{"report_id":"22a98bc2-99a5-4d24-9fc4-cb41eb71c8ac","version":6,"status":"done","tags":[],"date":"2026-02-17T16:33:01Z","url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"104.21.13.196","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"title":"TagomiX","dom":{"size":267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"020fc05204970ecf4a9fdeb90e9e73ee","sha1":"003bd7eb96b3d5e6e294ec96a9ed05f94b55c65a","sha256":"7b1596bf2c45f9e1c212bf8e300fd760661bd9f2244b2aa47389f0db1e6a28d4","sha512":"731ff2e865d1cd9f83b292721637144aad12f84a93497f8d852aed7ec5eeafcf57dd0e7648b9ab1b9c3d4eb0df12ff26ed4c483460c6debb047a0ca3bac621f3","ssdeep":"","tlshash":"45d02b6fcc22804e4d0116e48992b50c894ff10f6a18ce4ca8f12478e11969e14a164c","dom_hash":"domhashe9551ca6980fee53ee15afe26c1cd5b2","first_seen":"2025-11-28T19:45:51.505999Z","last_seen":"2026-03-04T14:51:39.037512Z","times_seen":338,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"104.21.13.196","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-24T16:33:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":14,"urlquery":0,"analyzer":9}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48842,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.013859+0000\",\"flow_id\":2019835477836401,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48842,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-02-17T16:32:41.475761+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48830,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.046164+0000\",\"flow_id\":1831295003464461,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48830,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-02-17T16:32:41.463629+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48856,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.056032+0000\",\"flow_id\":1566566104258502,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48856,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":904,\"bytes_toclient\":3148,\"start\":\"2026-02-17T16:32:41.481222+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48862,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.065410+0000\",\"flow_id\":2161178556586810,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48862,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-17T16:32:41.482106+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48852,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.076096+0000\",\"flow_id\":733793420396867,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48852,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":904,\"bytes_toclient\":1634,\"start\":\"2026-02-17T16:32:41.477507+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48868,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.076966+0000\",\"flow_id\":2013062314420832,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48868,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":753,\"bytes_toclient\":1634,\"start\":\"2026-02-17T16:32:41.485984+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48882,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.257340+0000\",\"flow_id\":1687258980227168,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48882,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-17T16:32:41.727136+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48898,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.262871+0000\",\"flow_id\":1165128395988466,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48898,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-02-17T16:32:41.728562+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48912,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.270573+0000\",\"flow_id\":2160199304032315,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48912,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-17T16:32:41.733243+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48916,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.282673+0000\",\"flow_id\":2241503034949731,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48916,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":904,\"bytes_toclient\":3148,\"start\":\"2026-02-17T16:32:41.737379+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48880,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.298861+0000\",\"flow_id\":1388763048176410,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48880,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":904,\"bytes_toclient\":6037,\"start\":\"2026-02-17T16:32:41.715546+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"ip_src":{"addr":"Client IP","port":48906,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.320533+0000\",\"flow_id\":2036143468653320,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":48906,\"dest_ip\":\"47.79.64.212\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"echo-ress.oss-cn-hongkong.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":753,\"bytes_toclient\":6037,\"start\":\"2026-02-17T16:32:41.731912+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:42Z","timestamp":1771345962,"ip_dst":{"addr":"39.103.20.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":56246,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:42.767276+0000\",\"flow_id\":661672329627672,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":56246,\"dest_ip\":\"39.103.20.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"mifengcha.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":753,\"bytes_toclient\":4662,\"start\":\"2026-02-17T16:32:42.215064+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-17T16:32:43Z","timestamp":1771345963,"ip_dst":{"addr":"39.103.20.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"ip_src":{"addr":"Client IP","port":56254,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)","source":"{\"timestamp\":\"2026-02-17T16:32:43.973908+0000\",\"flow_id\":339944919408853,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":56254,\"dest_ip\":\"39.103.20.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2052581,\"rev\":1,\"signature\":\"ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_05_14\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"TA_Abused_Service\"],\"updated_at\":[\"2024_05_14\"]}},\"tls\":{\"sni\":\"mifengcha.oss-cn-beijing.aliyuncs.com\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"5d79edf64e03689ff559a54e9d9487bc\",\"string\":\"771,49199,65281-0-11-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":977,\"bytes_toclient\":3148,\"start\":\"2026-02-17T16:32:42.467157+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"mifengcha.oss-cn-beijing.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.coinbaseaai.com","ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-22","domain_rank":0,"first_seen":"2025-09-28T17:49:45.664023Z","last_seen":"2025-10-23T10:03:32.55299Z","alert_count":148,"request_count":37,"received_data":3827796,"sent_data":15590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.meiqia.com","ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"domain_registered":"2009-01-27","domain_rank":1675070,"first_seen":"2016-07-23T03:30:52Z","last_seen":"2026-02-14T05:06:56.59082Z","alert_count":0,"request_count":4,"received_data":1434667,"sent_data":1756,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"api.coinbaseaai.com","ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-22","domain_rank":0,"first_seen":"2025-09-28T17:49:42.389574Z","last_seen":"2025-11-01T01:45:57.538346Z","alert_count":52,"request_count":13,"received_data":64810,"sent_data":6778,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"edge-api.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1537350,"first_seen":"2022-05-13T18:55:42Z","last_seen":"2026-02-14T13:59:54.272316Z","alert_count":0,"request_count":2,"received_data":2054,"sent_data":1055,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2025-09-28T17:49:42.386226Z","last_seen":"2025-11-01T01:45:57.634138Z","alert_count":0,"request_count":39,"received_data":1283229,"sent_data":17880,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"new-api.meiqia.com","ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":987273,"first_seen":"2018-07-31T06:41:30Z","last_seen":"2026-02-14T13:59:54.322734Z","alert_count":0,"request_count":3,"received_data":7149,"sent_data":1812,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"camorope-client-a.meiqia.com","ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"domain_registered":"2009-01-27","domain_rank":1631624,"first_seen":"2018-09-20T04:36:38Z","last_seen":"2026-02-15T07:22:31.211067Z","alert_count":0,"request_count":2,"received_data":1003,"sent_data":1341,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"mifengcha.oss-cn-beijing.aliyuncs.com","ip":{"addr":"39.103.20.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"domain_registered":"2012-04-01","domain_rank":0,"first_seen":"2019-04-29T11:41:12Z","last_seen":"2026-02-03T20:06:28.455657Z","alert_count":1,"request_count":1,"received_data":227,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-2aa50484.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6173bb6763a985d82813ff49643689fc","sha1":"dbe0bcd063e8b76c3c19eaff3961d41dea27dd7b","sha256":"62aa31be9ae0d6ab81fd7a7c12b9681d1c162288b6e03f8eb405fd931627cc96","sha512":"bbd53aa4c45c8c1ffe58eec0787c59eec49a3ed021accf2325e0ac1af0509acece14c0274d9cedc947387762fea8cd930b29ff3d5e9ce36b9badf616a29767ff","ssdeep":"768:YrTf36Blm/gyN9KA/zeZv/DHY6Q9U3nQqkGP2u5hmm2ESW5RIAu4vMFSvFeir21l:grnqZgU3ntrICTIAuLIrPNgTuHYYBHe","tlshash":"26a35c8ea6071fbf5cbd0c94a95a4a1031680fd3598dccc3b3ba6e4527fac98634971c","size":103905,"data":"","first_seen":"2026-02-17T16:19:44.563504Z","last_seen":"2026-02-21T23:49:59.757651Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-8445ff7b.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b528f57f89b231a94107c60bd2caff8","sha1":"f065986a8fe41add70b0d10c1616e3071d3af493","sha256":"1dc5e1b3461961dbd580365f3f01f1567589881aca3fe4755f14a4533848bd88","sha512":"5aee297074bcb8b620ef33f620675ad6a127e93954523b8a4ccc571a6514ce27a52f361ec8a49cce8f5416b73d1f0dd494b5916ebc179ebcbdf7f235f01af0da","ssdeep":"192:VplZsjw+3OeJTApFPpFw3OenN7ZICSfYx8w9uouXRfZU4jpPQ2wimoX5vizw2s:LlZsc+ZApVMJ7ZIvQb9uoaRfZU4jOimW","tlshash":"a122849bf902ca3de9b7f45444980460966e3fcb2009c971b9bd5d1927a7ef4f398324","size":10163,"data":"","first_seen":"2026-02-17T16:19:44.570345Z","last_seen":"2026-02-21T23:49:59.723269Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4e64225a20489a5be3c5e88100dd38e","sha1":"0a3284b39f08e6010240e0919bd969b481be66e8","sha256":"8156e064a7d0999960d1dd3f8a6c5c0dc97d0ea589a93642d8d679346eabecdb","sha512":"a228b02bfc2c2434fd215e4f63c6969ff9dc5db2c78bfc6c44efab63651798790b82154f55db7274c0652ac85ad1f1654cbd36ecbb1099b31d04407b621c8ed3","ssdeep":"12288:7Zw4XSrkavBcfHGFIteWlAltGkiK4Vs/lOZy:1/XSAFHGFIteL7riLVs/d","tlshash":"3f4528cd71c2b0a207e361b1403f100bb33a6d69680d9464f665d8e9bdb998e9237f7d","size":1209102,"data":"","first_seen":"2025-11-28T12:22:00.201964Z","last_seen":"2026-03-06T01:26:04.938245Z","times_seen":532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d56a6f95225da745aa3ee01498a84a3c","sha1":"af321e8cdaa4310b553abfa3ebaf6964e2cc6fd4","sha256":"830d9b3ff2210fbecbe3669e02a8fd0cccb3d8daec9a87120330cffc8e682154","sha512":"cc38ad0372857c329523ad8e80bd266594c262bcea04fcf78f9662c7bf41f574f880b3a30c45e160bed3871c532629959a5e96304e5ad9bdcd9207bdb537791c","ssdeep":"","tlshash":"2211abfe291a602d6307404e976b7811a42250a9000a185177cc9e9dbb9afbdd0cfb8c","size":1048,"data":"","first_seen":"2026-02-17T16:19:44.598691Z","last_seen":"2026-02-21T23:49:59.807603Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-00b0640a.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1b19e4d300e56ea8d612bc74aeb04696","sha1":"c9f95408f8d2f217e24fb3057df339e68e03b44e","sha256":"b432f6523231cbec3adff57625700d6067a2b44aef3faa22b435bc7200a4540d","sha512":"796342c33deee5f122abc90368574ae5b4fa6788e1b0994c25a47603be8bb419af8cb287a8af2f028ee00126ce57e3d8968a9e0ca0e17a18f81fbd8ee6aaf8a9","ssdeep":"","tlshash":"74f0c92f693691b60ba388f8e123181066180f467724c5e8e58b0e00cb348ead25ea2c","size":515,"data":"","first_seen":"2026-02-17T16:19:44.564458Z","last_seen":"2026-02-21T23:49:59.775232Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-07-30T21:34:04.992233Z","times_seen":1695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/en-15b6c9e3.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"56b10d560eb9aa569acadb4fdd59e8cc","sha1":"a6c02e07090aaeb0f9aa2e900b024876e333b5fb","sha256":"417bbbe4aa57bb82c2cb40becbc3d2a8956a1828802d8c22c63c5cfb834ad594","sha512":"7394662b17cb77d40e748e3e2e6f5df3054a1ce8f10f36e446a6055735f3a9474a4b970641cc748ce4cd3818072adab68ffbc6ac45b94fd62033e77d4f4326da","ssdeep":"768:KGtZcEw/qzrKOyCFsifnATChrAaAMFVoP6+MsPG9w1mwO6fpk7aOlomvS:upq/KOygbdhrdFVlsPWwqlosS","tlshash":"2b23f88a7e0a89aa04f3133674ce6e5011f60ac18255881f4fedc5fd53d2b67a367b74","size":45935,"data":"","first_seen":"2025-09-28T17:49:51.735925Z","last_seen":"2026-03-31T15:18:02.917446Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c464eee61a30b35747e8e9848e60be3e","sha1":"3b58c9c7de2dd7f0322fd7bb9947ad3a01ac8cce","sha256":"955a99d585122831f4cabbe60b7755379393349c40795ff761e7ce78b3e491d7","sha512":"d548dacba908d5bd228c19df9e45083444741e1151dc914e356f01fd7fcb666a7077df8a57af5bc72e249160aa32ce3e40c77f22dc01fb2af95a6c3d19be3e4f","ssdeep":"","tlshash":"d3e0abeb3139c16456f09f2b6cec4c1bf69b27334d8c050bf8b4a9051ebad64227c894","size":420,"data":"","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.78001Z","times_seen":504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"2e72c4e9314f8cc9ef18e3c88455c791","sha1":"409b2f25b2ba9c699f9cc404bf117667078ea901","sha256":"309240b48860c2711c63de1a35ecdd983c9c2a3102140ace5220bf618d40df19","sha512":"e59ad3fde91fe65085cfc53fca68159d762a08fab10d16ed24c5db07674d725be9170028dc39875e1b4699c6ed648b6472fb9c8261641288bba9f272e1062e23","ssdeep":"","tlshash":"70c08cc5b0c22e202a12641110af29e49024402774886b02cc94d8482e220f08237e98","size":144,"data":"","first_seen":"2025-03-20T07:57:02.717764Z","last_seen":"2026-06-27T06:15:56.30389Z","times_seen":135,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-04T03:35:43.779248Z","times_seen":7147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-07-30T21:34:04.97172Z","times_seen":1805,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e47469cc6580267e647b8b52270730d","sha1":"b31ca9438cba1abc107a318f11bf4c7c8781552d","sha256":"614a7f1e4eea436524958e89dac4c23a5691dc3120fbe341032c49ec1f02dc75","sha512":"d19fff3dff65fc719f4e70dc20bcd0c6dedc3f62b172ca896270b375e189a034abe2c15bca392e54459b4c32e807aedfcf1b0c089d202a178e8b4024065d6511","ssdeep":"","tlshash":"1301815a54aa157411e770e51bcf8c2c3180310b9a18cb7bbf1d5546ef66a580f52f4d","size":707,"data":"","first_seen":"2025-09-28T17:49:51.742222Z","last_seen":"2026-02-21T23:49:59.809072Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/currencyItem-82666181.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"1fc8ec087b0259451c38d85f281dd296","sha1":"46698c27d120302042678727b5e7b32c7cbc8670","sha256":"0ab369d61b3af3ba913bd6e9a099a9a33d35d76ffeb7858159a73ed6e8751821","sha512":"e1065a26e9c5109b179d05ce9ba82b815ea1ae4b55f58cec5f54ce712a2a0d38cfe6eb92e7544e39fc3d3f1774a5b2832dacd66101073f21550ac4c98ad262a1","ssdeep":"","tlshash":"c121f19a9e01cbb1c6be5562807c0424121d7fca701185c5faed159837865bcd728a31","size":1211,"data":"","first_seen":"2026-02-17T16:19:44.541375Z","last_seen":"2026-02-21T23:49:59.769845Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"9d379fc52463f2b630c6894900da5180","sha1":"b33fecceae6c1ef97518c6ad7159534d78e7b2f7","sha256":"6c3288c6af4396096b1a8a927fbfaf05ac8cc29658fc97d13cf036ba6bb38ab3","sha512":"49b43b0c253e26c135bd5009d73c537cf2e78342ef6b116ce6efbd3627152ac804449ec5cbe637a544b5557b52a50213a19dfcf33158a4f6b0a8ff91d79372d5","ssdeep":"","tlshash":"61c012c5a0da29102951595424bf28e8a024c026b55c6b169de4dda829e64fcc627d98","size":190,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-28T19:32:04.784298Z","times_seen":1389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c05f18bff9a60568a9965a0c2ae55143","sha1":"4c8a2d19543ea53953c46ea3d28112faf8a8d17e","sha256":"80334248cafa08aae64eb8ba0a5763174f84cc00fb793abb26dbbf33e4185703","sha512":"fe6bafbd13b017839316f67d0cd2e471f32f92d79dddcab555a10129e302e806d40d2e7b0cefbc9e60bbe6e28a4b7289701186be0b651a9fec3bdf3d22b271e0","ssdeep":"","tlshash":"e8b012ccd09a81e104a30dc007d3a40013366303d7d6c19a772f9af75f1378d4904155","size":120,"data":"","first_seen":"2025-09-28T17:49:51.744184Z","last_seen":"2026-02-21T23:49:59.813389Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-07-30T19:44:59.582021Z","times_seen":1652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a9f0cc9bf0d20d059efb11ee21104845","sha1":"53dbb945e48d29466807d93036584b8f80131e28","sha256":"25ea7f517bce714d7755d616ec88a5e3a8f243e0d972f68e8931bf6512736f91","sha512":"b937158d8f045d9c8fff37d1f01a368771624b43a0696eeb222501070e807789a204ffa5713a089464529a0088666a47ed5b83fa7f09cb0ec0ace33923ed3d61","ssdeep":"","tlshash":"e3c08cc4a0c23d001622642010af28e49034402670481b029c94d8582e220b08233e98","size":136,"data":"","first_seen":"2025-09-28T17:49:51.738882Z","last_seen":"2026-06-11T20:20:57.811784Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/charting_library/charting_library.min.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","size":10859,"data":"","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/dist/meiqia.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cabe3635bcf0a2db33b4e924a83f84f","sha1":"dc1188b1f0cf9a08095984897454427da574bb6e","sha256":"13e0593db078d5f1f99544cd9aafbdb1d1eeb8777677b3d001bb1cf66819ac4d","sha512":"3941a8a8b3c277aa60a8b5931e6c3a85d38263a1351ef42e9083266c429f1e3f0f25b08dd8a85d8c2e60dbb48360ea01f419d6cde101a470b11ab658c5302385","ssdeep":"192:K04adJyHIJgekJElGZQz6cFDZsWBn25HrlT6NKSn2QcWByxGmsHZQzq7vE4o7oKq:oHik+BbF904Nua2Nqw4KoKNNlYWC","tlshash":"c9723fcdb5c2b0804ba36160422fa81bf2775aa5745f98c0a365d1f8ac7994f80b7f2d","size":16342,"data":"","first_seen":"2023-04-07T01:00:08Z","last_seen":"2026-06-02T03:15:54.772888Z","times_seen":1991,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-08-04T08:21:36.834354Z","times_seen":41052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/InfoPopup-63454fe6.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"389c9273f319e081da735eeca883f369","sha1":"2e6d09fc238d90a09f37c2d6141c315c865d2b15","sha256":"e31c198c6afdd403c358bf1d9b3da84b69754abf20daf92e229e6e2af346d93a","sha512":"d0dc17982f94078d8c6ffeff3fa8463378f74480474a5d7e77ce2c6fd4d18c286b667414a131e2350a21d883b086384b2545a542b4807f8beadc2e12cba62f64","ssdeep":"","tlshash":"a8210f2ea806d3fac0ba05305109250071093f5ef6201b959aec6e1257a6db8ab4df38","size":1249,"data":"","first_seen":"2026-02-17T16:19:44.578657Z","last_seen":"2026-02-21T23:49:59.727014Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-03T01:15:54.800562Z","times_seen":4424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"99e70a14f18096668b807f04dc8039be","sha1":"08d607b5f3d64f884747bf38fce3b6a49113ae0e","sha256":"7cc3aff3d3e7feaf571d959a20d8487033975d04b0c1282d8f1303454a69d986","sha512":"2bfa99efe38ac3afb622a39c81869c6f56c7088d3a38173fb25ff22fc148c64d5bcd8022578269b8feec71450fae86dcd5f00ccd9852cda109a6914c46fcb6b5","ssdeep":"","tlshash":"15c08cc4a0c23d006612641010af24e4a024402670481b028c94d9482e220b08233e98","size":135,"data":"","first_seen":"2023-10-26T18:42:49Z","last_seen":"2026-07-28T19:31:07.699305Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"8b158a66e0d5494d12427a07580a93d9","sha1":"122de6d603f4913a0ec4f68c70e5db0d3ba5789a","sha256":"9175843f40abe2ea080dc915ac5c35fa0a63d8f67b9e4278a7d4e07167cba846","sha512":"123471f7f2d538821957b6f01069259690406af8ace595a51c76746e844f98d24941a7eac5fe847a52b1725c9d40eb45eeca0c6868c65478fd547bc17f8eb247","ssdeep":"","tlshash":"b3c08cc4f0c62d001602642010af24e49034402ab0481b028c98d8482e224b08233e98","size":139,"data":"","first_seen":"2024-12-01T04:51:15.126508Z","last_seen":"2026-07-27T05:12:15.170184Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c2e77ac855b01d675bbac751f68497ae","sha1":"9dd4817a3ffaf3d507e6a84c284fd0085bf64656","sha256":"be1e301a1fbfaf38fe373c917e9819b86069b67eac8967259f370d68403d9265","sha512":"4b1c76c74e7b32f8d10baed4dad63a497a16d2dd4bd146f337937cdf986cb8c978d8697c6ca13b03e25ba4c25339cafc2af7007743987cb77eae5d43358146a1","ssdeep":"","tlshash":"1cc08cc4a0c27d109622641a24bf24e89038402670485b529d98e84a3e660b08233eac","size":147,"data":"","first_seen":"2025-09-28T17:49:51.746139Z","last_seen":"2026-07-17T15:27:11.019508Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1745aac366a0fd580fdaa1f5de861ae","sha1":"b9fa4bcdc30e775656a0485cbeea7ff6bd4eeabe","sha256":"20b7430e9ed5da2ea82f9fb50aafce7476e531219989ccbddbdf66749a4328b0","sha512":"3150e2a3e9bad6218010c55f184401815ae85f470fe88c821e14b3f9c4b8327f048dc1c4e28e2d52fbb4cc8481927ecb724e0282fee96fb29c8a9cf66e43d5d4","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9YW","tlshash":"c91408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","size":194416,"data":"","first_seen":"2025-11-28T12:22:00.181302Z","last_seen":"2026-03-06T01:26:04.909446Z","times_seen":540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/vendor-6eb23d6d.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ac9eee4cf3352032376d7787e2c3d7dc","sha1":"a002ef42454d338570c823889d2915f46530fe99","sha256":"f57def18e6984b803587f788a051ee9f2b967952f938c553f2e0c43e99a96dde","sha512":"49caf0ac22ed789531c51fae711efc84eb623df6ed4b52697c7eff35ceeab9330777f1af01811f659f028ca30a7ddf5f93ef70c397b4e0aef24bd12ea8b2a94d","ssdeep":"12288:tlX5nnQBVZ2eVxbZkevPKA9AWi+Kc6a0vNcEUz0XW2vx/wQ0a2Mz:tlpnn82u9ZhvDi+jw1Jo0XW2vx/6a24","tlshash":"921529c57292f06147ab20e240bb1006f3396e59740e84a8f16d99db7d79d89e2b7f3c","size":878322,"data":"","first_seen":"2025-09-28T17:49:51.72215Z","last_seen":"2026-03-31T15:18:02.856706Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-b5ddd233.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"7492da7d8e3a79f92e9f5ff59e6adfd7","sha1":"99a2fab319db40f797e4ca377a9f1a89b87ed961","sha256":"61523f2ea917792869786a92e2df782e179a8ce1e16614dc22b287943e015f6a","sha512":"ffaa239b8b6c9d1fa8ea86ca53e5cd6a7306bacaf746361d27c92d462ddb3a4c2409eac476db93c812e27086d0eec247c08c502e5850c7603b3f74ba47538632","ssdeep":"96:TE4Rfiy9YaqD+w1ijFBtbFKJgitbbAW3hvNXTe3J5eAubYj3:TZRfiSYaqiwGBtbhJehvJaLeAJ3","tlshash":"53a1d9d8f80282bbe97b150408480420219c7ffab11448f5fbfdae0e37b4db8d658725","size":4827,"data":"","first_seen":"2026-02-17T16:19:44.571286Z","last_seen":"2026-02-21T23:49:59.764185Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-d35bd984.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e2512799c45ef92a9cc809e392fada88","sha1":"09620b8934b51ecd581f0d1a0f5eeb50496d25cc","sha256":"7774f30c169a52ec44b6e4c8dfa5932d9cabc9e0393c3909b3c8876cef9d0b02","sha512":"6cd930d7310e6cd9d0e01ea85fe2e58a23a05730f0711a2d3fd3a5cb7cac544863d5ee27d11162da49a516af15de38b6c4f43384a00df0f38d6b3d9c464ce27e","ssdeep":"","tlshash":"0a01fdf8fd0c8ebb0ea20a5041903600140a1fddfa1819e198867d661be4940d7ce72d","size":776,"data":"","first_seen":"2025-09-28T17:49:51.668694Z","last_seen":"2026-03-31T15:18:02.860501Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/#/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"83678961efc93c088d42dd78bc6ea6dd","sha1":"8007d82eec4894fa2867c628e925f1fcfa443fa3","sha256":"d6045334796ceaf006da578968c4ce319e6d4127c9c36ea88297daf6c6713026","sha512":"cd5e028a3850ceca98e01b30d338a9874404eba5a4d8fce81855dc9f8a6189c9c202e6caf3fe736b10295b4c81a1361a68fda5abeeca58d358c8fdb9c02a282d","ssdeep":"","tlshash":"13c08cc4a0c23e106602681124af24e4a0244027704c6b02cde4d8492ea34b8a233e98","size":147,"data":"","first_seen":"2023-07-28T08:36:26Z","last_seen":"2026-07-28T19:32:04.769573Z","times_seen":818,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-08-04T08:21:36.834821Z","times_seen":42554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.coinbaseaai.com/platform/dev/config.js?1771345960245","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /platform/dev/config.js?1771345960245 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 30 Jul 2024 05:44:44 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Feb 2026 04:32:40 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"66a87dcc-18a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDXRrs0%2Basn%2B8aDx%2BpQ1LJE91%2FoEed249vfxx0k96P%2Bj%2B58%2BbqOfKmjFV97t%2BgJldCE71OMwxwMDJCOK8tmAt2kViVTt7oREziuDxGjcHGhWpGo%3D\"}]}\r\ncf-ray: 9cf6ae9bac3a86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"4bc52b1aa6813b98e0af16a138354c00","sha1":"91ee6accefe6f24544627bdd1ae2aba499d5016c","sha256":"bf904efa24cb62a824547b6df3a7bbade81bfa77cc27124d7766ae502e5d6231","sha512":"22c852a633d0c36ccf7d549fd1c6a800698e42994d993a47f534b92c8ff8430c14d668c72d2bf8eb79e8b4459f83116bc75ff5f5269f36bc3b8cf2cb9ae886ae","ssdeep":"","tlshash":"f5e0abab3138c16451b08f2b6cec4817f68b2733494c010bf8b469041e79d542178890","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-28T19:32:04.748559Z","times_seen":509,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-00b0640a.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.342Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-00b0640a.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 811\r\ncf-cache-status: HIT\r\netag: W/\"696d4d19-203\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AVCWB%2BWSPoNC%2FTyhRYvKClATCLE3DDlsS5B7buCBTMXlvRFIJCpp%2BbrVsxaj9hJkANJToIq%2FXBWgGxX9qHiufFQJjJxYVdEaip8iLsxZRCoPkQg%3D\"}]}\r\ncf-ray: 9cf6ae9c1c7286c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (514)","md5":"1b19e4d300e56ea8d612bc74aeb04696","sha1":"c9f95408f8d2f217e24fb3057df339e68e03b44e","sha256":"b432f6523231cbec3adff57625700d6067a2b44aef3faa22b435bc7200a4540d","sha512":"796342c33deee5f122abc90368574ae5b4fa6788e1b0994c25a47603be8bb419af8cb287a8af2f028ee00126ce57e3d8968a9e0ca0e17a18f81fbd8ee6aaf8a9","ssdeep":"","tlshash":"74f0c92f693691b60ba388f8e123181066180f467724c5e8e58b0e00cb348ead25ea2c","first_seen":"2026-02-17T16:19:44.564458Z","last_seen":"2026-02-21T23:49:59.775232Z","times_seen":3,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-ent-id\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: content-type,x-ent-id\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Tue, 17 Feb 2026 16:32:41 GMT\r\nEO-LOG-UUID: 4473369155847165988\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":882,"timings":{"blocked":311,"dns":265,"connect":19,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/thorchain.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/thorchain.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 6335\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982A7CD23C3233052687\r\nAccept-Ranges: bytes\r\nETag: \"B4C485B9B6A1D67E5092DB39E6E47FA7\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6070126243995889143\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tMSFubah1n5Qkts55uR/pw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":6335,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"b4c485b9b6a1d67e5092db39e6e47fa7","sha1":"6c6b1e1aa5b366345025d6a068e97f1120338507","sha256":"15517842af615b20773669adfc7a382101bc21cbecf3c86f721b812e517a5333","sha512":"5adfcfe4c26e3383a67bcb3379be468867a59b9735ae6c1587afa41f1571ef92c5caf1f8879a1454c41067513e0418a7bf0b9490cbb458946e79405361dfbeb2","ssdeep":"96:M894vJyPWw3yFcP8mGVM4YjA108r0VmfhYMaLK4jTgS/HvS3VpDd:3TW4ccP8mGVMC08rrmMiK4bHKrZ","tlshash":"edd15bbb678a4607f99e2bb121400361bf7ebe34b95a2b1ba8c54a49270944c586d18d","first_seen":"2023-09-23T00:25:31Z","last_seen":"2026-07-28T19:29:08.845772Z","times_seen":190,"resource_available":false,"data":null}},"time_used":1441,"timings":{"blocked":1142,"dns":0,"connect":0,"send":0,"wait":298,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/aavenew.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/aavenew.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 2502\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B8B90443130B931AC\r\nAccept-Ranges: bytes\r\nETag: \"44C03EA0839CF3E68E8BCF919A91EAD8\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10326775628664412949\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: RMA+oIOc8+aOi8+RmpHq2A==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"44c03ea0839cf3e68e8bcf919a91ead8","sha1":"b382fe47204f644dcb4895979076e46856b9c63e","sha256":"b491fbeac1334279bed1e0dbbae2348e2758549d1c8832a2f44ade7318a907b8","sha512":"4cec7b4132eb19c31e1216228614bcb0b50e9f1cbce9174af6abb0f6565b7a99b2e5b2f1d4ca207e14edadabc2cbc6f40b03128139c5ff94950e7b20459cdfa4","ssdeep":"","tlshash":"1c515aa2d28f279100e0ad332888c970e414bcd86570052d28da3fcfacf85fda8033d2","first_seen":"2024-10-18T13:48:19.587163Z","last_seen":"2026-07-28T19:29:08.859188Z","times_seen":173,"resource_available":false,"data":null}},"time_used":2520,"timings":{"blocked":2227,"dns":0,"connect":0,"send":0,"wait":292,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.028d4a3c99bf54a82a8dd0c4dce056594.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.028d4a3c99bf54a82a8dd0c4dce056594.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 419355\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982C7CD23C3233B12787\r\nAccept-Ranges: bytes\r\nETag: \"B589E3DC06272B64385E57A6B915970B\"\r\nLast-Modified: Thu, 21 Nov 2024 03:09:35 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4225241937986980940\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: tYnj3AYnK2Q4XlemuRWXCw==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":419355,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGB, non-interlaced","md5":"b589e3dc06272b64385e57a6b915970b","sha1":"95e86553b0050d51cf6dff1e1d1592b9a716f102","sha256":"4a40167a0f4b4527e237370fe54571ed17decc0c340abefc68c0e73a2983dbee","sha512":"41c59b5dc70337d8fe1e9298eb555f68a99adad9754cd8e8fe90ebc1534bba1fe9c594dce1bdde7cfc1e15da4b62f658f53b67ea624d9ce2f0468b60cac46374","ssdeep":"12288:dsmEjd+B90OF1itvMD6FUtcvnbt3VZYHsGaIg2y:dW+r1fptsn53VDVI5y","tlshash":"2c94238b353eaeb3959f90b171652c6001b1a0e5913f64e410f5eb1bb0e1ada339cdf6","first_seen":"2025-09-28T17:49:51.727319Z","last_seen":"2026-03-26T04:03:29.520162Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3208,"timings":{"blocked":2308,"dns":0,"connect":0,"send":0,"wait":304,"receive":596,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.01037ab0056e34253b86c6dc723c74068.jpg?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.01037ab0056e34253b86c6dc723c74068.jpg?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38975\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982C794D103332565457\r\nAccept-Ranges: bytes\r\nETag: \"D3C6983F3A66939D04739D908D6F4587\"\r\nLast-Modified: Sun, 01 Dec 2024 15:37:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3486166908020835981\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 08aYPzpmk50Ec52QjW9Fhw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":38975,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 796x792, components 3","md5":"d3c6983f3a66939d04739d908d6f4587","sha1":"097c5933850317c2ad6c8ada6157674148376a27","sha256":"50b38bb6e38f80ca50b856c99270e4e0dbb67f86ed8954d321391f757704de8c","sha512":"d4cb514ecdf6c9a9e5fa9f2fc1fb969363b2fdd61ab31f180efd03387f4eb0245ac62e3ef60b7a239ff1e85d225a1245902fc9d0906039df1aff4489f9ff0eea","ssdeep":"768:q6nU8u3bwVSBhwobC8lFEZhk+DEC8kRileVxZRoq:T1u3UVibdlWvDwkRikLoq","tlshash":"5b03e0085b726cd3e15d67b25efe8ae7b0904a2d2245a13e2432dae258ef1d074d3c83","first_seen":"2025-09-28T17:49:51.683261Z","last_seen":"2026-03-26T04:03:29.488645Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2602,"timings":{"blocked":2315,"dns":0,"connect":0,"send":0,"wait":276,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:42.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/entrypoint-v1.5.5.prod.20251128_164.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"B1745AAC366A0FD580FDAA1F5DE861AE\"\r\ndate: Thu, 25 Dec 2025 09:02:29 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 694CFDA5460E903934968A9F\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15216682669980824568\r\nx-oss-storage-class: Standard\r\ncontent-md5: sXRarDZqD9WA/aofXehhrg==\r\nx-oss-server-time: 13\r\ncontent-length: 64763\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 5309752131820742631\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":194416,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65407), with no line terminators","md5":"b1745aac366a0fd580fdaa1f5de861ae","sha1":"b9fa4bcdc30e775656a0485cbeea7ff6bd4eeabe","sha256":"20b7430e9ed5da2ea82f9fb50aafce7476e531219989ccbddbdf66749a4328b0","sha512":"3150e2a3e9bad6218010c55f184401815ae85f470fe88c821e14b3f9c4b8327f048dc1c4e28e2d52fbb4cc8481927ecb724e0282fee96fb29c8a9cf66e43d5d4","ssdeep":"3072:1I2h7Asg01sHplOuU1C+PjvAHTJBW+9YbM3Zh:+llOuU1C+Pjv+1o+9YW","tlshash":"c91408cd31d5b0a203e362f0103f740bb1b76969690d9890f665d8d5acb9a5e823bf7c","first_seen":"2025-11-28T12:22:00.181302Z","last_seen":"2026-03-06T01:26:04.909446Z","times_seen":540,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-b5ddd233.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-b5ddd233.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-12db\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcavIOnGeesy9HS8%2FLUs68ct7uyNPLRVgpFS5s64%2FPVvD%2FxII%2Bv2vObAmW7QMO7hI9I9B2LTuDoSDxUpncUBPmGb%2FBpfuOr3mB4I8q%2FgE2iRJe4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c1c7486c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4820)","md5":"7492da7d8e3a79f92e9f5ff59e6adfd7","sha1":"99a2fab319db40f797e4ca377a9f1a89b87ed961","sha256":"61523f2ea917792869786a92e2df782e179a8ce1e16614dc22b287943e015f6a","sha512":"ffaa239b8b6c9d1fa8ea86ca53e5cd6a7306bacaf746361d27c92d462ddb3a4c2409eac476db93c812e27086d0eec247c08c502e5850c7603b3f74ba47538632","ssdeep":"96:TE4Rfiy9YaqD+w1ijFBtbFKJgitbbAW3hvNXTe3J5eAubYj3:TZRfiSYaqiwGBtbhJehvJaLeAJ3","tlshash":"53a1d9d8f80282bbe97b150408480420219c7ffab11448f5fbfdae0e37b4db8d658725","first_seen":"2026-02-17T16:19:44.571286Z","last_seen":"2026-02-21T23:49:59.764185Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/InfoPopup-63454fe6.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/InfoPopup-63454fe6.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-4e1\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KxFc0nftjsdDJuVt4hYwXMsYl%2BRlWdp%2Fg2FF%2FCOB1MaEiOC%2Fi3l4mf2qZDCPuruIlLCDrrK%2BhQdRszrEgYIec6ZGx6zrvJtovHT%2FvUIucEoVM1o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c3c7b86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1248)","md5":"389c9273f319e081da735eeca883f369","sha1":"2e6d09fc238d90a09f37c2d6141c315c865d2b15","sha256":"e31c198c6afdd403c358bf1d9b3da84b69754abf20daf92e229e6e2af346d93a","sha512":"d0dc17982f94078d8c6ffeff3fa8463378f74480474a5d7e77ce2c6fd4d18c286b667414a131e2350a21d883b086384b2545a542b4807f8beadc2e12cba62f64","ssdeep":"","tlshash":"a8210f2ea806d3fac0ba05305109250071093f5ef6201b959aec6e1257a6db8ab4df38","first_seen":"2026-02-17T16:19:44.578657Z","last_seen":"2026-02-21T23:49:59.727014Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/filecoin.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/filecoin.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1251\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BAFAD5B373512F9B4\r\nAccept-Ranges: bytes\r\nETag: \"7CF1E84029B517FE9A2CEDA7A774A325\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:20 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3365694140612275276\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: fPHoQCm1F/6aLO2np3SjJQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"7cf1e84029b517fe9a2ceda7a774a325","sha1":"a987deea4ba58f400bfc64ce8d16dc4d59f95775","sha256":"e15eac0824c92a20b8ab4a8bd9d0bfa8b0642bf0c4c5a49a39ec1768112ded87","sha512":"ac15a69d1f9daa3e010cdd8cc662a09bf51a4b6b667e7a1e0b4e62fb391caaeb320dc31dcd4b0f1e5db5798e9ba6492dee0b3456ad1b74ffd44d5f32ad4ffbb6","ssdeep":"","tlshash":"9021eab2bff525d3c5f09676531e0508f88a7cd02089e560fc116b7ee167845c5431c9","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-28T19:29:08.86374Z","times_seen":134,"resource_available":false,"data":null}},"time_used":2535,"timings":{"blocked":2247,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0ad57ce1d8921445a88ff9fa35e370a89.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0ad57ce1d8921445a88ff9fa35e370a89.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 619\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982CE613583834777BED\r\nAccept-Ranges: bytes\r\nETag: \"6CFE73F06DA3C5604FFE6B41D284540D\"\r\nLast-Modified: Fri, 16 Aug 2024 12:09:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1104380098065402225\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bP5z8G2jxWBP/mtB0oRUDQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":619,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6cfe73f06da3c5604ffe6b41d284540d","sha1":"9e9fa8144a7cb0f1da7daa4e5858fa49106c171c","sha256":"c0f3d5204944bd902aa03323ff6d9543ce33f9c8a523ef06b9953dabcd5e1556","sha512":"db8346b7c7d8216db595641f02a1fecccbbe268f7384be291647e939883348696f6d8b2d6754b62559eaf23a47ed50322013c87837c674745a05556bc64f665c","ssdeep":"","tlshash":"fbf0685df3fc843d5be15b598535f1b5d414ce3bc4e151080bd06891522b4553851b11","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T23:35:41.495034Z","times_seen":177,"resource_available":false,"data":null}},"time_used":2875,"timings":{"blocked":2581,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=347bf4e2042e6dbcf1540aade9c43725\u0026track_id=\u0026title=TagomiX\u0026referrer_url=\u0026url=https:%2F%2Fwww.coinbaseaai.com%2F%23%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:44.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/start?ent_id=347bf4e2042e6dbcf1540aade9c43725\u0026track_id=\u0026title=TagomiX\u0026referrer_url=\u0026url=https:%2F%2Fwww.coinbaseaai.com%2F%23%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Is-Standalone: false\r\nX-Is-Meiqia-Domain: undefined\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 151\r\nreq-arrive-time: 1771345964614\r\nresp-start-time: 1771345964766\r\nx-envoy-upstream-service-time: 151\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nEO-LOG-UUID: 6824139789198443936\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4649,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"780977243c99476abf2013ce17eb2a55","sha1":"d2c60864f044a0971f184ba6a7ac4c926af48b27","sha256":"597a421ca82585f3c51e2d9db21231dd0560c4cd1315cc8737042bb45f57959b","sha512":"9b5acb027970e99c8a4646c7505dea4a94143e0c08af937276d886f98b0a3b1d8c4802831e107625352b9e692c08818360da6a49afb308e9bd16f069466d019e","ssdeep":"96:1La87eUGcaxQBob4hR2BUMqnx49OLq6eybgbTbqlrsjo4PJ+7Z7PJ/QfJiCbW:1La87Ucax14hR2Zqx49kq6LbgbTbqlrn","tlshash":"6da1b516d02acf744ee457926a9a72254afc28d2f4cc2b95c39cdf682adb1dd330c52d","first_seen":"2026-02-17T16:33:06.143431Z","last_seen":"2026-02-17T16:33:06.143431Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-2aa50484.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:39.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-2aa50484.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-195e1\"\r\nexpires: Wed, 18 Feb 2026 04:12:48 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1191\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aPUDVG%2BoDqgJTtPBE5znP2Iz5Zj3CF8D%2Fuu8Gl7BAZbB3pURT%2FB3Rsjm6ik3KwXjPbD2M0c2N1h2MU85a7jWpQF29C6hcXrp7dqm9IBYrEq%2FT3U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae999bef86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"6173bb6763a985d82813ff49643689fc","sha1":"dbe0bcd063e8b76c3c19eaff3961d41dea27dd7b","sha256":"62aa31be9ae0d6ab81fd7a7c12b9681d1c162288b6e03f8eb405fd931627cc96","sha512":"bbd53aa4c45c8c1ffe58eec0787c59eec49a3ed021accf2325e0ac1af0509acece14c0274d9cedc947387762fea8cd930b29ff3d5e9ce36b9badf616a29767ff","ssdeep":"768:YrTf36Blm/gyN9KA/zeZv/DHY6Q9U3nQqkGP2u5hmm2ESW5RIAu4vMFSvFeir21l:grnqZgU3ntrICTIAuLIrPNgTuHYYBHe","tlshash":"26a35c8ea6071fbf5cbd0c94a95a4a1031680fd3598dccc3b3ba6e4527fac98634971c","first_seen":"2026-02-17T16:19:44.563504Z","last_seen":"2026-02-21T23:49:59.757651Z","times_seen":3,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/dist/meiqia.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /dist/meiqia.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 03 Apr 2023 08:55:42 GMT\r\ncontent-encoding: gzip\r\ndate: Thu, 25 Dec 2025 09:02:31 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-oss-request-id: 694CFDA768506A3330485A83\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4935971144364316245\r\nx-oss-storage-class: Standard\r\ncontent-md5: XKvjY1vPCi2zO06SSoP4Tw==\r\nx-oss-server-time: 3\r\ncontent-length: 5747\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 7611818044702864243\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":16342,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16306)","md5":"5cabe3635bcf0a2db33b4e924a83f84f","sha1":"dc1188b1f0cf9a08095984897454427da574bb6e","sha256":"13e0593db078d5f1f99544cd9aafbdb1d1eeb8777677b3d001bb1cf66819ac4d","sha512":"3941a8a8b3c277aa60a8b5931e6c3a85d38263a1351ef42e9083266c429f1e3f0f25b08dd8a85d8c2e60dbb48360ea01f419d6cde101a470b11ab658c5302385","ssdeep":"192:K04adJyHIJgekJElGZQz6cFDZsWBn25HrlT6NKSn2QcWByxGmsHZQzq7vE4o7oKq:oHik+BbF904Nua2Nqw4KoKNNlYWC","tlshash":"c9723fcdb5c2b0804ba36160422fa81bf2775aa5745f98c0a365d1f8ac7994f80b7f2d","first_seen":"2023-04-07T01:00:08Z","last_seen":"2026-06-02T03:15:54.772888Z","times_seen":1991,"resource_available":true,"data":null}},"time_used":2373,"timings":{"blocked":1109,"dns":802,"connect":150,"send":0,"wait":151,"receive":1,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/vendor-6eb23d6d.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/vendor-6eb23d6d.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-d66f2\"\r\nexpires: Wed, 18 Feb 2026 04:19:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 813\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wvQvpPuyZMfXREtjX63xLNDQOlFEC%2FxH8PDRwNH8y4hptNmENO3qcPjEWfTD6Cm4NTh6QmnA4pfaeG3V7OXcE0DT6BOkYgUUUJcJCblWxdSLPRk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9b6c2d86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":878322,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ac9eee4cf3352032376d7787e2c3d7dc","sha1":"a002ef42454d338570c823889d2915f46530fe99","sha256":"f57def18e6984b803587f788a051ee9f2b967952f938c553f2e0c43e99a96dde","sha512":"49caf0ac22ed789531c51fae711efc84eb623df6ed4b52697c7eff35ceeab9330777f1af01811f659f028ca30a7ddf5f93ef70c397b4e0aef24bd12ea8b2a94d","ssdeep":"12288:tlX5nnQBVZ2eVxbZkevPKA9AWi+Kc6a0vNcEUz0XW2vx/wQ0a2Mz:tlpnn82u9ZhvDi+jw1Jo0XW2vx/6a24","tlshash":"921529c57292f06147ab20e240bb1006f3396e59740e84a8f16d99db7d79d89e2b7f3c","first_seen":"2025-09-28T17:49:51.72215Z","last_seen":"2026-03-31T15:18:02.856706Z","times_seen":12,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/InfoPopup-7a848ed3.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/InfoPopup-7a848ed3.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d18-442\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dbZDpoD%2BVCuZ3vi%2FBnFxuVKUthtp5WNXi1smXpF0WTI18aXHabLq6YE%2FN%2BOhQYPDp%2BSGCVsXOSG7HaKBw%2B9128cuSJC9aGiKP5nTRFKhNRiDv0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c1c6d86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1090,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1089)","md5":"a6c44a35fc0685e18cfcab5f62ee4796","sha1":"4dee371472390d867da4981ac3e536a8329c63cd","sha256":"7a848ed3b3c56c6bcbfa32b666f2a4b606c5baadefc6801a6a80bc992d79cf9a","sha512":"77916063a9672e974001c63b855c049525f826e87aeef7f6a5be7ff19f83370542d36555656b0b6b5132b1e38fbc94729093947d20fd3e81fe41fae3d3a51fb3","ssdeep":"","tlshash":"0c11beeaf15c7f78fc2e53b667694d4950083de57dc28cb4e22725802ea7cd3260041c","first_seen":"2025-09-28T17:49:51.730862Z","last_seen":"2026-03-31T15:18:02.915988Z","times_seen":12,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/currencyItem-e634068e.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/currencyItem-e634068e.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d18-750\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NUQ%2BrMHpyn68FhIMpFimWan%2F4UcGQgxXPHuZNkYTUUypdWYh%2BJwIm227QEtiC8Afsy6Mu1P9nd9VN9aujsntNgHQkO2t93TdX3d8YIf7s6Hkdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c1c6e86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1871)","md5":"6ae1232120248b332d7e12c32e38fdba","sha1":"75d5db4eaafb201142cdff3574730971408e9a81","sha256":"e634068e3833b1d952981d830ee8696c4a06db3cf61a165ec5d3a94a01599c95","sha512":"7f3f17e647a293d852642f4287ef53ffd79b5d458c6534241c658f76f4712ae54147e335eb3eb4d21fcd259094c55da02f12c6040a38d8947d9a4a96b6caa6a4","ssdeep":"","tlshash":"e531bd84a3550274e937c8877fb8014d905a7fc1904b96c9f88b7a331ddba931a7097a","first_seen":"2025-09-28T17:49:51.70779Z","last_seen":"2026-03-31T15:18:02.95488Z","times_seen":13,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/getCoinList","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"POST /api/common/getCoinList HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sg6fvKsKO2gXmUu9vK6JXeqc2PtNRAgDIoIHAjNj4m70ktXdDgNtUYVTXiiI77sbNJascGfTGj3LOAluO6JBKIkPOacTOjmZrQyFEGNNthp9MOY%3D\"}]}\r\ncf-ray: 9cf6aea04bf7618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29627,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d4bc2ab780c3be338971840f7eb7ccfc","sha1":"aa95efce0436aba5bfe798d5d6db8f0b2647666e","sha256":"aeaeb506ffaf46a98de73b5fcf3355538baa09eb2db2af16a4f03acb91999b26","sha512":"0f47f8ce41d9c51f82801ace7dc16988e8f248b23006e3a74087539d34a1de1e295e5ea540a6d51c82ac1d805051ccdd10f59eb18321521d646680e5bb4e1929","ssdeep":"192:JXrNX/cEXl5XXMXcynXW6nXPfXqOXyfSDguHwXZwYsK7ozvvYfXCKCnjMS5vOJmm:vHHEM6C","tlshash":"cfd20d421529d8adc53ec5c56ebf7d06609c327fe8c0cd1a96da4e9c8edceb4190af06","first_seen":"2026-02-17T16:33:06.147574Z","last_seen":"2026-02-17T16:33:06.147574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/593df91f663ae2ea67a25f1fe28f7b90.jpg?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/593df91f663ae2ea67a25f1fe28f7b90.jpg?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1621\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982CAB67323730E4AB41\r\nAccept-Ranges: bytes\r\nETag: \"F72B5EA762D0ABAF8BEA1BB97A220909\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:24 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3431182562228568391\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 9ytep2LQq6+L6hu5eiIJCQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1621,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"f72b5ea762d0abaf8bea1bb97a220909","sha1":"bd6ee7b972b6dbbc76201af8f7f6c04e859b90a4","sha256":"2970ca3cb7eb0f846a7184e979d4e8456e007439a07415d19fd17878bf2760e7","sha512":"f4f6706a7a9134e367045c2a563bb53990b26863ca5dc319ba4d72134ea289a9b82fbe9212a0f05651336f519b361627954d7d6bb3f713282b69aa70e4800545","ssdeep":"","tlshash":"31310a521f244084eaec21e53b7c35a42d5dbe233c4ca79acb55c8731a8835ac409d82","first_seen":"2025-09-28T17:49:51.688415Z","last_seen":"2026-06-25T16:56:23.786811Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2604,"timings":{"blocked":2303,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/lang/en.json","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:45.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/lang/en.json HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.coinbaseaai.com/\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"3F096584787FF62650DE44E2650F871E\"\r\ndate: Thu, 25 Dec 2025 12:32:25 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nx-oss-request-id: 694D2ED99B3ABD363826650A\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\naccess-control-expose-headers: ETag\r\naccess-control-max-age: 60\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 4451875482026880066\r\nx-oss-storage-class: Standard\r\ncontent-md5: PwllhHh/9iZQ3kTiZQ+HHg==\r\nx-oss-server-time: 21\r\ncontent-length: 5048\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 1273506963794408577\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12137,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3f096584787ff62650de44e2650f871e","sha1":"ea91ca7d94244165cd0021d6eaaab79ff5c755ca","sha256":"7c32a52c7d73dcd8624a7af844564280f6e9ad1c77cab79062ccf819ef34839f","sha512":"dc298505b16c37d5ad1df6b7df187af7183709fe5ad635cf14d679c6077dde591184ba5c3e8a9fd6b02ffa0712a21373feaeda04cbea718a3a64e61132c9c697","ssdeep":"192:5lX/WSWyNsLZMYK92gjpSzUHmbujCJBSBnwI2f4Y7Enm0tEQAbPxDD:5F3tGvg2gJHmzSqIe0tExl","tlshash":"4442d51dc7151da71043031bb84fa026a660915b9fa4767ef3a0416d1fae68f62bb3ce","first_seen":"2025-11-30T13:22:40.844646Z","last_seen":"2026-06-06T03:06:59.650197Z","times_seen":199,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T16:32:38.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 16:32:39 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyfiOdHCDcpuGxRwGOFZwQ%2FWy3mwq1kGThxxQcZxNwYpJZwwmiyopXBpQmRZiNzbZ20OQlAL2Kzk0OvvErOaFrj3g5Lw1WD%2FkBQt3ZGRkQx5oFI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cf6ae93bed386c4-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6181,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1094), with CRLF, LF line terminators","md5":"3083583d0278fc9795d5356bde3f08ae","sha1":"e630670de66b2b8c1c451cc5a7f92d2e9196cef9","sha256":"3ea487ed734a89415b2957df9f0473eb28c3aeeb4f4ac16df8d9e20521f806ca","sha512":"84cae975e05eb8e7e4db7e7b16db15b9e7ef4b963d6346c1835edf1a59f54b1e8e2d4f1056849424d747ff18123b6fbe8e79d30f2f06d8554723c070317fe002","ssdeep":"192:+FGkPJ+bSZCxfo2nfD3bDLZ3FuB1nikitf2:XO+2ZCxg2LLUiTtO","tlshash":"07d162a66ca5c82923b6166adfe7f40cef2011438519895075cc54eb4ff2fe488c3b3a","first_seen":"2026-02-17T16:19:44.573447Z","last_seen":"2026-02-21T23:49:59.794208Z","times_seen":3,"resource_available":false,"data":null}},"time_used":944,"timings":{"blocked":93,"dns":64,"connect":8,"send":0,"wait":752,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/charting_library/charting_library.min.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:39.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:39 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 30 Jul 2024 05:44:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66a87dcc-2a6b\"\r\nexpires: Wed, 18 Feb 2026 04:12:49 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 1189\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xmnANv6XtXcWiSUFkJGS1hVUXBwRukgDNQW967j92YQQRY5YyXvHn40%2B%2FLYCzLKdQgv5uPj3YsLtgq6yqkVCPYu0rWKfdLbOB4kZWDfrTIo5ckE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae998bee86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10859,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857), with CRLF line terminators","md5":"2a5fa40461c4e10123b62c021ab0a4ed","sha1":"527b4a35104eda6479c5ac876f57b5375ab00f51","sha256":"bcee984fd52b4a82bd6b23543bb33f6472e076c125edbdd8756d29ca230628cb","sha512":"51c91bff846f3825a21d6b301b1e4615d05bb27defef6c39c622e647f5d0262fdb0382924c9245c4a18a11cd32b60e4c913ed451b6f4b2fec1c87ce871eb874b","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffa5:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvB","tlshash":"58224f58ed2478720acb54f0427f180f8239e278d84944ed3c84e6ec59fd44a6a6fbb8","first_seen":"2024-07-11T15:08:28Z","last_seen":"2026-07-29T22:52:22.712247Z","times_seen":1299,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/vendor-6eb23d6d.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:39.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/vendor-6eb23d6d.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-d66f2\"\r\nexpires: Wed, 18 Feb 2026 04:19:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 813\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xclQTnti4k7j%2FczqIiCTCTC%2F9NWqOQXWECbKGaShL%2BcCCW57%2B2HR6gKEeTQ1fMP6CFpNwn7dq47gy0hD05o8lzj%2B%2FUiNWKJYeAaO2zQaVJxcFwc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae99fc0886c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":878322,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ac9eee4cf3352032376d7787e2c3d7dc","sha1":"a002ef42454d338570c823889d2915f46530fe99","sha256":"f57def18e6984b803587f788a051ee9f2b967952f938c553f2e0c43e99a96dde","sha512":"49caf0ac22ed789531c51fae711efc84eb623df6ed4b52697c7eff35ceeab9330777f1af01811f659f028ca30a7ddf5f93ef70c397b4e0aef24bd12ea8b2a94d","ssdeep":"12288:tlX5nnQBVZ2eVxbZkevPKA9AWi+Kc6a0vNcEUz0XW2vx/wQ0a2Mz:tlpnn82u9ZhvDi+jw1Jo0XW2vx/6a24","tlshash":"921529c57292f06147ab20e240bb1006f3396e59740e84a8f16d99db7d79d89e2b7f3c","first_seen":"2025-09-28T17:49:51.72215Z","last_seen":"2026-03-31T15:18:02.856706Z","times_seen":12,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"api.coinbaseaai.com/ws/47a6925e-1464-4716-9a4e-17e540995cf4","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /ws/47a6925e-1464-4716-9a4e-17e540995cf4 HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.coinbaseaai.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 1NMIIO+6qlS30kPPjuB28g==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 17 Feb 2026 16:32:41 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://www.coinbaseaai.com\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 7tKf3mQaJoSrpG4LX8stULOdXuQ=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=a8fASrUroDsS0MBi4EZPAUBgOT8mFxQKnUVaMdqmfn7DsIQqn900gggwounG0pAzVly63%2FeJbhd%2BNGp%2FJnV7akLPTcYFFhm1sJZKj2dgwJzKScDqvNxXIbInlMz1iHm9D2md67%2BI\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9cf6ae9c885b95bd-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=7703\u0026min_rtt=7661\u0026rtt_var=1686\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3123\u0026recv_bytes=1203\u0026delivery_rate=555072\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=23a5de0da102db82\u0026ts=727\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":908,"timings":{"blocked":-1,"dns":80,"connect":88,"send":0,"wait":709,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-d35bd984.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-d35bd984.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 811\r\ncf-cache-status: HIT\r\netag: W/\"696d4d19-308\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n2rhaK2JxGA%2B4swHFIOl9EkozCXRqT97knPPfD504zRjZilg3QSPciGMZhbP8mF5v5UOTJsRl3xmSuD98c5tjHkPislVpSovP43UPPX2dWX9qlM%3D\"}]}\r\ncf-ray: 9cf6ae9cec8d86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"e2512799c45ef92a9cc809e392fada88","sha1":"09620b8934b51ecd581f0d1a0f5eeb50496d25cc","sha256":"7774f30c169a52ec44b6e4c8dfa5932d9cabc9e0393c3909b3c8876cef9d0b02","sha512":"6cd930d7310e6cd9d0e01ea85fe2e58a23a05730f0711a2d3fd3a5cb7cac544863d5ee27d11162da49a516af15de38b6c4f43384a00df0f38d6b3d9c464ce27e","ssdeep":"","tlshash":"0a01fdf8fd0c8ebb0ea20a5041903600140a1fddfa1819e198867d661be4940d7ce72d","first_seen":"2025-09-28T17:49:51.668694Z","last_seen":"2026-03-31T15:18:02.860501Z","times_seen":12,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0150b89e69cdb4d81b0799b864999070d.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0150b89e69cdb4d81b0799b864999070d.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 614\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B8B904431307031AC\r\nAccept-Ranges: bytes\r\nETag: \"288529B0E33D3B66A2731D058A0EDB26\"\r\nLast-Modified: Fri, 16 Aug 2024 12:09:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 12140603420238383984\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KIUpsOM9O2aicx0Fig7bJg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.329022Z","times_seen":162,"resource_available":false,"data":null}},"time_used":2212,"timings":{"blocked":1921,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ceI0x7ADclU7Zvva2XCmHs4sDZCkLZgzThR6LP01HnI3%2FmVEpEx5As97AbrRhj1LaH1jeuIw0bIn8HtgIy1tAXEO2w6eUJx2Z8Vx3cxHXl%2BwgtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf6aea44e4e86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/get_base_config?ent_id=347bf4e2042e6dbcf1540aade9c43725","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:43.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /hikari/visit/visit/get_base_config?ent_id=347bf4e2042e6dbcf1540aade9c43725 HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\ncontent-type: application/json; charset=utf-8\r\nvary: Origin\r\nreq-cost-time: 8\r\nreq-arrive-time: 1771345964053\r\nresp-start-time: 1771345964062\r\nx-envoy-upstream-service-time: 8\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 1034\r\nConnection: keep-alive\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nEO-LOG-UUID: 14762240509658409039\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1034,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f2c305a48c9f5aa8a12de937896a86f0","sha1":"6fce086511af36deb20efefceebe40e4ecc66ea9","sha256":"424b8fc44eaad471796a45b75fa3eb1530b035aa9e3c3a47a45301b37812913b","sha512":"47a566c1141b4728b768804c7b06e142f99c1af7701bc754816ca13a2adb766fd8356d1d72a918be25fd6ce73e02f8046032d19e082da7d0808faae775a219d9","ssdeep":"","tlshash":"1d11ce84608a8e35878577887ddab416c96c38a3fcc42f11d764df6836db1dd3206558","first_seen":"2023-11-02T10:53:25Z","last_seen":"2026-06-06T23:13:04.289858Z","times_seen":1550,"resource_available":false,"data":null}},"time_used":615,"timings":{"blocked":168,"dns":121,"connect":19,"send":0,"wait":279,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-7ac9d7fe.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-7ac9d7fe.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d18-a14\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nixmSFdFa1V96Gqhz%2FwELrVDi9R3YJzrRkQ%2BtLwJDPyWGVEAvcu5F9pkFzi5QDXmaXGCl66r2BU%2BL13hHp7l6u1LImZXa%2FfXS0RDFtsHpn01%2B%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c0c5586c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2580,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2579)","md5":"5e58c48353a9582142552a8ace117046","sha1":"7f3d992ec4e67d6cae3e6ed113fdc487ea359b1e","sha256":"7ac9d7fedfbb744adc79cc0db2f08e11e5691e613112e2411eae458c08af689c","sha512":"7995fdbddc4dfbdde9d6e3b5084d0da69d71f4a51c9525e659bd5ede14d57ec15f783b2749cb18c9d91dbc12c7b86cf61bd1085fdaf810452eb5bec9c24a4602","ssdeep":"","tlshash":"d35101dcf39511356cbbd78fbd648a48e0007ed1d0479d86fd17961506cf6a32a2921b","first_seen":"2026-02-17T16:19:44.575201Z","last_seen":"2026-03-31T15:18:02.942097Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-8445ff7b.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-8445ff7b.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-27b3\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a4xOa7hw%2B1%2F%2BM9zRegdBRR%2BkQ1R5CfyPNAr8l9vrUoYBBh2Q1BuU1UfoYavacsbtQh82fWwIPKhT16ADfbtmlFW6x5kGQS4MXZJYjG%2BKcRomTuw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c1c7086c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10163,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10162)","md5":"6b528f57f89b231a94107c60bd2caff8","sha1":"f065986a8fe41add70b0d10c1616e3071d3af493","sha256":"1dc5e1b3461961dbd580365f3f01f1567589881aca3fe4755f14a4533848bd88","sha512":"5aee297074bcb8b620ef33f620675ad6a127e93954523b8a4ccc571a6514ce27a52f361ec8a49cce8f5416b73d1f0dd494b5916ebc179ebcbdf7f235f01af0da","ssdeep":"192:VplZsjw+3OeJTApFPpFw3OenN7ZICSfYx8w9uouXRfZU4jpPQ2wimoX5vizw2s:LlZsc+ZApVMJ7ZIvQb9uoaRfZU4jOimW","tlshash":"a122849bf902ca3de9b7f45444980460966e3fcb2009c971b9bd5d1927a7ef4f398324","first_seen":"2026-02-17T16:19:44.570345Z","last_seen":"2026-02-21T23:49:59.723269Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/resource/images/dark/zhulidai.png?3.0.1768770840912","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /resource/images/dark/zhulidai.png?3.0.1768770840912 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 31 Oct 2024 01:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722e1d4-81d\"\r\nexpires: Thu, 19 Mar 2026 16:19:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 810\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sTxpwC4%2BnHbWEv%2BaIkv5hlSdt2PV1HekJvHyk92lngj5QMiakEFv7swEKkAb8%2FpJeYgW3umVwno%2FrbZftLxQtlcIzTrMy%2BCFGoGciPyNrWCXnm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea30e2086c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2077,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e39463ec4f37a076f71b1cd5bdc8c7a7","sha1":"619f20075f62686610065cea87f888d4a2d09320","sha256":"7cdd697c3f34e16ea3cd5420f96c0803b1d5d97c07cb5320a9439df174784e30","sha512":"4fa68cf55fa7bc93dbcf023790fd73eb71e70293408da7b5129908a84f84e4762d0efde87025d0e2074380f8b5da1a2c81a6869d9edff9ea4565cf0c366b82e3","ssdeep":"","tlshash":"39411c13c75a27148aa76ef709d700387974012ec281f570064cd80f5d6a778b4667c7","first_seen":"2025-09-28T17:49:51.663177Z","last_seen":"2026-03-31T15:18:02.911106Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/tron.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/tron.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 28273\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982AE6135838343779ED\r\nAccept-Ranges: bytes\r\nETag: \"D5CA5F90C7A46CB88E5F57B2D3046BA8\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 651333452456791640\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1cpfkMekbLiOX1ey0wRrqA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.550492Z","times_seen":713,"resource_available":false,"data":null}},"time_used":1477,"timings":{"blocked":1159,"dns":0,"connect":0,"send":0,"wait":307,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/getAllSetting","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrCTlFDFx4WhC7tdxiPmg7bX8D0KefGkVoUPXYV3UEGDE6cNI69wQhGAJWK%2FE0Nt%2BzwSigWpdFe4et8OZJ9k15EebT%2FnYgpt1qLAb0FCHQ%2BMDs4%3D\"}]}\r\ncf-ray: 9cf6ae9c2f83618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":71,"dns":10,"connect":8,"send":0,"wait":679,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/solana.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/solana.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 25649\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982A8B904431309830AC\r\nAccept-Ranges: bytes\r\nETag: \"670C723ABC22056BC5368CA2A97DD6A2\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10769821075161595358\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: ZwxyOrwiBWvFNoyiqX3Wog==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-07-30T19:44:59.518064Z","times_seen":932,"resource_available":false,"data":null}},"time_used":1441,"timings":{"blocked":1130,"dns":0,"connect":0,"send":0,"wait":302,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.05f00ece26c174cb7b693a92ba890474f.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.05f00ece26c174cb7b693a92ba890474f.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2228\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982CAB673237303EAC41\r\nAccept-Ranges: bytes\r\nETag: \"72B6E78E8F8323F4AADE676257739DAC\"\r\nLast-Modified: Wed, 16 Oct 2024 15:39:14 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10566529437793315716\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: crbnjo+DI/Sq3mdiV3OdrA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"72b6e78e8f8323f4aade676257739dac","sha1":"c0c5314ee483b5eaa5789df39182fc6b3b9a62ac","sha256":"838b297295d0af0f5ec9b64098e76b79c9e7a59ce2e62d464e83c4f3fa3c7d93","sha512":"ce4244438a3d2732ddf6db91433e2d1991f9172d9e80b54336bfad125cc58d5a11574ac04ce83cfa3a54557add429747aba2e0826765a1498ffa351003117483","ssdeep":"","tlshash":"20412b4026aa507d09c50d4f93a58e3354b93a8f01eb5a3b6c0b6a813b57db27a1bb0c","first_seen":"2025-09-28T17:49:51.7046Z","last_seen":"2026-03-31T15:18:02.952736Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2891,"timings":{"blocked":2592,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/resource/fonts/Arial.ttf","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /resource/fonts/Arial.ttf HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.coinbaseaai.com/assets/index-a502dc58.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1047012\r\nlast-modified: Tue, 30 Jul 2024 05:44:44 GMT\r\netag: \"66a87dcc-ff9e4\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 812\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1KgSwXRTTL8yxVLAQ9LiHyo8reMLrmqywJbpem42uD2FsxE6AqV%2B5cdml4VAnoIoelBUGNMO%2BeJsA6LhtHLcn7KL8AhqcjQu3kbeNw2syN%2BIWyY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf6ae9a4c0f86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1047012,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 25 tables, 1st \"DSIG\", 58 names, Unicode, � 2017 The Monotype Corporation. All Rights Reserved. ","md5":"ffe66dbfc4b07f36ef38dd621ad2c7cc","sha1":"e032b102cfc37c3226d17e1b462edea5fbf8fe1c","sha256":"c1216a01b3cc4e94df72577a6f618154058a1d8999ed58fa31ab7e54c7e4be4b","sha512":"3c7952b71c8117938c5284efca0e0b3e8c20d7b84c74a4890f76a72af3b26295786b0f7c33d9b6c980527b4c4c8dad628d1f5e7e5f202d11076367f082349bb3","ssdeep":"24576:NoQIQRjo/Y7wjgTmKJ4WxA7EAD4OBfDamXKE6AMra:NHIQJo/Y7wjgTm0PxAwJHE6hG","tlshash":"f125be0bf3929f0fe3902b38c9a5d761939b76189b2743b73d8c5858ecc85a45e487d2","first_seen":"2023-07-29T15:16:45Z","last_seen":"2026-07-30T19:44:59.556937Z","times_seen":2202,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/platform/logo_144.png?3.0.1768770840912","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /platform/logo_144.png?3.0.1768770840912 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 02 Nov 2024 10:44:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67260284-52a\"\r\nexpires: Thu, 19 Mar 2026 16:19:09 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 810\r\npriority: u=6,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nkhFy71mwjapRFwJxncb4SknuzMEsGnzEAIaAGJwaa6my25ktSgMzL5xW4eYSeQkWvnqZToU7gCq5xRnOz01cOWRh8aUWnZs%2Bn5pBY3e9sBpoIk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9f9d8886c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"53c1396112c6ae24f719897979cbf9d9","sha1":"413dc856c98c6dae16c72957b47db598e16820a9","sha256":"f0edcdc5516fdda662dae18177dd317c7d6e6436b16982bb598866d9ee245685","sha512":"814000225d22b0b295bf03888e3024c4b5ecbc8cafaaec21e59947bae16a220a7578052679108e1e90ae62e5cc7aaae1da8ec1c5578c86a08faff18e8c815035","ssdeep":"","tlshash":"5921a8716609a4e024ba2a368e7024e19564571c53aefb5a5cd7db24f02a54cbcd1449","first_seen":"2024-12-22T06:31:00.688621Z","last_seen":"2026-03-31T15:18:02.895619Z","times_seen":47,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/en-15b6c9e3.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/en-15b6c9e3.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-b371\"\r\nexpires: Wed, 18 Feb 2026 04:19:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XPlVaTgfP6OlYt81YaDSvdQzfptRelUT2UTZP4Z5Zq3NhKFsdUlitdv7pHS%2F3lSQGE80UyX%2B7BNBik6RQ14IGyFY%2BYm5oJL26uhXlbhvwuUZw7U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea22dfb86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":45937,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (45894)","md5":"56b10d560eb9aa569acadb4fdd59e8cc","sha1":"a6c02e07090aaeb0f9aa2e900b024876e333b5fb","sha256":"417bbbe4aa57bb82c2cb40becbc3d2a8956a1828802d8c22c63c5cfb834ad594","sha512":"7394662b17cb77d40e748e3e2e6f5df3054a1ce8f10f36e446a6055735f3a9474a4b970641cc748ce4cd3818072adab68ffbc6ac45b94fd62033e77d4f4326da","ssdeep":"768:KGtZcEw/qzrKOyCFsifnATChrAaAMFVoP6+MsPG9w1mwO6fpk7aOlomvS:upq/KOygbdhrdFVlsPWwqlosS","tlshash":"2b23f88a7e0a89aa04f3133674ce6e5011f60ac18255881f4fedc5fd53d2b67a367b74","first_seen":"2025-09-28T17:49:51.735925Z","last_seen":"2026-03-31T15:18:02.917446Z","times_seen":12,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/bitcoin-cash.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bitcoin-cash.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1218\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B8B904431302C31AC\r\nAccept-Ranges: bytes\r\nETag: \"D34183DB66626408066857B67F7900D4\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5782617094063956613\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 00GD22ZiZAgGaFe2f3kA1A==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1218,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d34183db66626408066857b67f7900d4","sha1":"83c65e97df3ff99ddc360cbb4f00e0aab9b46157","sha256":"c62e4c60cffc895ab8c244858fe3e536c8951cdfe3424e5af1cd6d92dd796c8b","sha512":"7ee53dd7c95dd200c67ef1a94d0a658cc28e6681bb7e9b80f25eda71cd907a57f11cba0074b512f7c554ac84364439cba30d0b0706b1d2e0b0d102fe045b5d05","ssdeep":"","tlshash":"6421e7a0a34da662fa3b2945e79700f0712a5431a90659974af74124c21c9462ac057a","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-28T19:31:07.582158Z","times_seen":302,"resource_available":false,"data":null}},"time_used":1967,"timings":{"blocked":1674,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/icp.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/icp.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1788\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BAB67323730F1AA41\r\nAccept-Ranges: bytes\r\nETag: \"8CC76617933BCD695F17C017E6B3ADC6\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5191124354457799973\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: jMdmF5M7zWlfF8AX5rOtxg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 97 x 97, 8-bit colormap, non-interlaced","md5":"8cc76617933bcd695f17c017e6b3adc6","sha1":"b37a86568f5158dac679b43b4e068f41b9f103eb","sha256":"295954d495c5688999859288492283b10250c7f6064425db12cd4dc971ef5478","sha512":"d2e65d186d85cbf912a7a9432f4204be2733261ecd31ca162b1fd27e790733f382e33b0d594c0aab5a87c5cbb88b84d6c2524c618c58999c82b479d619cee8ca","ssdeep":"","tlshash":"6431187eb126191cee327ec736b8a160b41f1c664050f412835730e01f782674e09132","first_seen":"2025-05-14T11:04:58.562263Z","last_seen":"2026-07-28T19:34:47.950953Z","times_seen":83,"resource_available":false,"data":null}},"time_used":2029,"timings":{"blocked":1729,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/ethereum-classic.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ethereum-classic.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1289\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B7CD23C3233D52687\r\nAccept-Ranges: bytes\r\nETag: \"7290ED52436B197F22DEC959794A77CF\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 5053731668100281913\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: cpDtUkNrGX8i3slZeUp3zw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"7290ed52436b197f22dec959794a77cf","sha1":"dfbcc5de182c12a8dc3aecce574718835228d8e3","sha256":"eedb605b601d24286034b55b362387e5627b346a0ef69e2afd92177968e1e755","sha512":"d51b24f577360a4c430ffb8e6559e53e0664c35601daca1a6aef27f48521fee3f172b95e23a9fde17f53659f65c4b80a3f8dd9d25f2df9379e8e7c0a171d4a7d","ssdeep":"","tlshash":"bd21c5782b9a422ec24dc9762e7a03001d2d8131a04c5cf8db69096b6e80d7e426cfa1","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-07-28T19:34:47.937168Z","times_seen":250,"resource_available":false,"data":null}},"time_used":2038,"timings":{"blocked":1745,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.023bcd052edc84d6bbda0aa0751ed2bde.jpg?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.023bcd052edc84d6bbda0aa0751ed2bde.jpg?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 93503\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982C8B904431301932AC\r\nAccept-Ranges: bytes\r\nETag: \"2AB56471B6868E15C191B3F895494B7F\"\r\nLast-Modified: Mon, 23 Dec 2024 17:41:03 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9961823273842601885\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: KrVkcbaGjhXBkbP4lUlLfw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":93503,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x1024, components 3","md5":"2ab56471b6868e15c191b3f895494b7f","sha1":"c75475dee48b0a2d72920abc0f5cb3cd9985b083","sha256":"0f75a43da04461e6f9f35853e37b8a008d7183260fd765af44091ea2e9106651","sha512":"1f19a08ae460ed2b16e643e448e1c2716335a22c8738786bf040f999717f01925f9cbd209b165925891e3a6cabb6d45cc21abdebfb25cc9d23965e2753d6afcd","ssdeep":"1536:U/RIxKZNZIgNJCHX7MDLQ0aSD6ihwS69FRq7nxEcMfBcSZd7NUKufOyplV90aqHV:Umc/IgzIsLjyFRqNhMfBX37Yzca2qGOW","tlshash":"7c9302b8b83ac47aab8131e859dced1561d5bc81d5c1176698d181832cfeed33ec22a1","first_seen":"2025-09-28T17:49:51.685299Z","last_seen":"2026-03-26T04:03:29.535571Z","times_seen":12,"resource_available":false,"data":null}},"time_used":3123,"timings":{"blocked":2512,"dns":0,"connect":0,"send":0,"wait":305,"receive":306,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.04d27ec339bff4512a96daaf8a302b1ab.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.04d27ec339bff4512a96daaf8a302b1ab.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 525\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BAB67323730A3AB41\r\nAccept-Ranges: bytes\r\nETag: \"39EF9D38FE0AAB83585DD87672DB2F9F\"\r\nLast-Modified: Fri, 16 Aug 2024 12:09:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 17681862502574744688\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Oe+dOP4Kq4NYXdh2ctsvnw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.309706Z","times_seen":162,"resource_available":false,"data":null}},"time_used":2285,"timings":{"blocked":1987,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-d253bac1.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-d253bac1.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 811\r\ncf-cache-status: HIT\r\netag: W/\"696d4d18-3d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53k%2F6TECw5TnzLfzuigDlhma%2BaT1Dcus50D6ewcp3JrsD53OxY6%2Fcyb1ldJ6sXTKJ87b2ehBYDOpiOywyOM6ZEqrkkIuhwFXPixNTSarYDRNZmM%3D\"}]}\r\ncf-ray: 9cf6ae9bfc4c86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c88360cef8df86c995e562333879873a","sha1":"8674b487cf92f20149c0ef681b42a599469813bf","sha256":"d253bac175b5b52734c192e96d18c8b26b0c92b881584f63b7de91bff96c6149","sha512":"eeeb5ec01fe8c7d483182fc60a2b54ee1d02994718fd9b23a6182f49ead49d889889f21592b2955bcac8cc859023204782db3210d3a0c706a3e4677564db3636","ssdeep":"","tlshash":"f6a0026d11156404b2225341ff5ff95dce686917da91820453421c9135cbe8f25d821b","first_seen":"2024-07-24T17:37:43Z","last_seen":"2026-07-29T22:52:22.714836Z","times_seen":424,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-4f3aae6c.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-4f3aae6c.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d18-2663\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cS69Hqy%2BuaC0asTBCEI7P3UKUE3NCJYTlzJYR1hbAx6jsFVNHkt8HEOjxdTtDaMiCyDP6RDntQtLzlqnYp%2BxCXMldfEDM5YvFdZurNVbd379l58%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c1c6f86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9827,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9826)","md5":"977eb1250073b34f1d1fc3b18343f364","sha1":"f7bbb614f88b026f245a9730352855600ed0650c","sha256":"4f3aae6c95526cab0401e64d699171b67b262663c46f0f16e46adf2a6c6e1490","sha512":"8260b65cff894d61292ee0dc8104ca65cd8306cc549b70a3d3ba1ff5a881e92f1506cc4f252002d1471cf47909e89a3eecb34e422db054b9a556e9bf73f6583f","ssdeep":"96:H9qUkGI8DkezOETj8XMp5mXUVM2tLUEuw62rtftpfB47PH+LUBf7/7:HdcePfpYJed5iPH+LUBfH","tlshash":"f512752cf3e52238ad37e0957bd84edce128b901d6539da4fa6bd6230cdb1e31630589","first_seen":"2025-09-28T17:49:51.675919Z","last_seen":"2026-03-31T15:18:02.858797Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/resource/svg/dark/mengbanzu12.svg?3.0.1768770840912","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /resource/svg/dark/mengbanzu12.svg?3.0.1768770840912 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 31 Oct 2024 01:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722e1d4-91d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ER9lQu66b%2FN4hoATlK%2Fj6vJM7UPboI8iDUUwq6CR3kueSCYbxIGuy01kPcozPWxqPyoZC%2B8N2k1IqJXN95hpwIF0EyBpYfW9EWqiAxw%2Fa3942Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea30e1d86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57e6f3cc74360cedcd3fe95ad96b445c","sha1":"df5b5622c855633c1c97c5fae3ac14a495595b06","sha256":"b358328f5b1921b34b268ca1935c428556e59ae9cfe65af5a69d6e3718743604","sha512":"e0829da8873aa097c556f1d0e2b74b6ae1a0270607892ea309443d296bb58248c554c90bc72d27424abbe8081cbc3c8b16b17e3e97448901f7e186c68a31db4f","ssdeep":"","tlshash":"734122cb93e12becb204ca514131186a1bee34e5f424ef1fd499d65ef300ae01428b3b","first_seen":"2025-09-28T17:49:51.732143Z","last_seen":"2026-06-25T17:45:58.630787Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1191,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/litecoin.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/litecoin.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 34858\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982A7CD23C32339B2587\r\nAccept-Ranges: bytes\r\nETag: \"BB27C369A3AA54D9C1F8E59E1706DA48\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2593469271640333430\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uyfDaaOqVNnB+OWeFwbaSA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-30T19:44:59.560175Z","times_seen":885,"resource_available":false,"data":null}},"time_used":1198,"timings":{"blocked":-1,"dns":0,"connect":288,"send":0,"wait":298,"receive":24,"ssl":587},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/bluzelle.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bluzelle.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 25833\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982AAB6732373019AA41\r\nAccept-Ranges: bytes\r\nETag: \"D00EFBBDFD298720E829AE2434E8300F\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8445431794217583994\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 0A77vf0phyDoKa4kNOgwDw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":25833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d00efbbdfd298720e829ae2434e8300f","sha1":"5ce11234597ef8050d23bc55f1bf48d4a1152451","sha256":"f42a835f279c3889d4384579c4c6a3688442b7f1c8df12fd3fa4b3741ce140a7","sha512":"6d2425cd1c13c3b83701c51c2afee6c08449c491422f3613f956025e1623993c78d242d4dbeaca645f298d7fee413c9268374dfcfe0766890027eb5c796ef3b7","ssdeep":"768:3EMrF5XvEfBimA9K2mX7VDsJHCf96WOdkKCbjGO0hb:3VR5XEBimAQvGicWqCbp0","tlshash":"72c2e0aed8d8c48878afaa3179d5c071d7b5e9bee9717c2271ce843319507071c0e9b8","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:29:08.853577Z","times_seen":118,"resource_available":false,"data":null}},"time_used":1471,"timings":{"blocked":1152,"dns":0,"connect":0,"send":0,"wait":307,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/bg.png","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/bg.png HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.coinbaseaai.com/assets/index-4f3aae6c.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:42 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FYqZDw0ftsGATYo1LINJEe%2Bd7LuNLxci1QxzyLO7IBKAGlC5PLk6CVFu3OlPyFcmzFPuR60ExVWwxVP0TcAlGvqfcRP01JxAzMMubYF6PbirBc%3D\"}]}\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf6aea42e4886c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T09:34:35.080885Z","times_seen":546322,"resource_available":true,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":803,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/type/defi_activity_type","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"POST /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:42 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2DbM3G5%2BVjj1ttK2ygH8pXEAXbua4QjuL0JE1eL7zWnH6kbff04gQ6tMxHyF%2FesUktlMtSFcBID5yPzxSsmDjMI2vX7BHKCabnwnLYTxtZWn%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea5ce9486c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2233b583161c94aeb64b76492ddd1d64","sha1":"9cf9397a1700dd26b49f59b4dacad7d7c8a84ca7","sha256":"b47a6fd22965b8fbd1eb358244be3598cbc8eacbfc372c5bcd981e66a64b0545","sha512":"98f8862619bf3780ce1648631a5cfca57a5c2a2bb94938bae08456d31f5c6e77cc0cb9070671e35ab26d4f1d6889bb8c8d3b7c5eeb555320c13b0e61035492e3","ssdeep":"","tlshash":"0ef0c214397ddebf095f69d745ecb8183a9c152b94a0aca0a8aa4f3c6be4171188a258","first_seen":"2025-08-31T11:06:39.036851Z","last_seen":"2026-06-25T17:45:58.733313Z","times_seen":15,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-d35bd984.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-d35bd984.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 811\r\ncf-cache-status: HIT\r\netag: W/\"696d4d19-308\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5TH6D3yEySVKj4LI9O5R0YC82ITUh7hZiaxKUwn1%2BmE%2B0u7jDBBJJvz%2BEAaNBngwr1M1HHOS%2BqZjEo2bQ1iX0o%2BUW1XS%2F8L1vzh9uk1EsMVogjA%3D\"}]}\r\ncf-ray: 9cf6ae9c1c7386c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (775)","md5":"e2512799c45ef92a9cc809e392fada88","sha1":"09620b8934b51ecd581f0d1a0f5eeb50496d25cc","sha256":"7774f30c169a52ec44b6e4c8dfa5932d9cabc9e0393c3909b3c8876cef9d0b02","sha512":"6cd930d7310e6cd9d0e01ea85fe2e58a23a05730f0711a2d3fd3a5cb7cac544863d5ee27d11162da49a516af15de38b6c4f43384a00df0f38d6b3d9c464ce27e","ssdeep":"","tlshash":"0a01fdf8fd0c8ebb0ea20a5041903600140a1fddfa1819e198867d661be4940d7ce72d","first_seen":"2025-09-28T17:49:51.668694Z","last_seen":"2026-03-31T15:18:02.860501Z","times_seen":12,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/ripple.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/ripple.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 2274\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982AAB67323730CCA941\r\nAccept-Ranges: bytes\r\nETag: \"674B0999F6083084A2A4B1D8B20F3BC1\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2919851811578833622\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Z0sJmfYIMISipLHYsg87wQ==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-30T19:44:59.564025Z","times_seen":884,"resource_available":false,"data":null}},"time_used":2091,"timings":{"blocked":889,"dns":1,"connect":297,"send":0,"wait":303,"receive":0,"ssl":598},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/avalanche.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/avalanche.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 685\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BE6135838349C79ED\r\nAccept-Ranges: bytes\r\nETag: \"B9913F5599FAAB08D2ADDF87011C61E0\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 6738570402232494327\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: uZE/VZn6qwjSrd+HARxh4A==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":685,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b9913f5599faab08d2addf87011c61e0","sha1":"d9ae6e6a8ca0e50e02a991d032d9b9a461079f95","sha256":"68ba1605b3a54d7f827c22cc7252f01c6bf9412cfa6573be2c91fcd4b9e908cd","sha512":"7baea45f411fc30232bd93d04b8cf34414d333096ec669558ee6dd4a4a725785786f488b387e6c38654ba4fd3aecfda5526de2d949851796582c75214a42150f","ssdeep":"","tlshash":"8d01d8fb0957c025408f01f8224f7372d160c4eec9c7e20d89d9f7301862ad24c4524d","first_seen":"2023-05-15T13:26:32Z","last_seen":"2026-08-04T06:18:34.27119Z","times_seen":1771,"resource_available":false,"data":null}},"time_used":1736,"timings":{"blocked":1441,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/blockstack.jpg?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/blockstack.jpg?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1729\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B794D103332055457\r\nAccept-Ranges: bytes\r\nETag: \"F0297CC5D0BF31CB9A1362A39B7558A5\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:19 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15866930277922809935\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 8Cl8xdC/McuaE2Kjm3VYpQ==\r\nx-oss-server-time: 7\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"f0297cc5d0bf31cb9a1362a39b7558a5","sha1":"5728b90a39b4d4fe5a711687a5279bc511aff98b","sha256":"484fae0c139dc76be0476aefeff0d43e0863c9cb11d77eece685eacad4ba855e","sha512":"430e7471d5d0145980ce6aaf9f3eff04401bbb35747652fb59435392bd0c4a0c95d136e4eef93810b279b64a3d2cb7147df02c7cb0295c16d3e6a6453c531945","ssdeep":"","tlshash":"7031fad363f9eb26f4b3082cf035533c451d903fb09551fb581e9ddb678d24a4420295","first_seen":"2024-11-06T16:41:01.059239Z","last_seen":"2026-07-28T19:29:08.856047Z","times_seen":27,"resource_available":false,"data":null}},"time_used":2331,"timings":{"blocked":2057,"dns":0,"connect":0,"send":0,"wait":274,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.012420b3946024432a80bb0f8f9c65aa3.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.012420b3946024432a80bb0f8f9c65aa3.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2152\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982C794D103332B45457\r\nAccept-Ranges: bytes\r\nETag: \"1B80B842D831C0604FC107792E0BDE23\"\r\nLast-Modified: Wed, 16 Oct 2024 15:25:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 13504895552961361253\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: G4C4QtgxwGBPwQd5LgveIw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"1b80b842d831c0604fc107792e0bde23","sha1":"141e1b33e8b3ceefb3bb1650c0f2a64ffbe0480f","sha256":"16fd1447e1e577b9b92b10a2c6f435e04c138d2069e6f10af54aab05db25bcef","sha512":"148ee8fe3050f2dfbedcd6de0d8ae490eb53b7f692165f3e1d263e884d92421dc59356aceb2ab11350297f7c8a8faa6cfe2ed1a8462bcfdc123cd763311dccad","ssdeep":"","tlshash":"f2415ad1ac24b86ff81c89f2147ad945cba0882cff1e24090f0e00564287826b64f342","first_seen":"2025-09-28T17:49:51.72849Z","last_seen":"2026-03-31T15:18:02.938226Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2861,"timings":{"blocked":2591,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-00b0640a.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-00b0640a.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 811\r\ncf-cache-status: HIT\r\netag: W/\"696d4d19-203\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GTYNLr5MA0pGqyrGeIDJb2CIOUA9YMuSroCvHxnCuXI8u9L7ymNfn5pld3443Kc9goaLGt34OysSYtOnvJCRFjGjFxUbQZmrwwR7C3Wr0n8ERm0%3D\"}]}\r\ncf-ray: 9cf6ae9cec8986c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (514)","md5":"1b19e4d300e56ea8d612bc74aeb04696","sha1":"c9f95408f8d2f217e24fb3057df339e68e03b44e","sha256":"b432f6523231cbec3adff57625700d6067a2b44aef3faa22b435bc7200a4540d","sha512":"796342c33deee5f122abc90368574ae5b4fa6788e1b0994c25a47603be8bb419af8cb287a8af2f028ee00126ce57e3d8968a9e0ca0e17a18f81fbd8ee6aaf8a9","ssdeep":"","tlshash":"74f0c92f693691b60ba388f8e123181066180f467724c5e8e58b0e00cb348ead25ea2c","first_seen":"2026-02-17T16:19:44.564458Z","last_seen":"2026-02-21T23:49:59.775232Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/resource/svg/dark/user.svg?3.0.1768770840912","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /resource/svg/dark/user.svg?3.0.1768770840912 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 31 Oct 2024 01:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722e1d4-41db9\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 810\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gfBya6X87oek60c0oEdP7sk15Xiw%2FGyFkTogUvnGzhilyGKhm24dTUrow4wbP50B2G1%2FBp0P2X9EDOXbbvgtcUS6rH8PsNmNPuW6Dg5u60RN%2Fdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea2fe1786c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":269753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"343e93619296c83789f386e7ac72182e","sha1":"282fb553ca8f19b35b0daa86e23a7dea1a61ac28","sha256":"3649b4f0729ea27b5cb7044f78efec458b298708a5f3fcceca8e33df3c9a1192","sha512":"8f063a71f48bba80dabf805439e1bd09bb65e529ca6b0b25c2df1ed3e3487d4b32fcbe04b429789a6c85e6000ebef21b10ea2d8238e909af28f4f9c98c34afe4","ssdeep":"6144:kGw3wpABbvL1VoDtWyoDm6HFv1OwSAXLFOSkG1Gw3SoBaIPQAN9:MRgD8yoDNlvxS/G1Z3iu","tlshash":"2d441216ea955d8ec61406fc616e5e0d7ede02ec06a862ed17cc3c436addd4180ffa2e","first_seen":"2025-09-28T17:49:51.677491Z","last_seen":"2026-03-31T15:18:02.846518Z","times_seen":13,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/coinInfo.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/coinInfo.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 55728\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B7CD23C3233652687\r\nAccept-Ranges: bytes\r\nETag: \"48384A67185DBDFEEF3AA43C99D3319C\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 3192987439189544564\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: SDhKZxhdvf7vOqQ8mdMxnA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55728,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"48384a67185dbdfeef3aa43c99d3319c","sha1":"23e15189bebafbbec8b23e8ed0f3392a9b7979ee","sha256":"1ceba4efa6a645fbe532e520385f37001922e14b6aa7b4ebeb19e755014feb39","sha512":"2f7a13f56ff64b874a76994d00f198c5fc2b7424181935e641eb81bcf171db54fa50b711502c0c4a7e8f5c934ed5747233d87ae0602916244947d3724eb3ce10","ssdeep":"1536:5ko5w6RHlzxqElMwBI6M3iD+oLKTn6EPwhk6g9p6uP5I:x5fR9xjlMGnMSDYLPJ6bOq","tlshash":"0d430247c0529ed2c68853aa0e3de48a84779d12358f80577ce6525a82e2df29bd770f","first_seen":"2023-05-22T05:59:44Z","last_seen":"2026-07-30T19:44:59.567355Z","times_seen":915,"resource_available":false,"data":null}},"time_used":1766,"timings":{"blocked":1427,"dns":0,"connect":0,"send":0,"wait":303,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/aptos.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/aptos.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 408\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BE613583834E979ED\r\nAccept-Ranges: bytes\r\nETag: \"3C07397AD2014312444D8A402995631C\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:17 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1230327830200684589\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: PAc5etIBQxJETYpAKZVjHA==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":408,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 4-bit colormap, non-interlaced","md5":"3c07397ad2014312444d8a402995631c","sha1":"9d903a8915cdfeb05c33204895797405ef9fd41b","sha256":"dfda2661a90b8e069d912859a3af3b1b95129ce98540164a766354b3440d8b73","sha512":"116d35bbb9af0edf457cc5cfdd5335960a55008127a997b1496c1daae1a51861a8f63575afc5ecb2359ab1530cffe06d074a5c110d48b9218f50329d58fd1701","ssdeep":"","tlshash":"f6e0f1d0f32c0a1ac3fdc29244e90cd05d63d2e5da21642e74c7a84d8a0c365c6fd037","first_seen":"2024-08-03T18:47:50Z","last_seen":"2026-07-28T19:29:08.86634Z","times_seen":263,"resource_available":false,"data":null}},"time_used":2019,"timings":{"blocked":1722,"dns":0,"connect":0,"send":0,"wait":296,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0890535fe2a2543a6a2d93e1d376fd6da.jpeg?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0890535fe2a2543a6a2d93e1d376fd6da.jpeg?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 3220\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982CAFAD5B373564F9B4\r\nAccept-Ranges: bytes\r\nETag: \"6C8AA729DEF54ADDF8F5F5FF69FE8E82\"\r\nLast-Modified: Fri, 16 Aug 2024 11:38:51 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10653848856368533484\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: bIqnKd71St349fX/af6Ogg==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"6c8aa729def54addf8f5f5ff69fe8e82","sha1":"68033bbd88ef411a027f04c4895bcdca19f96cb2","sha256":"304dee61cd6145155b100434424a359ce0ae56aff263cd7b5280edd592ddd713","sha512":"c325ccf9871663cadfb55d2cd2a847cddafdb8797c0e9b02e4693cf5ba535eee64d9ca7568223b546a552e3b06fa1590cbdb60b1fd6ee5369369fa80c2bcddbf","ssdeep":"","tlshash":"bd61da4d78259c510e06af02a6dee09b1a3f4b48834379c8bdde9a678e500b6dc1dcc6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.348055Z","times_seen":35,"resource_available":false,"data":null}},"time_used":2817,"timings":{"blocked":2526,"dns":0,"connect":0,"send":0,"wait":291,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"camorope-client-a.meiqia.com/push/318/oeksdwax/websocket?browser_id=afc5a0ef9fe66751dcf22930300ecda0\u0026ent_id=464590\u0026track_id=39ny7tVqxRVlFQkCWZVyUL6Ds45\u0026visit_id=39ny7qkB0hvV4TXP6ajsfWsF3Wv","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:45.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/318/oeksdwax/websocket?browser_id=afc5a0ef9fe66751dcf22930300ecda0\u0026ent_id=464590\u0026track_id=39ny7tVqxRVlFQkCWZVyUL6Ds45\u0026visit_id=39ny7qkB0hvV4TXP6ajsfWsF3Wv HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://www.coinbaseaai.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sNb20MnriHNJ0b+MRKGAXw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nconnection: Upgrade\r\nsec-websocket-accept: TczVnIjBnoK0tc8pMSoAtnoLbfc=\r\nserver: istio-envoy\r\nupgrade: websocket\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: *\r\nDate: Tue, 17 Feb 2026 16:32:45 GMT\r\nEO-LOG-UUID: 9329367916796695929\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":0,"dns":2,"connect":19,"send":0,"wait":383,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/resource/images/dark/wakuang.png?3.0.1768770840912","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /resource/images/dark/wakuang.png?3.0.1768770840912 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 31 Oct 2024 01:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722e1d4-779\"\r\nexpires: Thu, 19 Mar 2026 16:19:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NXfp%2ByGNHRtvsVE0iNHfJ2s0o0re2ZlOZ0ocwD6dyhNG%2B6MvDmBrvgNlahGqyHXHc%2FXWt%2FhR39PgJx8X0WmVmFN%2BE7yvg%2FzTdLwDbuBozcyuHTc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea30e1e86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"394f999722a77b486343eddf03926991","sha1":"1500a6021c6304df42ea3732f10ac91e5dde0d4c","sha256":"e1634eb3a00d3eb3776935e43c56367ace4b69894af31c0da0919c6f17cd14c5","sha512":"26bf369db85525e9b337c6923455d79287d2e0095c21a1437106367a43aedcce5063aceedb46b9babefce3658bedd889c9781555f0789c96a230b4974cb4c950","ssdeep":"","tlshash":"de411ba74bca642f8318ca5bdf12c67eb269046499a0aecd34087a6195cf46def01c81","first_seen":"2025-09-28T17:49:51.706432Z","last_seen":"2026-03-31T15:18:02.950305Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0/ethh.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0/ethh.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 109302\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982AAFAD5B373566F6B4\r\nAccept-Ranges: bytes\r\nETag: \"7F52891BAC671C9207D8F480694AE2FD\"\r\nLast-Modified: Tue, 05 Nov 2024 15:24:16 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2467013188330356412\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: f1KJG6xnHJIH2PSAaUri/Q==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":109302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced","md5":"7f52891bac671c9207d8f480694ae2fd","sha1":"95a3575f11675b2b2af048593db15df1b876372f","sha256":"d65c966fd5d804b9809ea96cfa863e896a8ded9e523c2a6892f264ffb0772385","sha512":"431b124850b88c5edcb14a8ca09b11cb0b82220fee63fcc64783e8e58aa27bf646c16764715f02029c17758d439a2e5d1689f003dcfd929a82243f81ce8e2cdc","ssdeep":"3072:2UlucHD2ql3T4ADad+vVZ/33LeC5U3Evw+aiVk1a:2SuSD2Y3ThvVRLeD0o+a1g","tlshash":"d6b302fb7b2c4fa08320ffb22128790579b402954c6b5427846166e8d63f7b67e7836d","first_seen":"2025-09-28T17:49:51.72533Z","last_seen":"2026-07-28T19:29:08.868883Z","times_seen":20,"resource_available":false,"data":null}},"time_used":2337,"timings":{"blocked":862,"dns":1,"connect":285,"send":0,"wait":292,"receive":318,"ssl":575},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0b2e198cafa9c454ba20cb2acc2d47bf7.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b2e198cafa9c454ba20cb2acc2d47bf7.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 499\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982CAFAD5B3735AFF9B4\r\nAccept-Ranges: bytes\r\nETag: \"758505DEC73355A50FA0EA7479FA0223\"\r\nLast-Modified: Fri, 16 Aug 2024 12:09:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8231209139480566513\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: dYUF3sczVaUPoOp0efoCIw==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"758505dec73355a50fa0ea7479fa0223","sha1":"f625f75d14059f9ca2f10573bb2c8634c6dc0b8e","sha256":"9ba4907adb5327ca635f6187be09172b1598fcfc0e96b62fb9736d9b17ac23d9","sha512":"de61b7e447da38fb2dad09bafceb7749b71e7fcd5cfa1e1d595c79bbb59e48c630c15c57c88d5154b3fdd22364d12d5fc6569173fedfb98fedbef50ae5191ac1","ssdeep":"","tlshash":"3ff054ed83a4ec7cf60bc3608f20e828c630b96b348d0c16256eb6309b4d09c2db11f6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T23:35:41.503153Z","times_seen":177,"resource_available":false,"data":null}},"time_used":3101,"timings":{"blocked":2808,"dns":0,"connect":0,"send":0,"wait":286,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-api.meiqia.com/hikari/visit/visit/start?ent_id=347bf4e2042e6dbcf1540aade9c43725\u0026track_id=\u0026title=TagomiX\u0026referrer_url=\u0026url=https:%2F%2Fwww.coinbaseaai.com%2F%23%2F\u0026is_standalone=false","fqdn":"new-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:44.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"OPTIONS /hikari/visit/visit/start?ent_id=347bf4e2042e6dbcf1540aade9c43725\u0026track_id=\u0026title=TagomiX\u0026referrer_url=\u0026url=https:%2F%2Fwww.coinbaseaai.com%2F%23%2F\u0026is_standalone=false HTTP/1.1\r\nHost: new-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-is-meiqia-domain,x-is-standalone\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\naccess-control-allow-headers: x-is-meiqia-domain,x-is-standalone\r\naccess-control-max-age: 86400\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nContent-Length: 0\r\nConnection: keep-alive\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nEO-LOG-UUID: 11233044822658207077\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"camorope-client-a.meiqia.com/push/info?browser_id=afc5a0ef9fe66751dcf22930300ecda0\u0026ent_id=464590\u0026track_id=39ny7tVqxRVlFQkCWZVyUL6Ds45\u0026visit_id=39ny7qkB0hvV4TXP6ajsfWsF3Wv\u0026t=1771345965020","fqdn":"camorope-client-a.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.225.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:45.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /push/info?browser_id=afc5a0ef9fe66751dcf22930300ecda0\u0026ent_id=464590\u0026track_id=39ny7tVqxRVlFQkCWZVyUL6Ds45\u0026visit_id=39ny7qkB0hvV4TXP6ajsfWsF3Wv\u0026t=1771345965020 HTTP/1.1\r\nHost: camorope-client-a.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.coinbaseaai.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\ncontent-type: application/json; charset=UTF-8\r\nserver: istio-envoy\r\nreq-cost-time: 1\r\nreq-arrive-time: 1771345965342\r\nresp-start-time: 1771345965344\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nCache-Control: must-revalidate, no-transform, no-cache, no-store, max-age=0\r\nContent-Length: 78\r\nConnection: keep-alive\r\nDate: Tue, 17 Feb 2026 16:32:45 GMT\r\nEO-LOG-UUID: 844273353566501305\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":78,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"d4467d9c74e56914a46707c7bff29878","sha1":"1fe40709f772bb8f6902c2c353e62bc1e491a6b7","sha256":"0ec1add41082d246a56afb98eb62e623644359a9f4899944360304e0ee81db7d","sha512":"7a6bdf6457a9d364602d3480bd0f3691e01efe584d2992ed3abed9f981fcabfe71ecd62aaf9474bb5ae79f6e8201888f7be14ecb674c68ad25fb683ab5e07aa1","ssdeep":"","tlshash":"57a01209853d206448141b2002101e13481c04eb020160a51218ab1802910324050197","first_seen":"2026-02-17T16:33:06.171108Z","last_seen":"2026-02-17T16:33:06.171108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":631,"timings":{"blocked":177,"dns":131,"connect":19,"send":0,"wait":275,"receive":1,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-8445ff7b.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-8445ff7b.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-27b3\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BuvCCsjMAhpVB5T8q1kruqNpbJGtgqRfdgEGeLmWN5GviABmQDp4phPuLw%2FDq1zMzeMQNjY7v%2B8CQsjDHEu77U%2B5XI87PcTq626L%2Fp6IAhMF84%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9cbc8786c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10163,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10162)","md5":"6b528f57f89b231a94107c60bd2caff8","sha1":"f065986a8fe41add70b0d10c1616e3071d3af493","sha256":"1dc5e1b3461961dbd580365f3f01f1567589881aca3fe4755f14a4533848bd88","sha512":"5aee297074bcb8b620ef33f620675ad6a127e93954523b8a4ccc571a6514ce27a52f361ec8a49cce8f5416b73d1f0dd494b5916ebc179ebcbdf7f235f01af0da","ssdeep":"192:VplZsjw+3OeJTApFPpFw3OenN7ZICSfYx8w9uouXRfZU4jpPQ2wimoX5vizw2s:LlZsc+ZApVMJ7ZIvQb9uoaRfZU4jOimW","tlshash":"a122849bf902ca3de9b7f45444980460966e3fcb2009c971b9bd5d1927a7ef4f398324","first_seen":"2026-02-17T16:19:44.570345Z","last_seen":"2026-02-21T23:49:59.723269Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-b5ddd233.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-b5ddd233.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-12db\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qHl8qK%2F63UTlUfXbbUB1gJGSPwup5Oi%2Fehe6yBKmt2CTMNw%2FEfGAazSll4f8%2BAho8bmg9k%2F1ou6V6kujZTSj6QjpvC6hZ8CBBX%2BB0IhNmiskH2g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9cec8a86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4827,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (4820)","md5":"7492da7d8e3a79f92e9f5ff59e6adfd7","sha1":"99a2fab319db40f797e4ca377a9f1a89b87ed961","sha256":"61523f2ea917792869786a92e2df782e179a8ce1e16614dc22b287943e015f6a","sha512":"ffaa239b8b6c9d1fa8ea86ca53e5cd6a7306bacaf746361d27c92d462ddb3a4c2409eac476db93c812e27086d0eec247c08c502e5850c7603b3f74ba47538632","ssdeep":"96:TE4Rfiy9YaqD+w1ijFBtbFKJgitbbAW3hvNXTe3J5eAubYj3:TZRfiSYaqiwGBtbhJehvJaLeAJ3","tlshash":"53a1d9d8f80282bbe97b150408480420219c7ffab11448f5fbfdae0e37b4db8d658725","first_seen":"2026-02-17T16:19:44.571286Z","last_seen":"2026-02-21T23:49:59.764185Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/lever.jpeg?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/lever.jpeg?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5326\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B8B90443130E330AC\r\nAccept-Ranges: bytes\r\nETag: \"C58F4C5B071E5912836E45C01AFA9E03\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:32 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15115948942539943788\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: xY9MWwceWRKDbkXAGvqeAw==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":5326,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 250x250, components 3","md5":"c58f4c5b071e5912836e45c01afa9e03","sha1":"b6f7e2a28f9041fac42acd69b8713fd811ea9ea5","sha256":"ea10356f413860e7186404344d50b9516f8e0fe1317df7d53fc81ce81c8e7bb3","sha512":"d61e62b7171e37d01a1453feaf4685f922dad6afe642d687afd248eda211886d2b75d3afe06dbe9fc5bcd483a28cfe3f4541f0a1af9325c0a3c0163bb74a29dc","ssdeep":"96:emHUsasfObCPgp0gc3oj3OSj6rTvdv6OzmrzobXdslboM65PHMZ1:uJO1Yp0gtjhjIvdv6OKrzobN465MD","tlshash":"c3b16d72b762d9d8c519e1f1da024ba2600d6e7b01bf9cc95f6d1d9119f4081cb813cc","first_seen":"2024-06-11T12:53:28Z","last_seen":"2026-07-23T13:38:34.356666Z","times_seen":286,"resource_available":false,"data":null}},"time_used":1691,"timings":{"blocked":1397,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/gala.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/gala.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:44 GMT\r\nContent-Type: image/png\r\nContent-Length: 1483\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982CE613583834247BED\r\nAccept-Ranges: bytes\r\nETag: \"9A2F6C511118EC1DB83ECD27C72EB766\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:21 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10257424128811127276\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: mi9sUREY7B24Ps0nxy63Zg==\r\nx-oss-server-time: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"9a2f6c511118ec1db83ecd27c72eb766","sha1":"254ffa9d9201ab7ae034fabe59f3ab4912e72b22","sha256":"7f51415db3f2f5c80d18db60c242e4a6949f5832e4937e996aa6367f8469456a","sha512":"fdd53d9c40d69e891cdc274dc76e141e376bb732f9afcca0cf9d6d25e93c51ff28481ae9ad1a6385075e524b60672ea2df6100b793bb0f14d369df98dd6482ad","ssdeep":"","tlshash":"1f31ecd0b5fea918f208807465fdc15675b73f45b221f9d50282f7d6563a780574322c","first_seen":"2024-10-18T13:48:19.583957Z","last_seen":"2026-07-28T19:29:08.860565Z","times_seen":65,"resource_available":false,"data":null}},"time_used":2590,"timings":{"blocked":2293,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0e6349d778f51412ab3a5a4539ce35eca.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0e6349d778f51412ab3a5a4539ce35eca.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1160\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B794D103332BC5357\r\nAccept-Ranges: bytes\r\nETag: \"317A55A9FED5B3CF128A8A5FB0396970\"\r\nLast-Modified: Fri, 16 Aug 2024 12:09:07 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 8256275106131043676\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: MXpVqf7Vs88SiopfsDlpcA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"317a55a9fed5b3cf128a8a5fb0396970","sha1":"37d67afa8af6324119c8aab774b10dedf1507782","sha256":"d273b94a0936146b2b2b631466f167a33661f0989bfa30f010479f0a6ac44181","sha512":"0318e3dbb07436029572a14c2f3cbee5b8fdcd3080d18be88d6879d0856c8ee25da6a29bd06a0d7076e4ddd381d672319aa22fc0a77c148efc571523d5b62cbd","ssdeep":"","tlshash":"5621b48ed8e0f955c6938233c916a9c26136250a2eee5025ab4af8d5fce482d801f7d6","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.351136Z","times_seen":35,"resource_available":false,"data":null}},"time_used":2036,"timings":{"blocked":1766,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/getAllSetting","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:42 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pU37HmvtAxUYhG6ewZy799tWQ07aq1Cc1YacSpRzZyPtvdRdWY3ZBqMvGnsZNMq2XuTwXkQ0HQTXtSyGlIChfjebMLBCznfXbXRm6%2FgKwIXclhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea5ce9386c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11168,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f887e1711ff8e37ea787c1fc56b75d83","sha1":"10b187d9d0b4e591c446c27b2717fadf9b07434f","sha256":"0c4fb0b5750fe22bb0390fa53ea74d89dd18c56c85ee720412b7c85224b8debd","sha512":"fd9cded29bbda96910c00b3170bc5994ff93f54a0efc7bf2d023c12e4496f5f3290df1db196aed00383bf497e1a9c1dfcc1d4095b52600aa1051066dfc02cb24","ssdeep":"192:N3lZft3tJpSpQ+oj1M+Rb3uc2hkL1HTN2JSyenhqfpq8cigZQ+fYaowz9NTD0ztn:LZ9NuW6/gZAXYOiOxh","tlshash":"13321f5b36c8cc7c92e259ccd477269fb49c38abaa509c45a4d3ad4ce45adb3480b18f","first_seen":"2026-02-17T16:19:44.582232Z","last_seen":"2026-02-21T23:49:59.748296Z","times_seen":3,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/resource/svg/dark/zu447.svg?3.0.1768770840912","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /resource/svg/dark/zu447.svg?3.0.1768770840912 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 31 Oct 2024 01:48:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6722e1d4-3994\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tdoNcqXvnuSlA1ROB4kkj%2BZ3xebMWGe1CsOfoOE8AndnLMo87m6tbq2kQrciG7UwYhvNBluVW%2BmmXH0Hi%2Fj9qolOGc2RWJD96oIpwze1MPyAWHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea31e2286c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14740,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f1db3c365b661a45d6a36ed401d71f21","sha1":"967dc84658273e1d6ef5ab4c08d5c7bc6ec0c95a","sha256":"d775f19e70413a3b22442fb942e699c361f4ac052c163ae3a5fd9b0d7f88b187","sha512":"3519d6e87c915f0b0b8f6179ec428b7bda2bb320af5f7dd3df97230fac6007f1383b57747e9df5f559eb8839129ce3b2cd469aa0c6020e9e0f6abd56d53a2569","ssdeep":"192:uv9YPEkLnIHX8PeEny8MzWEPPmprtMSWuULUpcM28dCv2:MsYzWEP+BtJW78l","tlshash":"fa62417132e0c88be3cd4aaa2c227709e7e79475ead6f567204d53fe15e7cd21809887","first_seen":"2025-09-28T17:49:51.657762Z","last_seen":"2026-03-31T15:18:02.873053Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/bitcoin.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/bitcoin.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 2691\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982A8B904431304C30AC\r\nAccept-Ranges: bytes\r\nETag: \"2EDF1EF8B333C40979976D1A49BC234C\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 1939274224005843766\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: Lt8e+LMzxAl5l20aSbwjTA==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-04T06:18:34.284864Z","times_seen":25747,"resource_available":false,"data":null}},"time_used":1734,"timings":{"blocked":859,"dns":0,"connect":0,"send":0,"wait":293,"receive":1,"ssl":581},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/xml.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/xml.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1181\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B7CD23C3233542787\r\nAccept-Ranges: bytes\r\nETag: \"D6DEB1AA7365929E2CF751B88E56B5D6\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 14726560562703307949\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 1t6xqnNlkp4s91G4jla11g==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d6deb1aa7365929e2cf751b88e56b5d6","sha1":"e0cda9534a323c08abd29d3ff2a056207354b0f9","sha256":"efb48136213036c6ca1e9d0dcb46c97b5b0e92ab6d12b5ba7fe6b46eb8e8089d","sha512":"69b9e0fe30ade3046b5d9a04674af070eec5fccde45e1610f24b81909c5534e6413269e1a0e13bb6139a1902d31931b6ab83e3a1264a5b6e6155796dc0e52e67","ssdeep":"","tlshash":"c821c6fda34b6d8185134b33bdb7945ffcbabcb24021d2447604b85354760091e1edc9","first_seen":"2023-05-04T14:58:57Z","last_seen":"2026-07-28T19:29:08.866861Z","times_seen":132,"resource_available":false,"data":null}},"time_used":2325,"timings":{"blocked":2033,"dns":0,"connect":0,"send":0,"wait":292,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"OPTIONS /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f2KoCQ6I%2FtkGmJ1pPJVyVTJtTCNPZ1btJpc3vb9wGCIY0zWlnoXwcYQGPfP3G9T4k8DOoIMNSNephk2S8nndn4qVu8coYnm%2BHtVpKd5iewULrsQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf6aea43e4c86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.meiqia.com/fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js","fqdn":"static.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"101.33.21.144","port":443,"asn":139341,"as":"ACE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:42.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"GET /fe-widget/v1.5.5.prod.20251128_164/app-v1.5.5.prod.20251128_164.js HTTP/1.1\r\nHost: static.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Fri, 28 Nov 2025 06:40:28 GMT\r\ncontent-encoding: gzip\r\netag: \"C4E64225A20489A5BE3C5E88100DD38E\"\r\ndate: Thu, 25 Dec 2025 09:02:31 GMT\r\ncontent-type: text/javascript\r\nx-oss-request-id: 694CFDA7460E90393418A09F\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 16588518196627940506\r\nx-oss-storage-class: Standard\r\ncontent-md5: xOZCJaIEiaW+PF6IEA3Tjg==\r\nx-oss-server-time: 22\r\ncontent-length: 356967\r\naccept-ranges: bytes\r\nx-nws-log-uuid: 10989641207017380279\r\nx-cache-lookup: Cache Hit\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline\r\nstrict-transport-security: max-age=1;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1209102,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fa1553d00d7d395fc8941c8175cfae45","sha1":"18602d8edacd3597ca66776fd04554065fd476de","sha256":"500791a0013dc9e037d19876a79ced62ee3a781aa04ce739937b316b2a562473","sha512":"2f5ff614edba745a9c45905ed04d6c2ed743205ce526836045b200fbf8b1a4d29c310224d352c7312173c4b0061263deb7b25afb3961272ca5f6a3f3ca088e65","ssdeep":"6144:3LPRS/lbPjWS96XStzJkazaeBXMbbHnGFIteZclTUYoFyFbe9Gk1Y2FAUSniW/Nq:7Zw4XSrkavBcfHGFIteWlAltGkiK","tlshash":"f92539cd70c2b0a207e361b5403f100bb33a6d69680d5454f665d8dabdba98ea237f7d","first_seen":"2025-11-28T12:22:00.19741Z","last_seen":"2026-03-06T01:26:04.889466Z","times_seen":536,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":470,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-a502dc58.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:39.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-a502dc58.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d18-4c844\"\r\nexpires: Wed, 18 Feb 2026 04:19:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 813\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1cEh7fwt%2Fromcps0oWjls9a7T%2BB8R%2Fb1TE4G3c%2FrRfs2khdyDFAjUFvU4DHQSqOy%2BGo3T1%2FVV2WBG8%2Bxt5KteR9mkzfbhL4Rpb0ccCKWiR7M7oU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae999bf386c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313412,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"68718464160fe7ba75c9d591a8464b00","sha1":"f1761c05d68add8e4009dab69973d910bd9dd12c","sha256":"a502dc58e3a27af8337681eb75a865d0162090b49015474e9e147eb887f96bc4","sha512":"998d2c2fd4faa654a525bf0b578a2316ead76bba157d25b8c1f59d9e34ff4b09789b012a7a1aebcc6b711d807cdb82a5d96f8e27bd629b138e83fca076fbc6a2","ssdeep":"6144:nWB/9S/Jk4UkZ8w71ZACkFDS3vyf58rBeV05Tb:WB/54NZ8w71ZACkFDS3vyf58rBeV05Tb","tlshash":"6c64d8a9a590117c6f27aa7597ce5ad8f23ce6719c018de8f201600a4fc7ffa1363617","first_seen":"2025-09-28T17:49:51.680184Z","last_seen":"2026-03-31T15:18:02.933705Z","times_seen":8,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/index-b80c612a.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/index-b80c612a.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 811\r\ncf-cache-status: HIT\r\netag: W/\"696d4d18-172\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xjlJr8uY6iK6fIfux%2B3t%2FwNyrRKn%2BMspT%2BECG9P7V0aMfuEfN0MlHczM2%2Fw51ALacxQxMqbRlOfTS%2BfQU4E9izhux0wKe5L75EL5%2BGLJ9g56NSU%3D\"}]}\r\ncf-ray: 9cf6ae9c0c5186c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":370,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (369)","md5":"d92d585e75bb76c6e828410a8aebb6d5","sha1":"5dd1e5fbf354a75ab217e07fdcae8e481af3e3cf","sha256":"b80c612af470affcb11346827c225594d28a1fdffb998d3eaa5a3f819862b5de","sha512":"ef39c2adef825d83c11685047e6e3a760bd0dfa2a054ec1eb82596cb2739dc10baff44d1aa32411c3218bc1d4544638255315fb5f396f03d2f07d143f6f0855c","ssdeep":"","tlshash":"a2e068c480d5827fb63b6079267c930ad0249cc4e8003b78e13fbbb146c36853171201","first_seen":"2025-09-28T17:49:51.714207Z","last_seen":"2026-06-25T17:45:58.730738Z","times_seen":14,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/InfoPopup-63454fe6.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/InfoPopup-63454fe6.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-4e1\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HIeMTgF8A0PWdcVjtrHvpPa0dytE2CpRTmOMxjNHbQ3Gb%2F736%2F0Pf%2Bzl1VgeUbS%2Fn3p9qGg7N1EiUN8wm7HA5GJ%2FKJfXBlnO3dazPt7GTEkjfSw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9cec8b86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1249,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1248)","md5":"389c9273f319e081da735eeca883f369","sha1":"2e6d09fc238d90a09f37c2d6141c315c865d2b15","sha256":"e31c198c6afdd403c358bf1d9b3da84b69754abf20daf92e229e6e2af346d93a","sha512":"d0dc17982f94078d8c6ffeff3fa8463378f74480474a5d7e77ce2c6fd4d18c286b667414a131e2350a21d883b086384b2545a542b4807f8beadc2e12cba62f64","ssdeep":"","tlshash":"a8210f2ea806d3fac0ba05305109250071093f5ef6201b959aec6e1257a6db8ab4df38","first_seen":"2026-02-17T16:19:44.578657Z","last_seen":"2026-02-21T23:49:59.727014Z","times_seen":3,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/getAllSetting","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"POST /api/common/getAllSetting HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlang: en-US\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Woyu7jNO%2B3jUpZwmLHIUp%2FPutJXVx8a9NzGI3Nr1WxUozmERl13bgspWw8VqCxkKHzSRIf4ge1aCBxegLvFvFoBWqfp%2BJjPChGLW1x0YHWlQGzo%3D\"}]}\r\ncf-ray: 9cf6aea07c8d618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11168,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f887e1711ff8e37ea787c1fc56b75d83","sha1":"10b187d9d0b4e591c446c27b2717fadf9b07434f","sha256":"0c4fb0b5750fe22bb0390fa53ea74d89dd18c56c85ee720412b7c85224b8debd","sha512":"fd9cded29bbda96910c00b3170bc5994ff93f54a0efc7bf2d023c12e4496f5f3290df1db196aed00383bf497e1a9c1dfcc1d4095b52600aa1051066dfc02cb24","ssdeep":"192:N3lZft3tJpSpQ+oj1M+Rb3uc2hkL1HTN2JSyenhqfpq8cigZQ+fYaowz9NTD0ztn:LZ9NuW6/gZAXYOiOxh","tlshash":"13321f5b36c8cc7c92e259ccd477269fb49c38abaa509c45a4d3ad4ce45adb3480b18f","first_seen":"2026-02-17T16:19:44.582232Z","last_seen":"2026-02-21T23:49:59.748296Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/type/defi_activity_type","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"OPTIONS /api/common/type/defi_activity_type HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ntv3Gntm9b61nclRQG28Ejn11UGyacJOiNa2hsBHhe3j1%2B1rkhnumiTqoggRtk9IxqbZNGwSP4XAo0FuYSBaVcTDdmEvO3XO1WaQDi%2FFCCMpUp4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf6aea44e5086c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/notice/list?key=ROLL_NOTICE","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"POST /api/notice/list?key=ROLL_NOTICE HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:42 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6aJnQrF6M1rHZtkiinWT4x7wzDe1g%2FqLbbEjTKPkMKuOv6NnaQ7MHOGrctjstWNbTRLUuem9gS0IyG7DLa5rrp9SmPBAx%2BfAwqGIDZBcLpL15po%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea5ce9586c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":500,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"57f6a7d0ecae684e7afe50fd9d873df3","sha1":"aacb2984b4d1ed7dd04aa078e471688c6813a863","sha256":"c574d763e5c971d232948addfa8c843c77b73a9541d7e1b56195b4b398721093","sha512":"942a9c16496ac11bd34c252c38fa55f5c007f04e3fe2c450f19f7213443344e91f65daaca669da531651dcc4a49e89748f66a59c510d9874e1ef7bbd4a094225","ssdeep":"","tlshash":"d0f02e0d153cde75490694cb21ccbdcd51af1687d670cd30865bcf2c81f16791b17904","first_seen":"2025-09-28T17:49:51.689442Z","last_seen":"2026-07-28T19:29:08.86535Z","times_seen":19,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"POST /api/notice/list?key=ACTIVITY_NOTICE\u0026modelKey=HOME_ACTIVITY HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nlanguage: en\r\nlang: en\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:42 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQ4q6MzSasBCB%2FUKBOF0gH8CoGp19t0qweFXckqx5t9Ea502TqD0QYVzJaRqDd%2FTbGxVbCEtHHN1v3MM6Uuh9M6bjTDFHL1NWvR6tbZsqEkWp%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6aea5ce9686c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"edb79000747b3d9f81191f6f7899cd42","sha1":"c940836f26141e6f7a9aa1b9c6a3b1827dc90a10","sha256":"ba489eaaa8fcb5011a1dd92fd64d2942108116b9fd3aa50a414151f90dc4ba11","sha512":"28b9f1908c946fc43b4ae70ca2e5bffd2d670473fa521f714c12a04c59dd86efacc6f9e4d70a005bfbd3d5c2bb547a6637ed5754ef5e25f2dc47c760f0bd2893","ssdeep":"","tlshash":"b0f02b1b69788d75080598cb54cdbdc9658e1647d360cd309567cf2c81f19b71a17544","first_seen":"2025-09-28T17:49:51.690518Z","last_seen":"2026-03-31T15:18:02.849803Z","times_seen":12,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"edge-api.meiqia.com/summer/widget/route/match","fqdn":"edge-api.meiqia.com","domain":"meiqia.com","tld":"com"},"ip":{"addr":"43.174.224.10","port":443,"asn":0,"as":"","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.meiqia.com","organization":""},"issuer":{"commonName":"RapidSSL TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 24 Jun 2025 00:00:00 GMT","end":"Fri, 24 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F5:5E:88:72:BE:D5:CD:01:9F:60:65:9C:E0:33:77:43:41:54:DC:8D","sha256":"40:6B:84:9A:F1:93:17:61:39:C2:0F:6D:55:0A:5A:52:68:B9:1A:93:70:E7:81:5D:EE:6F:7A:5E:29:D8:14:94"}}},"request":{"raw":"POST /summer/widget/route/match HTTP/1.1\r\nHost: edge-api.meiqia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nx-ent-id: 347bf4e2042e6dbcf1540aade9c43725\r\nContent-Length: 47\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":47,"data":"{\"entToken\":\"347bf4e2042e6dbcf1540aade9c43725\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nvary: origin,access-control-request-method,access-control-request-headers,accept-encoding\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\ncontent-type: application/json;charset=UTF-8\r\nreq-cost-time: 2\r\nreq-arrive-time: 1771345962072\r\nresp-start-time: 1771345962075\r\nx-envoy-upstream-service-time: 1\r\naccess-control-expose-headers: *\r\nserver: istio-envoy\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nDate: Tue, 17 Feb 2026 16:32:41 GMT\r\nEO-LOG-UUID: 3670157062010556419\r\nEO-Cache-Status: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":996,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"47e8268ea2bb4bb475a5fc550403cd56","sha1":"12db95c9d47f206fda4ad23f4db4bac6fc0c1ad0","sha256":"48138470261eda11ade6fcbbaee37e38246ffbcdc5c4479d88868d1684b21088","sha512":"b24054e6753f357523e776751e28d739c76e50d18efea260ec97cc8cad80573cb883237299f66e618ecec1fb2afdcf15de38182d41d85469ff45e289dc5dd401","ssdeep":"","tlshash":"6b11af9356a809aa1f1807ca4605510ec59ff00f1cc4dfbfd522ad04993f39a03e474d","first_seen":"2026-02-17T16:19:44.583168Z","last_seen":"2026-02-21T23:49:59.73679Z","times_seen":3,"resource_available":false,"data":null}},"time_used":846,"timings":{"blocked":-1,"dns":262,"connect":19,"send":0,"wait":276,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/vendor-72ef657d.css","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:39.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/vendor-72ef657d.css HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 18 Jan 2026 21:14:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d18-16997\"\r\nexpires: Wed, 18 Feb 2026 04:19:06 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 813\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umaJb7MZKj1dmK18U1RwnQjy%2Fv6QYlsLe3cfy0SHnCSdbDAGsZlsQvgOCXNzLPyRHbYBUy4nIpsx2t6QTdsGnzxKjIpnYX5ueaDRWFZra%2FytdqE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae999bf086c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92567,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65022), with no line terminators","md5":"b40940e3efd47e3e653fe1fbec0ab363","sha1":"3911d44e1bceb07e83746e6bc68de9dbb587b11a","sha256":"72ef657df5906e9f23040a4ceb49985bf894ddcb4324d7d873a0c20b15d3e864","sha512":"f3706c9146b2091fb1a864ab4180d0a1538e801686af21bab4c7231421859a99fba7dd694632faaf1c457fb06711fcb16809e2221fe692c16390e7e98ccbf4d5","ssdeep":"1536:ZTIyNBi3MFYaQj73rx3WqyrtpqoSWEDZEnX73:ZdN0rxmNH9yDWr3","tlshash":"0193c5a5e9c4a1fc6f26f6659b4766d8f13cf661cc01daa0f109512d0fc7bf50223a2a","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-07-28T19:32:04.730749Z","times_seen":353,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/getCoinList","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"OPTIONS /api/common/getCoinList HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-length: 0\r\nserver: cloudflare\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SZMQuNovkdnqyrCcA7snmaRELjpdPIfTMh9AXXVO%2BtT7I94qznqLboe3Ujxc79dmLSawTux21kc8%2F2gVs%2BaXIlabJcenwJwobZ3K%2BzMEnRpnALE%3D\"}]}\r\ncf-ray: 9cf6ae9c3f8e618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":70,"dns":6,"connect":11,"send":0,"wait":648,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/currencyItem-82666181.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/currencyItem-82666181.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-4bb\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xC52zy1%2FCgFLOL5XGXD6ONPujOo5BT0iIkPDjq2JFU8SQVhE4oPZRN0tBsPBwycYfcQsXF7Xv2dEuLyDVhWh902ZF8hxS%2Fmm%2FNbPy5YaW9%2BFXMY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9c3c7a86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1210)","md5":"1fc8ec087b0259451c38d85f281dd296","sha1":"46698c27d120302042678727b5e7b32c7cbc8670","sha256":"0ab369d61b3af3ba913bd6e9a099a9a33d35d76ffeb7858159a73ed6e8751821","sha512":"e1065a26e9c5109b179d05ce9ba82b815ea1ae4b55f58cec5f54ce712a2a0d38cfe6eb92e7544e39fc3d3f1774a5b2832dacd66101073f21550ac4c98ad262a1","ssdeep":"","tlshash":"c121f19a9e01cbb1c6be5562807c0424121d7fca701185c5faed159837865bcd728a31","first_seen":"2026-02-17T16:19:44.541375Z","last_seen":"2026-02-21T23:49:59.769845Z","times_seen":3,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/binance-coin.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/binance-coin.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 12869\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982AE613583834D978ED\r\nAccept-Ranges: bytes\r\nETag: \"A533EECDEE5A789E7D94F8F79F95D588\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 18158548296662870332\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: pTPuze5aeJ59lPj3n5XViA==\r\nx-oss-server-time: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-07-30T19:44:59.546621Z","times_seen":924,"resource_available":false,"data":null}},"time_used":1192,"timings":{"blocked":-1,"dns":0,"connect":293,"send":0,"wait":297,"receive":6,"ssl":596},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/chainlink.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/chainlink.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 1008\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BAB673237307BAA41\r\nAccept-Ranges: bytes\r\nETag: \"1D8873B15CE7E65A262D1788F19912EF\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:18 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10605487744494310156\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HYhzsVzn5lomLReI8ZkS7w==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"1d8873b15ce7e65a262d1788f19912ef","sha1":"ef5b427eafdcd42ba4e2a785a49bbfb13fb0c1e0","sha256":"93d103ab945f2972cbdd53050d239c6b9df3d430e9343a21143e805b280e3967","sha512":"1d09a7cf6e12da2a6a2d7a16cba54408f3a90dd58acef01b268b37c3f0545b0541aca6725b894862af1de877dd6c7d2ab9cec94baa7584536e9011e6c5553dcb","ssdeep":"","tlshash":"5a11c461b9beb91ac362083381c121b0ca066c3b4120f2e7cc08b210a23c00ad7c782e","first_seen":"2023-05-07T19:16:40Z","last_seen":"2026-08-02T14:27:27.457933Z","times_seen":412,"resource_available":false,"data":null}},"time_used":1743,"timings":{"blocked":1443,"dns":0,"connect":0,"send":0,"wait":299,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mifengcha.oss-cn-beijing.aliyuncs.com/static/coinInfo/near-iounear.png?3.0.1768770840912","fqdn":"mifengcha.oss-cn-beijing.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"39.103.20.45","port":443,"asn":37963,"as":"Hangzhou Alibaba Advertising Co.,Ltd.","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cn-beijing.oss.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 22 Jul 2025 08:21:42 GMT","end":"Sun, 23 Aug 2026 08:21:41 GMT"},"fingerprint":{"sha1":"0E:17:E2:1C:49:2B:58:46:EF:6F:B8:CA:60:00:F7:D5:B3:39:DB:5F","sha256":"65:62:9F:A3:53:EA:8B:6D:C8:83:93:81:B2:E6:43:7D:E3:97:5C:77:5E:01:C1:A5:29:3A:CE:5C:62:0A:D3:77"}}},"request":{"raw":"GET /static/coinInfo/near-iounear.png?3.0.1768770840912 HTTP/1.1\r\nHost: mifengcha.oss-cn-beijing.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: application/xml\r\nContent-Length: 333\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982B98945C38325A18F9\r\nx-oss-ec: 0003-00000905\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":1774,"timings":{"blocked":-1,"dns":669,"connect":274,"send":0,"wait":276,"receive":0,"ssl":555},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"mifengcha.oss-cn-beijing.aliyuncs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0710da031605b4962ba2c5c46d9d1c06a.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0710da031605b4962ba2c5c46d9d1c06a.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 2001\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BAFAD5B3735B7F8B4\r\nAccept-Ranges: bytes\r\nETag: \"E230A60E64EF390D376975BB44DC1D08\"\r\nLast-Modified: Wed, 16 Oct 2024 15:39:10 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 7771545539451043796\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: 4jCmDmTvOQ03aXW7RNwdCA==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"e230a60e64ef390d376975bb44dc1d08","sha1":"a388e6fa7639f60a010741f2dff95858d55ff7ce","sha256":"8d356c84d181c826a4002ec831a409c3d5d8e5c617205c05812a800ec33dccdd","sha512":"049987ccb01af4a1a14b9e391c77f9d849b73ede9113068dd3f6fad8256b8b7208f794b07d921c9d33bfb7d7cdfc1a1f6cffc88d4e1250c1373188374df21f3c","ssdeep":"","tlshash":"53412cf426946e35ce8c07eeceb1afbe6c6637472c141a409a90656fd40ca01c03e954","first_seen":"2025-09-28T17:49:51.717826Z","last_seen":"2026-03-31T15:18:02.923432Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2230,"timings":{"blocked":1942,"dns":0,"connect":0,"send":0,"wait":288,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.02d7feda2e6484c56af24479e415337c5.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.02d7feda2e6484c56af24479e415337c5.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 1962\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BE613583834A17AED\r\nAccept-Ranges: bytes\r\nETag: \"1E445A766F4098F933812AA39BA2BED8\"\r\nLast-Modified: Wed, 16 Oct 2024 15:25:01 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 11763656754421005826\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: HkRadm9AmPkzgSqjm6K+2A==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":1962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 88, 8-bit/color RGBA, non-interlaced","md5":"1e445a766f4098f933812aa39ba2bed8","sha1":"6591a28610240fa9fe2fa5d56fbc980a34ccfe59","sha256":"3a657369be4874d0b30246068e357d3fe4965f433988907d0e63c3b4488c8e7c","sha512":"c3d93ec97af548652589bc612267b0e8b149d9d643240f12494c2a46f4a53d5fc26f00abfd877245388cc48ee2ce64507303eecc5ab91668c8a4b9a0b5147c17","ssdeep":"","tlshash":"4c412cdf39ab47e0c55b0129986ce619790121c9bc552449ec44386edb3f9413e84807","first_seen":"2025-09-28T17:49:51.701968Z","last_seen":"2026-03-31T15:18:02.939682Z","times_seen":12,"resource_available":false,"data":null}},"time_used":2276,"timings":{"blocked":1978,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/assets/currencyItem-82666181.js","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /assets/currencyItem-82666181.js HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 18 Jan 2026 21:14:01 GMT\r\nvary: Accept-Encoding\r\netag: W/\"696d4d19-4bb\"\r\nexpires: Wed, 18 Feb 2026 04:19:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 811\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFJSMFkJeYtD1KOVtK1HOGDtMkE%2FmocEELB7FedxZv4wjTyPAQpzojH%2FpzImzetkr8qaVNsmF2kAT9RsyWWrNAUplBOtPTZ0mwlxvfHoWpinl2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf6ae9cec8c86c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1210)","md5":"1fc8ec087b0259451c38d85f281dd296","sha1":"46698c27d120302042678727b5e7b32c7cbc8670","sha256":"0ab369d61b3af3ba913bd6e9a099a9a33d35d76ffeb7858159a73ed6e8751821","sha512":"e1065a26e9c5109b179d05ce9ba82b815ea1ae4b55f58cec5f54ce712a2a0d38cfe6eb92e7544e39fc3d3f1774a5b2832dacd66101073f21550ac4c98ad262a1","ssdeep":"","tlshash":"c121f19a9e01cbb1c6be5562807c0424121d7fca701185c5faed159837865bcd728a31","first_seen":"2026-02-17T16:19:44.541375Z","last_seen":"2026-02-21T23:49:59.769845Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/platform/favicon.ico?3.0.1768770840912","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:40.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /platform/favicon.ico?3.0.1768770840912 HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:40 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 02 Nov 2024 10:47:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\nage: 810\r\ncf-cache-status: HIT\r\netag: W/\"67260333-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lqBaq9QlULr8%2Ftx12xP3mOM54daG5qBMR25RanMniJQ%2FcdGiYM7%2FWAHM0%2BMsrokFaCgZ7ArN9vLf8FLB8srzk34qfC4wQEywAD5%2FG7cs3QnGL4o%3D\"}]}\r\ncf-ray: 9cf6ae9f9d8986c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"d4684dd2a5d8a23f95ea0bf39863075b","sha1":"af7d915c14faf81496e1e5f7e387b9902320866c","sha256":"ada186ddddcdbc9cd804bb5ad0d252f82005e774e1147fb0c10320ecc57a98de","sha512":"7920e5dbefc2910e2b77b6a90079f4778c0fd00a37ef05c1c2a1f3dffbb41702d0df6860d179dccb6de119d6b83117abf28d0c3dfd22b2da1e8cb1cd22284eb0","ssdeep":"24:suoDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDz:ozGa7y0SKfK3NJNs","tlshash":"e39144b21c53f265e57f613a9220d2fff0841eb94a163617cb85fa410f37406d8087ca","first_seen":"2025-09-28T17:49:51.674323Z","last_seen":"2026-07-28T19:29:08.870393Z","times_seen":22,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/echo2.0b461ba50ae5f415cbe4e2adfecade76d.png","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /echo2.0b461ba50ae5f415cbe4e2adfecade76d.png HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:42 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 343795\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982A794D103332D45157\r\nAccept-Ranges: bytes\r\nETag: \"59D98212B5D15E7B96C20BE4A5656D55\"\r\nLast-Modified: Sat, 02 Nov 2024 12:27:56 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 2445150389377826937\r\nx-oss-storage-class: Standard\r\nCache-Control: no-cache\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: WdmCErXRXnuWwgvkpWVtVQ==\r\nx-oss-server-time: 5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":343795,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3547 x 696, 8-bit/color RGBA, non-interlaced","md5":"59d98212b5d15e7b96c20be4a5656d55","sha1":"64c8f7022f77e9be49fcaa9eb3e04a4159374cae","sha256":"a43f67aefc19d086d6ea462925cc2105fc573b23a21f4cca652f894d079af712","sha512":"569eaf9af5d2e030eb1e20f2475e31fa7c4658201b10e79bd51781a908c35d45385df5370fc8b5148924d01e8066493abc082fdfaa07e4287cd4b7a62f44b257","ssdeep":"6144:cETPLy76fnTREd+Xcp0OTdv6MO/n2LuxAH7hvYxkxzMGrFtjHE8bhkTNa7AtZtqn:cQG67dcKOYMwn2pbDxzMGBtjk82TNJC","tlshash":"f574127c37add92ed99836bf92b280c16a318573c9546edc0d33b902267b9fc52015e9","first_seen":"2025-09-28T17:49:51.709077Z","last_seen":"2026-05-04T06:06:29.843178Z","times_seen":16,"resource_available":false,"data":null}},"time_used":2795,"timings":{"blocked":859,"dns":44,"connect":267,"send":0,"wait":276,"receive":807,"ssl":539},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/cardano.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/cardano.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 23166\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BAFAD5B373516F8B4\r\nAccept-Ranges: bytes\r\nETag: \"83B2FE60E5B65B9E92331440776EA605\"\r\nLast-Modified: Fri, 16 Aug 2024 11:51:33 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 9590626862748286241\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: g7L+YOW2W56SMxRAd26mBQ==\r\nx-oss-server-time: 4\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":23166,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"83b2fe60e5b65b9e92331440776ea605","sha1":"f5f113490b4ce9dc667703240500e29c84609b10","sha256":"185e2acd9eeb3ee6b97d9e8c656e627122d5c5cbdcd56f280ca1a5bd75c53020","sha512":"e85dbd4c82d0f0f431315bcdddbf564381c716f030ec269b6277e7f6fe65d165121e8b535df685a778134567078fed071adcf3a8fe99cf3f64f87c2be2b910d0","ssdeep":"384:rxXBar3ylDFlzCKvRdiT4ujQ76RyasEf6zkApG9d53kBat+nm:FAbyFFJCKvRd+UGy06oApG9d5Ftym","tlshash":"61a2d0b07f558a230c2ac4618d9b76561d97dc1379c81de2b128ea8f6d6dfeac04231a","first_seen":"2023-09-05T00:28:36Z","last_seen":"2026-07-28T19:29:08.869403Z","times_seen":157,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":1407,"dns":0,"connect":0,"send":0,"wait":300,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"echo-ress.oss-cn-hongkong.aliyuncs.com/waihui/uniswap.png?3.0.1768770840912","fqdn":"echo-ress.oss-cn-hongkong.aliyuncs.com","domain":"aliyuncs.com","tld":"com"},"ip":{"addr":"47.79.64.212","port":443,"asn":45102,"as":"Alibaba US Technology Co., Ltd.","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"oss-cn-hongkong.aliyuncs.com","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 04 Feb 2026 11:46:56 GMT","end":"Mon, 08 Mar 2027 11:46:55 GMT"},"fingerprint":{"sha1":"07:DD:45:99:F9:D3:55:D6:EB:41:00:22:C7:FA:B0:8F:DB:0B:E9:4C","sha256":"F5:2E:3B:65:89:04:A9:28:79:6A:C1:49:B6:17:06:AB:A8:09:30:D8:2A:1F:43:B7:BB:27:72:92:C0:3C:54:F8"}}},"request":{"raw":"GET /waihui/uniswap.png?3.0.1768770840912 HTTP/1.1\r\nHost: echo-ress.oss-cn-hongkong.aliyuncs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: AliyunOSS\r\nDate: Tue, 17 Feb 2026 16:32:43 GMT\r\nContent-Type: image/png\r\nContent-Length: 2522\r\nConnection: keep-alive\r\nx-oss-request-id: 6994982BAFAD5B373556F8B4\r\nAccept-Ranges: bytes\r\nETag: \"7FC81E0767BD186634CB67865E4F338D\"\r\nLast-Modified: Thu, 13 Feb 2025 04:32:22 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 15533327414700587207\r\nx-oss-storage-class: Standard\r\nx-oss-ec: 0048-00000113\r\nContent-Disposition: attachment\r\nx-oss-force-download: true\r\nContent-MD5: f8geB2e9GGY0y2eGXk8zjQ==\r\nx-oss-server-time: 3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":2522,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"7fc81e0767bd186634cb67865e4f338d","sha1":"8368f2aef485e97eb32ec2170e2c4670b123c75f","sha256":"03f146f5adaba0d00564b1f3559d7a987356844a0969d7c901c7745d36f43039","sha512":"8699d8a576c60fb5429fd032e10778cfd12e20b15086c5894ca86bbeac766ef640994a2a73a8a0cc8d9df1b8e6d51274f95b3a8bcee2512171cc741594e89ae2","ssdeep":"","tlshash":"4d514cf41472b7f5195a6f536c90e75cfe890cad1030c1a27b930b702e6e995ace291d","first_seen":"2024-10-18T13:48:19.627179Z","last_seen":"2026-07-28T19:29:08.85856Z","times_seen":112,"resource_available":false,"data":null}},"time_used":1983,"timings":{"blocked":1693,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbaseaai.com/resource/fonts/DINOT-Medium.otf","fqdn":"www.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: www.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.coinbaseaai.com/assets/index-a502dc58.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Tue, 30 Jul 2024 05:44:44 GMT\r\netag: \"66a87dcc-11d88\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 810\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u1fZH%2FgHbdzwZa8SlkC%2FiXcLEsomj7ANgw%2F%2FV36HknYFGW7noqoPcZbKEjrnSvd4ydKBxQ%2BPk%2FmVyaChBaINhB%2F2XqnFgR8VyWgARdhfkljhTrs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf6aea43e4986c4-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-07-30T19:44:59.551352Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"www.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.coinbaseaai.com/api/common/getAllSetting","fqdn":"api.coinbaseaai.com","domain":"coinbaseaai.com","tld":"com"},"ip":{"addr":"172.67.157.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.coinbaseaai.com/","date":"2026-02-17T16:32:41.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbaseaai.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 23:12:46 GMT","end":"Sun, 10 May 2026 00:09:09 GMT"},"fingerprint":{"sha1":"A2:53:0C:33:4F:A1:EC:7C:B4:52:CC:FD:3B:9F:25:75:CE:EA:A2:F1","sha256":"8D:43:60:E1:EC:5D:84:C4:65:D9:22:2D:89:EF:19:E3:C8:FD:CB:13:F9:94:E1:01:EC:E2:E3:46:07:1C:E0:BB"}}},"request":{"raw":"OPTIONS /api/common/getAllSetting HTTP/1.1\r\nHost: api.coinbaseaai.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: lang,language\r\nOrigin: https://www.coinbaseaai.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 17 Feb 2026 16:32:41 GMT\r\ncontent-length: 0\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://www.coinbaseaai.com\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: lang, language\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1I0XjUD%2FxJRe4c%2Bgp2kKv%2BKHPtKsdrPOsI8mYYIbtQ1DknBMHMWHTjTx7t2q6FzVzeEi4Q3Q0gWvLv4l8bUI38U5luUxgieXDVN%2BSNOtEj1bOJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cf6aea44e4f86c4-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T09:30:04.772928Z","times_seen":17706004,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"api.coinbaseaai.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}