07rzWAOHEW9Hfu%2FaCNYnCndghUnT3kRciVt05VQKbsVwZ%2FIFnQx40iFnYbrqOM1ioZ9iQdWSsI535e0eRF6LUnSbYWP0%2FyX1n7v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97b1cfd568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3340970,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a0c60f06c26ab4dd5bdb8ce0996dcd1f","sha1":"4a34b4d7899315cd886e86c8f365a214fb342091","sha256":"0fb1feb30a8dc0aecfbffcc307e7686f0629bdd10820162627808cc2f0982868","sha512":"ecbf1ca013b67b622d1dc7383aa7812ca8835c556a2e4f2e9ae605e8f1c2a3aa32dea31e288d833c137951c6d4345cd6ad56a8f595373b35c3bcd9b7e57ee70c","ssdeep":"24576:YUa+EvbIafJ8Bv6rUiVE4CzC5C8CVCPjo+FAcCzCJCICdCRWZDeLi8CZoUT9Fusb:fJzOkgcQEh","tlshash":"5f25a243a1d038a605d39fb27a2750daec2d8fef618c5ab9b54dfc3878e4114d6e8670","first_seen":"2026-02-03T11:42:26.731384Z","last_seen":"2026-02-03T11:42:26.731384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":297,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qr-code-styling@1.5.0","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:57.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:49:14 GMT","end":"Wed, 25 Mar 2026 18:47:44 GMT"},"fingerprint":{"sha1":"4D:37:D7:2B:61:F1:F7:53:35:2B:66:50:86:67:7B:28:65:1A:66:C4","sha256":"67:48:47:39:2F:15:4C:74:E1:B6:75:83:72:22:EB:6A:F0:31:F3:80:E9:A0:02:9A:E4:63:54:99:28:4B:E9:F0"}}},"request":{"raw":"GET /qr-code-styling@1.5.0 HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://coinbase.poiymarket.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: X-ESM-Path, X-TypeScript-Types\r\ncache-control: public, max-age=31536000, immutable\r\nserver: cloudflare\r\nvary: User-Agent, accept-encoding\r\nx-esm-path: /qr-code-styling@1.5.0/es2022/qr-code-styling.mjs\r\nx-typescript-types: https://esm.sh/qr-code-styling@1.5.0/lib/index.d.ts\r\nlast-modified: Tue, 03 Feb 2026 11:21:15 GMT\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9c81a981180b0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ec206c0a9ffcaad3fd97354b306cd057","sha1":"dbcb7210c720892216410c48b8dc54f20660499c","sha256":"9630c90eb9313a08c99ae2687e888c02ce50021a8326947cb340d0cc5a33d367","sha512":"f1b695cc526ece0546fa5dd6dc36bb3a4de9e0ca4000dab21a04965b3c51817fb6ef988a9cd9b3134583cb02d44846dce1c077c9ece1b11a2540188f8bcc8a9d","ssdeep":"","tlshash":"4ec0c90302434864203b9ec43a3cb0a85aef25c86bf0299d98248b8a6c1886a5254adc","first_seen":"2026-02-03T11:42:26.736098Z","last_seen":"2026-02-03T11:42:26.736098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":37,"dns":21,"connect":1,"send":0,"wait":118,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/qr.js","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /qr.js HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.js?v=25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-411\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qR7f7tDd65agA67V2%2FrxDkL%2FSLif9QrXc%2FDrroI5SmLighYVUSVXj2LCmY5gjWaDc1kpmArkk22mPiulE%2BzEaV2HzVRf0b9pl8dhZ3BzYERlpqcT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97f089e568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"31e2eec230c05c28f65a2f0b09296bb9","sha1":"b69ace2d8288a78aa194b8c1c248a3789104ea45","sha256":"3543029d5c02550f847072ce01df7c27b77119b7d976e0107b5af5de893bc05a","sha512":"b875019e8039e49cc9311ccf6b3bb3015dc41433d5a2ad27759f3e2ce8ac1801ba08c3e874f5c189b4c39052544e428074876ed138e427faf67b867b835329dc","ssdeep":"","tlshash":"0e1159aa1ef26655a463a0ac15bf0400f754f5833e25ae2e7f6dd6a09fd883dd031784","first_seen":"2026-02-03T11:42:26.739399Z","last_seen":"2026-02-03T11:42:26.739399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/styles.css","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-2df6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N%2FNRhuq8HNN8k7%2Bv5UEUsp%2Fkr%2BeJNyjzer5fVky62VjVA0b%2FODpZHeAxuBxdnIv1ScSj2S68bbkIpAyJHDoEKDNdKl%2Bh4NLHPd3P49tOj%2B1i87BM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97b1cf6568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11766,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"e73c62f664b9fcdd24b4fea135c8ae5e","sha1":"20a755b7ddd289a6baf23a55299ac0f28948be03","sha256":"d6bf51b77dcd9b175dd94d056d13b4dd385608a2cd1a96f604821cb0d1f1f774","sha512":"4fd8e12fb674849cf7abb6df6431a38e9a56927ec4ed296fdea181d51181576e99d5b2a439f548e26241f6d5f41311f9cae846dd25eabb984379f611dec2f762","ssdeep":"192:xTBlpGA5q39e3mCbxlkOM5LyABjD9vbAsmcwFvRfCBZbQQt6JKd8a9gIp:Sld8ax","tlshash":"8e324358aa0128465533c67cafb28686e7e5401bc607017dbfdea3548ff753089b2fac","first_seen":"2026-02-03T11:42:26.743683Z","last_seen":"2026-02-03T11:42:26.743683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/after.js","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /after.js HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-49ebc0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxSy6mEuj9bMmgc79wnhXB4zqXU7q1pmYoi4WZeAc8IRFPZWXwElKrrkJ7nSMKWBEf%2FF4K24snkATN3S5JF7SfZFd9dLJHLSaiubgmbdSwsvftPM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97b1cf8568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4844480,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"edfcfb291200b1a478ac4f4e00f89806","sha1":"0cbd8e4f9f04e82ac3f74345b7ad85d2a11f2c28","sha256":"8abb8b25aedcd4a4d856d4214b6e6ec8e1bd27f86d01065482c4f1ca86524f31","sha512":"98e25e976d885bc81566a029aabd92896cc9bbf0c96de6afb80600e35b4fe960eec12242d9755712372ad6e391584a4637ec4a7c882431b43588e9bfdf5a033a","ssdeep":"24576:E2D1dSJsCHKVrQSe/NK2WhVlJigUH0GFFrBVkiCIZYhK5QgRjx1XTT4SYjJHuzAy:E2D1dy5WhVnigxGLrBVkiCIZYhK5QgRp","tlshash":"f9253b40a3e025a952cb5be6b627b0e5f42f2c9e75880cdfd058bd212ff5708dae5934","first_seen":"2026-02-02T12:56:40.824116Z","last_seen":"2026-02-14T09:46:26.391285Z","times_seen":6,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":351,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.js?v=25","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /payments.js?v=25 HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-44f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BsXSWa1LFsQUe7UK05smJE3Ips0q7fb%2FjZ%2BZ1fsrYacZbSIBqxB6UzLznuwHf%2F7fQwG2BugHrB0Vg6otuZZNVhj3pJ4NqCaRZuS6VY3htaeh4%2Bt%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97b1cfc568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17654,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"cd38277ee2173d4a673e119092794ecd","sha1":"25d5f21be2df7ed3484893f55a4b42d6ef38fe49","sha256":"e3da7fb5fc79d9ad4b33594dd287f7f769f07b57fd2880491275a444c5b19f90","sha512":"a81bc265b095fb6f4b551185c92ba7734072212993eadeee44652ad2598a65429f6ea90c04f470441c34aee201c8a5cd00ac064e4b76eaa6306356927ae24e08","ssdeep":"384:cPKovuBhvy9bjWLAtCRyJwpXBgfwnt67kkBLPnJ9ZRfEIEsW6QdiJB2:Hovu3ybGpXBgfwnt67jZEIEsp2","tlshash":"bc82759931b324714b97f0aba39f135a3632b5133882c4a43e8cc6451fe3da5e9637d9","first_seen":"2026-02-03T11:42:26.746998Z","last_seen":"2026-02-03T11:42:26.746998Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbase.poiymarket.us/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::gv5lr-1767495562922-401ec0c56245\r\nlast-modified: Sun, 04 Jan 2026 02:59:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2623352\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FlpN%2BHGUhQ1sHytj%2BUFHvfkk7RPI%2FFrqpsWV5owk8YJfEpds5QDTDIMoggoYHI%2FBcP%2BLFPIx%2BoXYwVXKrtcK%2BEbkEUQ901elbIbxAeT2gxyZEA%3D%3D\"}]}\r\ncf-ray: 9c81a97b483c5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-28T14:02:05.987734Z","times_seen":46924,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinbase.poiymarket.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 23:23:02 GMT\r\nexpires: Thu, 28 Jan 2027 23:23:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 476335\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-28T13:55:02.722318Z","times_seen":284068,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":64,"dns":1,"connect":7,"send":0,"wait":8,"receive":1,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/settings.json","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:57.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:57 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-138\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qNwblIe2YYpkTP3MhuyyZmJy8Qi2v78AQ%2BbjVxKaJiJiQ6Ja%2BuapnIEPkgqAGajrAdqe5lo%2Bv9KmC8F2sbh5Ikz6vvh4GDRas8JaToBidEeScOaH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a9824c07568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"cea42cb1c80dcafcd442ea4bc102f871","sha1":"23be14a647eef00339e4db765627413ec780e82a","sha256":"0b5db5ffee839cf4e9fbcf71bb6df74fc3f34ba27dea5cabfed5ac7eb7a5555e","sha512":"1c6a8a3916546e67f969fcf5fdd66ebf784320842f8a1a9685aa602798d3dc23d30b71f762e3ba40dc32c239e9d8f59f04df22b05612b7c47a90871fe1bba30a","ssdeep":"","tlshash":"3fe0cd03e9165114abc3e175d169749d1f714fd941383c9885034804784ee4377f675a","first_seen":"2026-02-03T11:42:26.7519Z","last_seen":"2026-02-03T11:42:26.7519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:57.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"HEAD /payments.html HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:57 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HAFc0JcEyQ4%2Bo1tVOsXvLG7ekr9%2Flf6ohUgmARehl9msKOnFuL%2BRuGOq3aAvNDuMW2vViib4WPM7XldbIsjrZdE6Wc2HBtqX6oF0k%2B7WDzFRkaza\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c81a984ce83568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T13:56:22.333504Z","times_seen":17580760,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::m7bqp-1770118799550-e99b0273e7ab\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 116\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88Bg6n1VTgosXDv7wxbjHow%2FFZiGVzRhHf6qK8nJLr0vdzYYpEsC0D0pcJWry8%2FgXBbNOiyDtT1ql57tNEeDiewGD8jvNWqseWzVweCXsS1FnQ%3D%3D\"}]}\r\ncf-ray: 9c81a97b2fea5a0f-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T13:56:22.333504Z","times_seen":17580760,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":11,"dns":0,"connect":1,"send":0,"wait":4,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Poppins:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 03 Feb 2026 11:41:56 GMT\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4792,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4313e6367844adc0cdb4d6ccb86b26fa","sha1":"20335f134c7817c1e9d01f8c57fa2a36669af65e","sha256":"d6a90916411b5b4b696edaefd46fd4503e5bc622c14e490a09cf0de39696d418","sha512":"23a3392e96d2bb29dd720e4e65ea2e398651f8e7626361425e932732f1efa52dc14dbcbe5751ed7137e69916480f3fd2be5ebf4ef39a43c6c6200c9e777c7779","ssdeep":"96:SOEanOEaCJc+ukOEauN3OXa3OXavJc+ukOXaON3OxMacOxMaUJc+ukOxMarN3OpQ:lgKQcXr3lVwa3RzJZ","tlshash":"f7a19bd1087be114ab831cc123ce7d36ee1e9255b810e5786bfd0c98adabc654362b2d","first_seen":"2025-09-17T01:34:36.284919Z","last_seen":"2026-07-28T09:30:00.354342Z","times_seen":8328,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":128,"dns":3,"connect":7,"send":0,"wait":20,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/media/verified.png","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /media/verified.png HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:56 GMT\r\ncontent-type: image/png\r\ncontent-length: 8059\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: \"69805e0b-1f7b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIaisWEYpDgya6Y00Ir9NKvlXJ0JiV8Y1yJHkXX1OvD0hkXXtvsQgTJC0Vhnai2jOxItIMca7pwrrX8Ui9DBQ7u%2FpPEF6HgD0d%2Bh4O779tOvKd8B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97b1cf9568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"60cd511d454c01940a1be92353d9e612","sha1":"2a3b91271d75b59379b03c8b11df17f6cade3faa","sha256":"5e1c5f66ad6e6bc52a4fdd092c90e156f81727ae3a40e61329b681d7c8bb78d7","sha512":"fde58ef4fb7e08fc32a2d1c736f2ac9fe4e028bf1475de46a24106304bc886d01c553ba9a732ed1e41921040de0bd24070297e54eaeff6a86d8edc997ce8acd8","ssdeep":"192:4S0tKg9E05TTQHytesCXWcdWYIw/kOMJQFwbFVSa:cXE05vxCWvZBQFwJt","tlshash":"85f19e9bcb1154aff5aeaff18acb0600dfa960bcb7333a145f4560ee185b618e2905d0","first_seen":"2026-02-03T11:42:26.755234Z","last_seen":"2026-02-03T11:42:26.755234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"esm.sh/qr-code-styling@1.5.0/es2022/qr-code-styling.mjs","fqdn":"esm.sh","domain":"esm.sh","tld":"sh"},"ip":{"addr":"104.26.15.209","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:57.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"esm.sh","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 17:49:14 GMT","end":"Wed, 25 Mar 2026 18:47:44 GMT"},"fingerprint":{"sha1":"4D:37:D7:2B:61:F1:F7:53:35:2B:66:50:86:67:7B:28:65:1A:66:C4","sha256":"67:48:47:39:2F:15:4C:74:E1:B6:75:83:72:22:EB:6A:F0:31:F3:80:E9:A0:02:9A:E4:63:54:99:28:4B:E9:F0"}}},"request":{"raw":"GET /qr-code-styling@1.5.0/es2022/qr-code-styling.mjs HTTP/1.1\r\nHost: esm.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://coinbase.poiymarket.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://esm.sh/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 18 Nov 2025 21:44:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\ncf-ray: 9c81a98419cb0daa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66579,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (57527)","md5":"d361ecf96b2da16ad949284b8635e02a","sha1":"e8d6e87b030d72e1109d90ab52a76c0f8ce757e9","sha256":"f852c0ee29bb79fae8704ff1cc05aee047e1b39250edcf3795075c58aeb6849c","sha512":"644e8d92eb9d445acb585dd623f1aff8a789a887ce99a4b03eb4c1ae117d9f3d0f9f3e9a721ec9092e0c6c414e0e902acff4946093a697b6caaa8c400e7ab087","ssdeep":"768:1ksfEb+QlUWlWw08kvZ/+nV0sN0IAtl1Z0YDomTt2F:1ks8b+dwpkR+xNl81Z0YD52F","tlshash":"4253f7a8f28431a69b83a6f1443f004bb239f9395916c13ce766c5d958f8e86653ff34","first_seen":"2026-02-03T11:42:26.757499Z","last_seen":"2026-02-03T11:42:26.757499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/payments.html","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:57.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"HEAD /payments.html HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiC0n4LlN3RxlVTnCQCm8kHWzalmdwGZ5U5%2BXvmNAe3SvBvicbemOBRtmSGHZVh%2B0O7AyxrX450BGKF%2FQ2dax5pmuRQSIPXXTY8%2F1payrf773%2F%2Ff\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c81a984febf568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T13:56:22.333504Z","times_seen":17580760,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/media/coinbase.svg","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:58.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /media/coinbase.svg HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:59 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CEEjuonEbKwVvJ3GABx5A8mxYiQ03WjwTL0TpWAVlM3u9Z9w9AfZr%2B53MTNiUs40p4%2Brr0E9wzkuJBXUmBZVV8ZJbQyOodmvz6I7JWnLIsXbklia\"}]}\r\netag: W/\"69805e0b-2fb\"\r\ncontent-encoding: br\r\ncf-ray: 9c81a98a7c3c568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":763,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0ca294fb2307ea7326a7c6f7034cf982","sha1":"c00af4a991460b8042ef553681215aa12297cc77","sha256":"359a8c96db399768a40d10a02f38936747409a1e585846937bbe717d59bb4bfc","sha512":"8a5e8f23df4b3d912348d039d848124d83d3542be966734161c98111caa7baa950d9dbb2770aa7263775add555579dce395521eaa172ae4b03414406096ab019","ssdeep":"","tlshash":"d2011535c27e58774d3c071b52aba491e335319390e909eccc13ad1f607f8d525c199e","first_seen":"2024-08-19T23:01:46.983765Z","last_seen":"2026-02-28T12:09:47.253492Z","times_seen":8,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.poiymarket.us/config.js","fqdn":"coinbase.poiymarket.us","domain":"poiymarket.us","tld":"us"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.poiymarket.us/payments.html?subtotal=10250.00\u0026secret=BgkVBK7PEV","date":"2026-02-03T11:41:56.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"poiymarket.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 18:52:03 GMT","end":"Fri, 24 Apr 2026 19:50:34 GMT"},"fingerprint":{"sha1":"0B:B0:66:B6:F2:46:C7:38:58:B8:1B:E4:38:DD:E3:FF:4A:4B:38:1D","sha256":"82:C1:57:C2:55:CE:C3:0D:B1:B5:41:68:E1:33:05:6B:3F:8D:7E:5F:7B:83:CD:B1:03:5B:88:09:7E:4E:9C:9F"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: coinbase.poiymarket.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.poiymarket.us/payments.js?v=25\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 03 Feb 2026 11:41:57 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 02 Feb 2026 08:19:23 GMT\r\netag: W/\"69805e0b-889\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u87lnXGHw5lA1XySUPyNSY5yXm0qsjNC7oB4d2HpbqX5yP%2Bv7lK%2FvrCjyj058jp6XRifvLxaDHOs2t1kfU4lE0UNlZsPo7AHgdqK%2FcTvl7xnSQO3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c81a97f089b568f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6063daf9467970f363253f7da728e6d3","sha1":"c9f162abf3e05a3ca2e23b9e90de1159111c4cd6","sha256":"bf289876d3f6e846422aca1f750092a70dabcabe54122c715da553b0a9437c3b","sha512":"28e9870e0924ee70ef9ac943b10d8503ac404f5f096e2676e1f99b333d48e734cc43eb8c2d2e7dac4e1239af18ec5a1b1eef172889821fd971d5550110ef1dc5","ssdeep":"","tlshash":"b74139df1d0eaa5593f0904ca277fd1bca123717e4a92137b73c82345ff261099e8629","first_seen":"2026-02-03T11:42:26.725057Z","last_seen":"2026-02-03T11:42:26.725057Z","times_seen":1,"resource_available":true,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}