{"report_id":"19649104-11fe-46dc-8973-e5341971c23b","version":6,"status":"done","tags":[],"date":"2026-05-18T11:37:38Z","url":{"schema":"http","addr":"intl-coinbase-inv.com","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"172.67.167.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"title":"CoinbaseINV","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"intl-coinbase-inv.com","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"172.67.167.18","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T11:37:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-05-13T19:34:05.395595Z","alert_count":0,"request_count":1,"received_data":116674,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"sc-static.net","ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-16","domain_rank":3142,"first_seen":"2017-09-05T18:35:04Z","last_seen":"2026-05-14T01:58:07.895255Z","alert_count":0,"request_count":1,"received_data":59923,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"intl-coinbase-inv.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-17","domain_rank":0,"first_seen":"2026-05-18T02:10:19.759854Z","last_seen":"2026-05-18T02:10:19.759854Z","alert_count":522,"request_count":87,"received_data":7998831,"sent_data":44175,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"srz.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":378797,"first_seen":"2024-02-20T03:50:45Z","last_seen":"2026-05-13T21:16:12.289818Z","alert_count":0,"request_count":7,"received_data":4488,"sent_data":5051,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.intl-coinbase-inv.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-17","domain_rank":0,"first_seen":"2026-05-18T02:10:19.772872Z","last_seen":"2026-05-18T02:10:19.772872Z","alert_count":114,"request_count":19,"received_data":618060,"sent_data":11207,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"s2.coinmarketcap.com","ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2013-04-28","domain_rank":209181,"first_seen":"2018-01-12T04:47:19Z","last_seen":"2026-05-16T06:10:49.105209Z","alert_count":0,"request_count":22,"received_data":57918,"sent_data":10291,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":4,"received_data":75850,"sent_data":2201,"comment":"","tags":null,"fingerprints":null},{"fqdn":"assets.salesmartly.com","ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":478953,"first_seen":"2022-03-11T21:16:37Z","last_seen":"2026-05-15T19:34:13.455732Z","alert_count":0,"request_count":11,"received_data":967474,"sent_data":4902,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"api.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":387428,"first_seen":"2022-11-29T17:40:50Z","last_seen":"2026-05-12T10:58:17.728829Z","alert_count":0,"request_count":2,"received_data":5972,"sent_data":1372,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"assets-cdn.salesmartly.com","ip":{"addr":"54.240.174.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":507251,"first_seen":"2024-07-26T10:32:03Z","last_seen":"2026-05-12T14:39:46.420142Z","alert_count":0,"request_count":3,"received_data":11279,"sent_data":1719,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"client.salesmartly.com","ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-07-22","domain_rank":491526,"first_seen":"2024-06-25T09:52:15Z","last_seen":"2026-05-15T18:38:34.605123Z","alert_count":0,"request_count":2,"received_data":84989,"sent_data":941,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"msg.salesmartly.com","ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-07-22","domain_rank":360322,"first_seen":"2022-11-29T17:40:54Z","last_seen":"2026-05-14T23:47:06.969167Z","alert_count":0,"request_count":3,"received_data":2012,"sent_data":2571,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/hcIUCWyqrTDboi46lu.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af271a94aca703f939cc9287ed36ed6c","sha1":"3e3293a00b5e06ab7f469b8b2db13b1f9467aed3","sha256":"ec188305e1c6b0c62ec1a9525558fcc9725646f4c2d459c0bfcbad305b29f084","sha512":"7cd24db8bb51affd0f1eb19841aa059c0f2ef0d3e6f233ef551d5acccbe3a14dca95c595934f3db7a885ec470740b7e835d92429b963ee57e55cf71978302c74","ssdeep":"3072:Dd7HOnZY5kWoH6J+2JfnC260X6k/7CtmVCnpMYt2kd5fT8Q5BkW:J7HOnm5AH6J+2Jfnkx5DR","tlshash":"72344b51740bab3ee4a3588d68491800380d4feed51d9d66f2fcb627abc6cb0573e768","size":244993,"data":"","first_seen":"2026-05-18T02:10:30.190287Z","last_seen":"2026-05-18T11:40:03.947223Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/ofg5IoYc6wC_YIOVKz.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"61d5913c4638d351013c8a8e0b284b8b","sha1":"21a0cbd6d3d0939954dfb5d8722127cf12cc2439","sha256":"8ddf6fbe1a76b658741159f69cb5ebfdd2886ffc98e33479cdfbc2a29d671978","sha512":"c593df9feedf1cd67cab31af83c26d959afc8594787e7b19f712ca07397e8d7c2c382b6f42cab9ca1132f2d47beca639e1e88675a36ad98b50ddc1b14ced3751","ssdeep":"","tlshash":"ec61d729f748a039c3f131f994e14ca052366f112896e6ebd2270d84673ab90b7dfc27","size":3374,"data":"","first_seen":"2026-05-18T02:10:30.10858Z","last_seen":"2026-05-18T11:40:03.897045Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/7oUlToKbbTB_A1xBdJ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","size":27,"data":"","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-05-18T11:40:03.923067Z","times_seen":680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0a135a3820c44612d285347e945db1a0","sha1":"c751ab64ae029f5969e555a5dbec7dc15eb8f339","sha256":"6a02a962e9797eb8838be4ec5b3dbd47c5c6ced0fdee45ff8b242e92130a9d61","sha512":"92028e04908a6c3cdf03c75cf98c4678eb7bfbbdd11939716bad337599380d34293b296b7a059358cbdd3632a32b9f6b64f6768256fd20aa2efb83ff15d3a65f","ssdeep":"","tlshash":"6ec08cc4a0c23d001a22641068af34f4a034406ab14c1b528e94d8583e230f09233f98","size":147,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-05-18T11:40:03.973745Z","times_seen":955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/EK7yx1M7TnbFmgwUIn.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ae5157eb66950f55c769c584159f44a4","sha1":"d1fffe9d3cd19dacaa6c35e7c67e4c59bef08cfa","sha256":"7e3c1188fcaf824bf81a7dd8749111a5bb57efaed28963b41171d8f8a30adaf8","sha512":"0b655492f697277642d6727b74d877e9639d81f2544330b67a986445d514c41d7994c7e85f460d268095507223042b547156e2a7affe100bf6f88440aaa8af6f","ssdeep":"192:JGmNuNqjNrNNN5NtNgNANXBbnBMNmDPA/IfOSqITWnlHO5laVPK:JGm8A5XzfK6HyNwPA/I/9TWdOe1K","tlshash":"a42251a5df4feb0b472104c03b27bb9d9f5e2bceb0ae4583c3499c6c6e0ad546616970","size":10869,"data":"","first_seen":"2026-05-18T02:10:30.133759Z","last_seen":"2026-05-18T11:40:03.913916Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/srdhE69cK9Cbl7ItnL.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fbd798459ed7a3a9d02884a2a4913073","sha1":"5c3cb1e62985cc5496a76972e5bcd19065ff7440","sha256":"79da6e681c046f8e70d1fee62bf8c552b67fcbb0b7463aff451eb3415bba5bfa","sha512":"f12c32d0edba48b592b18a71da05e7f6855d8026365c86738cab96cde8b2b5c46973cd09d20205376c218bf47e790bb49a0ffc5631fc94db6397e49f9a99cac3","ssdeep":"384:frCZBxKf+Vr2DjM+shRt1A1+pX6X7OYbXTxdbzzE/ZcyKE1rCRY08fBH5/8YC9:TYBxKf+VSjM+shRt1A1+pX8OYbjx5zQs","tlshash":"b87208d63940b036c77799c6c09505a1a32967c8f219c6d6f06e2c1a361a8b8f1fef1e","size":16130,"data":"","first_seen":"2026-05-18T02:10:30.387549Z","last_seen":"2026-05-18T11:40:03.895139Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2c19cc74937e987332b796f96e1d4bff","sha1":"626b5843a48fc0d3b2792ac99f6503faeb8760c6","sha256":"d6ffd8cbd2a327856f7fe339d4bf460940bcfd4e32ea569b11f6ebccc74ff9c1","sha512":"2f3c983ae702759f0d94f07011004788c6d9a82090647e01dbcf3a4b950634ffa611ea18705e2aa0b8b5567fb376f98dba64b090267f8689caa5281bbd08acea","ssdeep":"","tlshash":"c3c08cc5a0c22d10160aa61110bf25e49034442674485b028c98d8883e220b08333ee8","size":147,"data":"","first_seen":"2024-03-11T20:01:51Z","last_seen":"2026-05-18T11:40:03.960288Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e945cfacf91f6c0a27635339d8d37ff6","sha1":"4f09b7c9214edf2a190c29e64b54d2b6a69ca5c4","sha256":"9348a780a91a576eed3adcc0bae4d097a1761cbbe9fc3fb35029e60e604355c2","sha512":"2ac7ee471a447b022595f7e876b74c45bcbff208d1432e42faa5d3d152e034456910bd5fa6c25fc8a2cca51d32ea9f98b352c88465071c8f8e79d99b893f271d","ssdeep":"","tlshash":"515122193ad4b7298257b0b4987fcd49f520053a02e8d8484b1cd6fae82587dabb9cdd","size":2985,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-05-18T11:40:03.961888Z","times_seen":150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/js/project_51582_53936_1712669264.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41a80cbb017cafdd431d6487fbba106b","sha1":"b4252f9c765e2e2c97c686402c41e2f06f7a54e9","sha256":"a47457730e5ece9bfc39d067174effafa4ef9e8f8560234e3dad3b47483e37d6","sha512":"047bb1dce86aa5f7ddcd0d435cb2968c6ffeb77cc9e4daded7a1f05957b6405c96baa9fe2bb3fa2502778d9a76e2723a38ae951aacd2d99cea4469bd845f0eb5","ssdeep":"","tlshash":"60018b471c5330ba1be9717f0b3b5ce93a9962071180ca21bd4cc4692f908915a6aea8","size":671,"data":"","first_seen":"2026-02-24T14:10:04.452661Z","last_seen":"2026-05-18T11:40:03.929482Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/yjsmdtBDP5q_n3y2Eb.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"29af56056f9416f19626df26816761d1","sha1":"0104469b74eed3ac355c063123a59af00118a4d3","sha256":"9e07156c704e59a3553e974929100e89add4d71823ecfdc81b14aa8081618932","sha512":"6dda1ca0002b04a1d2bcafb8be7f895bc435538bfc342058eaf130716b6a5d84316efa07d671468dad3a8ed6db59399d440bd084d33b77eb297445acc8422d7d","ssdeep":"","tlshash":"a921021d6802da79c4a74d6ce5a41812529c3bfb83788861f0ef5e2276c1db14667768","size":1232,"data":"","first_seen":"2026-05-18T02:10:30.124239Z","last_seen":"2026-05-18T11:40:03.927129Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-05-18T11:40:03.966636Z","times_seen":947,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"492c4389c8b2cae47694e67f1aef229e","sha1":"618289db1374901bd0f6dd4ab3aaaa2265aad8ca","sha256":"b9dcf35088337362546a445eb0a84b582586c6dda3b0621e60f638dd36df5dda","sha512":"03cf2aeed0e329a7343a92b1bfdc21de4a603343c1fb766b53eb55e1d45b4f8efb73602be72f29cb097935a1c6d124b7061d7f07cef7d9668586da7c1fe48040","ssdeep":"","tlshash":"75c08cc8b0d32e101602a46010af28e49024842bb4489b568dd5d8d92e660b48233e98","size":149,"data":"","first_seen":"2024-06-03T10:51:44Z","last_seen":"2026-05-18T11:40:03.973261Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-05-18T11:40:03.910698Z","times_seen":981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad7e35095f9a2452e79ebcc25fb81251","sha1":"3533927767ca29d6e0b31695488ef232872758a7","sha256":"91ae7e639fdbf3e17c99d0a5181209e00b574191a993bf842a3ebf8836c80f6f","sha512":"b2f77b83a888c755bc0032d77272ab73f68fa24ae71de4d16427b1347eab3608698ebadb6b413d7cd7e0ee92ae78e5a1dd3f785d92ce3f3d1f5ffbda94cc7e3f","ssdeep":"","tlshash":"a4f09e1b1c47b1ae1bd6a5baa77f9d1b22112246319054137e0c80286fe083c5fe9e8c","size":508,"data":"","first_seen":"2024-06-08T06:59:42Z","last_seen":"2026-05-18T11:40:03.962398Z","times_seen":165,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/UOUIWiAuz2BnSRbXBD.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"9943014be5e30b6b41b6af172fdef8fc","sha1":"cdc18ef321a65bb5a66fbe31060343c562e747f0","sha256":"4281512591c4e8c7e3eacdd4fe05501c6bb2faa5be9c3fedaf04e181fb50c65d","sha512":"dd83599e70fe3649e4a6aa9d74c328ccab8a872e6d1a6b1ae7911c3f26e8b0cfced3f1c9b862b839745eefe3752f13e8cd4a05f04d5ff96b92d9e4943baed4d8","ssdeep":"","tlshash":"1f3145a4f6b9d034537e58e1c4391610e2591f457119f8ead4ff0d426e8684af93bb3c","size":1810,"data":"","first_seen":"2026-05-18T02:10:30.33543Z","last_seen":"2026-05-18T11:40:03.899421Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/niv0zCiWtACCvB8xmZ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4a5a2e36be1e0cd63c2bed1e75f2870e","sha1":"f91ac6aa45fd63863a1c041c6da1232aa2104c10","sha256":"9a90e6578e7690bc6657dfd764af4c74f3980da8599755a13c701699a8788f30","sha512":"b77dca5dab749cc8749f83634f945b7439d17efc490d95c2fce1dabd37bd7da40b2f87753cc4a415b7c69609701276a7fe373da2231fbf05cac1d210450f2c72","ssdeep":"","tlshash":"acb012018a8911e414a4016b0f15a6f81166005c1f6883b4700d4b249b1a25d8d0f914","size":92,"data":"","first_seen":"2026-05-18T02:10:30.236631Z","last_seen":"2026-05-18T11:40:03.9041Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/KleNFrZ6fAB9_PdsvI.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"017e8155096757a0d48fefe36389ba7c","sha1":"499156367b7ebf09e0de8b99a0d5b64878cb55d9","sha256":"fe11d50c690b98a66cef6648c890d9c51f0d160c442a5ea8c0d0353f06a933b7","sha512":"827a91701f0f0dce70a686b8d1df62ab7814956f306582465113cf76dcd0ab4ff026a422322e7b0f0f54a6ccb524005f93ad74a768ea5bbe2efbe9b9798adad4","ssdeep":"","tlshash":"9cc0241d744550f0455d0cfcc113057f53153f40331555f05515c517531d3151307f15","size":157,"data":"","first_seen":"2026-05-18T02:10:30.223013Z","last_seen":"2026-05-18T11:40:03.903518Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"046ccdc5c883fafca39d6250ef57a50d","sha1":"77b5023858eb083aa18a30ff632687cb91fcee32","sha256":"9ba6aff261e979c3b8be9f1a583cc4392b2020a4a078ffda19fc7e16c6486e7e","sha512":"4b3645f2659fce5e1f1b74468dbdd33f051430c22a921d0563c07e70093cfaa79c79306a834a37aff9f0421d9505e8e93adc970380199ece8e87d474e3fdd1de","ssdeep":"","tlshash":"fac08ccaa0cb2e002a02655115bf39e4a024442a704c9b438c95dc882e230f49233ea8","size":150,"data":"","first_seen":"2025-03-14T03:43:26.667423Z","last_seen":"2026-05-18T11:40:03.959802Z","times_seen":81,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/yJwDpf3e6OAZPywuRm.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5fcf901b797c80f2bad08dd8e54e5d13","sha1":"09f41392d6bcd5198d04f41e7f20ff709671a770","sha256":"00e9a0e35c5b6eef39e124daa4e238b0581a691262ae05dc16ef25e60793bd61","sha512":"8f2800bc45dd22d3dc5f1653d9251b2c8e03727ee7e05b5e92b196771a217fd9a53297a8cb9f2cce2ef9091ef48b4685e9ef580254c63f943cc86cdf5e73e8da","ssdeep":"","tlshash":"3a012545a47074d073bb0c81451549c1a372473a2b42d0e0b51c8e43b67fe96c2f7f59","size":804,"data":"","first_seen":"2026-05-18T02:10:30.473213Z","last_seen":"2026-05-18T11:40:03.897604Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0ed7511cd3b7281935b501081af2b243","sha1":"7ce7c1685cb501be190aabcf6be8dd99cfbf124e","sha256":"4247c7e1fc2e29b0428ce5ddb331bde55d7a2240cdfe739e78d856349a36e99b","sha512":"792f1b064e558413e24df0cdf3b12c29725a76345b048c7b3ee9b3745d708b482d7b4fefd118be667b4a4a8a6976784b63847f7f225d44b9045c73cbc8bd2ca1","ssdeep":"","tlshash":"9bc08cc4a0c63d002603655110af24e4a0244026704c1b22add4e8483e230b08233e9c","size":141,"data":"","first_seen":"2023-09-24T22:56:46Z","last_seen":"2026-05-18T11:40:03.963413Z","times_seen":362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"596f72daaa28c1eb76c8f85b82bb899f","sha1":"3627dc24beb79ad0876f9f1b5997034b0650eb96","sha256":"7c3888a45ac6832ea65381b7611056853592c99996fb70e9ae6d3c64009b033f","sha512":"2d74da92ef020c6b6a2cdd84cc2026baa479f4f5ad98f038274ab6732bb92250bd7fc5910b75a9e3ab5400bbf07ee79017d6aed4bd395fc0c52e96808dccbef0","ssdeep":"","tlshash":"b4c080c471c63e4455177514167f25f450354077744c17629de8dc5d3e620b0e237ed8","size":172,"data":"","first_seen":"2024-12-08T21:22:12.603613Z","last_seen":"2026-05-18T11:40:03.967187Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","size":225000,"data":"","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-05-18T14:03:24.083956Z","times_seen":2271,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2742162309ecb25408f0bdbd2e0e03d8","sha1":"0f732f495c154daa3c97fea9d422f8438f70ba4c","sha256":"c6ad747cb1db54d087ee3909f26e9ae3f0d6f66aab6245e48ad5d8168fce0fd2","sha512":"6f305b56fa56b526403d9c59de6cadadc7a428301ae45fc2a74de6a695d3752358d9fdeb04ccba88779aaab6a8327602e287ab5000a79dec03e7bc574fd8e41a","ssdeep":"","tlshash":"57c08cd8a1e22e005a0265a410bf38e89034542674486b039dd4d8593e635b0c233e98","size":150,"data":"","first_seen":"2024-03-11T20:01:51Z","last_seen":"2026-05-18T11:40:03.974258Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/install.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","size":1578,"data":"","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-05-18T14:03:24.107829Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/8BxVDupaHRBkpYf8-I.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"548a21dfe0a25e9e22aa2f116033bf03","sha1":"ac96d5bf25ccec7644dad06c29283a1115ec12c1","sha256":"a8e404e181c39eb3e33486d7777fad8bd1ca888092c0aba1d1847d6457a2003b","sha512":"82c9b030b815443e66a2b0fa76d2b994e9a7a92477b75cc824e3e9284b7d2088f33a2053d41a10eccb66f0bd60d537bd8fd252dc5dc3a0a6a19260354ce04631","ssdeep":"12288:J/YpB6Lrebcf7J2kxpVo2QxCqBRsa7AhhGyAcRWvj9SfnnvRIhfGpRV9SIIYJU6a:VY6nf7UkABVS8J","tlshash":"527532282a1bf744e419c0dbf9373c84d59de68aa00754d16f790bb31be2792ea9cd13","size":1593994,"data":"","first_seen":"2026-05-18T02:10:30.55634Z","last_seen":"2026-05-18T11:40:03.970882Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/wB9guRAxQfBjgb6A3P.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"edc9ca40b7d7582153db0bae14ff060c","sha1":"842e8ae68327591277d2cba6794a5d09ec999163","sha256":"7249f8cc626d0e827ddff7af10e4d8205110f0597bb6f88e135037ad247c144b","sha512":"3d3db29e505eddef93db6e03a665d07d99a302f940ef36d705a0ad57a5d72d250222f13a6de1d61dff902a2480644e73baf95b118dd3341e57fb2673fd970f53","ssdeep":"","tlshash":"f2b0122f0804507069850d8d235850334330162d339339802214c918531d4a6c11d655","size":97,"data":"","first_seen":"2026-05-18T02:10:30.228064Z","last_seen":"2026-05-18T11:40:03.901764Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/plugin-install.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"57b64e45a506003e2cdfe8ab5ab79af0","sha1":"3cbc00ba71e00abb435f74a43b07b47e7ed94828","sha256":"dd053d736f0affeb5b6e511470cd6eb8d940866089a2e23e29b60f26fa389ce8","sha512":"89f6959d8bcba3d4f0da62a42bd57e1467f75dcc7936774f9676dfde001cfddd7bc11d4b675255592fca91c2a72079ffe7e03cbfd6a538ebeba919da903787a6","ssdeep":"384:GPyg/NXbASoSALbGf4NwNiB0W9jyyxRyL1hKGadeBTKSwQU:2yg/ia4NQiGWwnLadeBTGl","tlshash":"e8921a4874297c7842ae5a3325fea214307f1b852931d0a0f26cdb796b78d875177ebc","size":20819,"data":"","first_seen":"2026-05-06T06:21:51.028594Z","last_seen":"2026-05-18T14:03:24.064618Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/plugin.6e022713.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fcd72cb563bba01f81b49211a8be717","sha1":"21fcad565344af8ffffa528963e0671e5476f7d9","sha256":"91cb86436e3a04d3c6779741304406634506d3b0e79a706b2fbc41c915ba3ae0","sha512":"1bc0665437cfd75582dc11039e4d6eee5a906ded63a620cace330f1a9ad2de537a96de2a8e34e1c381ac034002d9533d7bb2c0a5440136fc52ebca9ff7a6d836","ssdeep":"6144:G0bg30bPKQQDLVQbO0NzhDetWx9a+gcmLTLrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQb5NzhDbMLrqGKAbCPaHcqn","tlshash":"cd843a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","size":380050,"data":"","first_seen":"2026-05-06T06:21:51.054543Z","last_seen":"2026-05-18T14:03:24.117496Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/WmNyACIFLODvnxteSo.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"15fba35eba0de59667e4fbb51aa21cae","sha1":"c562b09030aa852e8cd72aa168d1171f8c9ee45d","sha256":"1cdcf780b293ed96f9dfeee6570aa1ec773f456f456ba05168be22564587a41c","sha512":"fff09f49a40bc09953693080f06299dccc95b64f8b293441c1f90daf722e4be2c11124f5e4d841715aeeba7dca946d524fb3552b7f2083c27d22a1daf572f1c7","ssdeep":"768:f0pNmWmFp351iBFmbI5eUttHvLKDgeR0o:fM7mdoNW2o","tlshash":"23c2ea7060508328f994b0751d84a8466d880be9da979de3f1fecd87e3c25b7ada43dc","size":27222,"data":"","first_seen":"2026-05-18T02:10:30.118305Z","last_seen":"2026-05-18T11:40:03.916099Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/3sWws6XIWWBd7OjZe6.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"aabc0d07753dbe5e93732c485f42bd86","sha1":"6d0ead7ad4c10d03d62b519a467bbaff00e716b7","sha256":"2771e47b028032724f46344d42034617e5cbb00ab82fe18e193124e2f893f0ea","sha512":"b98319dd86376ee217be5209cf2cd14245975ef02013e76ca77b2e9629e4aa862857168a94981bbd927454ec8ac43f10da3853351784d8961e98c749ecdac118","ssdeep":"","tlshash":"4f213255b09df13d42ff3876a8ab5016c32127d0232040cd77ab054e0b229d29677a1f","size":1269,"data":"","first_seen":"2026-05-18T02:10:30.036259Z","last_seen":"2026-05-18T11:40:03.913193Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-05-18T11:40:03.972719Z","times_seen":445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f5fe0787cd8e0ecbcb4cd952894a8b7","sha1":"d43628197fcab15076d66a35b34fcf121e313189","sha256":"cb48ecc1b44293573353b165ece68d9f1fe13f50556b5f8d3ae683fc5a9b619b","sha512":"ccc2d734bb0f275c05eb1ce6db8049e726211a3785705442496d241b2369dbd0c739d4ebbed713c3883ca59708b6bcddca34c1c23906cb487f15580bf6744452","ssdeep":"","tlshash":"01c08cc4a0d36d101622ac2010bf24e490244027725c2b028cd4e8492e630b08233ed8","size":144,"data":"","first_seen":"2023-10-05T08:35:43Z","last_seen":"2026-05-18T11:40:03.967661Z","times_seen":1051,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/dNeNEPxY0GBGKTBbAH.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"dc6f808b0d8ee6be32637abcda7fb4bd","sha1":"a00cb25f31ca1c240564007d3baa1ce51b36b392","sha256":"952799ddaa81b98f902ce603a264de087c331ad146f3f41d2e1183d6f09f9b67","sha512":"5a21b0507c8905aefa0a2e3a442e7117f22db2745ff81fca21c5bdeedb7cd263eff4c018d907abcbc5d76a9e03b0a9607e6fbbe9b0b22c33b4b0e01289a192c2","ssdeep":"192:eISXv41iPkNtNsNzDnVTDQQezJs+/NQLO4evdNNmK0xoHpKk6:eI71bP+BBsQEs+/hZ1uST6","tlshash":"80028de75401be7e57f283b8a6ad34145c67107f11fd223a2e4fd246b589123b18e4ab","size":8259,"data":"","first_seen":"2026-05-18T02:10:30.041457Z","last_seen":"2026-05-18T11:40:03.939423Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","size":36489,"data":"","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-05-18T14:03:24.132724Z","times_seen":2170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/GHW886Gc84BxKVshey.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3682228a7f39161645fe9bcbb8ea529e","sha1":"f9c9d04ff42ed74170cd4c4b099d886e24cfbfb3","sha256":"6d6cb96610f07ac1284e2efdf741816ff68ff80bc99b07bb1bdd74fb54e2cf35","sha512":"56abcd1b706b69ab960a2d82f7afd955269b509791f0daedbc62e2fa2451495bd5f152091db1e667dfac04d8d74a96de9a7ad583b978b598bb01ccbb2e599008","ssdeep":"96:/acdRuMfPzqfcSFuxEV16+4OQfq61Zvzq6fFJt66DoxF6wr:ScdR7Pz4cSICVefhLjmp","tlshash":"0281f18c781789fc88ed4624e81754d0a1cf1bedd02449a1b0fedd1616d6da0cf56bb8","size":4103,"data":"","first_seen":"2026-05-18T02:10:30.0697Z","last_seen":"2026-05-18T11:40:03.933233Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5883e608660ca3e9576fc295eff4aff0","sha1":"1614af2d0325e090f0ba79e0caa09f013aa0c41f","sha256":"c8886c784225fa2ff20fe665f47cb590bbf87f847b5786055bc0dbcc39431eae","sha512":"e5ad9d2fdc63bbf65cd98c3cb2b15c2fed966b097a555418a75a55d2a7578a68e577d42f21c0526f349e4938dab26bde0b670615ca9f6d823fb5e80a02a7cef0","ssdeep":"","tlshash":"44c08cc5a0c3ae005602a81110af24e89024802ab0ca1f038cd8d84c2e220b08233e98","size":144,"data":"","first_seen":"2024-05-11T18:07:41Z","last_seen":"2026-05-18T11:40:03.964511Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"6150a1c6197ff7e9ec85d1214825c8eb","sha1":"f28ab613765ba19af8baae0a49a255841efac7d9","sha256":"db158c1ce65630463b521eaceffbe394f6e613e87ab7c363839cfe1d781d1e39","sha512":"1e0a9160c81f65e7c109bc0ac536e968bf1be75345619f03c4beeca046ff18cf55fae30a3ab3ab5c09a35d28bfcc585ec5cc9d3a88163df32ac63597aa0cf6d5","ssdeep":"","tlshash":"8ec08cc9b0c72d5026026a5514ff25e49034402a708c2b03edd8e84a3e320b08233e9c","size":150,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-05-18T11:40:03.97153Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-common.923779f6.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa48373e689723ee51b2cb2c176d619","sha1":"fdea5e7eebe313c9898dacbfff19c6bf6530f319","sha256":"35bc14c3367afb14beb47478f52369784df0b2120b6729118116465b35ac586d","sha512":"94e6c42a0d414073fa618f633807ca8ea55d7e450efcdffc7beded1e3739b8124c5850d98946a991e5925f325c2a4cc21b7e85042a6a112f48a4053f7cd929e4","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE10DTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEBIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3455da273f9b","size":27007,"data":"","first_seen":"2026-05-06T06:21:51.04932Z","last_seen":"2026-05-18T14:03:24.07842Z","times_seen":143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"585bd093398adcca9c32b34732c37bec","sha1":"96a392e95f918d9e3f1bdb9580e449d2efae29a3","sha256":"61650dcdc8a73394c151be14084ae4baaeca952889b4bb593be70922e4150d04","sha512":"0775cc084b6d8ed8f39b1e784110ccd26a3dce8b19412f1045b40bca5a8595b3f9393ca0ef88cbbe253c4ab172b45f881940d98167de52998a866041b9d1bd4b","ssdeep":"","tlshash":"f311aa2824ea160c8117ba95b1bfff0c762c612565e4dc0c814dd079182edbed6dd9af","size":1070,"data":"","first_seen":"2024-06-08T06:59:43Z","last_seen":"2026-05-18T11:40:03.962865Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de3ed6f62fa4508e69491bd89eb274b5","sha1":"eb8c50c4a1b5641abcb034fd7f88a95d15ed919e","sha256":"909705f246c8ead542b59e1f02453e6769864dcea4c1cfe24b8818a3a98ec0a3","sha512":"e7891d59adb2ea08b3810e31000d3b5df108358dc50347cd0bbad5fa3bfff24b170e934cbbce1bebc9baf1a352e9a1d34afda920db85c6f12e9759649fc03295","ssdeep":"","tlshash":"2ef022d91997593006eb11ff2b9e301060304003e908ffa0346f05046fed72ae7e1be8","size":618,"data":"","first_seen":"2024-12-08T21:22:12.696799Z","last_seen":"2026-05-18T11:40:03.963964Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/282KbtNOuHHLZeNkpd.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d9147274da38fb409e6e43100a3bd8a8","sha1":"4c2760d23c0fde641f4f85cd6983ab045b715125","sha256":"c55f38c6c1a095e84da9a8f0b1e9bc1cb36f7db2adb12aee8de211b2ec6e9421","sha512":"aa9896b153feeb870a58901d0a6fa7758257fafa20363b8c24bb8a114e40020460fbcf0dc6e2ab7da535a899220d217bcbeda629100adb0a464b80c1685f39f1","ssdeep":"","tlshash":"acd02b05c58803b838e2146b070727b020b7011c8f6492b8544d0e30df1570a1a0fb22","size":246,"data":"","first_seen":"2026-05-18T02:10:30.146896Z","last_seen":"2026-05-18T11:40:03.940121Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/Onsnt9mQ0t1l-CAnx7.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"28231d15088754c9549f5fc1e59ba2c8","sha1":"0babe1ceb2e02cb353b2b6b87c46a7c79f262e93","sha256":"b770b728acda5a6cba9497682aeb30727a89dd1ae6b2e601b5cb1c0c9180a462","sha512":"cda93a800d0770bce25b227f7b15ba130f8264e695ef6c41fb48ac81d42e3a45da6c435d296ca08c0a32455702ee9acab6091cad8a0b4ad415297f48b9c2c8d7","ssdeep":"","tlshash":"f80144aeac5eedb4346344b145d61869321a4f2dba798880e2b21b3021d2400d02b74c","size":707,"data":"","first_seen":"2026-05-18T02:10:30.15176Z","last_seen":"2026-05-18T11:40:03.906078Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/DnXEs7MyHSTR-wyfMg.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"bbb4e86539a600353bb571a2fccdd248","sha1":"57b97bd9665daa2de8cdc81430876bb5e78fac91","sha256":"08c24ea136670cd6aaf5398213087a113c6b0df5fedb9ca02855e0754639cf15","sha512":"4952025f55cf6edb8c9109b4256010c8b87a226b6adffbcfe8d2fdc7afc2d485cc9a91c66c26961be6e20836bda1996e58c08f02b19c85d7398ac965610ab05f","ssdeep":"","tlshash":"41c02b4bb442c3e0625b0d8441664dd25f350f982347efc0c046aeb80b354fcca4be2d","size":165,"data":"","first_seen":"2026-05-18T02:10:30.36419Z","last_seen":"2026-05-18T11:40:03.891248Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","size":214670,"data":"","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-05-18T14:03:24.121913Z","times_seen":1055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f6487b2abdd19da7d2000e6948f4f1c","sha1":"b979b115c298e978f27467edb31ab1b318aed3a5","sha256":"23564c65f40d1f2ab2dcd8eda148222b38bc88958330ed728181f713a56a3ff2","sha512":"6c2d9837a4fc8300b16bebcba72c85ce0d21b7c1724ba5d87d809a1c463594354421f5fb935823c209e177d449741ac9cff38f1c271aa9375a42326356df115c","ssdeep":"1536:kb3gziinUta4oiLsXb2U/LuG0ch4Hl/HDTkzNZkVXK9:o3l9P+Lj4TY","tlshash":"6543d58cf7d9b02103973472487f541be33bba646c4bc650c526e5887dbc59aa237eac","size":59263,"data":"","first_seen":"2026-04-23T18:32:43.944826Z","last_seen":"2026-05-18T15:26:51.772548Z","times_seen":3427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/djYOx1ep1TBC5UshYp.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f494486c9a1a3c57d0d40012aff5c766","sha1":"8c65980d500e698a81c91bbd1bd2a24ca0cfa605","sha256":"2e8058f835d0e2a21545aac004f863b62dec962b83a7a03ad6fa7a87999b9208","sha512":"1e8af5efc214dc4717d582734a18437b7d0bb2767b08f37d79a36573f791fc42e4d145d2c2466655b01c71af30f37f00336b415e0e3a522245440236e0cd1daf","ssdeep":"","tlshash":"99819548b857d639c0fb5868c5685451b3a46fcce0288b85b2fd392d03869f09bb9b95","size":4061,"data":"","first_seen":"2026-05-18T02:10:30.232856Z","last_seen":"2026-05-18T11:40:03.908129Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/K3SNEvdhypCqcPh1LE.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"63f298c845152f90c34aad15efc3519b","sha1":"30135b9318ce565a7b78a5d27d5b2bf6ff2e8296","sha256":"b8c4f2f448fa01625930937ecc35a2db4270d626147bd538e68c8a6bf465abec","sha512":"9ffa1975a231e3cb53e549a0dc41617113e10bd7fd44b38d3c85fcd191b91e0db496817ba98a857355a70b0b7021ac3e2c0f2eedbe782fc535f83cada2be6dce","ssdeep":"","tlshash":"1af0d51eb02281bc11ff1c6d8840009c43328fa02281a0c9b23f2e980b38ce7e6a2c2d","size":459,"data":"","first_seen":"2026-05-18T02:10:30.082884Z","last_seen":"2026-05-18T11:40:03.905409Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/BXTVg7sIOh_RSji4JW.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f61ba7ad24fedb963b9dda49352bccd7","sha1":"8939f697969578208ad3ad724a4474ee00f66f38","sha256":"0aaca7e06aa3fb9ff21ad1f1e74fdd9c2ef261fbb0304ec28478a2c26fc8cb2f","sha512":"110a307067041182af927c1a689a9332bc43832c8825b3a89be24da1299e394aad224a23b79c74c9336aee09909f889746d7a68e2f914e5fd1494ad449866b51","ssdeep":"","tlshash":"d2f0c9b980c8cc30022fea8882286591432c8ab4c22141c4ec4aaa19f39a86ac62cf14","size":503,"data":"","first_seen":"2026-05-18T02:10:29.992867Z","last_seen":"2026-05-18T11:40:03.898182Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/swiper.Oi8yPmNN.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"82975d67eb53caecb90681ed0c1b2f69","sha1":"6adad631ec9645ddd33fddebf6d1f751f85ec722","sha256":"40d5188099366d2198d6808424577f236659c1a01d412d30d6e9ff9fb5cb014d","sha512":"af56e91504aafabaef51cc89496c2706f6dcb72113c4302d87fa2a85b9071965bd32eaeb15ebf924d1d6df2070015f7b899c4b0fb0a6c88a7f89e4a014ea978e","ssdeep":"3072:X72LtwN8TgGriiXOlYYgFCPKE3WVcDhPU0s2usyko:XaRw8TgGripiFCPn3WVcDhPU0s2Eko","tlshash":"1af33a997250b13242fb19e742768111b37909497809d4e8b1ad9deb2d3b84812ffffe","size":168708,"data":"","first_seen":"2026-05-02T20:23:32.665218Z","last_seen":"2026-05-18T11:40:03.953714Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/kTQBscy3MeDrk2rEyD.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"511e411095d54fbe4c34de72ef31f823","sha1":"8fb0cd1f4900a5f116d83ac01fd45f9db55833e2","sha256":"2e63d810a761c39e4259c2e7037442317a8044b71a7919bf66263ecf0bf049fc","sha512":"0434be6f403dfa45dc13ab4e4767d7ad026513c3e078d45b68eb9ff49e774591c02076f25328c6f37505df6170617e9ebfff142d600d53be0b6b09d5cd572c19","ssdeep":"","tlshash":"6a41a66cf411dbbda237863888520064220c2f6f942cede4f16e1f222ecacb46456b38","size":2252,"data":"","first_seen":"2026-05-18T02:10:30.423876Z","last_seen":"2026-05-18T11:40:03.890513Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/TSm2GGrVCaUCfy0gy9.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"56258283f0548eba629f56af0b8db2c2","sha1":"e21aa8eb53d2b3b936b129d8c9c37546a43edec3","sha256":"7de73bd902874fa7c3cd281b2cf4b75af2b2b9cfab1d6b19d533ca1019158f43","sha512":"5efe95c375f5211ff5ddd6961c643903e983fbd132f5ca8e6eaa6b0a16e73d46550caf4b4cfb5376f1822b00c9473aa70aea60c9465428d8620e0e35fe85ab26","ssdeep":"","tlshash":"2131729db41acfb8a0b74d39650bc05590184b8ef325c605b0e84b1223d6c39a22ab6c","size":1678,"data":"","first_seen":"2026-05-18T02:10:30.446465Z","last_seen":"2026-05-18T11:40:03.901079Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/BvtIZFeKPpDckmY11N.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3ddc6f67d1bfb0f8e1a512f926b3a7e6","sha1":"11fee67f3ad1be950cee296467e3367f07b40e65","sha256":"33c338418dc31d4bd17cc71702f0513d7f65ab2555b53e59bb12e0d162365be4","sha512":"a0fbd6be1fd7f2ea9194f16611893c14d1231ff10d9c06e342728bed07badfdf0a46d332171c6c7e3a927805796fc8e88e8250065d271f820fd9688f466da90b","ssdeep":"","tlshash":"ca5153d8b6a2503d8b7324f172e520c5572e13a0efaa51ed501f2b005b97c23baf8939","size":2548,"data":"","first_seen":"2026-05-18T02:10:30.022041Z","last_seen":"2026-05-18T11:40:03.922345Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ca3441268092f5f3296cbc45c9be4124","sha1":"0348b172ebfe7aa5e649e4b31851f332677e931b","sha256":"3f6acc164a5d0712e643ce2f47cef3052906a5d16a7cf7fa4ca21e2586aa63f9","sha512":"2145bb9c3d1285de751bb3ea1b899569192793bc0b0f1e0a15b4c79d43fd7880005341ca82f25db4905b17d1f212c49794684f356fdbf0acde101baf05fe7d1a","ssdeep":"","tlshash":"5bc08cc4a0c23d201a02641010bf24e49028842770481b028d94d8582e220b08233e98","size":137,"data":"","first_seen":"2023-05-11T11:46:06Z","last_seen":"2026-05-18T14:03:24.184304Z","times_seen":422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7fc2131866c38ef4ff724bd98efff367","sha1":"df6ff71a44c573e84a622b07e56861450715dc60","sha256":"ad0b252875780cf92a0c79ab806df4f30c9490a10dad56be6d86117993558fb2","sha512":"a339e93c7702b02377c1c573b5d14ac25536fc7fee1b23439041dd2faf100b9a578a3f551489962a6afa00e7630a13af528880da26118e943831080081d52367","ssdeep":"","tlshash":"20c08cc4a0d22d001602a41010bf24e49024402670481b028c94e8483e220b08233e9c","size":136,"data":"","first_seen":"2023-12-01T02:41:08Z","last_seen":"2026-05-18T11:40:03.968468Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df5e904e2a419fd848b94f0d8a9c5338","sha1":"ded3da98e8f557e3702034442c0527b9b6f2939d","sha256":"f46e53c31226b8a14d07eb98f71e7e9a331f5c34b36be4b50c4b23c4ad71796c","sha512":"c6afea57dbf39cd7d34d2ea55d4ecaab8c57547ca2ac0320e45e3e39d6b2e0388df4247c91746749c1f4d57539ec42ff0576a2abf6a9f090adc79fefee60c97c","ssdeep":"","tlshash":"90e0c02a18ea18b99757a2b6313ffc053102300d626883727a4cc505ef91d7f87a4f8c","size":388,"data":"","first_seen":"2024-08-25T20:57:00Z","last_seen":"2026-05-18T11:40:03.968987Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-18T14:02:18.92209Z","times_seen":5282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/N73RLymwlWC7eKr2eV.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"35f4fb2c626f120593bb472d0759d70b","sha1":"eaf15b3c76131ec765078e5238a74dfd79b3a1db","sha256":"ae1764782b01701e48ce2d949d8d8317712876e350e1bf1c209374693507b372","sha512":"417eadda276569c927579b05094a42569f27851922e4b703e0ab1befecb9b41e8a5794ae5132e25e540bf529465032f9379f56a879cc76b3dca5a422f0018241","ssdeep":"192:lcygIDNnwkmJJexKjWHovWEj2V5IrscoNtBZNqaO7K+UawhZC7Jfk25mXXhNkauz:lphnQvhjQeWyFCZMaO7zUaP7Jf01ulx","tlshash":"32629eb73b98d67e8b742cf8600955f2ece6581f6ff58d84d89840a487e0c90cd5e742","size":14948,"data":"","first_seen":"2026-05-18T02:10:30.462012Z","last_seen":"2026-05-18T11:40:03.893988Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd1bd11fd11651336c660ae4dcaffe70","sha1":"247c11c7aa0d5767918f2cc20c26f1e7aecb77db","sha256":"77bc3df32a0c1eb2d90672990d2c97863055bf9ee0ab062a59a0e235e428a122","sha512":"2807830aaf907a83d221d0da285768e897ff63517947cb2a3979f5e1fbda93e80abf24deb0b7692cb8874b8cad0be6acfc1c1f608a5835474ce7dfaf0a831353","ssdeep":"","tlshash":"6b01eb230cd910af6f2710bd2b3faa1236b01113144ac420fc0e8720af20e7c1724acc","size":700,"data":"","first_seen":"2025-11-11T13:02:28.956822Z","last_seen":"2026-05-18T11:40:03.969578Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/6Ljvmi29zbBqkoafMl.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"106fb035a13f95d47964c6abc807ac53","sha1":"d6fe0233779ec91a37ce408abca06d766da79672","sha256":"ca7d218e45b4c86b11d8ffa204d591d5c0b6836da4fac63422529c3b64bc4ad2","sha512":"9f6854967ca305b2b92f8e2f34956755af1aabb904c59adcd4aacec80d2628938eddc0164ba475864a264a8a6d3877ba38f7643b5e4c71f20a571dca3d426fbe","ssdeep":"","tlshash":"c601258c48e6cbf9d4d702642d9a10b5d050674c9b35d865f05cad22634fcf095de738","size":790,"data":"","first_seen":"2026-05-18T02:10:30.40367Z","last_seen":"2026-05-18T11:40:03.887492Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"36f26a090abdcc337bfc430f7eba2abf","sha1":"bde4b3d8e5ebea671a9a85174cfb4058a4bf0adb","sha256":"217e71e9b0dbcd6bf49e06ed0c8570fc448a800192167db81cba4cbaefddce78","sha512":"a191f331612f086b236bcab8dc8340639cec8859afceb86edcaa7913e42165ff3d184a5a5f4bac7ea93f59aeea3c76e505c456f9f5da206347076658fc271a87","ssdeep":"","tlshash":"12c08cc8a0c72e101a12655015bf24e4a024402a70489b038c94d8482e230b09233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-18T14:03:24.149159Z","times_seen":1518,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1ca49f0e439cf34669924908e59b2897","sha1":"efea6ef6bd12f3ded99d07b429c6af21c23ed826","sha256":"9f9ee6011e8f88513c2761906180f430478c9d9835d4e74a211cafd3c79b955e","sha512":"f5dfd73abfc4c47819a1c10e68b974d2253a67fd9fb113e510809ee5ea650d5dd1f003dedcd6f88235e4e5b696f28c5e2f18526e794579f3b9f5a1d7db17bb21","ssdeep":"","tlshash":"fec08cc4b0c22d102602a91010af24e49024406770481b168c94dc882e224b09237e98","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-05-18T11:40:03.972197Z","times_seen":501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/#/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"92e81ef4d7ff796a20b80fcb8ecafb14","sha1":"3858157355200e83aa100cf5f214e911f10693ba","sha256":"d3a581bf91a70a8ca524ae1c262c4038b94530ea30d0464f6acecb58018931e4","sha512":"a23b0cc95270d3cd86f1ba4cd9605d791f61bc593f4570b1787e9cb84cea444ee4c8c3bd311fa45748451d191ac8b9c3736792935dfac95d25ef292b62f83983","ssdeep":"","tlshash":"1bc08cd8a0c22d105612a81211af29e490244026704c2b028c98e8483e230f08233eac","size":141,"data":"","first_seen":"2023-09-24T22:56:45Z","last_seen":"2026-05-18T11:40:03.960783Z","times_seen":155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/eScTEiwOiCCqUHjVfU.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2814893c7fe9b4f941f58a460caa21c7","sha1":"9a56dc80d1219ba05ecce6c44136cafa5d59daad","sha256":"abc891547c73d8ad23005e861e4e60a157a3de6370476a0e85adea7e3363651b","sha512":"2d2fbee22fe60af6ffa41cb1d34a6188669a799559c06f67c021503d7b7158664ed0f7be549e6f7ba0be0df43b6bc600e78b64291c240f397f47410c82c26ec6","ssdeep":"","tlshash":"06f0200fd800dabe98ab1d042953306120487faccb20e8c4e1e63570a387d36e82ef18","size":543,"data":"","first_seen":"2026-05-18T02:10:30.141587Z","last_seen":"2026-05-18T11:40:03.892449Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/hjsVTE1j9ZS8JF6bUZ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4a5ad4893ae83a1a2e207173011aecae","sha1":"c8514a9c98b23df54f17073c4f0dd7354ea5c954","sha256":"817353aa9d1df44b05e64bf07c16cbf055fc876bd0cbf988356ac68dca5e3557","sha512":"31694ca4f5abcb75d9eb1543800f701457a393087e4ebad9b7da782a16a63090e4749817b7a2c3e40deddd9e3e556a22b6c7b5ae290d9a40b2279e9d4bba72b4","ssdeep":"","tlshash":"050189647eccf6e2d16f086845e19349db3063ac58c400166e6787700fadbf3c86bb00","size":746,"data":"","first_seen":"2026-05-18T02:10:30.176436Z","last_seen":"2026-05-18T11:40:03.895788Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"18abd6a4a936c652cfb1bc93c853925a","sha1":"6056a997b973c4e0a60649b06c1dac50329b2533","sha256":"ded8cef6b6fc895e5989ddaa686a4fc75d946feaa1686d77c8faa8a60c5734b0","sha512":"e47cdd3b205a6b92974881618849a9d74fea28b659b61ea5d1a279a7a1ac8a51d50b77e316fa38a7602b1e8e5081004b4e46fe6e9ec15989f77542cbaf8d3cb3","ssdeep":"24576:tGwUrogXoeaHb9JNvGRTwCm8NbQ45wYRc8tZl:8jb47pJwT5m8lQm","tlshash":"f3754a50641bcabcf8f351a498989801b5692fefc115d51af2fc081727c7c78abd97b8","size":1655315,"data":"","first_seen":"2026-05-18T02:10:30.5938Z","last_seen":"2026-05-18T11:40:03.965449Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/6eY1BIcwzUBQUHkBeg.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/6eY1BIcwzUBQUHkBeg.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 6395\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-18fb\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=266Sh73v0vR1uqvKTI3OkPSq%2B6F3oPjtHU%2B0perb6bA643nayY%2BasHPo4HFznT1PrKGK907Qk05%2FGzrRsgjBEjmYPIWThLZYJ%2BOX%2BMrGEwXsdRDxZ5%2BOl%2FFJZqE1Dvz%2B4KwtyuMX2i0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91aeee59b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6395,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 768 x 768, 8-bit colormap, non-interlaced","md5":"82bd80867133b89f6365b6744c0bd305","sha1":"fb84dae22d58bb39611f4a8f0491313ff8876633","sha256":"89d7808a49c914d98a61461fad9114d2b24c1c7d4db2dcfad21f6824ffbcdba9","sha512":"d72e27d61e018e7ccbc3321dc5ed5aaa0834364bd9b9360a2b4266e606cf0b65ec29c2259ca5deb5b4fa1d5d2ae5dd5d51494692c3ea0e940d1a7d26b5ca4956","ssdeep":"96:RKPyiK8fi+RRRReEfCOBGTwu7uVx6uKCxmnTCpRJJvVO:RK6pCZRRRRRacGw88x6VCxcWRHvVO","tlshash":"1fd1c8d692c89f952385377508404a7bd37086cd7a3a2c59fb198276b3c7b8e138afd0","first_seen":"2024-06-08T06:59:45Z","last_seen":"2026-05-18T11:40:03.910141Z","times_seen":56,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/8BxVDupaHRBkpYf8-I.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:14.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/8BxVDupaHRBkpYf8-I.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-18528a\"\r\nexpires: Mon, 18 May 2026 14:09:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGY4WQAYXLb9RjoieNMuqwRl3SWsBdA3PpLzKaCNNCfexLgdamcUNZT%2FdPyxKf7EmseXtFV0FJur84lXbSu%2FlLH3reHA502Yb7L3NlJZ9oUqN74c7ev703AWVztfVN%2BNQ72q%2BjCjus0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91970f43b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1593994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6914)","md5":"a43b39a461536c3e55fcc53f3fceae20","sha1":"f26cdd72fe9c5a93c3106de51dd4dc0790495603","sha256":"24a0cd28e175beec1763eb17c51b4bce13f8958bb0c40280dfe087d6d37563b7","sha512":"252bd25165ddf169b124ccbb0d03bc9dffd7f6199fcf02a43f165c064288e1c0d6fa7e5f6d58d38c96322621095654af39be5183ac605b699cd3cc9d0587385c","ssdeep":"6144:J/hipBhkSgVrIRbcfGuySJ2ie+2uxFDpyMo2U:J/YpB6Lrebcf7J2kxpVo2U","tlshash":"a725f9281a6bf744e418c0dbfa373d84c59dd18aa44724d24f755bb31ba2793eaacd03","first_seen":"2026-05-18T11:37:55.297304Z","last_seen":"2026-05-18T11:40:03.949463Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/EK7yx1M7TnbFmgwUIn.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/EK7yx1M7TnbFmgwUIn.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-2a75\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MpjeJZJDXbyS7qQ5v0ruH5uwlA6nzLR0omsCbPnk%2BT%2BJAs8o5%2BRuouSVKX33VjgFbcJvhGtZ2Bvxz2jrv1sIWpNXJiZteosUbg0z%2FjalBI13hCxdZRUdFmcvan76JgHzqowbzUU2kmc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5da35b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10868)","md5":"ae5157eb66950f55c769c584159f44a4","sha1":"d1fffe9d3cd19dacaa6c35e7c67e4c59bef08cfa","sha256":"7e3c1188fcaf824bf81a7dd8749111a5bb57efaed28963b41171d8f8a30adaf8","sha512":"0b655492f697277642d6727b74d877e9639d81f2544330b67a986445d514c41d7994c7e85f460d268095507223042b547156e2a7affe100bf6f88440aaa8af6f","ssdeep":"192:JGmNuNqjNrNNN5NtNgNANXBbnBMNmDPA/IfOSqITWnlHO5laVPK:JGm8A5XzfK6HyNwPA/I/9TWdOe1K","tlshash":"a42251a5df4feb0b472104c03b27bb9d9f5e2bceb0ae4583c3499c6c6e0ad546616970","first_seen":"2026-05-18T02:10:30.133759Z","last_seen":"2026-05-18T11:40:03.913916Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/BXTVg7sIOh_RSji4JW.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/BXTVg7sIOh_RSji4JW.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7qdkBn9zQXIdplC9%2FY%2BvZF6l%2B7xOvZVObAvlVGms26beTwEaKs6KaQQsakyNHLU1VaNYyoyw1ufVKgtpjZrthLFKMt%2B5rv0S%2Bg6viWQMMlqS7rRObOVKUNM5q%2Bw%2Bg4aHUf7wSfFnVk%3D\"}]}\r\netag: W/\"6a00587e-1f7\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da48b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"f61ba7ad24fedb963b9dda49352bccd7","sha1":"8939f697969578208ad3ad724a4474ee00f66f38","sha256":"0aaca7e06aa3fb9ff21ad1f1e74fdd9c2ef261fbb0304ec28478a2c26fc8cb2f","sha512":"110a307067041182af927c1a689a9332bc43832c8825b3a89be24da1299e394aad224a23b79c74c9336aee09909f889746d7a68e2f914e5fd1494ad449866b51","ssdeep":"","tlshash":"d2f0c9b980c8cc30022fea8882286591432c8ab4c22141c4ec4aaa19f39a86ac62cf14","first_seen":"2026-05-18T02:10:29.992867Z","last_seen":"2026-05-18T11:40:03.898182Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/hjsVTE1j9ZS8JF6bUZ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/hjsVTE1j9ZS8JF6bUZ.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1cyatwluK%2Bz%2BemKXpNhG93orSlj6z4nt%2BlpsQsba4Rq6y7yAoglzcIE4JSem3DSUw5BDp3jTMQ5ygLRWQO8BkFKfPQg2sy4y1bPe0PNtPWbkCU8YgP96V%2BJdFedGeNexD0XjL2qkJY%3D\"}]}\r\netag: W/\"6a00587e-2ea\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da4fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4a5ad4893ae83a1a2e207173011aecae","sha1":"c8514a9c98b23df54f17073c4f0dd7354ea5c954","sha256":"817353aa9d1df44b05e64bf07c16cbf055fc876bd0cbf988356ac68dca5e3557","sha512":"31694ca4f5abcb75d9eb1543800f701457a393087e4ebad9b7da782a16a63090e4749817b7a2c3e40deddd9e3e556a22b6c7b5ae290d9a40b2279e9d4bba72b4","ssdeep":"","tlshash":"050189647eccf6e2d16f086845e19349db3063ac58c400166e6787700fadbf3c86bb00","first_seen":"2026-05-18T02:10:30.176436Z","last_seen":"2026-05-18T11:40:03.895788Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/plugin-install.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/plugin-install.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:36 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50C88D14B38313D15BD\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6723015326894798230\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: V7ZORaUGAD4s3+irWrea8A==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: kgEMgiEW4QzmvexwWQ2_aGk-solFTgeyZtPXh5dLIU-xGAQhGIXXag==\r\nage: 275679\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":20819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20819), with no line terminators","md5":"57b64e45a506003e2cdfe8ab5ab79af0","sha1":"3cbc00ba71e00abb435f74a43b07b47e7ed94828","sha256":"dd053d736f0affeb5b6e511470cd6eb8d940866089a2e23e29b60f26fa389ce8","sha512":"89f6959d8bcba3d4f0da62a42bd57e1467f75dcc7936774f9676dfde001cfddd7bc11d4b675255592fca91c2a72079ffe7e03cbfd6a538ebeba919da903787a6","ssdeep":"384:GPyg/NXbASoSALbGf4NwNiB0W9jyyxRyL1hKGadeBTKSwQU:2yg/ia4NQiGWwnLadeBTGl","tlshash":"e8921a4874297c7842ae5a3325fea214307f1b852931d0a0f26cdb796b78d875177ebc","first_seen":"2026-05-06T06:21:51.028594Z","last_seen":"2026-05-18T14:03:24.064618Z","times_seen":143,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=3b701f7d59a6ce6843659a4a3b7addb3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237323\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/log/log?plugin_sign=3b701f7d59a6ce6843659a4a3b7addb3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237323\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 496\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":496,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyGI%2BPnXbr3umN9jWsnohBdH4P9wVPhyiyhypyQrpPStb1nohMhyhBdHQP3zSNSHVrhyiyhypyGHWP9abtTV8rCyiIh8htQXqf9VWPhyiyGsjBAymBAR%2FlaFjI5fklelml5lqlAykyh8hP3u%2FrSX%2Br9DhMhHVPhaXDqypyGXqPdyiyQ%2B4tTY5MhFW1nm4PdaAP9V%2FsQu5rCaEPGs%2Fs9zwBqlWyh8htnOhMhHIPSEEP3j%2BB5D%2Fld6KX9V%2Fr3zSfqYMXd6jldk8MqYN1nk9IepR0es4MqYqtAKjl5o%2FldvRc9XA19FWlA6jle6jleORcQVqrnrW0dFjl5o%2Fld6hBdHpP9tbr3u4sCyi0qH41naVfSc%2BPN6hMhyjI5fml264lAlSl56myGaz\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fda91ac9e8e5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-18T14:03:24.066134Z","times_seen":2078,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":88,"dns":60,"connect":2,"send":0,"wait":285,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/fonts/iconfont.2ed03d2d.woff2","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/fonts/iconfont.2ed03d2d.woff2 HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://assets.salesmartly.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 8716\r\nserver: AliyunOSS\r\ndate: Mon, 18 May 2026 05:02:02 GMT\r\nx-oss-server-time: 2\r\nx-oss-request-id: 6A0A9D4A65E6673438B09235\r\naccept-ranges: bytes\r\netag: \"2ED03D2D50DB630E6DB43AF0AB7754D0\"\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18312883229832275330\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: LtA9LVDbYw5ttDrwq3dU0A==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: CMRO4DaFUwW7OIqKDJVum4Hc7pc9yKGLS8j64AMMqIx0vCq77E44_A==\r\nage: 23716\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8716,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8716, version 1.0","md5":"2ed03d2d50db630e6db43af0ab7754d0","sha1":"be76b52aae516e3c80f4e0648e9706ffbf3be214","sha256":"a193d84760e849b95a98318e0e925d8f8449f4b36606a94900a6b5fc173b1f98","sha512":"f3ef820f7347e9965c737da31127c58686d8027aa04ddcb26f6ac8d47c98a49a5dde8544e3abf4084a194cf8c47e9d639c5d8cacebfaff10a3898be7df322054","ssdeep":"192:MxEayh1xopHESFdJwCa2gJyU2VnQi0eoyyn+hgd:5ay/qRESFdJ4uUWnuP9nx","tlshash":"1f02aea0d59becf2dd573efc9e08627e409c2c5a4e91b2547baf8336124b39801e09e4","first_seen":"2025-08-29T00:00:23.805044Z","last_seen":"2026-05-18T11:40:03.920045Z","times_seen":1104,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/eScTEiwOiCCqUHjVfU.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/eScTEiwOiCCqUHjVfU.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUrrzcmkNd4uzWo6dcZrnKe0YCgCnML4BW5r84zpEVBs2uIVWOsUIwC%2Fo4Hvm4aqBlw15WebvMcNF0LO29dUVlU%2FHqzUczEmveeQhKV6gFVAahxDl9UbFsiGxLfA6QzF1XKuABWd508%3D\"}]}\r\netag: W/\"6a00587e-21f\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5a988b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"2814893c7fe9b4f941f58a460caa21c7","sha1":"9a56dc80d1219ba05ecce6c44136cafa5d59daad","sha256":"abc891547c73d8ad23005e861e4e60a157a3de6370476a0e85adea7e3363651b","sha512":"2d2fbee22fe60af6ffa41cb1d34a6188669a799559c06f67c021503d7b7158664ed0f7be549e6f7ba0be0df43b6bc600e78b64291c240f397f47410c82c26ec6","ssdeep":"","tlshash":"06f0200fd800dabe98ab1d042953306120487faccb20e8c4e1e63570a387d36e82ef18","first_seen":"2026-05-18T02:10:30.141587Z","last_seen":"2026-05-18T11:40:03.892449Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/3sWws6XIWWBd7OjZe6.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/3sWws6XIWWBd7OjZe6.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-4f5\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UIOZyX3lEzjbW%2BzISoHTddLlp39vQhvcDCqUWFW5tJJMyf0rdSmB8AQH6jEjMN2hMS6SFpzoyN2DycbY6l9DyJVuI2decHHbCwBQZ7YZrX86p6Jub7tcs8R48AhdFaWVzlI4DHJIbk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5da4cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1268)","md5":"aabc0d07753dbe5e93732c485f42bd86","sha1":"6d0ead7ad4c10d03d62b519a467bbaff00e716b7","sha256":"2771e47b028032724f46344d42034617e5cbb00ab82fe18e193124e2f893f0ea","sha512":"b98319dd86376ee217be5209cf2cd14245975ef02013e76ca77b2e9629e4aa862857168a94981bbd927454ec8ac43f10da3853351784d8961e98c749ecdac118","ssdeep":"","tlshash":"4f213255b09df13d42ff3876a8ab5016c32127d0232040cd77ab054e0b229d29677a1f","first_seen":"2026-05-18T02:10:30.036259Z","last_seen":"2026-05-18T11:40:03.913193Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/init?rts=1779104235387","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /api/init?rts=1779104235387 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:15 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76JJgEHFsm7YxknbEoegls4Ts%2Bw1d%2B3tQYlTINRe9xvOm1SCCwHyj2fx64UjFvzvfFMWDJwe0485a1oAqA0s6jtMYI2ma%2BSeTLni68w0t%2FQMWOW6OGWpKbjtYjh02lkInsPmG%2ByhgiaudHwB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fda919f78e2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8640,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (8640), with no line terminators","md5":"5e7af5e62d27252bf38d404c29526e8c","sha1":"ff4e513d38ad99261327b55dd6d06eda533c73d3","sha256":"e0b837982ce98c8b0e85e4df63fa47e3f5fe4889bd2a4516eb85bf5216da9892","sha512":"09152008e5f11b12cbcde65c1eb5333baf7ce8d29fc7aa3f33fbf6fc4bd4417a2e4bd20d28e3ff837f603254a6e626ec943d4ad828564482bf57d5c5ab50a37a","ssdeep":"192:BdJy0QVINiCYl0XE0cGQYJhP32zlPuiLKyfWk:rqcXE0HQYT2zzh","tlshash":"5002ae024bde20decc178d8ac1fd6fd34ea9a15e40498c744a6e6424e39afb1e0db795","first_seen":"2026-05-18T11:37:55.31431Z","last_seen":"2026-05-18T11:37:55.31431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/TE8jP0T3NID357tqis.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/TE8jP0T3NID357tqis.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/assets/Gp6o2cw29YBvossI91.css\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 2852\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-b24\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bh0%2BlLrnaoPfRpQ0Fw44rjUgEjuvYGOKzb0y1g500qTxgOJDyA1PCR8Eq0%2BYjjw%2Fioo3bMyTIum1QoWDJ1ZmHnxxFmigHp70PyVPLQVFmamSoEuCVpw6%2F8H2MHz%2F7E2gRYCLJlGL1sA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a99929b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2852,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 32, 8-bit colormap, non-interlaced","md5":"938d9f27a6368f6cbbda8c84c40747c9","sha1":"31a3174d9e511bef93caecae172ee9471f8ac5ae","sha256":"48bc6546091a8c93946a52ebdc1c12aa826efcc29fe918844cf99a2e9ecb303e","sha512":"48659f412661c3ce54a3ffae264b1296316815bc853538929d270f9aede2efacfc36f37cf5d18f949d4be5ebd4dc013e684f2eeca4fc0583efed778851e031df","ssdeep":"","tlshash":"14514cfb2950114b70c90cffd20a8004d17d8eb2675585640a4dbc2c377e39f579e92b","first_seen":"2025-08-06T14:56:29.795272Z","last_seen":"2026-05-18T11:40:03.946185Z","times_seen":5,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2456\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:33:54 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 03:12:51 GMT\r\ncache-control: max-age=86400\r\netag: \"bdaeb947a2eb31bae0a170559df9013c\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 30279\r\nx-amz-cf-id: MJt1-vhI6dIR_iarMepwyHt04vAceAP2od7XW0qtIwSn1Xj3RQvarg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2456,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"bdaeb947a2eb31bae0a170559df9013c","sha1":"7fc8496c9bf51eea98dc9060262f87a792a24a43","sha256":"3225172adc122cc7f8f09fbcc94757061330651a485f17091f41726767f7ea3f","sha512":"710a1ac11f6fdb3915479bf6b9eccf34f4dedd8f30e6bed5275f52d1ec634a754b252e385eb9cd388a5a69c64aaf5818c13cb783090ae68a8696af067cb67341","ssdeep":"","tlshash":"9e512b90d3f3d98a7d930935f8b27a34cfda87da97098523ea834854e279442cd24943","first_seen":"2023-05-02T21:54:45Z","last_seen":"2026-05-18T14:05:01.594443Z","times_seen":18194,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/W01xtORBILDmluDlmE.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-194213\"\r\nexpires: Mon, 18 May 2026 14:09:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GKg9Lr9GCIb2q5npPaB%2FtqX8Btg9QyT8iNap3MEWaDxlPG0PfBJFCCS7dTpqqj2rY6XbCONk%2F2x3I%2BAZPILKPj02nwJvNNPhPRwWjg36INlzP02zB%2F6AYDX5bupXX1godcqZ928A8io%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a992b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1655315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11679)","md5":"df7e0917eba8eb702dcdb379522a173d","sha1":"9d9991d74ce3f1b494de3f6250d565b431fdb679","sha256":"f13ab116face5bcc749b19aa600fde241f35b890c6e1f714437ff9b609744145","sha512":"2bb1a9d3e81cfb72c54d9def4a77fa2f35cf43bb1814f6adbb452bd263f046e0eaf7af6bcc35f7020aea301a6a6d93c863d4e38dbf9b67f6c9b6cbdade721019","ssdeep":"12288:2g//ewuZro/IXk84QMTisJNxwl9aHb9JNYwBmL:tGwUrogXoeaHb9JNvA","tlshash":"a7252850641bcabcf8f351a49898a841b1a93fdfc115951af2fc082727c7c78abd97b4","first_seen":"2026-05-18T02:10:30.200197Z","last_seen":"2026-05-18T11:40:03.9507Z","times_seen":3,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/djYOx1ep1TBC5UshYp.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/djYOx1ep1TBC5UshYp.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-fdd\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdIDmqLQ2bc45mPPW0%2BMitIHArSjY7T3TViKVUC%2FLXzfGON%2B5OX9nhKmIVANuHCKJMDDZnRVG2Ex0A3VcGT6kzm08ILQRpyiLjJPp8Evmkpbk6ZTNKudKxlcJjIEgHAT4SvKBqwc7NI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a7fad3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"f494486c9a1a3c57d0d40012aff5c766","sha1":"8c65980d500e698a81c91bbd1bd2a24ca0cfa605","sha256":"2e8058f835d0e2a21545aac004f863b62dec962b83a7a03ad6fa7a87999b9208","sha512":"1e8af5efc214dc4717d582734a18437b7d0bb2767b08f37d79a36573f791fc42e4d145d2c2466655b01c71af30f37f00336b415e0e3a522245440236e0cd1daf","ssdeep":"","tlshash":"99819548b857d639c0fb5868c5685451b3a46fcce0288b85b2fd392d03869f09bb9b95","first_seen":"2026-05-18T02:10:30.232856Z","last_seen":"2026-05-18T11:40:03.908129Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/EK7yx1M7TnbFmgwUIn.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/EK7yx1M7TnbFmgwUIn.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-2a75\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTGn%2BvNNSrFfNt6kjlnbdzxnQzcQtPnYc3yGW13%2FXOUOZYBLBRVPmTH245amEBcpKiPeSVdADu7xFwReQiwDfUsOeWsR6svmTo2HgK%2FzbqYpkCmuiprdkK1BZVGW9Vtuoq3H8j4HRHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a80b70b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10869,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10868)","md5":"ae5157eb66950f55c769c584159f44a4","sha1":"d1fffe9d3cd19dacaa6c35e7c67e4c59bef08cfa","sha256":"7e3c1188fcaf824bf81a7dd8749111a5bb57efaed28963b41171d8f8a30adaf8","sha512":"0b655492f697277642d6727b74d877e9639d81f2544330b67a986445d514c41d7994c7e85f460d268095507223042b547156e2a7affe100bf6f88440aaa8af6f","ssdeep":"192:JGmNuNqjNrNNN5NtNgNANXBbnBMNmDPA/IfOSqITWnlHO5laVPK:JGm8A5XzfK6HyNwPA/I/9TWdOe1K","tlshash":"a42251a5df4feb0b472104c03b27bb9d9f5e2bceb0ae4583c3499c6c6e0ad546616970","first_seen":"2026-05-18T02:10:30.133759Z","last_seen":"2026-05-18T11:40:03.913916Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/news?rts=1779104237002","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"OPTIONS /api/news?rts=1779104237002 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://intl-coinbase-inv.com/\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocvM%2BqsAMuotOAzdjL%2FybMCFQ9BbGZOR7FZytrhamZjDIee0gNi0WU%2BCNV8asBTFNyVg0l%2BZpX6DM40B4VwFOUd%2F2VrbyXY5btTElNq%2FF0D6y4rKJscXrJzaY1DYd6Dsv9U%2B0Xrx9xXqJ5BV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91aa4bb5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T14:41:03.659351Z","times_seen":15390274,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/sys/company/plugin/get-plugin-info?plugin_sign=f60228de829cafff38729cec77da0cff\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237302\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 07:17:51 GMT","end":"Tue, 23 Jun 2026 08:17:48 GMT"},"fingerprint":{"sha1":"E4:6E:E8:0F:49:09:BA:FA:14:45:D9:04:38:62:26:F3:C5:BE:96:E3","sha256":"28:5D:C7:8F:3A:50:61:E5:67:F4:07:89:5A:0B:3A:FA:8A:41:33:8D:CF:D0:28:9C:DA:29:17:3D:CC:02:DD:1A"}}},"request":{"raw":"GET /sys/company/plugin/get-plugin-info?plugin_sign=f60228de829cafff38729cec77da0cff\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237302\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9fda91acbbb85693-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 5a37c1e9-9fb2-4513-947f-5ec613d320e3\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4431,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"159dd36bab05712e3b4242fd32bd75ab","sha1":"af99c1e07c7e1a3408b22a3e776d083e6517bacd","sha256":"2fd461e4f20c453d26ba23e914eb31c3e6865c63774f46051a137229110f92b8","sha512":"a8171f8c9752bf5fd0dd62f7c6bd64302269b0929b4ccf79aab806aa70075015754ade26f159fa771fbf1459d82d5a2beaeae797d2792a583ce1d2770d74065f","ssdeep":"96:UzwJ3O2O1MOgPIa43WbuZSSbnCRhx2lydsXUtU4OIXvpjix:UcVDCMjwaNSzCRPIUtULiix","tlshash":"ce917331911bc963a29348a860edad619d5f8378c1cc8e55ddaccd1d99fcce6570740f","first_seen":"2026-05-18T11:37:55.321964Z","last_seen":"2026-05-18T11:40:03.89647Z","times_seen":2,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":114,"dns":85,"connect":5,"send":0,"wait":254,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=abb5c57c23865213f9a724b16ef8c214\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237484\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/log/log?plugin_sign=abb5c57c23865213f9a724b16ef8c214\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237484\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 554\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":554,"data":"log_type=CHAT_LOAD\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyGtEPVzpP9uvyh8ht3zZrnkhMhyhBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCkqMCkkBAIbl2fSMe65M2l5lAyqMdypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWB9V%2Ft38ws9zEPQH%2Bf9Dw1nm9BQIWPCFABqypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6Ryh8htNIVNScEPnDhMAf8Iq8hP3zGN9c%2Bt3OhMGphsGHWtSIVfVz5tNY8PSH4yAEgyQIWP9wErNlhMAOpyQjWs9upDScWfQuGrCyilN4pyQIafGHVPGc2sSHEfTohMhyhbN4%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fda91acaeae5696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-18T14:03:24.066134Z","times_seen":2078,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":33,"dns":4,"connect":3,"send":0,"wait":284,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8L6tTOlOV.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbY2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8L6tTOlOV.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21908\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 12 May 2026 13:28:47 GMT\r\nexpires: Wed, 12 May 2027 13:28:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 511710\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21908,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21908, version 1.0","md5":"69002db506564723b03e00b10ad28510","sha1":"e67f8fefd2f04d0fce996991ff676bc9dd08e0d0","sha256":"d0d4e818808f2a0ba39b2b09d1989366f63494e295f003c7ef436697378507e8","sha512":"4691250e6e1ea29faaa8787dde9b40d7972ec01d50947ba0593b84e073386dbf913eddadd6e9a862c1caf4839fcc69ba744d805b58455af8756d5fc0ffa50ebf","ssdeep":"384:swS9TgG0FASq61BcR2Q14XTS8jANA/iuuz6LybA6KHqQQ+fX53kRcTK0QJdsqc0d:swS9Tb0BuY5quuz8EA8exkmtUV","tlshash":"72a2e1eb803fe596c6f781e87bca33474f1d880293aa16b298e3f5a05614f2390d2457","first_seen":"2024-12-08T21:22:12.499985Z","last_seen":"2026-05-18T15:26:23.851491Z","times_seen":98,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/f17ekxx/d4w/integration/plugin/image/20260511/1778485435362/image_1778485435362_90c7be537f54f3253c3c254a4eb.png?x-oss-process=image/resize,m_fill,h_120,w_120","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/f17ekxx/d4w/integration/plugin/image/20260511/1778485435362/image_1778485435362_90c7be537f54f3253c3c254a4eb.png?x-oss-process=image/resize,m_fill,h_120,w_120 HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3320\r\nserver: AliyunOSS\r\ndate: Thu, 14 May 2026 22:51:14 GMT\r\nx-oss-server-time: 22\r\nx-oss-request-id: 6A0651E2AFCCE63838F971B0\r\netag: \"213BAA8FEA98D3EA5B0E076C7E5B44AA\"\r\nlast-modified: Mon, 11 May 2026 07:43:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\nx-oss-hash-crc64ecma: 1387197869854903643\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 30lChUpOhItOUIJgoIAm6l_N7JaKI-SJt4xcCjj2DzETGGnEYibBHA==\r\nage: 305164\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGB, non-interlaced","md5":"dce3027d88424532e5a1586fca8b9df7","sha1":"7dadfaca7b239ee892801cc34d08e8a6a5ea8fa5","sha256":"47000da4eda95f52b7eca839200ad151634b8dda096c386e9c517cd412a236cc","sha512":"a1de5202af47280f44fceea1c22d259c25b8255daeee8306c88a55060b07fe8884cb4b1d249d4e29272b7b01d8ff6b11f7ac07e52eed91e338eec39c2d8c2d0b","ssdeep":"","tlshash":"b661298b1f8cef23a4d9d1701403d8326baf6879bda14424824a8ffa467f844d9406f3","first_seen":"2026-05-18T11:37:55.324768Z","last_seen":"2026-05-18T11:40:03.942909Z","times_seen":2,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":163,"dns":65,"connect":5,"send":0,"wait":24,"receive":0,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/favicon.ico","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Mon, 18 May 2026 11:37:15 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrbzxGSJCpqU4l%2FiX%2FHOhl4r3yVe5lIKeBEp5zFbqoxkpaUIYUeO%2BZ6FB%2Bw2MNkG3zhppQMtWbuD80L06fM8P1haa9xvdfZPnRMnZaNpwNITc9rBkpG8XfCW8W%2BsZBR2K2ZkHVJ2gC0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fda91a0bdc1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-05-18T14:11:04.823327Z","times_seen":264106,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/DnXEs7MyHSTR-wyfMg.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/DnXEs7MyHSTR-wyfMg.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYhgQ4SpoAsL44ygfC4JJUGttus1RG6A%2BNW0uFXPLresVYLEz1WaUa2HEV1E6nQu73Sv2zDlOpEqHu9ZtCH4SrNueJsoKEGkwrgI48tUd02ZhFgy0L6wywKITFQU1o%2BIaEvMnbK9r9U%3D\"}]}\r\netag: W/\"6a00587e-a5\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a7eaa4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"bbb4e86539a600353bb571a2fccdd248","sha1":"57b97bd9665daa2de8cdc81430876bb5e78fac91","sha256":"08c24ea136670cd6aaf5398213087a113c6b0df5fedb9ca02855e0754639cf15","sha512":"4952025f55cf6edb8c9109b4256010c8b87a226b6adffbcfe8d2fdc7afc2d485cc9a91c66c26961be6e20836bda1996e58c08f02b19c85d7398ac965610ab05f","ssdeep":"","tlshash":"41c02b4bb442c3e0625b0d8441664dd25f350f982347efc0c046aeb80b354fcca4be2d","first_seen":"2026-05-18T02:10:30.36419Z","last_seen":"2026-05-18T11:40:03.891248Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/dNeNEPxY0GBGKTBbAH.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/dNeNEPxY0GBGKTBbAH.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-2043\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CMeSePXLmVso5FY5JDqd5EmUPO1TX3nkCxPjjTlyeLB5O6thYI8I6qx9B4supZYtPCYBJLyMBCtWHuYtrFTxh4O3gm%2BelXyVFVGOOKqOID2CVKDqYSI1BmkaC6T0bPUVJH440zeygEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a82bb9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8259,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8258)","md5":"dc6f808b0d8ee6be32637abcda7fb4bd","sha1":"a00cb25f31ca1c240564007d3baa1ce51b36b392","sha256":"952799ddaa81b98f902ce603a264de087c331ad146f3f41d2e1183d6f09f9b67","sha512":"5a21b0507c8905aefa0a2e3a442e7117f22db2745ff81fca21c5bdeedb7cd263eff4c018d907abcbc5d76a9e03b0a9607e6fbbe9b0b22c33b4b0e01289a192c2","ssdeep":"192:eISXv41iPkNtNsNzDnVTDQQezJs+/NQLO4evdNNmK0xoHpKk6:eI71bP+BBsQEs+/hZ1uST6","tlshash":"80028de75401be7e57f283b8a6ad34145c67107f11fd223a2e4fd246b589123b18e4ab","first_seen":"2026-05-18T02:10:30.041457Z","last_seen":"2026-05-18T11:40:03.939423Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-common.923779f6.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-common.923779f6.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:37 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50DE5F8053837A4C5C6\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12681956637835031194\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: f6SDc+aJcj7lGyyywXbWGQ==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: koyelxlOQIR6nYC9jUOwpslzMs59cobE7IyjBF_k6B8tYWw4f11HxA==\r\nage: 275679\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":27007,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26864), with no line terminators","md5":"7fa48373e689723ee51b2cb2c176d619","sha1":"fdea5e7eebe313c9898dacbfff19c6bf6530f319","sha256":"35bc14c3367afb14beb47478f52369784df0b2120b6729118116465b35ac586d","sha512":"94e6c42a0d414073fa618f633807ca8ea55d7e450efcdffc7beded1e3739b8124c5850d98946a991e5925f325c2a4cc21b7e85042a6a112f48a4053f7cd929e4","ssdeep":"384:kF9kWEuK2U72UecAvTbDPnPuTc2YejErqSqcDRVE10DTaR5HJrCiKMcJHI7jW:q9mZ72UecAvrPuSqSpEBIMoyW","tlshash":"dbc222ccf2d7f0650b9a38a481bf110ae23e7d99b44e9196d261e0c17c3455da273f9b","first_seen":"2026-05-06T06:21:51.04932Z","last_seen":"2026-05-18T14:03:24.07842Z","times_seen":143,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/setting/sounds/ling.mp3","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /setting/sounds/ling.mp3 HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: audio/mp3\r\ncontent-length: 47223\r\ndate: Fri, 17 Apr 2026 02:30:39 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Tue, 02 Jul 2024 06:29:42 GMT\r\netag: \"1065fe976ff9e98d69772fe0f0d7b808\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=15552000\r\nx-amz-version-id: J6b7RzocQsVXwTzS3QxevgOr1gKTyblY\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-47222/47223\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: p_QIIDjifAUkeig4C0QEabKBps2jnqpI7IlXivJNkmyLvFrgzxaGrg==\r\nage: 2711198\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":47223,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo","md5":"1065fe976ff9e98d69772fe0f0d7b808","sha1":"122193fafe8453db01635cf4502524eb93264fdc","sha256":"35fbb2ad61551e3a396591657a66b563222454418238c46005b89418556f9983","sha512":"7d0de1b98c66aaa939f56253d100f5efc36128c2b8420fc8c932f68873a643a1179411a9410125aa3ff5512f74dad1209f2e19c5a0734d4582c5b94280e242a7","ssdeep":"384:ju+iqqxhBRBJ2zjBQRB57Nsyf+/C6ufaPkm5NyxGo5Vtll9rFd1ft7FDehm:junhJdlac","tlshash":"00239434b6a108d0e14eaaffb0deb2121e771ec3cd56a84075ef78044fb1179255b8b6","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-05-18T14:03:24.090097Z","times_seen":2670,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":52,"dns":54,"connect":1,"send":0,"wait":3,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1958.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1958.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2699\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:33:52 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 04:41:35 GMT\r\ncache-control: max-age=86400\r\netag: \"739797800c1ad83ba9a3cdddb9824693\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 24952\r\nx-amz-cf-id: tewDV500WImuDq2JB8ooNQsfDQwbc_MGqtWpP5eA9Pd39oWYVNzhiA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"739797800c1ad83ba9a3cdddb9824693","sha1":"8fa44745cb0a87a781317153ffebcca127e4c498","sha256":"6de001279f8561ebcd5da21d426f25f0f554b5f665638e84b33876a079c56c52","sha512":"25ec9a6e68a3024e7054c566336ca457a8116c6d29c5b2a901c98ef4d1f14c0adeb8ef16f56bd8d2e07466ee81c0146adc992289efce6a9fa8c2796edd4c0fe8","ssdeep":"","tlshash":"a7511a5335d2fada77c981c3f942215cc720d62d4306a2e7b535078feb06861dba520b","first_seen":"2023-05-17T08:55:45Z","last_seen":"2026-05-18T14:02:13.014047Z","times_seen":1778,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/UOUIWiAuz2BnSRbXBD.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/UOUIWiAuz2BnSRbXBD.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-712\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sOJiGnFFh6aX4XGLmc%2BIATmAr7zLnH4MjiOYCL8UyefCIu5lY%2B88uISg1wIPu%2BQ0e%2FgJ1vL4SVxjnKsrqSY0VP1XirhgrUa%2FTK%2BkrFVWX7yw5D4Z5sbJ%2F328SyK%2FtXDFGwWFXmQI94c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a994b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"9943014be5e30b6b41b6af172fdef8fc","sha1":"cdc18ef321a65bb5a66fbe31060343c562e747f0","sha256":"4281512591c4e8c7e3eacdd4fe05501c6bb2faa5be9c3fedaf04e181fb50c65d","sha512":"dd83599e70fe3649e4a6aa9d74c328ccab8a872e6d1a6b1ae7911c3f26e8b0cfced3f1c9b862b839745eefe3752f13e8cd4a05f04d5ff96b92d9e4943baed4d8","ssdeep":"","tlshash":"1f3145a4f6b9d034537e58e1c4391610e2591f457119f8ead4ff0d426e8684af93bb3c","first_seen":"2026-05-18T02:10:30.33543Z","last_seen":"2026-05-18T11:40:03.899421Z","times_seen":3,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/yjsmdtBDP5q_n3y2Eb.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/yjsmdtBDP5q_n3y2Eb.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-4d0\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x4QmHD%2Bi0IhbMGGsjWfR7mKxW5T8WyUGIgUTKZZln0JSuiGVtl9BijL7672lThYxWiB4%2FFTFIqDOyM7gzU6BKqfR88OElXnzRO7T0ZdpWiKFY49eqiVc58bPyQ0zp3yYC6C0A8GNeJM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5ea78b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"29af56056f9416f19626df26816761d1","sha1":"0104469b74eed3ac355c063123a59af00118a4d3","sha256":"9e07156c704e59a3553e974929100e89add4d71823ecfdc81b14aa8081618932","sha512":"6dda1ca0002b04a1d2bcafb8be7f895bc435538bfc342058eaf130716b6a5d84316efa07d671468dad3a8ed6db59399d440bd084d33b77eb297445acc8422d7d","ssdeep":"","tlshash":"a921021d6802da79c4a74d6ce5a41812529c3bfb83788861f0ef5e2276c1db14667768","first_seen":"2026-05-18T02:10:30.124239Z","last_seen":"2026-05-18T11:40:03.927129Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/TSm2GGrVCaUCfy0gy9.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/TSm2GGrVCaUCfy0gy9.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/hcIUCWyqrTDboi46lu.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-68e\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2F6bPdds70WSdnNnDifeNS63i5Sh3HiAJwLcp8NGYrWXIAiQxQXobf6kbWzko9bM%2FW7Ai9iuBtlO5PNXewPQt0OosYWSizk3uC%2BGx1hAjSbxl2jsilozYeiS5duuHIe1P5tq9rnj%2BTs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a6febab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1678,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1677)","md5":"56258283f0548eba629f56af0b8db2c2","sha1":"e21aa8eb53d2b3b936b129d8c9c37546a43edec3","sha256":"7de73bd902874fa7c3cd281b2cf4b75af2b2b9cfab1d6b19d533ca1019158f43","sha512":"5efe95c375f5211ff5ddd6961c643903e983fbd132f5ca8e6eaa6b0a16e73d46550caf4b4cfb5376f1822b00c9473aa70aea60c9465428d8620e0e35fe85ab26","ssdeep":"","tlshash":"2131729db41acfb8a0b74d39650bc05590184b8ef325c605b0e84b1223d6c39a22ab6c","first_seen":"2026-05-18T02:10:30.446465Z","last_seen":"2026-05-18T11:40:03.901079Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/Cq4AwWpaRKDbPI-gXD.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/Cq4AwWpaRKDbPI-gXD.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 11737\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-2dd9\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TSiaP%2FbTmtifvtyGlc3vdM3UTCTw%2FnkwdY8Xz%2BnII%2BvWeCyFyrUp8A8AMmfFrCW4FBTGnVa0w7GNNvXV90ESzr5Jmlup5f7hqrBGJYzSMFECCKWqdYmNmjHWC8Q1QgePn0kq23yRU1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a92f77b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 196 x 196, 8-bit colormap, non-interlaced","md5":"63e5922563acf610b4a92cee8dbb43bf","sha1":"1e9457da312689f552620208e852e44a86d19397","sha256":"b7c2dbdffbf2b02ac7e50ece7eeb1b608347134f801e9df98a1debea9bbc59f1","sha512":"1f5a5d7b8bae0225f70e7de2944a0bb923e70dbab5a448ab21d0c6201175477df0a6338c08c40fa5c02deb0c400af697a8e51cc3ddd910d0a1e775b7187bec0a","ssdeep":"192:Bg2tSikDYnVnhXOYdcl1zG25erob5hUPwREtBMLA5dffOV1EJQjCpqX32/:lsf8dsPekNh7EPy31wQWpqXG","tlshash":"c332bffec5c412b249c3d1d7c9ad6ec9f9e50eab660047106496d951f1373fb470a24e","first_seen":"2025-08-06T14:56:29.738956Z","last_seen":"2026-05-18T11:40:03.93786Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/52.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/52.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2330\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:35:17 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 03:15:01 GMT\r\ncache-control: max-age=86400\r\netag: \"39edd8e5c80256300562f68afb1ab525\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 30139\r\nx-amz-cf-id: l-uwVUkpy06h6ihvV0NVjktnz4hf6_dMw3IEKAMBTAoJl1mjyB073A==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"39edd8e5c80256300562f68afb1ab525","sha1":"506e80486e2b9e90f7344334cd95e93ac8fa0338","sha256":"cf4c3c2ec18de3d4dcd49151ffe00cb299f86fc98467cf806b9c447467935479","sha512":"029abf77a53608d0e0a92ca7764bbed17cf0960e540fee5f8eb0a9cb1bbbb490e730ec22e8dc186b07b784cd87410f5667207c22478773346d725579673e5e2c","ssdeep":"","tlshash":"a3410ad884a0624d2924177332a3193dfc6d3f949a066dffc81d563c84a1e8271b5d64","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-05-18T14:02:13.007979Z","times_seen":16012,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/74.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/74.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 4251\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:36:06 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 02:47:00 GMT\r\ncache-control: max-age=86400\r\netag: \"ae64499c8825452f6262177ee6dd525b\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 31853\r\nx-amz-cf-id: GF4wLf4WGSwToFkrfnRFyUF4NLZ_dvOnHAenG_6O45iTx-Pfu9QiVA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ae64499c8825452f6262177ee6dd525b","sha1":"92a35e0817cefb5befbb18422fb4c9d220f6754c","sha256":"47fb417f6b72c4edc08dfb90a376b2c88b3b51992bf3c83dd14e011edba2f339","sha512":"1a776374f3c20d16bf0c84dbb28a6ca3d0a110ca928aa87f56d79d09b898091b84f4d3ea164a6c79db0c9fedeb66167bd83b854267c2870394f70dc536117441","ssdeep":"96:IqQDUBKTuBVrN2Dc4tR/HAwaHEIkVZdBrc2nPatF:IL4cTIB8c4n/HbIegdF","tlshash":"00918ede37594349986e152b32ca7f282c32b7db00753e35ad4946c327b4063e5d6714","first_seen":"2023-05-04T14:40:12Z","last_seen":"2026-05-18T14:06:49.307855Z","times_seen":13570,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026chat_user_id=f2e4be7edcedecbf80a3fc15a7bb27f3\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238511\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 03:56:18 GMT","end":"Fri, 19 Jun 2026 04:56:14 GMT"},"fingerprint":{"sha1":"3D:A2:6B:19:97:82:23:11:10:B1:04:28:BC:92:55:73:D4:24:D7:6B","sha256":"FD:D5:E1:0F:63:14:4C:3D:C6:7A:C3:2C:AB:8E:7D:73:CA:F4:E3:D8:7B:E6:08:8D:E9:3C:FD:57:04:B0:51:A6"}}},"request":{"raw":"OPTIONS /chat/chat-msg/unread-msg-list-v2?login_token=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026chat_user_id=f2e4be7edcedecbf80a3fc15a7bb27f3\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238511\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: external-sign\r\nReferer: https://intl-coinbase-inv.com/\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9fda91b39e608deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T14:41:03.659351Z","times_seen":15390274,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":126,"dns":82,"connect":5,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/img/6a01927abe6f.webp","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/img/6a01927abe6f.webp HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11262\r\nserver: cloudflare\r\nlast-modified: Mon, 11 May 2026 08:25:30 GMT\r\npriority: u=6,i=?0\r\netag: \"6a01927a-2bfe\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jPRzkysZKCWz1pK2ZpsKaxPLK%2Fyc3svS5XJq4i91BJxRss0Xem7CWB5XZsaJqQbO2U2XmcKBe11yWNarrGt%2FhNaaewJb6MleBTtKaPTtXeoE0%2FZojyNSmLtVX65yTPGmqsDRI0HPBDEplALn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a7b9deb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"830389f79067cc62e7c39c5156bdc540","sha1":"cc751b887aaa93b57a7e17b6de6ef4c110a45f2f","sha256":"07af4d474e370c2347cf39a7a94f192b033ed5754c27a1425c847962be3ff9d8","sha512":"6c209e1b3c51915fe27ca85e765f5328b72e7d9ec6466b81ea78a0d870f298ef983ced91f2bfe5689f89bdb9f946da75c1bdb1ac40e638a9fc88b22ba3028de4","ssdeep":"192:UF27KyJ0htVAsiQNcQjPpIkprDCOcEd2y6N/k2f7CaZTNso7WovyyAQ8cfN/e:UF27NkQsiQNfj2kJDYEwymk2f7ZRDhAb","tlshash":"f232c0ecef73e069503e1b55fb7564e67b9f784154e006c2b887d08211ce62e81265ae","first_seen":"2026-05-18T02:10:29.999075Z","last_seen":"2026-05-18T11:40:03.940915Z","times_seen":3,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/wB9guRAxQfBjgb6A3P.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/wB9guRAxQfBjgb6A3P.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8agIbFRJeAG%2Bs4YFhP3vbV%2FLt1qCDwCmbEA9x1Qy%2BZ34uKY9LbDNqnxYOu6yE8xLtpX3Vnb4eLTIJZeYWLlfD4eBS3smFhuwkLbMGHnNUxXjtFXSX46%2BSLAoTs3eLozo7a%2FJ%2BcsfhE%3D\"}]}\r\netag: W/\"6a00587e-61\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a81b9eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"edc9ca40b7d7582153db0bae14ff060c","sha1":"842e8ae68327591277d2cba6794a5d09ec999163","sha256":"7249f8cc626d0e827ddff7af10e4d8205110f0597bb6f88e135037ad247c144b","sha512":"3d3db29e505eddef93db6e03a665d07d99a302f940ef36d705a0ad57a5d72d250222f13a6de1d61dff902a2480644e73baf95b118dd3341e57fb2673fd970f53","ssdeep":"","tlshash":"f2b0122f0804507069850d8d235850334330162d339339802214c918531d4a6c11d655","first_seen":"2026-05-18T02:10:30.228064Z","last_seen":"2026-05-18T11:40:03.901764Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/kTQBscy3MeDrk2rEyD.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/kTQBscy3MeDrk2rEyD.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/hcIUCWyqrTDboi46lu.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-8cc\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zPk2hhAiJ9iA4FizAXOnCtYmKnWEvY3G2pUYT1M0ntlIvhR1nYq%2BaVSBINHjjR31omJL2iqFeowjadddSvrEZ4nGUFfLOtoJvlHR16SAOB7CM3bOQFJwyhhcv%2F%2BU7XGvEo0si2ZC%2B2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a6feb5b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"511e411095d54fbe4c34de72ef31f823","sha1":"8fb0cd1f4900a5f116d83ac01fd45f9db55833e2","sha256":"2e63d810a761c39e4259c2e7037442317a8044b71a7919bf66263ecf0bf049fc","sha512":"0434be6f403dfa45dc13ab4e4767d7ad026513c3e078d45b68eb9ff49e774591c02076f25328c6f37505df6170617e9ebfff142d600d53be0b6b09d5cd572c19","ssdeep":"","tlshash":"6a41a66cf411dbbda237863888520064220c2f6f942cede4f16e1f222ecacb46456b38","first_seen":"2026-05-18T02:10:30.423876Z","last_seen":"2026-05-18T11:40:03.890513Z","times_seen":3,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/282KbtNOuHHLZeNkpd.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/282KbtNOuHHLZeNkpd.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vr3%2BtFqzoAWfNRBKsuCozk7VRNb422DWqnrC894QEjhrKTWhxmAQOqJtWCW5%2Bl9FaV4TUpGqLMsxoES8ihZjsomQVjmgqzQcIValoA%2B%2BC%2B8SSMYCOCjTGZWveaOwo7XJoc0RF0mISis%3D\"}]}\r\netag: W/\"6a00587e-f6\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a80b2bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d9147274da38fb409e6e43100a3bd8a8","sha1":"4c2760d23c0fde641f4f85cd6983ab045b715125","sha256":"c55f38c6c1a095e84da9a8f0b1e9bc1cb36f7db2adb12aee8de211b2ec6e9421","sha512":"aa9896b153feeb870a58901d0a6fa7758257fafa20363b8c24bb8a114e40020460fbcf0dc6e2ab7da535a899220d217bcbeda629100adb0a464b80c1685f39f1","ssdeep":"","tlshash":"acd02b05c58803b838e2146b070727b020b7011c8f6492b8544d0e30df1570a1a0fb22","first_seen":"2026-05-18T02:10:30.146896Z","last_seen":"2026-05-18T11:40:03.940121Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/chunk-vendors.6ef765fa.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/chunk-vendors.6ef765fa.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:37 GMT\r\nx-oss-server-time: 1\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50DC05EDB3730F5AE42\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16184782789754269720\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: jniEYbqRWty/z6mxDDXyZQ==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 10oAPjM1oKfYjd4p0Djr_g1LkzuxlwRNI5Ed9EQEatXo7F-nNMn6kw==\r\nage: 275679\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":214670,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"8e788461ba915adcbfcfa9b10c35f265","sha1":"bc3841eff0c3841cfdef9a2f1e1b5f1d0dd6c26e","sha256":"69ced1151fb1b32d26c8b70739681828a1d99333c4a08114c98cd8af90b3f2ca","sha512":"b20ea5f22352ee329e6982d0fbd14fa2f4607a186b2d2973a99e43975164b2c6142b8ce87f7d5f54f47cb41bd6a33329ec3d09fafcb971de6e316ce5c0c8cfe0","ssdeep":"3072:gZcGj+j4Cm4m5BJ1IWqq/1cuC+4DdC58+skrMJz+8:gG27J1Wycu+4ikrMB","tlshash":"1424f7cdbb92f06843a335a4806f150bf17b6a18f40e81d4e6a6d5d1ac78a8e5137f3d","first_seen":"2025-12-10T08:58:23.267899Z","last_seen":"2026-05-18T14:03:24.121913Z","times_seen":1055,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/521.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/521.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 418\r\nlast-modified: Thu, 30 Sep 2021 03:24:52 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 05:27:00 GMT\r\netag: \"57e82f79e42f5465d44ffd51b8034e99\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: AK5PAUwkJi1XrYq13ob-z58XNkqLUts6sVeaD4ZJ0mS4tGpQdz8Gkg==\r\nage: 22510\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"57e82f79e42f5465d44ffd51b8034e99","sha1":"c0a7499077e33b32052d5d9fa83f2b5c3b7e2c90","sha256":"28f7b537ed3a233e0e95944fcfea4ea4340204a3a8ba57622e85ef7fe25ec4c4","sha512":"cfb2eedc76e9d2fe3e46b6736ef9fed638eb3c0d8fa75ca934978bd3c150ee719cc4284c897647fdadcef2adef550e4a49361d38739c7ea567c3e8a851067dc3","ssdeep":"","tlshash":"2fe0ab83e1b66d5682cd0d6aa11e3160286a2c403e12f289c22963e21f15a4123f82b7","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-05-18T11:40:03.919513Z","times_seen":182,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/img/6a0054883633.webp","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/img/6a0054883633.webp HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54578\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 09:48:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6a005488-d532\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7mlIOZq%2BNi%2Fu4Gbl2E%2FgMQgtcz5UIjv6YWrUVpqEj8sxAQuU68SrXoTwlDQ7yz8m0ACP3Kxz7AYFuj5gRjX1EWgBFEI6oLD%2FqvFQsKrQp%2BOZclFRIbB%2BrIiUcgkWJkKXmFachGhhXWqlrbUQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91af1f10b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54578,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 576x323, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ed50d274d1e79ac4a4b688dfa6e87c19","sha1":"6365a79884d476ca6806a48a6babfe1ca9b5d032","sha256":"40eb0abf50257f84f5f39f1d59bac797e872193615c6e4175535441100f9d722","sha512":"af5d9c0796e8b57052cc2ff6e9ff1d719a865ba15897093742c73bc0ad2a40e37ede332e6915fc6de02142da3a13f15ec65b8b18f83b65d02b79c7a1890eb0d2","ssdeep":"1536:A44Rm3pRRuMAb875YjvEQvOo4GIXuFHc/42J0vhCwvm:yRm3pRRFX7qbE7OF642JiLm","tlshash":"aa3301ddb2f9be2fc9d0cb87196f37a80cadc6ad71de360149b432d0126a50c089994d","first_seen":"2026-05-18T02:10:30.477632Z","last_seen":"2026-05-18T11:40:03.921641Z","times_seen":3,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/files/6a05e2041b15.mp4","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/files/6a05e2041b15.mp4 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=65536-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 37600527\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 14:53:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6a05e204-23ebd0f\"\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncontent-range: bytes 65536-37666062/37666063\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHWqlNtbM9iIAWtnLBv3Vy7%2FovfyvL44z8rYkxCIbczF4uQmwIOZfrJqy6mtQIuCLr14O2nmxCxzVsW7wia6hs4%2FBvV%2BVCpdAIl6CYo%2BAp31du9hGlQJn4qBgoJ4i1V52RxCafFCPnxV%2Bcz%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91b29d1db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233537,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"09281b90c39b47a726dabb1f0b5d834a","sha1":"1dca996cbc7f447e4a062ebad11f13a1dfffe082","sha256":"a6d77b60ddd547246469bebc2d565ba252a07c8e26908ad5cd988e6fde25f621","sha512":"404418a5d878a46a75f1866d102caf8684bd56c5574569280fcc44cf2612b9ce6fa7fcb4415c8f722f55299c4f248c9a3b8016b009708584b372029c08a93afe","ssdeep":"6144:7DE8PXeass9077mpxke2lCTEufFsSfiC:7DNPXep7mpxx2JufTH","tlshash":"113413477e922463d8a32f73802b0ea01ec03785a34b55edca7f6a0de036ddc75d9669","first_seen":"2026-05-18T11:37:55.34861Z","last_seen":"2026-05-18T11:37:55.34861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/cus?rts=1779104236264","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /api/cus?rts=1779104236264 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9uWlt3hsmPRLxbqRT89Ejkp0q%2BIVnVQGcu3VFG3iFWCVNRkw9cbfoDjEGZe6Zj1dAmmvAYlKX2eJcV8updkar3%2FDFGTY5zpo%2B7jGDfx6k59O8dILTgU6H%2BIJ0Ee82WyFuJCb2rlcuzn3agk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fda91a6ad7fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"0b2ed1c77adb990a7d284fef7cb84c02","sha1":"702fb2812033ba0a1c9c72148d2daa86466308ba","sha256":"48e2d34ffc902a1063a052e36e776298423c1da6d7e351b87b58d94acb6f9f18","sha512":"e65e72b2014b2c6dda58965beb30a8355518f1a26fde90ba6f6b03a2643b90a4b2789a7c432cf5fa424e994fd874acbec89171fca7e0acd29cb938141466bfd4","ssdeep":"","tlshash":"91b0120455c6c6d0b31215002300f90c2576dd4730091250a102d47e785d3469583004","first_seen":"2026-05-18T11:37:55.3498Z","last_seen":"2026-05-18T11:37:55.3498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1027.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1027.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2780\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:32:40 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 04:18:56 GMT\r\ncache-control: max-age=86400\r\netag: \"856bfdb63dc0d6fad6b92fc6a29719e1\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 26302\r\nx-amz-cf-id: KWKkRcvudU2OVOtrUrgnZS9AY5dwtTyL8C2VT2frMzGprYoBKYmWZQ==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2780,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"856bfdb63dc0d6fad6b92fc6a29719e1","sha1":"2fed2e3409ce1bbbfb37f6da4abeecc30cefc021","sha256":"eebe29898b8b7de5c9e47daab474152be8095e3ab42d768b84b085c5a12b95c6","sha512":"a61c0a108d63c89ae62a2b03108480b5c08bda0e80049089a2a84cd7973bd9e94dcd2902e166b92e1d7ad5b7356357c9b181cb1b6051dd25913e82d2420154f0","ssdeep":"","tlshash":"51518cc7a707f33a9c866161bed44509f244d80a8160b31c0f33a7572c8a83ea4f324f","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-05-18T14:05:01.598545Z","times_seen":21216,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=9fa1a67499d9884e194d38a4d94b010b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238217\u0026_lt=\u0026_u=\u0026_xma_=51582","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/log/log?plugin_sign=9fa1a67499d9884e194d38a4d94b010b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238217\u0026_lt=\u0026_u=\u0026_xma_=51582 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 767\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":767,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyQV%2F1Ncb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhyh8hrQjWtazErdyiyhypyQrpPStbfQXQyAKhyh8hfQzWPXz40NYVyAK9BdH9rNH51nz%2FyAKhtAO%2FlAv%2FMdk5N5OSI5R8l5v5l5yqlARhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzEPGcpBnIW1nmhsNIVBnV%2FthmAP94WyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyQjWrazvsNc%2ByAEgyQchXQXqf9VWPhyilC8hrN%2BEfScEPQtnrNH51nz%2FyAKhyh8hrNHqPSyhMhHgNdHwrNI5sntVNdyiNdHYy3aat3u41nz%2Fy3z8rNH%2Bt3VWPhYSsNlRsNc4rna8t3Xvy3z%2Fy3ORr3u4snH%2Bf9DRt3%2B%2BtdYv1noRPQz4y3upP3zSy3aat3u41nz%2FfqmfyG4hBdH5t3zqrDm%2BPnX5yAEP0qH%2FsnaVyAKhf9uprNIwsNH4PTVbfuzQl2VAs5vmN9jEfSohBdHZrNVosNcKyAKh1nohbXazbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fda91b12fa6b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-18T14:03:24.066134Z","times_seen":2078,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":286,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/45eT955ftYBBGxtG58.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/45eT955ftYBBGxtG58.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C5EiWDn59omnnNpbzlH%2BraXuSPaQTEug4BPFWT2gi8UgUuzFMz2CvV7cyC47FkiFbNcP0tXf93Xvp9UZlrLdc1SzEuHvksxYtfrExNImd4j%2BDwrODeamXhk4C3b8iputw8sSUYsjJTA%3D\"}]}\r\netag: W/\"6a00587d-77\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a4bdd9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a9fadc4adb941b49dba4057ed5892a8a","sha1":"97ef5525981dbd1ea4d8b3717a4ed1ec47f487ad","sha256":"3b1bb70e6f7bfe6da705495af851998d936ecccd16a2f898321f83febb45a2e6","sha512":"ef44b98d8614ff9ceb690a44fd6e7db3f869f33fe6ca2658de616b6d074922c8ae0aaa9fb8ddeeaa267ec5b5ddedd13801271df5cd6f0e579f87a38a44cdbd1e","ssdeep":"","tlshash":"c0b09b1516013b1c705d7441de5416d75141d437946175558a81572f448e4b72d747a4","first_seen":"2025-04-17T13:49:08.687019Z","last_seen":"2026-05-18T11:40:03.900566Z","times_seen":110,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/hcIUCWyqrTDboi46lu.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/hcIUCWyqrTDboi46lu.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/8BxVDupaHRBkpYf8-I.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-3bd01\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyjJjKyXDvpcFJcp9dAIyUWl5I6lDzUGCPJL7EV9oBJ2WJzzqzfJ43eBQ4bY75XYG1OHBbpe7gBkigbjehfE1JfTlDe%2Bsslh2rJn%2B4W%2B7xbklC%2FTgTgwAlgHtSF4t4HtGVahk7KQDS4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a62b95b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244993,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"af271a94aca703f939cc9287ed36ed6c","sha1":"3e3293a00b5e06ab7f469b8b2db13b1f9467aed3","sha256":"ec188305e1c6b0c62ec1a9525558fcc9725646f4c2d459c0bfcbad305b29f084","sha512":"7cd24db8bb51affd0f1eb19841aa059c0f2ef0d3e6f233ef551d5acccbe3a14dca95c595934f3db7a885ec470740b7e835d92429b963ee57e55cf71978302c74","ssdeep":"3072:Dd7HOnZY5kWoH6J+2JfnC260X6k/7CtmVCnpMYt2kd5fT8Q5BkW:J7HOnm5AH6J+2Jfnkx5DR","tlshash":"72344b51740bab3ee4a3588d68491800380d4feed51d9d66f2fcb627abc6cb0573e768","first_seen":"2026-05-18T02:10:30.190287Z","last_seen":"2026-05-18T11:40:03.947223Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/eScTEiwOiCCqUHjVfU.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/eScTEiwOiCCqUHjVfU.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/hcIUCWyqrTDboi46lu.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zKF%2Fo75TPIddjvhnOVE0aLxx51Qdj5ehxE0hFQjAYwlMhrOJmIGmRKCl%2Fo0NJIkof8JN6i2ITHawtaCXwM7VOEVHb8HJWauyfKyaRayLoq5zngvDpzBmF1DamPYNfpaH2vMwPqdx5VY%3D\"}]}\r\netag: W/\"6a00587e-21f\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a6eeb1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":543,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (542)","md5":"2814893c7fe9b4f941f58a460caa21c7","sha1":"9a56dc80d1219ba05ecce6c44136cafa5d59daad","sha256":"abc891547c73d8ad23005e861e4e60a157a3de6370476a0e85adea7e3363651b","sha512":"2d2fbee22fe60af6ffa41cb1d34a6188669a799559c06f67c021503d7b7158664ed0f7be549e6f7ba0be0df43b6bc600e78b64291c240f397f47410c82c26ec6","ssdeep":"","tlshash":"06f0200fd800dabe98ab1d042953306120487faccb20e8c4e1e63570a387d36e82ef18","first_seen":"2026-05-18T02:10:30.141587Z","last_seen":"2026-05-18T11:40:03.892449Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/yJwDpf3e6OAZPywuRm.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/yJwDpf3e6OAZPywuRm.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H3awnsIr1yl6mdUkQ8LPL4kUjkSkzwbO0B036%2FYhSR6vzXtxfkkm%2FB7ANB%2BlGuglutfMkIi0VgwsypyTejNzMCzHbQ08ls107g9r91WBm%2BGcEzhGhe7rSYksmc2X1U%2BgiDJJGXqomco%3D\"}]}\r\netag: W/\"6a00587e-324\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a82bbeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (803)","md5":"5fcf901b797c80f2bad08dd8e54e5d13","sha1":"09f41392d6bcd5198d04f41e7f20ff709671a770","sha256":"00e9a0e35c5b6eef39e124daa4e238b0581a691262ae05dc16ef25e60793bd61","sha512":"8f2800bc45dd22d3dc5f1653d9251b2c8e03727ee7e05b5e92b196771a217fd9a53297a8cb9f2cce2ef9091ef48b4685e9ef580254c63f943cc86cdf5e73e8da","ssdeep":"","tlshash":"3a012545a47074d073bb0c81451549c1a372473a2b42d0e0b51c8e43b67fe96c2f7f59","first_seen":"2026-05-18T02:10:30.473213Z","last_seen":"2026-05-18T11:40:03.897604Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/BvtIZFeKPpDckmY11N.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/BvtIZFeKPpDckmY11N.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-9f4\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DYWYrJuD%2BEEFdt%2FD%2BxfZWXjXySQZHHnLn4IY6nU6Ig5v8nLTP00rZ%2FxFzqOawWq%2BSLbyjrBWbZR3aqP9%2B5siULoDWeFMeF%2BVeSrsO4%2FIBKAiORGsDtWOvShKhGoDU77qZ0WP%2BzCBE10%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5da49b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2547)","md5":"3ddc6f67d1bfb0f8e1a512f926b3a7e6","sha1":"11fee67f3ad1be950cee296467e3367f07b40e65","sha256":"33c338418dc31d4bd17cc71702f0513d7f65ab2555b53e59bb12e0d162365be4","sha512":"a0fbd6be1fd7f2ea9194f16611893c14d1231ff10d9c06e342728bed07badfdf0a46d332171c6c7e3a927805796fc8e88e8250065d271f820fd9688f466da90b","ssdeep":"","tlshash":"ca5153d8b6a2503d8b7324f172e520c5572e13a0efaa51ed501f2b005b97c23baf8939","first_seen":"2026-05-18T02:10:30.022041Z","last_seen":"2026-05-18T11:40:03.922345Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/N73RLymwlWC7eKr2eV.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/N73RLymwlWC7eKr2eV.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-3a64\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=esNwBHWbOSdI7%2BMBqVZK1PYjAL6RZ348innHjvr%2Bv0ScyCSa02cOmn6wOX8%2FR0wFhdVaJxZrAuS%2FwSVtjyQrE4zpAneIR1HClPMldvjMZd26SGhmLQ4ZQKLSBVSi25XZPMzOShl1s8w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5ea71b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14947)","md5":"35f4fb2c626f120593bb472d0759d70b","sha1":"eaf15b3c76131ec765078e5238a74dfd79b3a1db","sha256":"ae1764782b01701e48ce2d949d8d8317712876e350e1bf1c209374693507b372","sha512":"417eadda276569c927579b05094a42569f27851922e4b703e0ab1befecb9b41e8a5794ae5132e25e540bf529465032f9379f56a879cc76b3dca5a422f0018241","ssdeep":"192:lcygIDNnwkmJJexKjWHovWEj2V5IrscoNtBZNqaO7K+UawhZC7Jfk25mXXhNkauz:lphnQvhjQeWyFCZMaO7zUaP7Jf01ulx","tlshash":"32629eb73b98d67e8b742cf8600955f2ece6581f6ff58d84d89840a487e0c90cd5e742","first_seen":"2026-05-18T02:10:30.462012Z","last_seen":"2026-05-18T11:40:03.893988Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/ZJ8yuGnWJuDYQdpHvT.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/ZJ8yuGnWJuDYQdpHvT.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-a86\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibDBTr%2BIkBhKuhwiJu5bRaLe49hwTQld9wKGvEPtT8YK2ERBWVxOtsz67CsJ2ATrG13C%2FVZQo6Y%2BYVQAI5FYQl%2FFQuqk6%2BpUPdbSFichPnqa7ziX9gjRS0EPEIn4nR1ie7ysH8llK3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a4cdfab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2694,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2693)","md5":"3f28253ee7f3d1cb19aeafad1111187f","sha1":"3130fac7725b7f6a5fff4a7c9df18a1067aa012e","sha256":"02bc3b1cad3d4bb9b0160135e6b16eb62133091d879c8d0d0a5b4ea831149626","sha512":"d07d7a8607add532475e31995dc647464951961675fbe74b8f202ce19ae29023272d997a3f873542094654e4e0e4a5fbcea3dcf88f602e8bb4ab9e162260c329","ssdeep":"","tlshash":"6051b3424892279d4693863e3198f3c8e07e74e33bb7dddaa1498dc1ac9b67509a3c53","first_seen":"2023-05-21T08:34:57Z","last_seen":"2026-05-18T11:40:03.943977Z","times_seen":199,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/tKk1d9Z5vvSVA4yXCC.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/tKk1d9Z5vvSVA4yXCC.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-741\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LsUhQwednw8%2Bf8tLDcUUJgUfS84wDRHQVMeOOY6RpXTDMIC6bYYpi8H%2Bu5K3ER%2BRqFWeY%2Fn6V0pKpKw8tuyRjdKMv8Lr12N7D%2Fp0gii8DzTTDUpJwKlc5SpYravLnGVkDeOCRSY80bg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a4de42b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1856)","md5":"c41962c9f2a02eba8f3456ec86fa9f87","sha1":"6a4a50d1dbdfb1334cb748491e736add30525c2e","sha256":"40c0e95eec894a533bf70113f8afa7d77a3f66576f740067a5132ecb45392660","sha512":"c1c48c8a2f0ceaadf6db090b574963ddb5bafb04dfca815cfbb2e478d64177e9734f658ef33e51408cdcc88235829c1edb66e1e3ecbc1f61ba087e2133992d30","ssdeep":"","tlshash":"023191e1a29995b85f62e115cf56ffdaf1686760da028149f0c31724cacff780ea1bc4","first_seen":"2025-04-17T13:49:08.73869Z","last_seen":"2026-05-18T11:40:03.932709Z","times_seen":88,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/KleNFrZ6fAB9_PdsvI.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/KleNFrZ6fAB9_PdsvI.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQHKMHx1UGBsUEwzu74c7x16gYEv45BY9X%2FDnI%2BAya%2FX%2B1wOPdTaggyZMocGo7oosglSJ4bQxUlQusz9ig%2FT5TupJUqC3QJkIcCbT2wtED3RLoawRIKl83bIkh2Venl9KqSNvEghCT4%3D\"}]}\r\netag: W/\"6a00587e-9d\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da42b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"017e8155096757a0d48fefe36389ba7c","sha1":"499156367b7ebf09e0de8b99a0d5b64878cb55d9","sha256":"fe11d50c690b98a66cef6648c890d9c51f0d160c442a5ea8c0d0353f06a933b7","sha512":"827a91701f0f0dce70a686b8d1df62ab7814956f306582465113cf76dcd0ab4ff026a422322e7b0f0f54a6ccb524005f93ad74a768ea5bbe2efbe9b9798adad4","ssdeep":"","tlshash":"9cc0241d744550f0455d0cfcc113057f53153f40331555f05515c517531d3151307f15","first_seen":"2026-05-18T02:10:30.223013Z","last_seen":"2026-05-18T11:40:03.903518Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/wB9guRAxQfBjgb6A3P.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/wB9guRAxQfBjgb6A3P.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t71%2B8IB5qFYKe%2FMzkRxDuF2CMqQVOnOaRQYF1b4UCRU03MvuC2y%2BS84L18rctqjv2nOX3R%2F1LunqXQMHDFebfeRLsb23JT29waG7r07SaL8rZuxpekMniN4rihoQxgFcLaVFoTKGPus%3D\"}]}\r\netag: W/\"6a00587e-61\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da44b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"edc9ca40b7d7582153db0bae14ff060c","sha1":"842e8ae68327591277d2cba6794a5d09ec999163","sha256":"7249f8cc626d0e827ddff7af10e4d8205110f0597bb6f88e135037ad247c144b","sha512":"3d3db29e505eddef93db6e03a665d07d99a302f940ef36d705a0ad57a5d72d250222f13a6de1d61dff902a2480644e73baf95b118dd3341e57fb2673fd970f53","ssdeep":"","tlshash":"f2b0122f0804507069850d8d235850334330162d339339802214c918531d4a6c11d655","first_seen":"2026-05-18T02:10:30.228064Z","last_seen":"2026-05-18T11:40:03.901764Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/Onsnt9mQ0t1l-CAnx7.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/Onsnt9mQ0t1l-CAnx7.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8kVNY83EOEfJeM9H5Ze%2B4%2Bo%2FDvIb2fg%2BRgODkkPi%2BActTaYYNyXuL9ezGDm3e4UprQ1PCQwz8TXQ01O1qPuf5gum5Cc7ho4zKiYSygLjOGovEejfm1NLAJ%2FN%2F3EEp82ZMy7ItB4Vlw%3D\"}]}\r\netag: W/\"6a00587e-2c3\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a81bacb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"28231d15088754c9549f5fc1e59ba2c8","sha1":"0babe1ceb2e02cb353b2b6b87c46a7c79f262e93","sha256":"b770b728acda5a6cba9497682aeb30727a89dd1ae6b2e601b5cb1c0c9180a462","sha512":"cda93a800d0770bce25b227f7b15ba130f8264e695ef6c41fb48ac81d42e3a45da6c435d296ca08c0a32455702ee9acab6091cad8a0b4ad415297f48b9c2c8d7","ssdeep":"","tlshash":"f80144aeac5eedb4346344b145d61869321a4f2dba798880e2b21b3021d2400d02b74c","first_seen":"2026-05-18T02:10:30.15176Z","last_seen":"2026-05-18T11:40:03.906078Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/294.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/294.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 420\r\nlast-modified: Tue, 25 Jan 2022 23:25:51 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 09:18:11 GMT\r\netag: \"015c7115ee3c8e6093e4e4544df3f9b4\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: qvX42Wy9q-wfxptl4n33HVuELdma_4a2qRDfMqRyMuqKogcszAGUPw==\r\nage: 8382\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"015c7115ee3c8e6093e4e4544df3f9b4","sha1":"f551174f0b60806fb45f297bc62213dae8c4e2da","sha256":"67eadd6bf613e6b6a870c43efedc69765ac8608092f0636592f1ecc6ab0e66a7","sha512":"b18fc279e4de1df2e327c6b1525579c506dec015549d9cd7ddf83187251f2927063f1004e45cb43370a3d937b5f3c5f89dc137c443579c5a1652685ef00184bd","ssdeep":"","tlshash":"e7e0c05abaf330b5cde920a64c89fd63803ce72b63151e150a94ecf4560b7d48e9cd17","first_seen":"2024-05-25T12:31:04Z","last_seen":"2026-05-18T11:40:03.925011Z","times_seen":186,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":151,"dns":116,"connect":1,"send":0,"wait":4,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/gQ187QkgkqBsWdkcQN.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/gQ187QkgkqBsWdkcQN.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-7c462\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFmzfANAeyEwfIVmW1BcEEdgYVHd5XBIe1UAwUJeSUs%2BpueKLHOq37LvGDF2cX%2FA7CmBUCvthxMGjcwcI8B4FzXQFOGVhZien%2Fc55OlLnWB5K%2FmFApdSKvsgesEV29uetiGmogT3G%2BM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a97db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":509026,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"950398dcfd07ebf2d6f31cd80d9a481c","sha1":"968b9d2571d29e750acd59b492ff2ec03a02c087","sha256":"876d293a26c3472d99c24bb5903510d84696635d81bf60cb0db7b344c7e1b8b1","sha512":"014c950cd8904ea8e865985e95078ef22d2fe8b04841c887f2145b12c8abe5d8d0e89832ea8092089c39075142b67dbac5e1b7f4d08b49f234eae7426bc003fc","ssdeep":"3072:9bo3mPtwgZPl+y8V5f6bVnu2nqJ+F17ysPE6nV4QYOUDs20VeFwaP/9oiel/suxN:SWL+H5fqPXuI40VBqox114K","tlshash":"11b42a7c39586a3bb877c921312c2adc5c26b603e932869cea953438cddf6f3152f549","first_seen":"2026-05-18T02:10:30.320914Z","last_seen":"2026-05-18T11:40:03.944421Z","times_seen":3,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=3804aa70511b71060696ac8addb23cee\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237485\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/station/log?plugin_sign=3804aa70511b71060696ac8addb23cee\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237485\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 367\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":367,"data":"data=0qHafQ8hMhHKtTc8f5KWB9V%2Ft38ws9zEPQH%2Bf9Dw1nm9BQIWPCFABqypyQcWPnuEPhyiyQV%2Ft38ws9zEPQH%2Bf9Dw1nm9BQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdH8PTXG1nmb1nohMhHQl2VAs5vmyh8hsnI41nz%2FyAKhf3uGrXrErNfhBdH4P9wVPhyiyhypyGXErdyiyhHz\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nset-cookie: ss_uid=d7f219a429a55541304190ceb82548ce; expires=Tue, 18-May-2027 11:37:18 GMT; Max-Age=31535999; path=/; domain=salesmartly.com; HttpOnly; SameSite=None; Secure\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fda91acbeb55696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c5ab379d3602da837b3ea249f9b6a30c","sha1":"2f27f9a8f146580593f361c875fc258eb8ac6010","sha256":"166dbe42b2c6a944959668668a085b4e0fa808c2bf9b311ab1e377309d0d73c9","sha512":"7551ea2aa9c143ff419e885dfda191149192585659be9fa6a21a4200ee663e11ded0b91bc372d52a6862a91f6b0296d33e7c893a1634907fa2535f3c4486199b","ssdeep":"","tlshash":"f4b012522814018a0d48023d4004360ad9f42050dd2143418c9901240b491687006060","first_seen":"2026-05-18T11:37:55.365315Z","last_seen":"2026-05-18T11:37:55.365315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":629,"timings":{"blocked":33,"dns":3,"connect":4,"send":0,"wait":565,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/28192.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/28192.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 9881\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 28 Sep 2023 05:47:46 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 02:55:28 GMT\r\netag: \"738e03afa4b65f63b78c3a6a4c6c332b\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 31310\r\nx-amz-cf-id: KgiJSk_Zak4NizAjG_J5XraUgywOacNemkHTj0bpi_ptNoWsJXeedA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9881,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"738e03afa4b65f63b78c3a6a4c6c332b","sha1":"d14af15385da03855efe878236d07d41e9c56ec4","sha256":"c533e2f35a8581477eedf7775009aad7aafda3790e17ded722b5598becfad360","sha512":"90507daae190e73834f55c88eb6b0b6fa6a5b10d2debd697a1ff9dafe6edea58089cc5ed92f86815f591882f27b0a1e4386525c596f1845a863364e14df92f66","ssdeep":"192:CkaFRc4itd+dIx3oxLkHxA2vb20MySGZfAAUqMaJgOgcU3wK/SbJK:CLKYSRA2vZIGFU6oyK","tlshash":"0c12bfe201550cf0baf29e83ef94775a097cb65f73179a991360acd208d252e8f6d841","first_seen":"2024-03-11T20:01:53Z","last_seen":"2026-05-18T11:40:03.936351Z","times_seen":144,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/WmNyACIFLODvnxteSo.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/WmNyACIFLODvnxteSo.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-6a56\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rsj8xXpXS0RGeBgoOokRaHduttZA1bWP1bbleYu6ASkpowIVnVil81UrNXwNbcfAOTz0e6t907exzeEbkSMnUc7l3oOBFhq7YWpQKm1rDXTN2M2xXcgpx3EGWFjbXkAaUAJiB03jrCM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a985b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27222,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27221)","md5":"15fba35eba0de59667e4fbb51aa21cae","sha1":"c562b09030aa852e8cd72aa168d1171f8c9ee45d","sha256":"1cdcf780b293ed96f9dfeee6570aa1ec773f456f456ba05168be22564587a41c","sha512":"fff09f49a40bc09953693080f06299dccc95b64f8b293441c1f90daf722e4be2c11124f5e4d841715aeeba7dca946d524fb3552b7f2083c27d22a1daf572f1c7","ssdeep":"768:f0pNmWmFp351iBFmbI5eUttHvLKDgeR0o:fM7mdoNW2o","tlshash":"23c2ea7060508328f994b0751d84a8466d880be9da979de3f1fecd87e3c25b7ada43dc","first_seen":"2026-05-18T02:10:30.118305Z","last_seen":"2026-05-18T11:40:03.916099Z","times_seen":3,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/ofg5IoYc6wC_YIOVKz.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/ofg5IoYc6wC_YIOVKz.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-d2e\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S6pIp6Sxz1Qyej4MRtRBbWzHSlHvbYPt%2BORCdKrrShsbhwMSQdWO%2BXVVcVJ4EIuYuwI1xXl6c5S1wuzfDZuEroqzPjhsmzTuWyVSksTpIJtjM6zrCKWAmmgzFLS4FXhD0zJKFWKGe%2FU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5b9c2b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3374,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3373)","md5":"61d5913c4638d351013c8a8e0b284b8b","sha1":"21a0cbd6d3d0939954dfb5d8722127cf12cc2439","sha256":"8ddf6fbe1a76b658741159f69cb5ebfdd2886ffc98e33479cdfbc2a29d671978","sha512":"c593df9feedf1cd67cab31af83c26d959afc8594787e7b19f712ca07397e8d7c2c382b6f42cab9ca1132f2d47beca639e1e88675a36ad98b50ddc1b14ced3751","ssdeep":"","tlshash":"ec61d729f748a039c3f131f994e14ca052366f112896e6ebd2270d84673ab90b7dfc27","first_seen":"2026-05-18T02:10:30.10858Z","last_seen":"2026-05-18T11:40:03.897045Z","times_seen":3,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/yJwDpf3e6OAZPywuRm.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/yJwDpf3e6OAZPywuRm.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q3LoxjnKE9FehMzy%2FG1XOQQZRddY5HzQl%2Fc98bXAwf87j1%2F2U7XhE9o9dHr8khgYJKZUN3VBKXEPJQxuB%2FR2sYQvll7U6UryJnewJlcXcbt2l8kI7I0JPqA%2Bhs95HvEaPyKlY%2FJ1vmY%3D\"}]}\r\netag: W/\"6a00587e-324\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da3eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (803)","md5":"5fcf901b797c80f2bad08dd8e54e5d13","sha1":"09f41392d6bcd5198d04f41e7f20ff709671a770","sha256":"00e9a0e35c5b6eef39e124daa4e238b0581a691262ae05dc16ef25e60793bd61","sha512":"8f2800bc45dd22d3dc5f1653d9251b2c8e03727ee7e05b5e92b196771a217fd9a53297a8cb9f2cce2ef9091ef48b4685e9ef580254c63f943cc86cdf5e73e8da","ssdeep":"","tlshash":"3a012545a47074d073bb0c81451549c1a372473a2b42d0e0b51c8e43b67fe96c2f7f59","first_seen":"2026-05-18T02:10:30.473213Z","last_seen":"2026-05-18T11:40:03.897604Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/302.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/302.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2212\r\nlast-modified: Thu, 02 Jun 2022 08:08:38 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 05:49:07 GMT\r\netag: \"0882512e22b690e42e4388b0682ff467\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: S1uXXb_yyIMuIG3B0y9RYAJ5TBXLKSKwfaqiuNucq5w4is_v6igpSg==\r\nage: 21057\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0882512e22b690e42e4388b0682ff467","sha1":"0deb14dede2ad285744af0787bfdef543e19b2c2","sha256":"cdad06c8c46a37fbc2f3cd77dd13f04b0d9deddcf77beb54ae1df069d6f64f0a","sha512":"e8ae58cbb1ab28b4c71d53e663c5ceca82e8a4cb16fc0add2b3ac73a49a8a1620f066b106fe768390c38387b2660598945eaad84905ddf89dbcb861f87c589a4","ssdeep":"","tlshash":"8f413cfd54a95d837cf85a2a1b3bb5c3489753a6fef21c04058a7caf4975504dc44417","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-05-18T11:40:03.918977Z","times_seen":67,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=b917a54b7231275e2cca9988e556cfd3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238536\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/log/log?plugin_sign=b917a54b7231275e2cca9988e556cfd3\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238536\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 863\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":863,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyQV%2F1Ncb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhI5s8snl5r3smr2ojr3Hhl3HvlQo5r3cVrQchIe6jl9shBdHQP3zSN9VvyAKhyh8hrQjWtazqrnshMhyhBdHqP9zwNScmf3DhMAspyGrVfGIEP9khMhH9lCkqMCkkBAIbl2fSMe65M2l5lAyqMdypyQj%2BPQtasntVyAKhrnkwXXlhBdHafQ8hMhHKtTc8f5KWB9V%2Ft38ws9zEPQH%2Bf9Dw1nm9BQIWPCFABqypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6Ryh8htNIVfVzErdyiyQsqr2chr2tVr3IVr3XAsQskl3O5rQljInOSsQyqI9s5yh8hP3zGN9c%2Bt3OhMGphr3HnrNH51nz%2FyAKjBdHV03V5t3V%2FrarVfGIEP9khMhyhBdHVfGHWfhyiyGwfyQaVfSI%2Br9XfyAEfyvORPNX4sNcEP9kRPSYVfQu41nz%2FyTt%2BfqY%2BtTcVPNY4rnoRP9kRsCYvsNc%2BsQu5rCY413u4y3cErdY%2FPSoRsnjpPSfRPNX4sNcEP9m5BV8hbCypyGI4PSHV2QuwrNlhMVwgyQm%2BPnDhMhH5snjVf9a%2BfGcp0Xz8N9sjMnIAM2VbP3V5tdypyQwV0XY%2Bt3RhMhHErdHzNNaz\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fda91b2e9c2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-18T14:03:24.066134Z","times_seen":2078,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/swiper.Oi8yPmNN.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/swiper.Oi8yPmNN.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:15 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-29304\"\r\nexpires: Mon, 18 May 2026 14:09:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yrVGS6jn7TUgl8eblz2GKLezC0KY5%2BLNnOXlDcSeiOeFh6nODeCFvvvdXTpsk0nyNXtzfe5%2FoCcXYjJhcw8aSHI5EyyYxVnOReurav0Ausd%2BFWpvMzme%2B1f9mYS4ObOVd0Xs55C1sWo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda919e8d2db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168708,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"82975d67eb53caecb90681ed0c1b2f69","sha1":"6adad631ec9645ddd33fddebf6d1f751f85ec722","sha256":"40d5188099366d2198d6808424577f236659c1a01d412d30d6e9ff9fb5cb014d","sha512":"af56e91504aafabaef51cc89496c2706f6dcb72113c4302d87fa2a85b9071965bd32eaeb15ebf924d1d6df2070015f7b899c4b0fb0a6c88a7f89e4a014ea978e","ssdeep":"3072:X72LtwN8TgGriiXOlYYgFCPKE3WVcDhPU0s2usyko:XaRw8TgGripiFCPn3WVcDhPU0s2Eko","tlshash":"1af33a997250b13242fb19e742768111b37909497809d4e8b1ad9deb2d3b84812ffffe","first_seen":"2026-05-02T20:23:32.665218Z","last_seen":"2026-05-18T11:40:03.953714Z","times_seen":5,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/js/code_project_plugin_f19cc99.js?t=1779104235921","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/code_project_plugin_f19cc99.js?t=1779104235921 HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: application/xml\r\ncontent-length: 389\r\nserver: AliyunOSS\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\nx-oss-ec: 0026-00000001\r\nx-oss-request-id: 6A0AF9EC2319383535CD1919\r\nx-oss-server-time: 2\r\nx-cache: Error from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: OIx3YTD6xeTne3X7tZVaCy2qu2scWgXsbMMSkQSXZBaXsR475Zp9Ww==\r\nvary: Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T14:41:03.659351Z","times_seen":15390274,"resource_available":true,"data":null}},"time_used":822,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/niv0zCiWtACCvB8xmZ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/niv0zCiWtACCvB8xmZ.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqUG1jNMbuXSGTCgoD6q7GrqtAtDYUqtilzt7iGm%2FVLWyivSMkHwc13GsJ4Oub87%2B0CQ1dTdBcWXhwK6GMz%2BP%2B8vih2WQ41FDuLAZzd0Gaop1P9ZI5%2FNbKwDWXj761tyDU1RUgD6cpo%3D\"}]}\r\netag: W/\"6a00587e-5c\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a80b49b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"4a5a2e36be1e0cd63c2bed1e75f2870e","sha1":"f91ac6aa45fd63863a1c041c6da1232aa2104c10","sha256":"9a90e6578e7690bc6657dfd764af4c74f3980da8599755a13c701699a8788f30","sha512":"b77dca5dab749cc8749f83634f945b7439d17efc490d95c2fce1dabd37bd7da40b2f87753cc4a415b7c69609701276a7fe373da2231fbf05cac1d210450f2c72","ssdeep":"","tlshash":"acb012018a8911e414a4016b0f15a6f81166005c1f6883b4700d4b249b1a25d8d0f914","first_seen":"2026-05-18T02:10:30.236631Z","last_seen":"2026-05-18T11:40:03.9041Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/70.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/70.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 526\r\nlast-modified: Wed, 15 Oct 2025 12:11:08 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 03:29:50 GMT\r\ncache-control: public, max-age=86400\r\netag: \"75f8e5881ffe062da2aa68ece0074dda\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: t2VzuXWHGSMWVQhHSrpY8R8tZA44NP_dWjMxt1GYH6Dyi6BlpvqSZw==\r\nage: 33999\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":526,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"75f8e5881ffe062da2aa68ece0074dda","sha1":"ead3b7157194368b5d4afa175e1875af6c67add6","sha256":"9e3dbe43cf502a93590fd1b829e874f3d6e26bf37ea689853ec66e9d6a38ea26","sha512":"6c421d3cf2305e838b8f38f94d491ad78fb7eabe151bb016efeebaed6b5722d1982524424e1c527b860448d0cd99432d9e9b7cfbc9aad971cfca55f597bcca3f","ssdeep":"","tlshash":"dbf0c0c683896cf4ca34b9e66ce2d493e1b28627a114522110178d2c22dd3d0564e94b","first_seen":"2025-10-29T01:37:08.832161Z","last_seen":"2026-05-18T11:40:03.942194Z","times_seen":32,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":115,"connect":1,"send":0,"wait":4,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/files/6a05e2041b15.mp4","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/files/6a05e2041b15.mp4 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 37666063\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 14:53:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6a05e204-23ebd0f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-range: bytes 0-37666062/37666063\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0SeJnwMFWphFbjVUj4sLvPIk%2FrZKb5bje5lqP1HW0HslfOAl6W%2BoeOvxifD9nk4d9RQMAh9vm%2FUDz1mFtLVZAJ%2ByN6KiLnZ6xrGVA8I6gV094tn1RNmkUptp%2FsllwHIk0RtNFqjwSjTDe8OO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91b06cebb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79558,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"cfd1c49600570af04c2d4b0a32c560c4","sha1":"6bac070e96647ef7013a6823fb68b2228c0e5078","sha256":"4f44abd6e49e7681c8fa0dbabf1452d1783fd58043fca109991790e512cd2a6b","sha512":"f75e3aef5f78cd7d32f6ff6b9892e744c49473f10c325782d72b238183252ebd2a4c2c484e057da1155e3001ef3a3b106859c7540f4821435197307d0f035c13","ssdeep":"1536:D8cBZrmtY8jCma3WG/S0Fg3cDw9fnL3+TMa+HFbJrv2Wp1NKTm5kUSx:gY5mm82XM0FkyMLMM2WpmNx","tlshash":"4f7312dab485a0b5ecd5aa5625348ed472ef2b4d02b27f75c3de42381136f82a837d84","first_seen":"2026-05-18T11:37:55.37712Z","last_seen":"2026-05-18T11:37:55.37712Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":302,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/f17ekxx/d4w/integration/plugin/image/20260511/1778485504136/image_1778485504136_616d88bc61ab711874a13c4c54d.png","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/f17ekxx/d4w/integration/plugin/image/20260511/1778485504136/image_1778485504136_616d88bc61ab711874a13c4c54d.png HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2991\r\nserver: AliyunOSS\r\ndate: Sun, 17 May 2026 20:30:20 GMT\r\nx-oss-server-time: 20\r\nx-oss-request-id: 6A0A255CF1D29D32374AFF61\r\naccept-ranges: bytes\r\netag: \"97C8DC44F2392CEA3B8654F31F14C461\"\r\nlast-modified: Mon, 11 May 2026 07:45:05 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6922089954327460869\r\nx-oss-storage-class: Standard\r\ncontent-md5: l8jcRPI5LOo7hlTzHxTEYQ==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: b9oo5VOJ8IXu6N8535XiRLuBFdoLTWuHMzl_JDzv2piLPSLd_x-iUQ==\r\nage: 54418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"97c8dc44f2392cea3b8654f31f14c461","sha1":"06d6dd8eeb4fc74fac843023cd4caa3e2a837ca5","sha256":"a82458b63578a1cae353feefef4e0acfcdd23642288ef42a1dc9be6e3cbb5d2e","sha512":"4bd2a69d4d0056be6f59ef4962169a5f1f734cb2836730acfc1ac0ba87e7bcf0fed2d74e2bbd7f67be1baac9ae7e0e709feea1ba37cdde8b85e332a9f05688e0","ssdeep":"","tlshash":"8f515d1c9d2d9fa26d52132dca606a900825500ffcdd8462b698483a88e74ebecc5667","first_seen":"2026-05-18T11:37:55.378817Z","last_seen":"2026-05-18T11:40:03.902437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":143,"dns":43,"connect":8,"send":0,"wait":22,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/js/project_51582_53936_1712669264.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/project_51582_53936_1712669264.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ncontent-length: 671\r\nserver: AliyunOSS\r\ndate: Mon, 18 May 2026 06:13:28 GMT\r\nx-oss-server-time: 5\r\nx-oss-request-id: 6A0AAE088F7422393423ECF6\r\naccept-ranges: bytes\r\netag: \"41A80CBB017CAFDD431D6487FBBA106B\"\r\nlast-modified: Tue, 09 Apr 2024 13:27:44 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13347271079859621045\r\nx-oss-storage-class: Standard\r\ncontent-md5: QagMuwF8r91DHWSH+7oQaw==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ZtPifzu6c5jzlX9GWeCKUWkyLLu7ujY63z5qS8JyMTYeLgoJspaNSw==\r\nage: 19426\r\nvary: Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"41a80cbb017cafdd431d6487fbba106b","sha1":"b4252f9c765e2e2c97c686402c41e2f06f7a54e9","sha256":"a47457730e5ece9bfc39d067174effafa4ef9e8f8560234e3dad3b47483e37d6","sha512":"047bb1dce86aa5f7ddcd0d435cb2968c6ffeb77cc9e4daded7a1f05957b6405c96baa9fe2bb3fa2502778d9a76e2723a38ae951aacd2d99cea4469bd845f0eb5","ssdeep":"","tlshash":"60018b471c5330ba1be9717f0b3b5ce93a9962071180ca21bd4cc4692f908915a6aea8","first_seen":"2026-02-24T14:10:04.452661Z","last_seen":"2026-05-18T11:40:03.929482Z","times_seen":6,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":94,"dns":86,"connect":1,"send":0,"wait":23,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/DnXEs7MyHSTR-wyfMg.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/DnXEs7MyHSTR-wyfMg.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f6V0YHZjvzDE5qAoXAp2Ql2ZOtlBCG6ka3VN223PRnkjNEwRTcn6GKifUJxve%2FK1DmJxUw3ErXKueiQZpTXJoVxFkze13R640Hi%2FPVC3%2Byb8wXxny1kbZcNyYWoBz2SFDs4viSEC%2BwM%3D\"}]}\r\netag: W/\"6a00587e-a5\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5a99ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"bbb4e86539a600353bb571a2fccdd248","sha1":"57b97bd9665daa2de8cdc81430876bb5e78fac91","sha256":"08c24ea136670cd6aaf5398213087a113c6b0df5fedb9ca02855e0754639cf15","sha512":"4952025f55cf6edb8c9109b4256010c8b87a226b6adffbcfe8d2fdc7afc2d485cc9a91c66c26961be6e20836bda1996e58c08f02b19c85d7398ac965610ab05f","ssdeep":"","tlshash":"41c02b4bb442c3e0625b0d8441664dd25f350f982347efc0c046aeb80b354fcca4be2d","first_seen":"2026-05-18T02:10:30.36419Z","last_seen":"2026-05-18T11:40:03.891248Z","times_seen":3,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/plugin.6e022713.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/plugin.6e022713.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:37 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50D669A4C3632988EDC\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12812757773187201760\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: L81yy1Y7ugH4G0khGovnFw==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gCaDBSQYq-JcJsNa1dQqyxNYaeKp6geAmpSZ0hk6Kikk_dzEaknK0g==\r\nage: 275680\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":380050,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62398), with no line terminators","md5":"2fcd72cb563bba01f81b49211a8be717","sha1":"21fcad565344af8ffffa528963e0671e5476f7d9","sha256":"91cb86436e3a04d3c6779741304406634506d3b0e79a706b2fbc41c915ba3ae0","sha512":"1bc0665437cfd75582dc11039e4d6eee5a906ded63a620cace330f1a9ad2de537a96de2a8e34e1c381ac034002d9533d7bb2c0a5440136fc52ebca9ff7a6d836","ssdeep":"6144:G0bg30bPKQQDLVQbO0NzhDetWx9a+gcmLTLrqGKAbCPfvaHcqiQUd+wa8Ar4gWDE:5bPKQQDLVQb5NzhDbMLrqGKAbCPaHcqn","tlshash":"cd843a49f5c9f86b07b361b1602f6009b3ba1b48e409d8e0fe75d6e91ab4d496323f1d","first_seen":"2026-05-06T06:21:51.054543Z","last_seen":"2026-05-18T14:03:24.117496Z","times_seen":136,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:14.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.30.1\r\ndate: Mon, 18 May 2026 11:37:15 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Fri, 22 May 2026 11:37:15 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-05-18T11:40:03.910698Z","times_seen":981,"resource_available":true,"data":null}},"time_used":2147,"timings":{"blocked":1061,"dns":14,"connect":21,"send":0,"wait":21,"receive":0,"ssl":1027},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/djYOx1ep1TBC5UshYp.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/djYOx1ep1TBC5UshYp.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-fdd\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ocqUpF1uDeK%2FzLY3SoQ4PgxUNeHpBPgBsGR27MpXzuEVDFLyMkEIzfhSDoHPKt3t5m%2BTDkWWScHXnARVHGYL%2BSI%2BDUFeMB%2B5M9%2BuhN68izYLMMOtDcBPFcUgfb0lG%2FNBxOiNmQ5hMAY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a99fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4061,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4060)","md5":"f494486c9a1a3c57d0d40012aff5c766","sha1":"8c65980d500e698a81c91bbd1bd2a24ca0cfa605","sha256":"2e8058f835d0e2a21545aac004f863b62dec962b83a7a03ad6fa7a87999b9208","sha512":"1e8af5efc214dc4717d582734a18437b7d0bb2767b08f37d79a36573f791fc42e4d145d2c2466655b01c71af30f37f00336b415e0e3a522245440236e0cd1daf","ssdeep":"","tlshash":"99819548b857d639c0fb5868c5685451b3a46fcce0288b85b2fd392d03869f09bb9b95","first_seen":"2026-05-18T02:10:30.232856Z","last_seen":"2026-05-18T11:40:03.908129Z","times_seen":3,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/css/chunk-common.047ebad9.css","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/chunk-common.047ebad9.css HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:37 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50DF9AF8934308D4D21\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15301035701198459371\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: kuhLBjVJMHRRHJR6J/nD0w==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: hlwkzoqAnCPRxvfDpqWFeRW9OIJLNggYV2F2MWl4INqWPggzPVadGQ==\r\nage: 275679\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":3567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3567), with no line terminators","md5":"92e84b0635493074511c947a27f9c3d3","sha1":"1063727a5ae72bb23c46dad693b4b45828e2a74a","sha256":"85172738795fe7c2d724963c00cddb49256a70767071cea32d1729b809702ffe","sha512":"9ee606d5139307b4a204d111caf4297943a1894038526b59e9c0a4bd5a034fd328cdfc85edc24dd76732407f80e93aafa317fa53d85471a7dc45c23f4a72a854","ssdeep":"","tlshash":"e2710de5d50814ed7333c902a385b298ad92f5b2d8e04e67f01f562c8ff2655a291f39","first_seen":"2025-08-28T20:02:37.799245Z","last_seen":"2026-05-18T14:03:24.097146Z","times_seen":1982,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/rlh17StCPFss2Rmk-M.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/rlh17StCPFss2Rmk-M.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 4765\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-129d\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KCg0QOK4WL1bmaIaw0n8B7oB6ajHfrWfoeTzaXZKvnLeWN3hvZF6e5VwLjmqVMvoKANfQZm%2FlIZ%2BOxndAlkZHihSoYUTQo6JWKuudK9%2BxBFm2rctBDRnJ1s3JWvvGjOWrBOYZZlWaw4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a94fffb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit colormap, non-interlaced","md5":"a690a27e23da6146dcbb8a96dada6285","sha1":"59bf7f70e49d7bd9b014f50083c252a81a2902dd","sha256":"c2d8c6b2683519593f05c4a8a368c38489e6c0e65533f675ebed9d0c85494f0c","sha512":"10c8aa8fd830743e8538dc53da5f9754dec4ba238c2bed57f44f48069588ba2186e9f3c7da78c68561f5a09f170506e2342132aa58046c12166cd0944bac85a3","ssdeep":"96:taz0lFtP+gSVezk3f3Pfn4rqxb6zW0fD7CErozxjLkYDCo/:ta4lnP+gSVezifYW50LD73rozxvkYDCa","tlshash":"73a16cf0dbc484b7d600235f58b8a474d392d5152aec2183a26af08efdd052d079f379","first_seen":"2025-08-06T14:56:29.763941Z","last_seen":"2026-05-18T11:40:03.89463Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/270.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/270.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2050\r\nlast-modified: Mon, 07 Dec 2020 19:40:19 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 07:03:39 GMT\r\netag: \"66269b4cfa0d1a33b1f5829cc4d14b1e\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 86jkC5YZufCgV5YYyQCt3VHUzmvToB-MLLj5z7qyt00-FrgIH_cg9w==\r\nage: 28776\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2050,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"66269b4cfa0d1a33b1f5829cc4d14b1e","sha1":"f401eaeec79fad410778239e5ce7d72ebe5fefa9","sha256":"991bcd7ed73288fb8cf47e0b25d61bad30f4d4d53aa7e91a10ddbd5e0b01623d","sha512":"ee6b0723853d3af5b97bbae448cd78b0c5cf6e1f40071eaaf10acda9a130e3d7b36c462b58b61bbd82af5bb3f90e0b3668f8dfa3d516c91c75be4b427b5cabd9","ssdeep":"","tlshash":"a9413c87dd00ce75960eeeb4aa960b085c90e1211c5a6e241e27c701392ab28565d76f","first_seen":"2023-08-28T01:22:02Z","last_seen":"2026-05-18T11:40:03.914561Z","times_seen":197,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":150,"dns":118,"connect":1,"send":0,"wait":3,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/513.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/513.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 525\r\nlast-modified: Wed, 29 Apr 2026 08:45:18 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 07:50:55 GMT\r\netag: \"f28f04520098a3b137e4a9819a63c193\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: xj9THxA_DPVLB321lwrbS1neEkdUE0-7ZyakiuDxo6_1guSGyH7Dkw==\r\nage: 13836\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f28f04520098a3b137e4a9819a63c193","sha1":"e1a14814c53de51553ad1bb77a596cf13ee918d5","sha256":"f49107be685dbc68e93acbcfecf26ac12418bbc5e954e93e8a7d84b6a9f18f4b","sha512":"d301ca4cbd4c5a74577e6f4a0950d60818e935b50261b2871a889c5ac5e7e954b8c94ad0e6bc370528bd1d9e8debd0508565b34c6d56369776494c1240324ae0","ssdeep":"","tlshash":"13f00581239ea24757764410573ff92c86f38eac5ca4007ed5015da141b67c9d8992bf","first_seen":"2024-12-08T21:22:12.532481Z","last_seen":"2026-05-18T11:40:03.945682Z","times_seen":158,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/Wqsw6Iv2mlB8brp-BE.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/Wqsw6Iv2mlB8brp-BE.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-c9b\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efjJ6IBbSE59fYOKl4ngscU%2FQXFsS0zIWQWCKo9dTJM%2BJqyg0kZ8bv3WnDAbUm5eyl%2BF6wh07ob0Vk3LWb%2BNAh1rlGxotoJBGwWOmrs8vnRnAPYJuLYkdZXMkNYpaKyoq83Rr7tjy88%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a4cdfeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3227,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3226)","md5":"70e54f12d62d1315ffd14b024d382b54","sha1":"b0b0394eb58490a978161a192e0775d6a6760a76","sha256":"17c074f0564fc5eafe44d8111ba1ac4c85b99103d728c19c2fe486a11dfc92c6","sha512":"11312280a667403bb1ae15e2ca81b5cebe042ad198c4ec5504e960a42aa6e69f64e9e4d3d94d72c7129a784cf1a8d1c56b504a91ed8a4a3569018f5daf8d5171","ssdeep":"","tlshash":"0f61aa36a370a17b9f02f67dbb5a6adcf128e7714d01b3a5b281201888c7bfc1532917","first_seen":"2025-04-17T13:49:08.756011Z","last_seen":"2026-05-18T11:40:03.918424Z","times_seen":85,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/dNeNEPxY0GBGKTBbAH.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/dNeNEPxY0GBGKTBbAH.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-2043\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvtFTrjNg5GsaV%2BUe4QloEdx28mf1GrFy%2B08nh%2F%2FZ6w0hw22F10WkvpRKbxhgzkejae71XzOO855N2s6uA7%2BxHFst0Okp%2BIGDU6tAf2NKkmWtBIGWI2pYG2Zr756qka8Q62dhQV3Abg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5da3ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8259,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (8258)","md5":"dc6f808b0d8ee6be32637abcda7fb4bd","sha1":"a00cb25f31ca1c240564007d3baa1ce51b36b392","sha256":"952799ddaa81b98f902ce603a264de087c331ad146f3f41d2e1183d6f09f9b67","sha512":"5a21b0507c8905aefa0a2e3a442e7117f22db2745ff81fca21c5bdeedb7cd263eff4c018d907abcbc5d76a9e03b0a9607e6fbbe9b0b22c33b4b0e01289a192c2","ssdeep":"192:eISXv41iPkNtNsNzDnVTDQQezJs+/NQLO4evdNNmK0xoHpKk6:eI71bP+BBsQEs+/hZ1uST6","tlshash":"80028de75401be7e57f283b8a6ad34145c67107f11fd223a2e4fd246b589123b18e4ab","first_seen":"2026-05-18T02:10:30.041457Z","last_seen":"2026-05-18T11:40:03.939423Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/7oUlToKbbTB_A1xBdJ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/7oUlToKbbTB_A1xBdJ.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587e-1b\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IMkn1vvJ%2BQELIf3cVrfwYIwSc7AMJTfm9rQ6BpD432FOOL4W%2BLl2BZUZurMcf4PZA%2FFWwiOg%2FszFJ8CkqtTXyjEHKWrmKnV103tKAp%2BiJNevQSPxK2kHCV62UzY%2Biyj3LeinCmFMnIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5ea8eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-05-18T11:40:03.923067Z","times_seen":680,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 18:16:06 GMT\r\nexpires: Sun, 16 May 2027 18:16:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 148871\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-05-18T14:42:37.082522Z","times_seen":243497,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/srdhE69cK9Cbl7ItnL.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/srdhE69cK9Cbl7ItnL.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-3f02\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g8KsK517Ib6i1X%2BA9s6OHebviTN%2B4wlKqyPUVmgUNiUuBisghFu3EyhBxWqK1ibKQwJ0FvuofBunUtproG68yWjwLtnweSGFl4IZOm8iOu3HPgtcavGoJyktCdjMeD%2FfY0diJjUz6%2FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a7fb0bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10486)","md5":"fbd798459ed7a3a9d02884a2a4913073","sha1":"5c3cb1e62985cc5496a76972e5bcd19065ff7440","sha256":"79da6e681c046f8e70d1fee62bf8c552b67fcbb0b7463aff451eb3415bba5bfa","sha512":"f12c32d0edba48b592b18a71da05e7f6855d8026365c86738cab96cde8b2b5c46973cd09d20205376c218bf47e790bb49a0ffc5631fc94db6397e49f9a99cac3","ssdeep":"384:frCZBxKf+Vr2DjM+shRt1A1+pX6X7OYbXTxdbzzE/ZcyKE1rCRY08fBH5/8YC9:TYBxKf+VSjM+shRt1A1+pX8OYbjx5zQs","tlshash":"b87208d63940b036c77799c6c09505a1a32967c8f219c6d6f06e2c1a361a8b8f1fef1e","first_seen":"2026-05-18T02:10:30.387549Z","last_seen":"2026-05-18T11:40:03.895139Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/t5CDJrQb5UB4BdxxF7.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/t5CDJrQb5UB4BdxxF7.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 24449\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-5f81\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg8HP9qPFKRZNCurvdanZIr%2FfJzJgTutro4EY3aWGdJ0mpMERotwTnsDOwiFj%2F8wLASeZ75yy%2BZRScIe0Un9yEqVINcg31dhCFazL5xnTgYo6WIMoQVxeh%2BjmVuBVWv3ViKzIqeftuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91aefe5db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit colormap, non-interlaced","md5":"3c8143737842857c70aea91de0289fb2","sha1":"7099d4b75022b51d65aed0adeecf461b1b94db58","sha256":"1cfd0fbdbe6c871a5509ca4db58ba1c1fbb6ac6acd4550401a8907f0e0cd2327","sha512":"9412c126999c9633472933dedfb88c84e2ab1b4140455a0dbf15fd7b211405745e9cfbc81555c3f6b91fd0139418b231e7407b522bf9a006e93222a555b84f39","ssdeep":"384:w2HLxtjhKxV5b8YSxCIjuKu4Mt9l8tttTx1KwvR5kQtZgH0dpJ+9FY+Qqa:bfu3bSxZuKu4Mh+1x1Kwp5ztZ6sgpQZ","tlshash":"e5b2cf8c2db9ec5d931a0ffbd466d28d7d24903954dcb8580829f82a398dab450dcf07","first_seen":"2025-03-04T09:14:17.736569Z","last_seen":"2026-05-18T11:40:03.928942Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/niv0zCiWtACCvB8xmZ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/niv0zCiWtACCvB8xmZ.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BG%2F6%2F74OsU5aAt8Y4ahOyM4e9yXHms2P1wfCQMWoRUWbSGGT911ZeE6YrL5jZKtxTOqbe7a2N4f1yhZhr9aKB2yMHs8qwhV7buHlLKkFEm2SuQ%2F9iDKP%2Fx5dKSh4TXy1P7FzCDY%2FFMk%3D\"}]}\r\netag: W/\"6a00587e-5c\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da58b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"4a5a2e36be1e0cd63c2bed1e75f2870e","sha1":"f91ac6aa45fd63863a1c041c6da1232aa2104c10","sha256":"9a90e6578e7690bc6657dfd764af4c74f3980da8599755a13c701699a8788f30","sha512":"b77dca5dab749cc8749f83634f945b7439d17efc490d95c2fce1dabd37bd7da40b2f87753cc4a415b7c69609701276a7fe373da2231fbf05cac1d210450f2c72","ssdeep":"","tlshash":"acb012018a8911e414a4016b0f15a6f81166005c1f6883b4700d4b249b1a25d8d0f914","first_seen":"2026-05-18T02:10:30.236631Z","last_seen":"2026-05-18T11:40:03.9041Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/6Ljvmi29zbBqkoafMl.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/6Ljvmi29zbBqkoafMl.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9Ja7CgeSzfS1DNL2M0yFT1xVJovesoaFGSXF3Xp9rYV6LuXWaHTFbccKikOuL9agIMwrpS9r9lZJ00MAtHC9aSoU69J8PWRAX89U1U9TUq9sd%2FOloDW%2BYSe2cl97vwh7AB7vJPeTs8%3D\"}]}\r\netag: W/\"6a00587e-316\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5ea86b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"106fb035a13f95d47964c6abc807ac53","sha1":"d6fe0233779ec91a37ce408abca06d766da79672","sha256":"ca7d218e45b4c86b11d8ffa204d591d5c0b6836da4fac63422529c3b64bc4ad2","sha512":"9f6854967ca305b2b92f8e2f34956755af1aabb904c59adcd4aacec80d2628938eddc0164ba475864a264a8a6d3877ba38f7643b5e4c71f20a571dca3d426fbe","ssdeep":"","tlshash":"c601258c48e6cbf9d4d702642d9a10b5d050674c9b35d865f05cad22634fcf095de738","first_seen":"2026-05-18T02:10:30.40367Z","last_seen":"2026-05-18T11:40:03.887492Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/install.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/install.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:35 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50B88D14B38315602BD\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14896938545536636896\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=600\r\ncontent-md5: +ZiCBLRlxfKRzeVsc2e3HA==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 1R33nbfgcF4GUkyZjy6qdfXhs1d0lHgq1aGo2A-UpbDWGaboYBJ_Bw==\r\nage: 275680\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1578,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1578), with no line terminators","md5":"f9988204b465c5f291cde56c7367b71c","sha1":"bbfd28ec48085b50f7bf2d29ce360dedc0b67065","sha256":"e4348a3c9d1a33865ad565906a0e10b77b8acc216cf0b01c9c48c66a562dd1fc","sha512":"62c249d781fcf4b691433075224a2cc8cfce86837afc7f02850689ecab62569b6aca9971cf88866e8845571494b6ab5ee183867c3e00981418d094b078a479ae","ssdeep":"","tlshash":"6f31369836e5f8a153d76568013f8045f3ba08651879f4e0d3a9ccb9bc34c8d4073f5a","first_seen":"2026-05-06T06:21:51.036806Z","last_seen":"2026-05-18T14:03:24.107829Z","times_seen":147,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/W01xtORBILDmluDlmE.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/8BxVDupaHRBkpYf8-I.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-194213\"\r\nexpires: Mon, 18 May 2026 14:09:50 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SbLfUspp%2FE1ef9kjTaLmqBM2vBJlYJNXnFrHJZKDIdn26toYrMUkpUBMAeCxqPAv%2BErCQTGfHcCs7knXWoL3yIbLu%2B4NT6gB63394CHvUdKNMyAkJnVGavNMC7h0aYMPp7%2BGgfr%2BcI0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a6bdcab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1655315,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (11679)","md5":"df7e0917eba8eb702dcdb379522a173d","sha1":"9d9991d74ce3f1b494de3f6250d565b431fdb679","sha256":"f13ab116face5bcc749b19aa600fde241f35b890c6e1f714437ff9b609744145","sha512":"2bb1a9d3e81cfb72c54d9def4a77fa2f35cf43bb1814f6adbb452bd263f046e0eaf7af6bcc35f7020aea301a6a6d93c863d4e38dbf9b67f6c9b6cbdade721019","ssdeep":"12288:2g//ewuZro/IXk84QMTisJNxwl9aHb9JNYwBmL:tGwUrogXoeaHb9JNvA","tlshash":"a7252850641bcabcf8f351a49898a841b1a93fdfc115951af2fc082727c7c78abd97b4","first_seen":"2026-05-18T02:10:30.200197Z","last_seen":"2026-05-18T11:40:03.9507Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/hjsVTE1j9ZS8JF6bUZ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/hjsVTE1j9ZS8JF6bUZ.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9KnZmarcMb%2BVwLNl9Y88gVJDuRCOKEmoEO2dkRYdQWtcnUvWUMav%2FjHb3r%2FGkwjAgwQ64mI1Q%2BAJ6zZU4334cVDO9UjZK3z5v4dXr6karP7a%2F2%2FUyL7I7CThdNhgCaj%2Fmx6AXthvFs%3D\"}]}\r\netag: W/\"6a00587e-2ea\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a81baab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":746,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"4a5ad4893ae83a1a2e207173011aecae","sha1":"c8514a9c98b23df54f17073c4f0dd7354ea5c954","sha256":"817353aa9d1df44b05e64bf07c16cbf055fc876bd0cbf988356ac68dca5e3557","sha512":"31694ca4f5abcb75d9eb1543800f701457a393087e4ebad9b7da782a16a63090e4749817b7a2c3e40deddd9e3e556a22b6c7b5ae290d9a40b2279e9d4bba72b4","ssdeep":"","tlshash":"050189647eccf6e2d16f086845e19349db3063ac58c400166e6787700fadbf3c86bb00","first_seen":"2026-05-18T02:10:30.176436Z","last_seen":"2026-05-18T11:40:03.895788Z","times_seen":3,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.salesmartly.com/js/marked/v14.1.2/marked.min.js","fqdn":"client.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /js/marked/v14.1.2/marked.min.js HTTP/1.1\r\nHost: client.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\ndate: Wed, 22 Apr 2026 05:28:24 GMT\r\nx-amz-replication-status: REPLICA\r\nlast-modified: Fri, 20 Sep 2024 06:38:39 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: JFBntxsrfZ64VoXBE8CHtNjr4.xFrBV4\r\ncontent-encoding: gzip\r\netag: W/\"4726c8d370952011c5137ee8e13eb6bb\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fd72662d19f1605cb71a8fd4814daf52.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: zcBZeZs8-vL1Ry4srteXcOtJeTbzKGhwUdJi1llewILkVkRok736Qg==\r\nage: 2268534\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":36489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (36340)","md5":"4726c8d370952011c5137ee8e13eb6bb","sha1":"96c7a41fdc5d4530bb46f1a629f86ecaf068de82","sha256":"eeaba2c06a990d4602b4142cce579f4cce16fba404e6cc82c5c2f7ccb1e7bd1f","sha512":"6d7c814f6fec623660d43ef29034ba789484e0314354f247bdb4407dd7d82abe88bacac2cfbc009929b7eafcfd1bcccca1bdb946faaef74bdfb77248ef5ca071","ssdeep":"768:aH13NvoICzvRDEeJX2QLGbdpB+xJhuLPbBc5jI0sJMF2/bOCbnEytnbBOmVzFoso:aHOXo5ECPbBc5MB2A/blnEMRoaM","tlshash":"67f2094832ae3a6987d439e66cf81060e27f8e68344c545cf664f5f37c2690a61ebf70","first_seen":"2024-09-13T03:55:13Z","last_seen":"2026-05-18T14:03:24.132724Z","times_seen":2170,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/gpxLWqulwECxP7ynca.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/gpxLWqulwECxP7ynca.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 7059\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-1b93\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ag1hBx5wnsdPwMG6X0B7yN%2B7tU4OjjlrRRQtzDNtWD6Yw5zOB3ZSfvpeOmwwmyc4l%2FSiKSZsfe2Uw2X0m%2BC0Ds%2BrhxUvv3H9Weaq6GEz4XlX5dp33yZy5sgTpZIYomoUnOqnTSSyLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91aefe65b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"576263baa062a56ebe40f541ae7e86c1","sha1":"2d29b6538d53ca2c16d19b2042019b873f9c167a","sha256":"661682f4f263d1dfdcdab3407f43f142374cd9c1e96f1e11e8d799b056458390","sha512":"78199c711c914e122542f619687192c8970ae6ede4372c843517e3079d1cfa306f6b164fc1aff6a525a807b1ef68edf268d2343afc51dcc859a0dc5aab1d7a5a","ssdeep":"192:EadY6FVc0GdSVZtboXPWHSbtYElwrhuSc:jL5G0VZtbovJ1OI/","tlshash":"9ee18e1e88a0ebe3a1581699d11b474dee0c6f1f463d1d5e6e1630ad8037c6ef8e9264","first_seen":"2023-11-07T05:40:02Z","last_seen":"2026-05-18T11:40:03.954672Z","times_seen":60,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/swiper.Oi8yPmNN.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:14.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/swiper.Oi8yPmNN.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/8BxVDupaHRBkpYf8-I.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:14 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-29304\"\r\nexpires: Mon, 18 May 2026 14:09:49 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o00zhzhtJxA5IpVl1dSQhStPPqGRBtKGcWGEYsw2%2FJFry4pMVbZoLqMEd2c0jiDkiGPgIgwQaz42zVMAmlyfU%2F7wSTH5Fgh0xCPSH9K%2F%2FdAMXgbCmBES8ZlwtaoHKqcuckC37knMlaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda919938e1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168708,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5246)","md5":"82975d67eb53caecb90681ed0c1b2f69","sha1":"6adad631ec9645ddd33fddebf6d1f751f85ec722","sha256":"40d5188099366d2198d6808424577f236659c1a01d412d30d6e9ff9fb5cb014d","sha512":"af56e91504aafabaef51cc89496c2706f6dcb72113c4302d87fa2a85b9071965bd32eaeb15ebf924d1d6df2070015f7b899c4b0fb0a6c88a7f89e4a014ea978e","ssdeep":"3072:X72LtwN8TgGriiXOlYYgFCPKE3WVcDhPU0s2usyko:XaRw8TgGripiFCPn3WVcDhPU0s2Eko","tlshash":"1af33a997250b13242fb19e742768111b37909497809d4e8b1ad9deb2d3b84812ffffe","first_seen":"2026-05-02T20:23:32.665218Z","last_seen":"2026-05-18T11:40:03.953714Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/282KbtNOuHHLZeNkpd.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/282KbtNOuHHLZeNkpd.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EDsvV0C79%2Belv8WLovX%2FH3ftgqaRq3%2B%2BtzW4F%2FL7UQEqzHMaQ6JaWawuAftT4%2FpypbDE9BbqJVWj5TIvFq2oHY6ZVmQObqRjz4U8jBtxyKOFbTonxsGJjOKLQ7gYfqiVx4KHrGy7%2FU%3D\"}]}\r\netag: W/\"6a00587e-f6\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da4ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":246,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"d9147274da38fb409e6e43100a3bd8a8","sha1":"4c2760d23c0fde641f4f85cd6983ab045b715125","sha256":"c55f38c6c1a095e84da9a8f0b1e9bc1cb36f7db2adb12aee8de211b2ec6e9421","sha512":"aa9896b153feeb870a58901d0a6fa7758257fafa20363b8c24bb8a114e40020460fbcf0dc6e2ab7da535a899220d217bcbeda629100adb0a464b80c1685f39f1","ssdeep":"","tlshash":"acd02b05c58803b838e2146b070727b020b7011c8f6492b8544d0e30df1570a1a0fb22","first_seen":"2026-05-18T02:10:30.146896Z","last_seen":"2026-05-18T11:40:03.940121Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/img/6a019133a1b3.webp","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/img/6a019133a1b3.webp HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7806\r\nserver: cloudflare\r\nlast-modified: Mon, 11 May 2026 08:20:03 GMT\r\npriority: u=6,i=?0\r\netag: \"6a019133-1e7e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YXEmloWIdUcJc5oN0IfDrDmOdgxanod7CdVyyTeXmrDdqdfxDH5IFnpISrf05OwswUftkAbQklBSCQScEqxCkE2KIYjgcfNE1BcjOR5pCgSIrK6B69mS0wpV2VeU6EmSCPjZOZcRrIdlK3H9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a7b9e8b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"113636b9a221a8e1103db7b44d04e00e","sha1":"5b6f42f6edbf22c33c1844d017085c79d9fecb36","sha256":"934cce6ddf78aff58296ed7f365eaf8f2758ae177f0a6d37f070922c645af64a","sha512":"bc871f8e205cfa036a35d76dd380b9c7f8d81b237338cd3fdadec8691b8e879834fb3318df0717c0405e505bf754b422ca1087d40fbb0ef188b447759801e0c8","ssdeep":"192:8ELTcsWYTfjmMexsOHteQ2hMMM9ROPOP1qsfCly0PQzr:8QrzS7dHte6MoROP96Cly6Q","tlshash":"4df19e48fd5cce4a8981ba2b69e17af38671fdce874d590b488711c73dd171188ca8f8","first_seen":"2026-05-18T02:10:30.004044Z","last_seen":"2026-05-18T11:40:03.906789Z","times_seen":3,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/N73RLymwlWC7eKr2eV.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/N73RLymwlWC7eKr2eV.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-3a64\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWtwc%2FtZorkjoBUhQlyK7XrZnOrubAT6NZlIslWbG36fDvWsxPsUn%2FFnrPtNGvxvG6exSMg2%2FR2fjpzBpHTtjZ7Nj9rITCzFT3ZVdlQzfRRQlv0ZXWQAdmtn8fXSfw8D209iYLM8Bu8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a80b4bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14948,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (14947)","md5":"35f4fb2c626f120593bb472d0759d70b","sha1":"eaf15b3c76131ec765078e5238a74dfd79b3a1db","sha256":"ae1764782b01701e48ce2d949d8d8317712876e350e1bf1c209374693507b372","sha512":"417eadda276569c927579b05094a42569f27851922e4b703e0ab1befecb9b41e8a5794ae5132e25e540bf529465032f9379f56a879cc76b3dca5a422f0018241","ssdeep":"192:lcygIDNnwkmJJexKjWHovWEj2V5IrscoNtBZNqaO7K+UawhZC7Jfk25mXXhNkauz:lphnQvhjQeWyFCZMaO7zUaP7Jf01ulx","tlshash":"32629eb73b98d67e8b742cf8600955f2ece6581f6ff58d84d89840a487e0c90cd5e742","first_seen":"2026-05-18T02:10:30.462012Z","last_seen":"2026-05-18T11:40:03.893988Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.intl-coinbase-inv.com/uws","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /uws HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://intl-coinbase-inv.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: K7fqhCNqWf7Ars62O+aBqQ==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 18 May 2026 11:37:17 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Version: 13\r\nSec-WebSocket-Accept: QQzbilMm0cgSL7jfJyUYU7tny/4=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=d1cBs6A9W%2BHG%2F0k%2F9Afvh%2FC6XAATMmPkNzK2AaH9YtWnz37VVzPKjBs1XuJDQ4a4dCHPpKPkuPqm4brhiYvQ3RBH0xXjuzH4G9CfixZ0jQErdSa62kSbHppsGq9jQT%2FuVG14%2FbQpivtTF7VU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9fda91a98e4e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=477\u0026min_rtt=453\u0026rtt_var=169\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2373\u0026recv_bytes=1265\u0026delivery_rate=5189964\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=8f8925c02666f6a7\u0026ts=329\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T14:41:03.659351Z","times_seen":15390274,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":29,"connect":22,"send":0,"wait":315,"receive":18,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/home?rts=1779104237003","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /api/home?rts=1779104237003 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5WTD%2BpPNVXAi04qyByxABOOdPG77ABHsdfb29HRN%2ByywafZzVzobwcgCbSEugHby%2FaYufqk938Mn%2Fm9atzndHQY%2Fc2iqJxpPnJeD97Fvh%2BdkKA4S9pHR7UzgzDf21zDoRDtfp%2FV%2FIUqi5VYK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fda91abd970b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16089,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with very long lines (16089), with no line terminators","md5":"8e23a5109e04122316772062e3e57293","sha1":"a07fc608c0d4f79ec0afb6d0c9cc99ff732f59b0","sha256":"46e82688fba5dc90c2017cda0cb86af686d3d7238a7bbbab81875175a1d8c62a","sha512":"4c878e7f68d554c8d9d444cd922c0aada0a5daeb7dde0201f03d299ff8651e9ae9714c657cd6dad1b5dc0bf0276e64bec253f7f8fcc938b878350732621e0688","ssdeep":"384:2c/m8sjtlnjapZcyLASbCtozCKuZstBcamqG+npdPU4K2f:2c/m8ZZnL/bCtozCKuKt7HJ22f","tlshash":"dd72c068a6ab164f55ff14fa9deca73266bd3a60f400cb1a2eb4f0124337674b525510","first_seen":"2026-05-18T11:37:55.39779Z","last_seen":"2026-05-18T11:37:55.39779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/6Ljvmi29zbBqkoafMl.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/6Ljvmi29zbBqkoafMl.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLWVurZ%2Bly1uT2vX1oVfSGlvMH8mQxPm76dhurqZTvpw%2FNxfFB%2FkDnZY7Mjtrxo6%2BGbtNHY0M195ZdzGnfm1ZF1yWFxo7SWusF7QNFgcjYTYubeqgt1y9Gp%2FMjWO7m6nQZMP4lBJdx4%3D\"}]}\r\netag: W/\"6a00587e-316\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a81b96b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (463)","md5":"106fb035a13f95d47964c6abc807ac53","sha1":"d6fe0233779ec91a37ce408abca06d766da79672","sha256":"ca7d218e45b4c86b11d8ffa204d591d5c0b6836da4fac63422529c3b64bc4ad2","sha512":"9f6854967ca305b2b92f8e2f34956755af1aabb904c59adcd4aacec80d2628938eddc0164ba475864a264a8a6d3877ba38f7643b5e4c71f20a571dca3d426fbe","ssdeep":"","tlshash":"c601258c48e6cbf9d4d702642d9a10b5d050674c9b35d865f05cad22634fcf095de738","first_seen":"2026-05-18T02:10:30.40367Z","last_seen":"2026-05-18T11:40:03.887492Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/pBQXuUhlkpz9Go67NY.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/pBQXuUhlkpz9Go67NY.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 4447\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-115f\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R1fn44OVpekF5s8xBU1Y8uXVzE9Bwf3tf3wwtSSh02qahkU1bapdEkwTVTLOgqyGBQeNZbAAqITQLx3wk177uRdN5EXl%2BExc%2FeokJKM1eKlbB%2BYrXbkdPrXRP1Oeb2t%2Fa2HEXv0yChg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a93fc3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4447,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit colormap, non-interlaced","md5":"21b0c4b0d5c57d0cde6dec204d239a27","sha1":"0d14e0d3f4b3b2ef760de1f6559e9ccd7f56751a","sha256":"664791324a9e408aaad21d9cf154679323efd2e5cb8f00756af44e2f79c2d940","sha512":"748e14a78d6a0f1393e4c99518488aa888ddcb898499693a8159505c4ad1956e65e01b2e72e412e292eed7d4751a384f872667fdaa94397f2d29605ef87e6a57","ssdeep":"96:Nwxvi/OvpcOS1Y0DB5hnqTQlp9GR4AkELUQ8Y7ZTkE7E2aez:m1i/GS19dgmpgR4An4Q04ESz","tlshash":"72917d8a29c785c7a056bd870fc2ace5710b691a688827bcd5c4e0fd81b13cdf11729a","first_seen":"2025-08-06T14:56:29.761865Z","last_seen":"2026-05-18T11:40:03.933868Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/A1qIVjQ4hRUt63xKpI.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/A1qIVjQ4hRUt63xKpI.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 4406\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-1136\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=daPbU6mhldhrp0%2BGOigN6ZEJW9jQjPR%2F5iFS2%2BwiP3ltoFW7%2FnyR%2B8gIAUH1bPpVBGK0EuBrSZbq58XbBxK7hagpUZjmH8ipZIYvS%2B1vR7vhtir4amoZkW5GP6kLbh00UKOHt31tGdU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a94ffab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit colormap, non-interlaced","md5":"be511afd32477526b96598c82645fdef","sha1":"21c7c36959b9e5f8f92ad2601f8c95d01cdba1a8","sha256":"7c1fa55ba968016299730ed9fff13ddc3a66d46c7fd2d0b088f0a4f231897667","sha512":"340bc582c9832682aca66c2c1e46a74d9b92c7dc7600340a9a27503a683cba8205d5c68a7f723860ae3b1e8bd2c28b4d2b0d20a9ee5f642c0e67e97a17b99bdd","ssdeep":"96:V0XUfwaSd56Czm7gJSjgvWxTylIt6Ge2wJvJprTfRX3/8:V0gSr6Czm7gJGHxTUIk72wxJprrF3E","tlshash":"b4916cc34bcc8ce77407129a86354c4faf1b14e66aa7189e5f2e293c703f7e78620495","first_seen":"2025-08-06T14:56:29.787198Z","last_seen":"2026-05-18T11:40:03.93494Z","times_seen":5,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/station/log?plugin_sign=f92fc46ebcaca5744eeb5343143ed4c8\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104239013\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:19.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/station/log?plugin_sign=f92fc46ebcaca5744eeb5343143ed4c8\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104239013\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582 HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 529\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":529,"data":"data=0qHafQ8hMhHKtTc8f5KWB9V%2Ft38ws9zEPQH%2Bf9Dw1nm9BQIWPCFABqypyQcWPnuEPhyiyQV%2Ft38ws9zEPQH%2Bf9Dw1nm9BQIWPCypyGX%2ByAKh2nzi1njpsCFaBA6RxutEPQcWtSlR2VoRl26%2FlepRX9V%2FIAogyTR9IepRfGsil2l4BA6EyOtVs9wWB5y8l268l26jyOrEfQXQPSRWl2l4BA6hBdHqrnshMhyhBdHpsnmGyAKhrnkwXXlhBdHA13u4NSX5rNHb1nohMhHQlQD4sQDSrncArncVs9HQMeY%2Bl9rAl2X%2BI9HhlAtQlqypyGYptntEPVzErdyiyQsjMnIAM2vhBdH%2BsScEP9khMhH8sntVXQVVtqypyGcW19X%2FyAKhI5s8snl5r3smr2ojr3Hhl3HvlQo5r3cVrQchIe6jl9shBdHa1nohMhHvI9sql2V%2BIeyms2DaI2ojl564l2v8s9XhMeyaIe%2BArCHz\u0026base_encode=1"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:19 GMT\r\ncontent-type: application/json; charset=UTF-8\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fda91b5ee70b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"c5ab379d3602da837b3ea249f9b6a30c","sha1":"2f27f9a8f146580593f361c875fc258eb8ac6010","sha256":"166dbe42b2c6a944959668668a085b4e0fa808c2bf9b311ab1e377309d0d73c9","sha512":"7551ea2aa9c143ff419e885dfda191149192585659be9fa6a21a4200ee663e11ded0b91bc372d52a6862a91f6b0296d33e7c893a1634907fa2535f3c4486199b","ssdeep":"","tlshash":"f4b012522814018a0d48023d4004360ad9f42050dd2143418c9901240b491687006060","first_seen":"2026-05-18T11:37:55.365315Z","last_seen":"2026-05-18T11:37:55.365315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/isatnzcvcVBe9b3THL.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:14.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/isatnzcvcVBe9b3THL.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-18f7\"\r\nexpires: Mon, 18 May 2026 14:09:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6y%2BRHk7F4vmjQ1XQIyiWkK3JSt1pfOYfgy47FNuhn7XHSb81saYpCkzp1bnRYpmqjGQYmnV6xXv9EbWCcR21cqFe1VXKWk1Lp2ODZMJU1nxava4Ydaenv5%2F8OyduRUofzo1T%2FapEH1Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91970f48b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6391,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6390)","md5":"b9bc69dfebbe70d73fb49c7d1c117e62","sha1":"ac989820671a1c955dc822ca46a51100542f421d","sha256":"4b9984ff63ee09b3985851625a57806a2cbef2cd08aaab0b0afbb6a2c1777076","sha512":"2ef879789fa48068bb0541d4011add0144646b00f38ab43dc10f4116356232dbbcab71588516e1d03876a1c4cc62ff5e441ac16c29aa416103c436e17f4392c5","ssdeep":"96:3B5mSJ+MbpDAKneQYX+4JToiL5dKSme+jeHPdw297fzrEIuf/:fmUJbiKnehJTtdKSme+jeH1Zpbw/","tlshash":"d0d1b730a3142c63a2224f194b44e6f86ea450638ff38919f6856e2cd7fd8f4125eb82","first_seen":"2024-03-11T20:01:52Z","last_seen":"2026-05-18T11:40:03.903039Z","times_seen":428,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/adi?rts=1779104236263","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"OPTIONS /api/adi?rts=1779104236263 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://intl-coinbase-inv.com/\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sh9lzBGzvKBMbYcmycz7LYwMU9Nm%2FytwoMjU5fgEoS5vnBagiO18O5EQNPEJxX8MAE2dl5QMfBeX81cTdW24yT5tv1PJGeoFLBZuL5oDlAAgksgk7owLvCddSYTmrVuLucCdb8quP%2FPF%2B4aw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a4bdcbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T14:41:03.659351Z","times_seen":15390274,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/gYYwtOPQWUD-ECb4SB.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/gYYwtOPQWUD-ECb4SB.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pzbbj55b4QFMsOFzIbqEHnrsJ6URmtoDi23ASt54wflRLDTeiwwraM1gUE%2BhwNTbxM7I8bZ84isbIkbkZSKNoZ4fWJIn39mbK99YKDoCXB3HBMVFUSRcrVPA%2Bd0LENXAa9dVxD1GqcA%3D\"}]}\r\netag: W/\"6a00587d-fa\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a52f9cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":250,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"6ad82a5f48465d9e5de0e84bd5f50d7c","sha1":"9c24e97b567146159614d9e16dfb68a1a3381595","sha256":"22525203f59285ea97b21dd7612463b3697f5ad782a756acf991fca8073a8a45","sha512":"ced62d3cac70b38203882f9ac47b97c0f4a8d900ac4374847fe0bf9e5b580cd5ec0ca4e796f627d25e1e51806258eb21a4b7429ab9e1b8c6e026314a0203945e","ssdeep":"","tlshash":"56d02b5a8c5851dcc77ef214963401dc01243213d5730c3ac57c7b167cc6b601526bd4","first_seen":"2025-04-17T13:49:08.656528Z","last_seen":"2026-05-18T11:40:03.891923Z","times_seen":85,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/Onsnt9mQ0t1l-CAnx7.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/Onsnt9mQ0t1l-CAnx7.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2KIwhsUWXhnwRecaH1OwPbiYMOqskANhdTZw2QM5vvYhZwDzLKR5hs0efJzNVUgLCuuuKHJ16FwBqDkg7a2HGBoSddPsnOrNMWezVJPhQZYgF6S0hF6KXLNQdswu%2BZXVUIVWr5ArIwA%3D\"}]}\r\netag: W/\"6a00587e-2c3\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5ea7cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (706)","md5":"28231d15088754c9549f5fc1e59ba2c8","sha1":"0babe1ceb2e02cb353b2b6b87c46a7c79f262e93","sha256":"b770b728acda5a6cba9497682aeb30727a89dd1ae6b2e601b5cb1c0c9180a462","sha512":"cda93a800d0770bce25b227f7b15ba130f8264e695ef6c41fb48ac81d42e3a45da6c435d296ca08c0a32455702ee9acab6091cad8a0b4ad415297f48b9c2c8d7","ssdeep":"","tlshash":"f80144aeac5eedb4346344b145d61869321a4f2dba798880e2b21b3021d2400d02b74c","first_seen":"2026-05-18T02:10:30.15176Z","last_seen":"2026-05-18T11:40:03.906078Z","times_seen":3,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/BvtIZFeKPpDckmY11N.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/BvtIZFeKPpDckmY11N.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-9f4\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=US8HiIy7iekGukXNxmJbDhsr3FJ%2F4DEfwFodwEdgFxnbKTEuZ315X99taSagIMLSj6Lk3xbxW1Rh31Su%2BD4%2FVBLshp4UZMoI%2BrgVspk35KruO5BwqKsLeCRwi8nHG0%2FEC098VFtbYWw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a7fb1cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2548,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2547)","md5":"3ddc6f67d1bfb0f8e1a512f926b3a7e6","sha1":"11fee67f3ad1be950cee296467e3367f07b40e65","sha256":"33c338418dc31d4bd17cc71702f0513d7f65ab2555b53e59bb12e0d162365be4","sha512":"a0fbd6be1fd7f2ea9194f16611893c14d1231ff10d9c06e342728bed07badfdf0a46d332171c6c7e3a927805796fc8e88e8250065d271f820fd9688f466da90b","ssdeep":"","tlshash":"ca5153d8b6a2503d8b7324f172e520c5572e13a0efaa51ed501f2b005b97c23baf8939","first_seen":"2026-05-18T02:10:30.022041Z","last_seen":"2026-05-18T11:40:03.922345Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/KleNFrZ6fAB9_PdsvI.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/KleNFrZ6fAB9_PdsvI.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TdC6xPRunHov1M9cxziIHkKF05tmDwdGZSmavLMoApbjB9kocxvxG6KArnEW71FW6iVJl4lJB1Re0XUqDH4iv6zSLJMugE9mt2NSoWx9F8ndF7fkF%2F4NDY97qt8vAEHBJSH1jjqhe1w%3D\"}]}\r\netag: W/\"6a00587e-9d\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a81b9cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"017e8155096757a0d48fefe36389ba7c","sha1":"499156367b7ebf09e0de8b99a0d5b64878cb55d9","sha256":"fe11d50c690b98a66cef6648c890d9c51f0d160c442a5ea8c0d0353f06a933b7","sha512":"827a91701f0f0dce70a686b8d1df62ab7814956f306582465113cf76dcd0ab4ff026a422322e7b0f0f54a6ccb524005f93ad74a768ea5bbe2efbe9b9798adad4","ssdeep":"","tlshash":"9cc0241d744550f0455d0cfcc113057f53153f40331555f05515c517531d3151307f15","first_seen":"2026-05-18T02:10:30.223013Z","last_seen":"2026-05-18T11:40:03.903518Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/bO36noycX4C6B31UIB.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/bO36noycX4C6B31UIB.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-c685\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2Bn2ttevTSwvMBd3cWl7nBkM%2FIPipuWR%2BHIsvwUKsz4iCQEqWvb8zPDPQHOx55we3snX5BFD6U%2BiEXt2yu6%2FPOUBJ0RFH4lJedCtEZ72uKujO7UZZ8o0uKyj0NaVziStqe7q%2BBiR7%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a4bdebb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50821,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50820)","md5":"302ed4af9d8a215931e923e45020e5a8","sha1":"002cb8ff0922be3c9c315d396e7aa66dcd9f2e1b","sha256":"cdbe2581e3baf27ba0ac7b9867f6bd760cd655e83d5350c4baaf91d47a1d0820","sha512":"48d6aa29b2524dab8fcb915bdd24f927048c1334e34f151062ef13bba1e8c8db454403e2296ac44c6c416d1ab4ebda7b2c10751ec99e1dd420c76f1310e3fc68","ssdeep":"768:tAxh0B778u5Y0Jwh0DNu95sRlDYxgRvvTo0NBW1sBO:9BY5EYgo0NG","tlshash":"2f337554256c633eda6bf16358ff46d91910f713c1377a4aba02733199dfb822231aca","first_seen":"2026-05-18T02:10:30.489621Z","last_seen":"2026-05-18T11:40:03.950118Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/ofg5IoYc6wC_YIOVKz.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/ofg5IoYc6wC_YIOVKz.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-d2e\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N6BQycsL%2FPrBmKOUeXT3HZUo%2FodzRv3QG8Jo3EteyT6%2BsVSVm4tuSxq7BEdyxU0MkuPIjKpJBNxqTsyg7tgKd3%2FYbKYwItAOvdcY9fh%2Bj4SbVI7rp4uy22JfinqKbtx8RJfRi5OkWHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a7faf0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3374,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3373)","md5":"61d5913c4638d351013c8a8e0b284b8b","sha1":"21a0cbd6d3d0939954dfb5d8722127cf12cc2439","sha256":"8ddf6fbe1a76b658741159f69cb5ebfdd2886ffc98e33479cdfbc2a29d671978","sha512":"c593df9feedf1cd67cab31af83c26d959afc8594787e7b19f712ca07397e8d7c2c382b6f42cab9ca1132f2d47beca639e1e88675a36ad98b50ddc1b14ced3751","ssdeep":"","tlshash":"ec61d729f748a039c3f131f994e14ca052366f112896e6ebd2270d84673ab90b7dfc27","first_seen":"2026-05-18T02:10:30.10858Z","last_seen":"2026-05-18T11:40:03.897045Z","times_seen":3,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/79zg1CCr5VCs6Onutp.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/79zg1CCr5VCs6Onutp.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4976\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-1370\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OvPCV4al5iqw0lMKcm%2BLTRR1awXNQRSrtKCQzZxcnUOT063GOGnjdzeSOi5KkePPKs59liLB1WMV75pX3VslPwqLhWAh0iVx6wnmtjCNv4nDFHlmcbzLNb0wNhBBd%2FlpNVror5QnNM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a92fa0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit colormap, non-interlaced","md5":"32c280671aca2448ba5fc2411f964c7e","sha1":"d1a43e54c06e471ee590216cb30a3f8f07348ec7","sha256":"6309eb1e86e372ccacaec790b2b9a2a98ac7f3689ff1b56e8a222fc6356cbc16","sha512":"46cb00beac62159aac05af0576aa28d7572b957e2b5f2ad73c701b771a217729872ebd53740e893edfab83fbaa1c4ed414abee075220e1865b7c4163c2c2fb00","ssdeep":"96:9+ztNJ/aw2LSrJ3yafb7qwGBNgQLJavvtCZkEP/HOLFya:9atNJ/aHLSMYKwGBCQLUUDP/UFt","tlshash":"3ca15b6895d3227e58a0b05ee1f7ae00b1778de9b3d8489ad6c23d7855f604816d4a23","first_seen":"2025-08-06T14:56:29.759095Z","last_seen":"2026-05-18T11:40:03.927781Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.salesmartly.com/chat/msg-user/create-user?plugin_sign=b8484a7629da192bde5294b2d7a94728\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238164\u0026_lt=\u0026_u=\u0026_xma_=51582","fqdn":"api.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 07:17:51 GMT","end":"Tue, 23 Jun 2026 08:17:48 GMT"},"fingerprint":{"sha1":"E4:6E:E8:0F:49:09:BA:FA:14:45:D9:04:38:62:26:F3:C5:BE:96:E3","sha256":"28:5D:C7:8F:3A:50:61:E5:67:F4:07:89:5A:0B:3A:FA:8A:41:33:8D:CF:D0:28:9C:DA:29:17:3D:CC:02:DD:1A"}}},"request":{"raw":"POST /chat/msg-user/create-user?plugin_sign=b8484a7629da192bde5294b2d7a94728\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238164\u0026_lt=\u0026_u=\u0026_xma_=51582 HTTP/1.1\r\nHost: api.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 380\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":380,"data":"source_url=https%3A%2F%2Fintl-coinbase-inv.com%2F%23%2F\u0026language=en-US\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026user_id=499ac8b57ab68111eba0d3267341ca43\u0026data=eyJwaG9uZSI6IiIsImVtYWlsIjoiIiwiZGVzY3JpcHRpb24iOiIifQ%3D%3D\u0026is_sandbox=0\u0026before_source_url=\u0026label_names=\u0026custom_fields_ext=\u0026update_label_type=update"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncf-ray: 9fda91b0cc4b56a8-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type, Share-Access-Token, External-Token\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 1835ff4b-6305-4bcb-8656-f8fc7662e683\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"3f32a19c86b7ca54cbf32be871aa57d7","sha1":"68d3d81a1eec0d67429eb2f0a419f978d6dbf5fc","sha256":"d3f118b5d8f9b37398680aa789ac8886da56a1a7b24633b7e918969d559fd373","sha512":"82a131000d61b1b22aabf464782f8c6bd6706cd754829fecd65d676ed405693f0cf4804c6b8a8f69bff3ba04cead812672d4654592d769f357b13eb2e6ed3e28","ssdeep":"","tlshash":"b5c08c1a55481ab68ae7541a20012006789684304e2177a8c4f8122a0a8db95a382873","first_seen":"2026-05-18T11:37:55.409413Z","last_seen":"2026-05-18T11:37:55.409413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":13,"dns":0,"connect":0,"send":1,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/css/plugin.ca8811dc.css","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/css/plugin.ca8811dc.css HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:37 GMT\r\nx-oss-server-time: 3\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50D2FE6AF33334D1E8B\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4711444634510545221\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: GJkBkDDNMX5T+a6ZYreZHQ==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ou7RgU1levYfAXfnUp6Mpm3V84MU1QFkGj2-h-0zJOosi-t3DPBFhQ==\r\nage: 275678\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":77948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1899019030cd317e53f9ae9962b7991d","sha1":"b9d94d577b4c079d5fa4823f82896df59f4d9b5e","sha256":"2d16333363ea5a097558bc8675e8fd989e71e6144b89c0ff537bfb5ca3a087b9","sha512":"152a11565d2e8f381451c197d63daadc1cc14baa9c2113361549949b0a2db1b1c5ad535a152b80eea4728caa8dae9ee32b26e15d42886dae45df70b97f9506d5","ssdeep":"1536:B+1IfcryTXKrMV4wU3k1rz0JUjMBwrjlvOb/E0/qPxE7aWSlsgTu1dQq5qsLxHig:g1Ifc6KYVh0JUjMBwrj6qxE7aWSlsgTg","tlshash":"5a73a832ca15312da177e125f5c0f9d930b5c207fa230aadfda47939c2f298527b668d","first_seen":"2025-11-10T12:55:36.307776Z","last_seen":"2026-05-18T14:03:24.097962Z","times_seen":1428,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/6iiGaHGFaiDN-in7Ac.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/6iiGaHGFaiDN-in7Ac.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHiXElSs6PaRimUafe0Or%2BgBFAmETT4SSx6dlPRxylcWedPckZfG94qcoxMFvbiS3kltj516%2Bwz4T2aAXfA1F2cF5Oc4CVp%2BUEIbO%2BdruQOM%2BhyOpbt9qQJcd8q3aIDUzw9prEiG6uo%3D\"}]}\r\netag: W/\"6a00587d-ca\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5a973b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":202,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9cd0259b2ea1270774b0bd885f3d6a59","sha1":"2bd73d35751da067cec030ba8558d8e1e0e08bce","sha256":"123bec169a48a47aaeb0595c6cca642ddbcbf14d78104b15cb8e836a746ab3f0","sha512":"77b2837f18040e9f7b1e3b229243a4863dab9406b64795e9227631334fe7088a19830d6dbbc9867efe8cad2251a8fc9ed6616a9f459ecbf02e5ce66a5516a26f","ssdeep":"","tlshash":"00d0224c2c40f07e29c431a80f0842dc08992204ff035fa43124bc3100ca6f62037c2f","first_seen":"2025-04-17T13:49:08.709612Z","last_seen":"2026-05-18T11:40:03.898894Z","times_seen":110,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/37.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/37.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 714\r\nlast-modified: Thu, 07 May 2026 11:34:51 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 03:37:26 GMT\r\netag: \"eff8c717a314a63994d50d77bb8c0665\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: syQj6NlMBuathyToksirT2JpKgxsvy1_dv0ugmpyF2q6Ns6ZH9ZZBw==\r\nage: 29339\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":714,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"eff8c717a314a63994d50d77bb8c0665","sha1":"c8689d7c32841214b0980a5b72b5062f6297ccd2","sha256":"f830dda6f52b5bae972920cbf64c6239edebd8692479f881f87017a94ec37f1c","sha512":"8d920c0c5cf69693ac78d0be2bc47f9a98cbfbca73e363a46b067d9e1a9a1af671333a5bda57f8134dbafd0a75e7a0bd3142f70ee514f95b442fd1214ea2e24a","ssdeep":"","tlshash":"c40144efda639271ba6034f34f4747c6b902c1689355b8dd9698663940255873c823f5","first_seen":"2024-08-19T20:20:32.21906Z","last_seen":"2026-05-18T11:40:03.915586Z","times_seen":54,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":134,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1839.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1839.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1387\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 17 Feb 2022 08:19:34 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 02:24:02 GMT\r\netag: \"aef8727bea8367cd9fd252c025b45887\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 36320\r\nx-amz-cf-id: D3rkT8ZOwbZ441siobCGVAxOJhjMJ6F-_uqpejGKPRpN447n3WEt6Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1387,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"aef8727bea8367cd9fd252c025b45887","sha1":"c2ab9d909455bff35181dfd92bcc7baba930867f","sha256":"ce5a07d36768bcb5524044a9e92a606ae6effe1cb0913dfa418703461db62fe3","sha512":"5f97e368e23aa5e501e57917aea9426704ac3c4068b34d803f44944663bab45131170fec2872fb868a5faceb6856ce4d9f8870053aba7e8d08455989a731984d","ssdeep":"","tlshash":"5321085f5b644577dda94dbede05a54b29e30d208d978bc2c404ec1534598a643608ad","first_seen":"2023-05-06T05:54:57Z","last_seen":"2026-05-18T14:06:49.23562Z","times_seen":14411,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/2010.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/2010.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 854\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 30 Jul 2025 12:26:03 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 05:49:02 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8a5e9b87a7c053bb9d65cd8bcbc4b171\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 20901\r\nx-amz-cf-id: aIa4u7X58nyV6F_RU4pvsnAk4kS9sZpmIZTVuwmEcvKX141yK724bA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8a5e9b87a7c053bb9d65cd8bcbc4b171","sha1":"2168aa11330c0401cfc5e0974b7ca94093c9d48b","sha256":"0b1d6af59fc52f5e8f88909ae09fdd4ee303dbcd00004c210b8e375759893cb4","sha512":"47a77cb24f98b7862798354660849992762cf9b9df17cdd872793f36467addba4fa78b7751c167297120010aa62e36fcf2b27c5d46f1fdc2270ae62665872e86","ssdeep":"","tlshash":"af011a7a5f05106ffe733a7083576661d745826711081e4880b3907c36b9c405d4bd03","first_seen":"2025-08-01T01:41:04.546261Z","last_seen":"2026-05-18T14:02:12.862297Z","times_seen":276,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/cus?rts=1779104236264","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"OPTIONS /api/cus?rts=1779104236264 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://intl-coinbase-inv.com/\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4b9OM1o4bePDbONpgAuvMWOBlStkWtR04DS5iEooYPxQ5Myw3cFQcFh%2FeTQ%2FOrF0ijdBz7rfM1YHIw6zHRsdHXVILFJVRC8bce1Msv5LOG4DSJry2FqKYuCCllJxWxR6G%2FVA23s3gCdFh3FB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a4bdd4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T14:41:03.659351Z","times_seen":15390274,"resource_available":true,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/kTQBscy3MeDrk2rEyD.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/kTQBscy3MeDrk2rEyD.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-8cc\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvQPYK9iCsbWSZ%2BIDuwv6KrTn2NpbWfpnN4E4Pl5tkAdi06G00Y2Y3OLoAfQxMaakPaBRGlt2uh4CjS2LKVShYEKoj%2FxlAoopzOgJaAwKU2HUFn509eS0OaS2XNwObuwt24gdmX%2BPsw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a98db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2252,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2251)","md5":"511e411095d54fbe4c34de72ef31f823","sha1":"8fb0cd1f4900a5f116d83ac01fd45f9db55833e2","sha256":"2e63d810a761c39e4259c2e7037442317a8044b71a7919bf66263ecf0bf049fc","sha512":"0434be6f403dfa45dc13ab4e4767d7ad026513c3e078d45b68eb9ff49e774591c02076f25328c6f37505df6170617e9ebfff142d600d53be0b6b09d5cd572c19","ssdeep":"","tlshash":"6a41a66cf411dbbda237863888520064220c2f6f942cede4f16e1f222ecacb46456b38","first_seen":"2026-05-18T02:10:30.423876Z","last_seen":"2026-05-18T11:40:03.890513Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/adi?rts=1779104236263","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /api/adi?rts=1779104236263 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wuaXMLpPWbrzzQH3OLi8kgEIavrvJSZVyGDJ8dm7aUmvbMZoCdwNj3V%2Fgdv5aBtO2f24gLXXstbkW5TGUV%2FfN3aKCEDkK8mTGSDkEbNwnHUFdutW2pmzuHO%2FftdEH%2FF8Gn7pjs5M3nTaZ99C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fda91a60b22b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"5016d069a395801d80dd72e7a232dfa3","sha1":"5a7ecb1f20b060200ed1cb4c72a68005d52956e3","sha256":"482651785aad2bfa6366e1af9b3ffe19a08a5c88d4452dde37092b138c1a9b9c","sha512":"e40300dba39fd01653e0e99a8937281178f3129cf7848bae2ee45f7283e13203c134d10caf45ab18dbe6189971c8c195acaaa39c5abf9f32566b61ad270b21a3","ssdeep":"","tlshash":"4cd0eba0cb90996b21a8aaa9c1465002292deb221d5e7090c40bdc421380f2465fc018","first_seen":"2026-05-18T11:37:55.414527Z","last_seen":"2026-05-18T11:37:55.414527Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/img/6a019133a1b3.webp","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/img/6a019133a1b3.webp HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7806\r\nserver: cloudflare\r\nlast-modified: Mon, 11 May 2026 08:20:03 GMT\r\npriority: u=4,i=?0\r\netag: \"6a019133-1e7e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kPh93UOZCzSLkLDTLrBnA24ubLoSHYdf5fTDOSkYGUfequlOcSf7jBdkf9DI6%2B5TozxzRsvJc9OpfedDxTv66k6VmTOUmeBR4gXL7XUoelxm%2B4%2F5olznw00WP7EVNq2NJ5sLcbI7%2BHS8E%2BT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a8eea3b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7806,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"113636b9a221a8e1103db7b44d04e00e","sha1":"5b6f42f6edbf22c33c1844d017085c79d9fecb36","sha256":"934cce6ddf78aff58296ed7f365eaf8f2758ae177f0a6d37f070922c645af64a","sha512":"bc871f8e205cfa036a35d76dd380b9c7f8d81b237338cd3fdadec8691b8e879834fb3318df0717c0405e505bf754b422ca1087d40fbb0ef188b447759801e0c8","ssdeep":"192:8ELTcsWYTfjmMexsOHteQ2hMMM9ROPOP1qsfCly0PQzr:8QrzS7dHte6MoROP96Cly6Q","tlshash":"4df19e48fd5cce4a8981ba2b69e17af38671fdce874d590b488711c73dd171188ca8f8","first_seen":"2026-05-18T02:10:30.004044Z","last_seen":"2026-05-18T11:40:03.906789Z","times_seen":3,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5426.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5426.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 3759\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Thu, 25 Jan 2024 08:50:23 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 03:35:38 GMT\r\ncache-control: public, max-age=86400\r\netag: \"8634cee42b68c501da8d76beee00bf86\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 28916\r\nx-amz-cf-id: FLTJe4NPOw6as0zo-0VwVG7JvlwfuLYe1zq7XtC8dk8P0VoWavgJ6g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"8634cee42b68c501da8d76beee00bf86","sha1":"346a50344174ec7c53cdd48080a55f7cd3a7c164","sha256":"890b9f9ed3f5ab8390b86f93b5b8ba0c2d5d50a5dc21668734b3537bc3a65f53","sha512":"405e62a3f1c24476041f90ddb5e50801693578a1b3e108919edcde05bb429bad77fc60b0096adbaa9a2704835ebd7dc165720ad0a14ada9498b3234d361ef259","ssdeep":"","tlshash":"fa715be58e8349f8b5ce461d652892f55cc24943d9f987101ee467921800a82f0a90e2","first_seen":"2024-01-31T18:12:49Z","last_seen":"2026-05-18T14:06:49.307183Z","times_seen":1802,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/7oUlToKbbTB_A1xBdJ.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/7oUlToKbbTB_A1xBdJ.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 27\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\netag: \"6a00587e-1b\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\naccept-ranges: bytes\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIKhVXm4fN6N%2F92X9X%2BkhdRSjZKwUPCd6H%2F%2BsYs3nMUBlESR432mETKKX8BaNuYnbNca2g7pn1qo%2FqS9zdw%2BLVoKWxDRDgkRQ5tc8bCrj9vPgj3Okpm3suEVf8zVdV1h1MFYSIW9Y%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a81b99b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"703a0c9620dd946cc85f5ccee2828005","sha1":"2cf601f3dec2169adb9a1f53d1c99f802094dac1","sha256":"f37d93c862ba8958e8a83a2353ce79d1a4ba4220d51c648bc986cf9a7fab8625","sha512":"ae87c9f33c47a5457881291cd2dacae870d242aeeb8fb4b738e44315480d2fc14aa61b978bb41637d428db06df5e2bae0403fb8e9a326f52725826bc0b899a00","ssdeep":"","tlshash":"4680003a082000b230a0008cb2a0880000a0203c3b222288228802e20302080e888e00","first_seen":"2023-08-18T09:36:36Z","last_seen":"2026-05-18T11:40:03.923067Z","times_seen":680,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/hcIUCWyqrTDboi46lu.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/hcIUCWyqrTDboi46lu.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-3bd01\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tE%2B6f4GRhvr4jLEdajBTcXicMxa5AH41UHNNCbB%2FcegkHbmKfJ%2BOhmGPcF2%2FD%2B3LB%2Fu4YmbBvDlTpke85CjcQmFrwOndvsJkUPGh0zYkfAbyvB3wXUBFPE%2FsLzLG3nrJBWKiz8cxXV4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a980b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244993,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"af271a94aca703f939cc9287ed36ed6c","sha1":"3e3293a00b5e06ab7f469b8b2db13b1f9467aed3","sha256":"ec188305e1c6b0c62ec1a9525558fcc9725646f4c2d459c0bfcbad305b29f084","sha512":"7cd24db8bb51affd0f1eb19841aa059c0f2ef0d3e6f233ef551d5acccbe3a14dca95c595934f3db7a885ec470740b7e835d92429b963ee57e55cf71978302c74","ssdeep":"3072:Dd7HOnZY5kWoH6J+2JfnC260X6k/7CtmVCnpMYt2kd5fT8Q5BkW:J7HOnm5AH6J+2Jfnkx5DR","tlshash":"72344b51740bab3ee4a3588d68491800380d4feed51d9d66f2fcb627abc6cb0573e768","first_seen":"2026-05-18T02:10:30.190287Z","last_seen":"2026-05-18T11:40:03.947223Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/Gp6o2cw29YBvossI91.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:14.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/Gp6o2cw29YBvossI91.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:14 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-101f53\"\r\nexpires: Mon, 18 May 2026 14:09:48 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBEdLK8uw%2Bgs5mLKSgRd7P875cAhnNw2DpKcmex%2Bw%2B%2BWcRIV5twPcvTZ%2FTk01DJFM9s%2BkVevEKlqpMpgL%2FM3frs4H6z%2FaoHDiyKBkRCBOl2lrdpt3u8qUhm1flTfUmVf1xzokOPkby4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91970f4db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1056595,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"fa56e3f1195565af349fda4c59219dac","sha1":"944b43f17f743234eef6373d0072a54d22dfe719","sha256":"22cde30f66b56ef3ae70e6199375b28a0faff71ca337ac008ebb1f515b72ca97","sha512":"035f630ebd4a2bd38c3287701ebc1aec6da0e939a0a05a572d7938ca4fcfa0382edcf152d6174d54d04144d92352b8890f97ed6f077bd72cd067594d6cd88f0e","ssdeep":"6144:U5xsaQKNSgVe6snEBYwN8oQ4hiHxd5UQlQacxZjoXQEcucCS/uJDMvuDUw60TfuW:U516w+vHxDtnc/9ucHsj","tlshash":"4c2529782b84113cfc0bdf729ae48adc652de153db534ed8a609763483c72e72673698","first_seen":"2026-05-18T02:10:30.128179Z","last_seen":"2026-05-18T11:40:03.931496Z","times_seen":3,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/lang_j?rts=1779104235769\u0026l=en","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /api/lang_j?rts=1779104235769\u0026l=en HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dHbFXzWHYuAiDp88MK%2FzusDQHKJDcPEaG%2BfLtHLkWa8EiRkbOS4VON3nPpTz5CmHvlz1iGIs4ZlyPiemd1lfk8EsJFzgRliTiDrlefmyOB5ASgKG8fRzo2AikXLlmZX7pzjZoZAJkbr37teX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fda91a199c6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31808,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (31808), with no line terminators","md5":"6f693f58e2063e36339ac228e258910f","sha1":"59eea93c9fa9c17a4f9816380bdfea44065e5bf3","sha256":"e95f7e57076a8ac0aa530b97c4f3685b0a605d19fbf1d8a0b7165158f49bc5e7","sha512":"04b7fd802ebf7d7c7625a15a0f0ce65fae43e478a29cff0e90c693380e1408912bd2744087cea4d3815a960e8514ce74aac7d06c0b63b201c244ea68e34bf5fb","ssdeep":"768:YRCzbqxk+gaxf+FkEdIiGxSklFHZwLLh3YD082kWTVrZhHD2fcG:YRC/qxgax2yPTYYhgLh57FZsj","tlshash":"8be2e186b71361cd4af5060563131fdfb488bf674531262a94da8c116a4fa828c3bae7","first_seen":"2026-05-18T11:37:55.418364Z","last_seen":"2026-05-18T11:37:55.418364Z","times_seen":1,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":321,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:03:53 GMT\r\nexpires: Sun, 16 May 2027 15:03:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 160404\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-05-18T14:35:50.224185Z","times_seen":337592,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets-cdn.salesmartly.com/prod/project/f17ekxx/d4w/integration/plugin/image/20260511/1778485510086/image_1778485510086_1dfae6239f1da897549498feccd.png","fqdn":"assets-cdn.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.107","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /prod/project/f17ekxx/d4w/integration/plugin/image/20260511/1778485510086/image_1778485510086_1dfae6239f1da897549498feccd.png HTTP/1.1\r\nHost: assets-cdn.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2991\r\nserver: AliyunOSS\r\ndate: Sun, 17 May 2026 20:30:20 GMT\r\nx-oss-server-time: 47\r\nx-oss-request-id: 6A0A255C8F02F9313845276E\r\naccept-ranges: bytes\r\netag: \"97C8DC44F2392CEA3B8654F31F14C461\"\r\nlast-modified: Mon, 11 May 2026 07:45:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6922089954327460869\r\nx-oss-storage-class: Standard\r\ncontent-md5: l8jcRPI5LOo7hlTzHxTEYQ==\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: fLvQjoaA9pGHywsjcO0exLuo4wF4KDnkCa9B7Hi1QLKsoPp2EEFO1A==\r\nage: 54418\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2991,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"97c8dc44f2392cea3b8654f31f14c461","sha1":"06d6dd8eeb4fc74fac843023cd4caa3e2a837ca5","sha256":"a82458b63578a1cae353feefef4e0acfcdd23642288ef42a1dc9be6e3cbb5d2e","sha512":"4bd2a69d4d0056be6f59ef4962169a5f1f734cb2836730acfc1ac0ba87e7bcf0fed2d74e2bbd7f67be1baac9ae7e0e709feea1ba37cdde8b85e332a9f05688e0","ssdeep":"","tlshash":"8f515d1c9d2d9fa26d52132dca606a900825500ffcdd8462b698483a88e74ebecc5667","first_seen":"2026-05-18T11:37:55.378817Z","last_seen":"2026-05-18T11:40:03.902437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":136,"dns":45,"connect":3,"send":0,"wait":25,"receive":1,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/3sWws6XIWWBd7OjZe6.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/3sWws6XIWWBd7OjZe6.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-4f5\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bdyrNuTvjnIBoJYzMt6fM5jmgrtlhKtpIeEF30IT0371qC7yJ4nSLDof3pHQwgfTk7P0ggkn3%2B%2B6P%2BWCoSxslzVpte2h%2BD2ZKN%2FVzWCtbBDtvzdu7DclzEWqYTdu%2BfvOwEuDySqBj2w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a80b32b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1269,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1268)","md5":"aabc0d07753dbe5e93732c485f42bd86","sha1":"6d0ead7ad4c10d03d62b519a467bbaff00e716b7","sha256":"2771e47b028032724f46344d42034617e5cbb00ab82fe18e193124e2f893f0ea","sha512":"b98319dd86376ee217be5209cf2cd14245975ef02013e76ca77b2e9629e4aa862857168a94981bbd927454ec8ac43f10da3853351784d8961e98c749ecdac118","ssdeep":"","tlshash":"4f213255b09df13d42ff3876a8ab5016c32127d0232040cd77ab054e0b229d29677a1f","first_seen":"2026-05-18T02:10:30.036259Z","last_seen":"2026-05-18T11:40:03.913193Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/K3SNEvdhypCqcPh1LE.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/K3SNEvdhypCqcPh1LE.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RLdhmLKpf9egzfsgAkfzVB1u3r82SdkKTv5zD8p6SoslFSVHcwjc9Au3YI3Nd0Cd3wzj%2FWMyTquxc2ToRh5xk7eIWSb4CfZwBOBxSNhZxj9Qq2uAhxO7cvqRGCIPw1w5qQ1peqOvGGM%3D\"}]}\r\netag: W/\"6a00587e-1cb\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a80b37b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"63f298c845152f90c34aad15efc3519b","sha1":"30135b9318ce565a7b78a5d27d5b2bf6ff2e8296","sha256":"b8c4f2f448fa01625930937ecc35a2db4270d626147bd538e68c8a6bf465abec","sha512":"9ffa1975a231e3cb53e549a0dc41617113e10bd7fd44b38d3c85fcd191b91e0db496817ba98a857355a70b0b7021ac3e2c0f2eedbe782fc535f83cada2be6dce","ssdeep":"","tlshash":"1af0d51eb02281bc11ff1c6d8840009c43328fa02281a0c9b23f2e980b38ce7e6a2c2d","first_seen":"2026-05-18T02:10:30.082884Z","last_seen":"2026-05-18T11:40:03.905409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/RkIeBIGuW3CnyFzOUs.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/RkIeBIGuW3CnyFzOUs.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4746\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-128a\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJLGsEbvI174eDuewSbC720FPb7I9bJQdeaIFbx6BT8or%2BT87NWRin%2FLTfyX6dx5Eg8KCdwtptBVMt22qBtr3qCrJjKIfPtUlgyWib3trPwfgFDULbmkNnX%2BIkBWjTpnZ0%2BZBj1p8gM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a92f9cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4746,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit colormap, non-interlaced","md5":"e50643bb86aa372c1a264b55de3a9c8a","sha1":"e616a8cf23ef76085cc4473ef7d2b234e33b34f0","sha256":"36e8d2258762b77eac7b72aec03939b2010e4dff87110890191b2db0b39b2f82","sha512":"9a94e5a5464ea3974a5350d0837b8feb63e9e8b1d94ac9a77cc8ce60a86b038e0d1dd21c86c6eb22512e1e9259c90d1d03ec055771e3dd63b0afafcb72129bea","ssdeep":"96:qIKqhapVSxpt8tMkxon5ffCYsylS7pU96DXmPz18/x3q+OuQO8Y:3KqCSx5k85ydylS7C9V1q6rO","tlshash":"51a18dfb62c6955c8994172c81cfad90ab83c15ceb0dc964ad063d7aef6200e736214a","first_seen":"2025-08-06T14:56:29.778413Z","last_seen":"2026-05-18T11:40:03.957139Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/24.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/24.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2401\r\nlast-modified: Mon, 07 Dec 2020 19:40:18 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 08:52:25 GMT\r\netag: \"0a179490163159340daa3580d26b6628\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: XhOYSdTXJcNm_l6qR9i7t9Kqj17pYsSIHLjsa3YZxMApfl3zpI1_Zw==\r\nage: 9913\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2401,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"0a179490163159340daa3580d26b6628","sha1":"eba46f4cac2c8a3d648c2a36f638449486c8b677","sha256":"b29dd0e21661025a7db7cbe2c1c1a29172c8e11c616237b2e1d7b231308cfd99","sha512":"96b9fac83b76adfe9ddee86ac62bad3efad3f54c79b350bdffa30ae5c8d3647cf7916aa1ed5f7c55bef51f1d1a1632884f5da53025be9ba8d0ef7d0087a540f7","ssdeep":"","tlshash":"90410a965e48e4e135138e21d651e4e0f6af9f7107f358453f2ac2cb4647913862e720","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-05-18T11:40:03.930523Z","times_seen":96,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":155,"dns":123,"connect":1,"send":0,"wait":6,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-msg/unread-msg-list-v2?login_token=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026chat_user_id=f2e4be7edcedecbf80a3fc15a7bb27f3\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238511\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 03:56:18 GMT","end":"Fri, 19 Jun 2026 04:56:14 GMT"},"fingerprint":{"sha1":"3D:A2:6B:19:97:82:23:11:10:B1:04:28:BC:92:55:73:D4:24:D7:6B","sha256":"FD:D5:E1:0F:63:14:4C:3D:C6:7A:C3:2C:AB:8E:7D:73:CA:F4:E3:D8:7B:E6:08:8D:E9:3C:FD:57:04:B0:51:A6"}}},"request":{"raw":"GET /chat/chat-msg/unread-msg-list-v2?login_token=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026chat_user_id=f2e4be7edcedecbf80a3fc15a7bb27f3\u0026direction_type=1\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238511\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nexternal-sign: c517eae9cd6554f4965fddb190a13df7\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: application/json\r\ncf-ray: 9fda91b3b8810883-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: f390af68-6f5a-43ac-b5ad-17acdf6e7b72\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"48016efe262190df0ad5b1d7340a60c4","sha1":"1cd9c973630bf59e2c479cada9105bbfad39dec3","sha256":"6e59b9f826a2a9b503fb05fd33448a0583d30552aed790dfea6cb19e74bb409c","sha512":"274e846e9ad5c7fdbff3fb665809347f229260b2b2eb491f386a5d1084a7fd7526a4e0eb331c71c4eeb14a98143925c29e2702869c11883176eb14ffbba9993b","ssdeep":"","tlshash":"4ca002562c2c1e4b0f0fe489780d1b17d6e911445a252712cdcc915c870da5eb5c7521","first_seen":"2023-04-19T11:38:49Z","last_seen":"2026-05-18T14:03:24.122792Z","times_seen":1584,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T11:37:13.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:13 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=79LNLfzublnGxM1sG4dBy1QVSODcaTQ8BGumxahiqX8NynJAG1ey5%2FMfkKNSDRDwj%2FD60bXAiBuVPd7C5PoMxHD65M0co3scLRm30l3Oq0i2SMUrEycbhEo7yMxoOf7qRnWYGO78FaM%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\ncf-ray: 9fda91938e96b515-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217293,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (58107)","md5":"deaa088331774e5392f7e61c2a691a35","sha1":"3f4632e3cadf4a9b66bcbce71946dad2de8416a4","sha256":"c4a4e8fa91af15f57e931829c3446ff2983b468a0e1185f888db60207c0c8159","sha512":"1f0682ea67ed4bdf575063ad5b9615d0311ea40bed0d827fef90f29eb9b94ad2c1ac1f98e0916fa323a7880769227918b23713a114e4c6a1eda51dfdee0ed70e","ssdeep":"1536:fSfHQ34OOb+/sPO4MD7czwKCfymtGKnXWpV9zWblHoyGrmVcxq605HJjPxRfoowx:y7","tlshash":"992429a153e0e2d8f755832dd5316c3621bf34ea7be0c28cc8cd6677aa1a8c9451cd6b","first_seen":"2026-05-18T02:10:30.495218Z","last_seen":"2026-05-18T11:40:03.904736Z","times_seen":3,"resource_available":true,"data":null}},"time_used":544,"timings":{"blocked":60,"dns":42,"connect":1,"send":0,"wait":424,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/o6327S1iNhHZnsmNl8.css","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/o6327S1iNhHZnsmNl8.css HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587d-607\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JidNHxPScJbVGhDr6Rh3Bt6glVIlQ%2F380LGLd%2FbUsXozIFfhCOV%2FFyByNdIKyGAp7fmDgEFaFtVepJV3r3etD5YF5O%2FCCG7q98CQELDkKeDQArmiAoa9QTNMxwqX3EHs%2FopkkG7juow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a4ce0cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1543,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1542)","md5":"bea7065a4dee9dbd717e65c14d54a462","sha1":"4684fce8a4c8bc918e71bddac39797b6ed50718c","sha256":"5fcdcdc810e936834ae1553c9780741d5d485d28fad604a4952f3c356dea31be","sha512":"fa56791355ccc686afc786f9f72c3d2df62fc9d39fcdfd420bc24889ae99e58a132f71a5bd406b5fe3b3003a270fb04692d00715d4342c8a0cc0acbfec12f24c","ssdeep":"","tlshash":"1631e778da5090397e12fde4d7d706daf23ca5614c1beb99ba58a160c3c37f41a23382","first_seen":"2026-05-02T12:38:56.04666Z","last_seen":"2026-05-18T11:40:03.943507Z","times_seen":7,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/UOUIWiAuz2BnSRbXBD.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/UOUIWiAuz2BnSRbXBD.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-712\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KiRe0oAazPfgo9oNemaKOxiSOrPWTx1bk3a1c3PtgI3Fewn7VLUsgP%2Bp0ewxRc4u92aUCcd%2BYYZbnNkLmH9JXWVxoxhb%2BFrIGHnzxlyVpeIVRUpzE6wjpdQiDU8cIG7rTbW2gyZQpEE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a7ea89b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1810,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1809)","md5":"9943014be5e30b6b41b6af172fdef8fc","sha1":"cdc18ef321a65bb5a66fbe31060343c562e747f0","sha256":"4281512591c4e8c7e3eacdd4fe05501c6bb2faa5be9c3fedaf04e181fb50c65d","sha512":"dd83599e70fe3649e4a6aa9d74c328ccab8a872e6d1a6b1ae7911c3f26e8b0cfced3f1c9b862b839745eefe3752f13e8cd4a05f04d5ff96b92d9e4943baed4d8","ssdeep":"","tlshash":"1f3145a4f6b9d034537e58e1c4391610e2591f457119f8ead4ff0d426e8684af93bb3c","first_seen":"2026-05-18T02:10:30.33543Z","last_seen":"2026-05-18T11:40:03.899421Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/yjsmdtBDP5q_n3y2Eb.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/yjsmdtBDP5q_n3y2Eb.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-4d0\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4EDI6m27dtB%2FAVWfcLbrk2xLyjQskKj3mN%2F88AMKWCGLHHb8FS2mNXhdPpAj58Hywkmp%2BTYNV4Zv%2F9TcaOLRLnPkvVQpev796vO1Po7YGlpR9sqtppK3ZsIhL8gSQBJalzYjvxagPY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a80b6cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (796)","md5":"29af56056f9416f19626df26816761d1","sha1":"0104469b74eed3ac355c063123a59af00118a4d3","sha256":"9e07156c704e59a3553e974929100e89add4d71823ecfdc81b14aa8081618932","sha512":"6dda1ca0002b04a1d2bcafb8be7f895bc435538bfc342058eaf130716b6a5d84316efa07d671468dad3a8ed6db59399d440bd084d33b77eb297445acc8422d7d","ssdeep":"","tlshash":"a921021d6802da79c4a74d6ce5a41812529c3bfb83788861f0ef5e2276c1db14667768","first_seen":"2026-05-18T02:10:30.124239Z","last_seen":"2026-05-18T11:40:03.927129Z","times_seen":3,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/GHW886Gc84BxKVshey.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/GHW886Gc84BxKVshey.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-1007\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CG8WyiP0peFxfaQEbd64HnpJ7sa5DOo7IRxkDeBbCqguJlraO6e%2BMfiMyp0jva%2FHq7aJjykCRWDxXIIHxYriCkcOPB30SxABaBs8bxidbbbNUXZOTjS97cHK1zvg3NuaJZ8NZN%2FUNTo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a81b76b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"3682228a7f39161645fe9bcbb8ea529e","sha1":"f9c9d04ff42ed74170cd4c4b099d886e24cfbfb3","sha256":"6d6cb96610f07ac1284e2efdf741816ff68ff80bc99b07bb1bdd74fb54e2cf35","sha512":"56abcd1b706b69ab960a2d82f7afd955269b509791f0daedbc62e2fa2451495bd5f152091db1e667dfac04d8d74a96de9a7ad583b978b598bb01ccbb2e599008","ssdeep":"96:/acdRuMfPzqfcSFuxEV16+4OQfq61Zvzq6fFJt66DoxF6wr:ScdR7Pz4cSICVefhLjmp","tlshash":"0281f18c781789fc88ed4624e81754d0a1cf1bedd02449a1b0fedd1616d6da0cf56bb8","first_seen":"2026-05-18T02:10:30.0697Z","last_seen":"2026-05-18T11:40:03.933233Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/ngGHvBz2zqwQ7WYkGN.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/ngGHvBz2zqwQ7WYkGN.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 55612\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-d93c\"\r\nexpires: Wed, 17 Jun 2026 02:09:53 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hXDQBJQir8r8tdqkhDZjEP%2FCODOJS6d%2F4tajbOUzz3D%2BYlIcLkaKtE0cDWoXEW2NEX%2BBtw1d5m%2BEY3HE1K473rH9OyLkd8f%2Fvb9wdHuReNGJ6CDHda81bDoofw3Hd3raHQEeEwqdVM0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91aefe60b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3089 x 3089, 8-bit colormap, non-interlaced","md5":"e9d13248d617136d2e9c4d3b26e20783","sha1":"bee274802caf2ed254e8da9e59e30eb18fb1dbb0","sha256":"ec93de87fe23509ff7c1397a7499635d7e9eb409392b6aa9d751147a70208752","sha512":"f3fdbbd3ba21bc075a8725c16ead4d5ef8ae7d5a07d293012b92e028f294750df8ae61659f4ad0fde173fb53a93ebbecb2b647acea04d0eb695c6201a67ad905","ssdeep":"1536:4L6xiSVVQPHYdEzmSNA+wQP0/QDUdlSOGzUIhUM20:DxiSVVgHlr0/4mlcx5","tlshash":"7c43f15a67f30898df715be75bc882a130235f2ab4a85dc8522cfd8e4b2473c196731e","first_seen":"2025-03-04T09:14:17.759582Z","last_seen":"2026-05-18T11:40:03.926039Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/5805.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/5805.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 685\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Wed, 27 Apr 2022 07:39:01 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 06:25:57 GMT\r\netag: \"b9913f5599faab08d2addf87011c61e0\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 18680\r\nx-amz-cf-id: Ic1Lb5spdkA2GXbvEPxfalbt3o3B-1wmo1agcwZH2QBydyqkRikXAA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b9913f5599faab08d2addf87011c61e0","sha1":"d9ae6e6a8ca0e50e02a991d032d9b9a461079f95","sha256":"68ba1605b3a54d7f827c22cc7252f01c6bf9412cfa6573be2c91fcd4b9e908cd","sha512":"7baea45f411fc30232bd93d04b8cf34414d333096ec669558ee6dd4a4a725785786f488b387e6c38654ba4fd3aecfda5526de2d949851796582c75214a42150f","ssdeep":"","tlshash":"8d01d8fb0957c025408f01f8224f7372d160c4eec9c7e20d89d9f7301862ad24c4524d","first_seen":"2023-05-15T13:26:32Z","last_seen":"2026-05-18T14:02:12.86298Z","times_seen":411,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/files/6a05e2041b15.mp4","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/files/6a05e2041b15.mp4 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=163840-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 37502223\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 14:53:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6a05e204-23ebd0f\"\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncontent-range: bytes 163840-37666062/37666063\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2F7w67uFDLBX6WyyWzuQjweyy%2BpZNGUrJPchhPqMQUzUr9uzZJRUfHumI9xa2pt9%2Fz4Il3Cnh%2Bs%2B52n4zTMVxPQHqQWRuhoizmVZSBJWjJP16jInoe9T7tQIBVeI6dj6kZq2S5R06yaOF9u%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91b27cbab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70213,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"287589c5950c8dea54a75638191559cb","sha1":"cbcefa7908a6fd4c79a244fe0e99b8de7264e89f","sha256":"730d922d342f3b4d91bdbfd9792170c78f8df8ffa845e8a1afb953860b43d818","sha512":"d1e35564df3c00d9356e6a6d607e1b739c8a66fad5d3ca1ecc5504846f59e76a598edb049bce10599e1abd44b30f9ad5b71313fce078552fba04dcf77929a17c","ssdeep":"1536:0pE2zfk+Gnc/P2zf5LcdpplBuquegovEQyESjsf86Tl8:0pxke2zfJup7BZFEQNfTZ8","tlshash":"05630256afd46910d96a2f7360271aa48c8233471306c8dd5f1f8a2fd5369c6bfa82b0","first_seen":"2026-05-18T11:37:55.428707Z","last_seen":"2026-05-18T11:37:55.428707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/K3SNEvdhypCqcPh1LE.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/K3SNEvdhypCqcPh1LE.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTRBmo3iXCq7al7zNc0HoFI2Vj%2BGzgWLpOT%2F72RPVxlmgwNw0GObgBksCPrvBiOpO8iXNSzDimLXyLuq%2FhAf3kZLu83bAZPZtxCmxkfRWoPECeHkyrU61Zfz5iZf8vyL4qsRwRHjiZE%3D\"}]}\r\netag: W/\"6a00587e-1cb\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a5da52b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (458)","md5":"63f298c845152f90c34aad15efc3519b","sha1":"30135b9318ce565a7b78a5d27d5b2bf6ff2e8296","sha256":"b8c4f2f448fa01625930937ecc35a2db4270d626147bd538e68c8a6bf465abec","sha512":"9ffa1975a231e3cb53e549a0dc41617113e10bd7fd44b38d3c85fcd191b91e0db496817ba98a857355a70b0b7021ac3e2c0f2eedbe782fc535f83cada2be6dce","ssdeep":"","tlshash":"1af0d51eb02281bc11ff1c6d8840009c43328fa02281a0c9b23f2e980b38ce7e6a2c2d","first_seen":"2026-05-18T02:10:30.082884Z","last_seen":"2026-05-18T11:40:03.905409Z","times_seen":3,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.salesmartly.com/chat/widget/code/js/vendor1_b8775aab.js","fqdn":"assets.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"54.240.174.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.salesmartly.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 05 Nov 2025 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"21:16:EC:FB:98:9D:64:FD:1E:C8:5C:02:6A:93:88:4B:65:15:09:07","sha256":"26:1B:3A:72:0D:8B:91:C8:40:3E:89:B3:CC:5C:13:07:99:A8:EB:AB:72:A0:AC:58:2B:0F:C1:C8:C7:85:2F:3A"}}},"request":{"raw":"GET /chat/widget/code/js/vendor1_b8775aab.js HTTP/1.1\r\nHost: assets.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nserver: AliyunOSS\r\ndate: Fri, 15 May 2026 07:02:37 GMT\r\nx-oss-server-time: 2\r\ncontent-encoding: gzip\r\nx-oss-request-id: 6A06C50D8E4DB930365D6E02\r\nlast-modified: Wed, 06 May 2026 03:49:02 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15305004930386263030\r\nx-oss-storage-class: Standard\r\ncache-control: public, max-age=15552000\r\ncontent-md5: TdEL+eOlXQT7AtB2+NiI/Q==\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: 33wTCRtidT1DhBL3Oy1kHpRNvdkaPaMmlQ25jg6ygzmxKv6i6ddKmA==\r\nage: 275679\r\nvary: Accept-Encoding,Origin, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":225000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49155)","md5":"4dd10bf9e3a55d04fb02d076f8d888fd","sha1":"73fe2ade639561e0fbee753a10ab3a8f64457ba6","sha256":"9b5cc937de300ae7ed821b3c25405086cd9fc0c25be5f6afc2213b06d1981408","sha512":"768877b7f6860408251dfc60ac57ed4499ac9ff259f506f98020a848b1f8dd67378758074406603c95d98bfa621d4d451d9a941f9932c2bc9ecfe1eb9e69f9ba","ssdeep":"3072:hUj1XOH0ipFe9OY0ceCK7KtWO77yzk83UzlgE6CjnWO:2kHbDCK7gf7n85NO","tlshash":"b22408c8b295b06143a770b4407f550bf13ab915680ec5a4f226e8da7cbc98e907bf7d","first_seen":"2025-05-10T22:57:10.916725Z","last_seen":"2026-05-18T14:03:24.083956Z","times_seen":2271,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/upload/files/6a05e2041b15.mp4","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /upload/files/6a05e2041b15.mp4 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=37584896-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 81167\r\nserver: cloudflare\r\nlast-modified: Thu, 14 May 2026 14:53:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6a05e204-23ebd0f\"\r\nstrict-transport-security: max-age=31536000\r\nage: 0\r\ncontent-range: bytes 37584896-37666062/37666063\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNK%2BqwaRs4dTAKLkmWKEFsuxyGRQyxLp6ruD1iP4EycsjK4up5lLN5GlvIOZY8uUAifWoCAuQGmmzxwjY%2Fsyem5o7OT%2BtUmVxBUox%2FUfpASSd4tZ%2FuH8G9GlqUSZ2u%2BtTsx1O4fgV2epXybI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91b25c46b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81167,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"7fe366da6c4a39a9572ad844a402aabc","sha1":"00fd6e272308c7becb79198b8149801df76ea97f","sha256":"13f16c9fea54e03fb16ddf970a83810fa4c5e5e71f00349a81e1ff3a51ebab5f","sha512":"2abc60933fd124c602c877b58cc6674911cd19f64903434576715f71fe2fa6222e4ed833033abd010b88e7f2c7dce326913f932353c90f142bec41224e5c174f","ssdeep":"1536:Du3GEae5wQkL6vRV9PfJhmALVAKrCNcuZbu:VE5wZLoPSQVAOqQ","tlshash":"48836b06bba09723ca60177998f303413330d6f96b474bdf9a0a675d2dcb7d42e4a5e8","first_seen":"2026-05-18T02:10:30.398995Z","last_seen":"2026-05-18T11:40:03.926528Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"msg.salesmartly.com/chat/chat-auto/user/trigger?login_token=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026chat_user_id=f2e4be7edcedecbf80a3fc15a7bb27f3\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238510\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582","fqdn":"msg.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:18.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msg.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 03:56:18 GMT","end":"Fri, 19 Jun 2026 04:56:14 GMT"},"fingerprint":{"sha1":"3D:A2:6B:19:97:82:23:11:10:B1:04:28:BC:92:55:73:D4:24:D7:6B","sha256":"FD:D5:E1:0F:63:14:4C:3D:C6:7A:C3:2C:AB:8E:7D:73:CA:F4:E3:D8:7B:E6:08:8D:E9:3C:FD:57:04:B0:51:A6"}}},"request":{"raw":"POST /chat/chat-auto/user/trigger?login_token=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026chat_user_id=f2e4be7edcedecbf80a3fc15a7bb27f3\u0026plugin_sign=6a09294cfad91aadb48bdfcbed47b1f4\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104238510\u0026_lt=760ac3df9e41dbb0bd2d3ddefdb4013f\u0026_u=d7f219a429a55541304190ceb82548ce\u0026_xma_=51582 HTTP/1.1\r\nHost: msg.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 13\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: ss_uid=d7f219a429a55541304190ceb82548ce\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"is_new_user=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:18 GMT\r\ncontent-type: application/json\r\ncf-ray: 9fda91b3981d0883-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\nserver: cloudflare\r\nvary: accept-encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: DNT, Keep-Alive, User-Agent, Cache-Control, Content-Type, Authorization, Origin, Cpl, Client-Type, X-Requested-With, Accept, External-Sign\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nx-request-id: 50cf51d3-2a6a-4d28-8c31-8b66f52ee3b9\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6b210154a96c28a41ffbe341a228c02a","sha1":"2e5751bde9f2323a79989d165f22ba111624ab76","sha256":"57109c9877bb6690c6284c7b2b98088071ee4762449b6b5659dd908bf9d703e3","sha512":"16fc9ff07ff4e167be6b24dad448fe7479cb1e5b50d5e7f251c84852e4c67d8caff68a1eae5be69b8f4561d97bc6d41be026597033718181025b3a97c7e292fe","ssdeep":"","tlshash":"89800023282c2c830e0238cc880e8b8820e820808e200330cc8ca228cb080a8ba82830","first_seen":"2023-06-30T01:11:08Z","last_seen":"2026-05-18T14:03:24.082Z","times_seen":1770,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":122,"dns":86,"connect":1,"send":0,"wait":250,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 20:59:53 GMT\r\nexpires: Sun, 16 May 2027 20:59:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 139042\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-05-18T15:00:53.733428Z","times_seen":16839,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":90,"dns":1,"connect":7,"send":0,"wait":9,"receive":8,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/TSm2GGrVCaUCfy0gy9.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/TSm2GGrVCaUCfy0gy9.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-68e\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ocD94kqXO7FUNcAJq54n%2F39swyhPBeQ%2F6v30Rs456MIlK9wOidLpLMbes039J9BjQeQIl3kKsRp0FMSSrdhQwqw1EzbiyV3U9w%2FCN2sQm1TOaVHy%2BmemJbDG6i7VNRlzmC9gP4n4tg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5a98eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1678,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1677)","md5":"56258283f0548eba629f56af0b8db2c2","sha1":"e21aa8eb53d2b3b936b129d8c9c37546a43edec3","sha256":"7de73bd902874fa7c3cd281b2cf4b75af2b2b9cfab1d6b19d533ca1019158f43","sha512":"5efe95c375f5211ff5ddd6961c643903e983fbd132f5ca8e6eaa6b0a16e73d46550caf4b4cfb5376f1822b00c9473aa70aea60c9465428d8620e0e35fe85ab26","ssdeep":"","tlshash":"2131729db41acfb8a0b74d39650bc05590184b8ef325c605b0e84b1223d6c39a22ab6c","first_seen":"2026-05-18T02:10:30.446465Z","last_seen":"2026-05-18T11:40:03.901079Z","times_seen":3,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/srdhE69cK9Cbl7ItnL.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/srdhE69cK9Cbl7ItnL.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-3f02\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jkcs7iJUM5m0TaTqJB5ZBV%2FGLW5kssXF%2FJUGZzm1NCza4RugEtGAzVlOqqWihngSq5DRy7NNzYm6Us%2BksqGXT8b25HX5seBuboKDPhcbXmIxNq2kvDCNxKKhME40Y9ov1g2ZO2o37zA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5da40b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16130,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10486)","md5":"fbd798459ed7a3a9d02884a2a4913073","sha1":"5c3cb1e62985cc5496a76972e5bcd19065ff7440","sha256":"79da6e681c046f8e70d1fee62bf8c552b67fcbb0b7463aff451eb3415bba5bfa","sha512":"f12c32d0edba48b592b18a71da05e7f6855d8026365c86738cab96cde8b2b5c46973cd09d20205376c218bf47e790bb49a0ffc5631fc94db6397e49f9a99cac3","ssdeep":"384:frCZBxKf+Vr2DjM+shRt1A1+pX6X7OYbXTxdbzzE/ZcyKE1rCRY08fBH5/8YC9:TYBxKf+VSjM+shRt1A1+pX8OYbjx5zQs","tlshash":"b87208d63940b036c77799c6c09505a1a32967c8f219c6d6f06e2c1a361a8b8f1fef1e","first_seen":"2026-05-18T02:10:30.387549Z","last_seen":"2026-05-18T11:40:03.895139Z","times_seen":3,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/BXTVg7sIOh_RSji4JW.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/BXTVg7sIOh_RSji4JW.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/W01xtORBILDmluDlmE.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66Rxkkk42pouUIrllJD%2FyVj7IvpCSTEU1zP%2BNDhilTlVI79TTCDfgEiGdPM4J1G2BFMiUitRR24c5i9hBaOXa780xW3KUpidJO1hBfd9syRGLLvytWogpwb7m9pFmTyfzFAclFLQSgQ%3D\"}]}\r\netag: W/\"6a00587e-1f7\"\r\ncontent-encoding: br\r\ncf-ray: 9fda91a7fb11b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":503,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (502)","md5":"f61ba7ad24fedb963b9dda49352bccd7","sha1":"8939f697969578208ad3ad724a4474ee00f66f38","sha256":"0aaca7e06aa3fb9ff21ad1f1e74fdd9c2ef261fbb0304ec28478a2c26fc8cb2f","sha512":"110a307067041182af927c1a689a9332bc43832c8825b3a89be24da1299e394aad224a23b79c74c9336aee09909f889746d7a68e2f914e5fd1494ad449866b51","ssdeep":"","tlshash":"d2f0c9b980c8cc30022fea8882286591432c8ab4c22141c4ec4aaa19f39a86ac62cf14","first_seen":"2026-05-18T02:10:29.992867Z","last_seen":"2026-05-18T11:40:03.898182Z","times_seen":3,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/PIlC4FXPXMBSS1y-Gj.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/PIlC4FXPXMBSS1y-Gj.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 4225\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-1081\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=URP2OF4RGpXqm0xH007MdXUeD34eev6DnywGUQObP5q2b%2BgMTLg0Y4eyJrHx%2BfpQGjLRYYxXHxGsp3%2Flib07MCRKjVNGe%2FQi6%2B4N5uoukXZ4UX6BNFnvwLIlkW7eGOSXberWWzs75T8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a94812b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4225,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit colormap, non-interlaced","md5":"eabba4530d0dc0576292d905d7459737","sha1":"fd4be4c2770f9e14027724fa5a91c31131c0d8e6","sha256":"c935aade5e5907f533b5c9cbd6e2063827110557de8a46c89a37eb61eaf44c5c","sha512":"4ca73949f4eb2161faba7406a23181db47330587e05de365a5e10cd78cda548e4c39ab594ccac661919106dae1bfed1e7e4ca606c4e0f3b273aaa91c3bbd1962","ssdeep":"96:j1ZRhdlbxB+1+OaYSa+ZZmCCi+eFhnCbZ04+hlUP+r9nqi5D/J9FnT:pPhdXODSa+qreFot0nPU69F/TZT","tlshash":"3e915dfcf90ea57b5e4d164ea05180c8fc1d89c440256ddd5a3c3d49ee0b95b8f442ba","first_seen":"2025-08-06T14:56:29.765842Z","last_seen":"2026-05-18T11:40:03.945048Z","times_seen":5,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/news?rts=1779104237002","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /api/news?rts=1779104237002 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nst-lang: en\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vM9NOVkB24Os%2FyWT954S9uWoWcT7O56IZE6nc%2FC1ZiBITbYeXkHArmfin80D9v%2FzwjpKiylAgyUyHjzEWwQPVqsjcBixyBDPUtyn1i4HHgVwgTTk0brFsfNz2yvSEU7KK1iOv9zEiJWSYQIr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9fda91abd97bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text, with no line terminators","md5":"e85215c79bcafa2afef29498ed7e453d","sha1":"088a0a3622e57123446249b8d5907c4e5c456f81","sha256":"58d8f225a785e775f7330580eb24ef2ef9d015b4b971e37117a793ee977d2ba8","sha512":"bb37a5e238b38269ae286f1bfaacbf9724bffca00a5c099ee15580b1d5de26e4e4da76ae8c0c7958027de7b45b49f1a47265f37b87155426de653f55e282dbd3","ssdeep":"","tlshash":"87b01250b0648ca191d480d0c0a5049154d000fc84195c404ed804c146449f74078bd1","first_seen":"2026-05-18T11:37:55.436345Z","last_seen":"2026-05-18T11:37:55.436345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sc-static.net/scevent.min.js","fqdn":"sc-static.net","domain":"sc-static.net","tld":"net"},"ip":{"addr":"3.163.248.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:15.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sc-static.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 22 Oct 2025 00:00:00 GMT","end":"Fri, 20 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"1D:63:7D:63:F2:DF:8F:C5:65:EF:16:8E:06:3E:E4:66:D9:41:67:CD","sha256":"91:A8:D7:CD:20:36:14:EC:9A:D5:10:BC:DD:44:F1:9D:26:20:78:F8:92:93:7B:37:6A:F8:E9:7B:FC:7E:72:66"}}},"request":{"raw":"GET /scevent.min.js HTTP/1.1\r\nHost: sc-static.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript;charset=utf-8\r\ncontent-length: 24909\r\nserver: CloudFront\r\ndate: Mon, 18 May 2026 11:37:15 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\ncache-control: private, s-maxage=0, max-age=600\r\nset-cookie: X-AB=9f64bba91d1b4d27aefc45e8773e7f5a;max-age=86400;expires=Tue, 19 May 2026 11:37:15 GMT;Path=/scevent.min.js;Secure;SameSite=None\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 d5fd4f36a8dc316ac9f65d9c9b60260e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: rSrbhDSiOogoDUoMRIyot4dTPIaK7xqoomvXYsA3qao5fWq8s70Rdw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":59263,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (59236)","md5":"8f6487b2abdd19da7d2000e6948f4f1c","sha1":"b979b115c298e978f27467edb31ab1b318aed3a5","sha256":"23564c65f40d1f2ab2dcd8eda148222b38bc88958330ed728181f713a56a3ff2","sha512":"6c2d9837a4fc8300b16bebcba72c85ce0d21b7c1724ba5d87d809a1c463594354421f5fb935823c209e177d449741ac9cff38f1c271aa9375a42326356df115c","ssdeep":"1536:kb3gziinUta4oiLsXb2U/LuG0ch4Hl/HDTkzNZkVXK9:o3l9P+Lj4TY","tlshash":"6543d58cf7d9b02103973472487f541be33bba646c4bc650c526e5887dbc59aa237eac","first_seen":"2026-04-23T18:32:43.944826Z","last_seen":"2026-05-18T15:26:51.772548Z","times_seen":3427,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":27,"dns":22,"connect":1,"send":0,"wait":42,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/WmNyACIFLODvnxteSo.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/WmNyACIFLODvnxteSo.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/js/hcIUCWyqrTDboi46lu.js\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-6a56\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x3iqxr6FgZXo8uwsdrvlT%2BVv9ql%2BrCINohG3hH6wDOwm21aDi4LU0wjRd3PUq1Q%2BOtsQoAlWW9fVV7%2BqLoX99cOdtUGtyJw%2Fg77JwSqxZwS%2Fc4gC3%2FS8Hkxe5S%2FwearIGNBVw%2FgdKgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a6eeaeb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27222,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (27221)","md5":"15fba35eba0de59667e4fbb51aa21cae","sha1":"c562b09030aa852e8cd72aa168d1171f8c9ee45d","sha256":"1cdcf780b293ed96f9dfeee6570aa1ec773f456f456ba05168be22564587a41c","sha512":"fff09f49a40bc09953693080f06299dccc95b64f8b293441c1f90daf722e4be2c11124f5e4d841715aeeba7dca946d524fb3552b7f2083c27d22a1daf572f1c7","ssdeep":"768:f0pNmWmFp351iBFmbI5eUttHvLKDgeR0o:fM7mdoNW2o","tlshash":"23c2ea7060508328f994b0751d84a8466d880be9da979de3f1fecd87e3c25b7ada43dc","first_seen":"2026-05-18T02:10:30.118305Z","last_seen":"2026-05-18T11:40:03.916099Z","times_seen":3,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/311.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/311.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 871\r\nlast-modified: Mon, 07 Dec 2020 19:40:21 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 03:38:11 GMT\r\netag: \"fabe5ccf144cf71567206f8bd2fb6b10\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: oAIe1ABLd05EF2gUbZ7xIIf49Z0aZJK5fWnwF07MOmnBnnrIFRmxtQ==\r\nage: 29106\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"fabe5ccf144cf71567206f8bd2fb6b10","sha1":"5954bf2fbf8dfdfe34a26bd5d34427d7489f5ef2","sha256":"d9b93f8dd7d88f101e9e1be40cb3032c5f854889caba49d45bcec65666f14a7e","sha512":"50fea5730262e7845033dec7515c78d1854f0a6b8ff77e13a9e15a7eae538bef0c7fbe8315db2868e92159c4ff8f39d447ba5874cbb29ef0730fcdd2ca4877e9","ssdeep":"","tlshash":"601196637878f712a99dc3925c6f6913e83815f442fc081c798a616563caee858e38c1","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-05-18T11:40:03.947945Z","times_seen":96,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":153,"dns":126,"connect":1,"send":0,"wait":5,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.intl-coinbase-inv.com/api/home?rts=1779104237003","fqdn":"api.intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"OPTIONS /api/home?rts=1779104237003 HTTP/1.1\r\nHost: api.intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-lang\r\nReferer: https://intl-coinbase-inv.com/\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: text/html;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-lang\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nDNNSanu7x5Yg9yk58yf2QZ1TlSGpTtWSWXotho6VjnjYqXEK%2FQiCchKoZzrDrlxVPB6cVfWMrvCJDZUfbWwe5rE8YHFd%2F5BYhmdtm0Z7qSPpqgIhU%2FiLYYK9LA7ZrYocm0TKaOShrlMxo4a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91aa4bc0b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-18T14:41:03.659351Z","times_seen":15390274,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"api.intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"api.intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srz.salesmartly.com/client/log/log?plugin_sign=9fa1a67499d9884e194d38a4d94b010b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237411\u0026_lt=\u0026_u=\u0026_xma_=","fqdn":"srz.salesmartly.com","domain":"salesmartly.com","tld":"com"},"ip":{"addr":"104.18.23.242","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srz.salesmartly.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 May 2026 15:19:30 GMT","end":"Wed, 12 Aug 2026 16:19:28 GMT"},"fingerprint":{"sha1":"63:EF:4F:67:AD:CD:95:CB:E8:09:7F:C4:F5:F2:CE:1A:FC:7D:96:20","sha256":"25:6B:45:E3:03:83:AB:E5:28:74:CC:AD:25:1A:0F:61:07:BF:77:5C:3A:22:80:6E:D8:91:5F:33:89:44:B5:02"}}},"request":{"raw":"POST /client/log/log?plugin_sign=9fa1a67499d9884e194d38a4d94b010b\u0026plugin_id=f19cc99\u0026over_time=\u0026env=chat\u0026_=1779104237411\u0026_lt=\u0026_u=\u0026_xma_= HTTP/1.1\r\nHost: srz.salesmartly.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 767\r\nOrigin: https://intl-coinbase-inv.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":767,"data":"log_type=CHAT_MSG\u0026data=0qH8PTXG1nmb1nohMhHQl2VAs5vmyh8htTV8rCyiyQV%2F1Ncb1nmvrN%2BvsVzVfGHWfhypyGcW19X%2FyAKhyh8hrQjWtazErdyiyhypyQrpPStbfQXQyAKhyh8hfQzWPXz40NYVyAK9BdH9rNH51nz%2FyAKhtAO%2FlAv%2FMdk5N5OSI5R8l5v5l5yqlARhBdHpsnmGtnuGrCyiyQX%2FBXX2yh8htNHpyAKh1Tc4fTliBqzEPGcpBnIW1nmhsNIVBnV%2FthmAP94WyqFhBdHasCyiyvaW0QVpP3OWICk8yd%2BN1nmvPSt5yOmDyeO8BA6gyutEPAs4MqYkIAogyTH9MAO5Idk8xCYTrnIZPqFqleO8leO8lCY31NHVrQzkB5O5Idk8ydypyQjWrazvsNc%2ByAEgyQchXQXqf9VWPhyilC8hrN%2BEfScEPQtnrNH51nz%2FyAKhyh8hrNHqPSyhMhHgNdHwrNI5sntVNdyiNdHYy3aat3u41nz%2Fy3z8rNH%2Bt3VWPhYSsNlRsNc4rna8t3Xvy3z%2Fy3ORr3u4snH%2Bf9DRt3%2B%2BtdYv1noRPQz4y3upP3zSy3aat3u41nz%2FfqmfyG4hBdH5t3zqrDm%2BPnX5yAEP0qH%2FsnaVyAKhf9uprNIwsNH4PTVbfuzQl2VAs5vmN9jEfSohBdHZrNVosNcKyAKh1nohbXazbo%3D%3D\u0026base_encode=1"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 11:37:17 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://intl-coinbase-inv.com\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Cpl, Agent-Cpl, Send-Cpl, Client-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9fda91ac9e945696-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"77e652f404f47086bb49598b43b92d9a","sha1":"9b4981aa40e98879d7f2efda3261e0f0c76a0d78","sha256":"052a4866127cab399192f6179141e92ce42742a7c09ccf7a0ffba2f0583869b5","sha512":"70e55dcdfca4754735386a3074c028d1047fce9b9d946cc84c2ea59d57799ffdc8071abc4c62142e2a1c319a948ad71eb696e0892bcaf1ce41f4616026a6bb63","ssdeep":"","tlshash":"bf900433341cc3470d05504f50053715d0f410500f104751ccfc0314430c4d57143410","first_seen":"2023-08-03T19:40:41Z","last_seen":"2026-05-18T14:03:24.066134Z","times_seen":2078,"resource_available":false,"data":null}},"time_used":467,"timings":{"blocked":90,"dns":56,"connect":6,"send":0,"wait":285,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/6636.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/6636.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 1745\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 23 Dec 2025 07:43:14 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 06:30:04 GMT\r\ncache-control: public, max-age=86400\r\netag: \"9354a310aca2467883088a4c17693018\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 18455\r\nx-amz-cf-id: j_qXUtXLsYKEHTPfwsP-DFWg8-xXotfoW6a9gEDuqy7Vz6yun6gnhA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1745,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"9354a310aca2467883088a4c17693018","sha1":"8b68d24379142124633ae339e148c3db3baa73e8","sha256":"66498e82dee76d44bd12f5517f74785af51b6c23c7895fe18684ac914abf33c1","sha512":"597efe5d74e6c66063f06724931aec73e4edb064bc939ed48618af592bd8b602694ad04a1534c816ce8c334d6711affc474f99f45f0338919a7a5413eea29966","ssdeep":"","tlshash":"6f31c5d01452a47bb1030b9196bfc6b14e7024f800ced7bc946a48d273399ba78960a4","first_seen":"2025-12-23T14:18:57.776197Z","last_seen":"2026-05-18T14:02:12.989597Z","times_seen":180,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/js/GHW886Gc84BxKVshey.js","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /js/GHW886Gc84BxKVshey.js HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://intl-coinbase-inv.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:50 GMT\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a00587e-1007\"\r\nexpires: Mon, 18 May 2026 14:09:51 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 34045\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmuqbAKWwdnHu4D4rRDpvvUo32wOzgqMlaQiD%2BaE82NbIRfuePqxMlUqqjO8Oa4B7TbSlMli2TgDcj7aVDAcWY7ppd1s45pzXHilpOA0nJlVRXXq6oGtOEQ1NKJwWaG6BtNWFw4yaiA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a5ea81b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4103,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (4102)","md5":"3682228a7f39161645fe9bcbb8ea529e","sha1":"f9c9d04ff42ed74170cd4c4b099d886e24cfbfb3","sha256":"6d6cb96610f07ac1284e2efdf741816ff68ff80bc99b07bb1bdd74fb54e2cf35","sha512":"56abcd1b706b69ab960a2d82f7afd955269b509791f0daedbc62e2fa2451495bd5f152091db1e667dfac04d8d74a96de9a7ad583b978b598bb01ccbb2e599008","ssdeep":"96:/acdRuMfPzqfcSFuxEV16+4OQfq61Zvzq6fFJt66DoxF6wr:ScdR7Pz4cSICVefhLjmp","tlshash":"0281f18c781789fc88ed4624e81754d0a1cf1bedd02449a1b0fedd1616d6da0cf56bb8","first_seen":"2026-05-18T02:10:30.0697Z","last_seen":"2026-05-18T11:40:03.933233Z","times_seen":3,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"intl-coinbase-inv.com/assets/PHT469aT9YDT0u3z1B.png","fqdn":"intl-coinbase-inv.com","domain":"intl-coinbase-inv.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:16.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"intl-coinbase-inv.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 17 May 2026 05:08:12 GMT","end":"Sat, 15 Aug 2026 05:08:11 GMT"},"fingerprint":{"sha1":"D0:C7:59:EF:5A:4C:C7:19:D6:1D:E7:20:BB:1F:9E:07:26:5A:7E:53","sha256":"42:83:E6:5D:0B:EF:8B:A1:8C:8A:FD:64:FD:5A:13:89:63:BD:FE:89:A1:41:D9:0C:A7:7E:AB:67:DA:B8:53:B6"}}},"request":{"raw":"GET /assets/PHT469aT9YDT0u3z1B.png HTTP/1.1\r\nHost: intl-coinbase-inv.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nCookie: _scid=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL; _scid_r=0VffIO6OX_t_egHFcIYecb9sm6YlrNEL\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 18 May 2026 11:37:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4941\r\nserver: cloudflare\r\nlast-modified: Sun, 10 May 2026 10:05:49 GMT\r\npriority: u=4,i=?0\r\netag: \"6a00587d-134d\"\r\nexpires: Wed, 17 Jun 2026 02:09:52 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 34044\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FHrcIft84YYpCfIx5r4ONgsNdl%2FKYEHdTvEbjwOSGBdiQGhUtXcaNI3mU%2B22vURZrEXUntkdWqh2Qm3AgxDSxFY3QzmESEeAh75f4GGOcURwENabyf1G5JJvso5qYtX1alUgcawLIU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9fda91a92f84b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4941,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit colormap, non-interlaced","md5":"afd77c0938f35ba6e100adac7f08e4a5","sha1":"593356112f3ab1800d2c95a7c2d0322978c96012","sha256":"2517ecb7194579f9ccbb788297ada88da5b09bb8336cc838d8768e20d0560794","sha512":"21092b81e65980eeff0101ddfe0a2e04148b8e71a8571724b4c0606558474359d9a8eba58e7d2b1802b8bceb983dba0a108243c1b2d5f28f490d2dbc8178a43f","ssdeep":"96:4x2jeLklYE2otJu2SCQkuic2vsm5uDwMzirM9sZlyMG3MrZABRz2CaIGkZ:4ueLkmHot7Sr6524SsHyMG8rZoR/Go","tlshash":"d1a19efe5b18557dfdd7c082edae86bc4c28d385f8b9155a053ecc2c501139b8398110","first_seen":"2025-08-06T14:56:29.741026Z","last_seen":"2026-05-18T11:40:03.941522Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-05-18","alert":"Phishing Block","trigger":"intl-coinbase-inv.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"intl-coinbase-inv.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/exchanges/64x64/89.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/exchanges/64x64/89.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 520\r\nlast-modified: Thu, 20 May 2021 15:13:16 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 04:59:03 GMT\r\netag: \"f1d378e8b7235653a310ca27c515fda5\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: bXF0DqmCAwdpbFqS6JP5a-OvmSANNdajA8Yn-GDb5EM8QVyRAnennQ==\r\nage: 24520\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f1d378e8b7235653a310ca27c515fda5","sha1":"3c3454f5a2c30aee34cf78273162487fcad6754f","sha256":"6b7215f7d0890a0db68f595d5e72e955bb7cce88469c760a567acf0668dcb295","sha512":"8362007edbc30d0ba9abd05f0b47c6b55bdf8fafeb183c19ee5644573c0b8d8f0478a132897b7e65cdbe187f5a639ac2560666100b13eea3666ee7b08cc38e2f","ssdeep":"","tlshash":"68f029cf57b8aca6aa1ee839ad202ef43d05af18c00242ea8918c060420042a42b2edc","first_seen":"2024-05-25T12:31:03Z","last_seen":"2026-05-18T11:40:03.9151Z","times_seen":98,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":151,"dns":126,"connect":1,"send":0,"wait":4,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s2.coinmarketcap.com/static/img/coins/64x64/1.png","fqdn":"s2.coinmarketcap.com","domain":"coinmarketcap.com","tld":"com"},"ip":{"addr":"52.84.50.71","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://intl-coinbase-inv.com/","date":"2026-05-18T11:37:17.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinmarketcap.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sun, 04 Jan 2026 00:00:00 GMT","end":"Mon, 01 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:EE:1B:94:2E:9E:3D:5C:B3:4B:8C:9C:32:97:7E:62:1A:36:CB:1D","sha256":"87:58:9A:9B:C4:87:B1:04:29:1A:77:63:C3:BD:4D:A6:C8:2D:D4:51:3A:17:BA:F3:97:B3:E8:A2:9A:46:A0:3A"}}},"request":{"raw":"GET /static/img/coins/64x64/1.png HTTP/1.1\r\nHost: s2.coinmarketcap.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://intl-coinbase-inv.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2691\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Tue, 19 Oct 2021 05:32:33 GMT\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 18 May 2026 02:22:19 GMT\r\ncache-control: max-age=86400\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nvary: Accept-Encoding, Origin\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 b0a74a1c8b6a1560cd851a637b999ff4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nage: 33299\r\nx-amz-cf-id: hqQ6tzZFx0bMtnRa_pkjs7XUzGjl7IR-ka2EdESvblyQzc-gvqWkag==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-05-18T14:05:01.612672Z","times_seen":21469,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}