{"report_id":"36014900-c871-4d10-8366-f8f12c9bdd87","version":6,"status":"done","tags":[],"date":"2025-08-18T23:17:19Z","url":{"schema":"http","addr":"coinbase-walet.me/","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinbase-walet.me/","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"title":"Coinbase - Buy and Sell Bitcoin, Ethereum, and more with trust"},"submit":{"url":{"schema":"http","addr":"coinbase-walet.me/","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-22T23:17:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"coinbase-walet.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinbase-walet.me","ip":{"addr":"104.21.4.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-02-23","domain_rank":0,"first_seen":"2025-08-18T23:17:19.986505Z","last_seen":"2025-08-18T23:17:19.986505Z","alert_count":5,"request_count":5,"received_data":381118,"sent_data":2781,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbase-walet.me/","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"386bca94ccfefbc1109111766bf5a067","sha1":"d43c8860b127f226b7404108c0609b1c54f37d1a","sha256":"b579d05e30007829a9cbe8d2bad4247b1b4c0f5c0f6f2cc924927dcb6312f841","sha512":"2a6edcf97bcedaf8402584107b4084c9ea1ca962fa86158880a06f6205d194089ec78a0d1144709faee202b984fe3d86e760aed4e812c6babcb281efd5fb9427","ssdeep":"","tlshash":"5611d2b5957384f9222b40b7132f1988246120e77584cd5ebf1cee0caf46f4e66d21da","size":1020,"data":"","first_seen":"2025-08-18T23:17:22.447834Z","last_seen":"2025-08-18T23:17:22.447834Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinbase-walet.me/uploads/favicon.ico","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-walet.me/","date":"2025-08-18T23:16:58.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-walet.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 02:16:21 GMT","end":"Sat, 20 Sep 2025 03:13:54 GMT"},"fingerprint":{"sha1":"01:F5:CC:BC:20:88:0B:33:17:77:F0:AA:24:41:22:36:15:DC:F9:68","sha256":"66:99:E7:CA:8B:59:B5:FB:FE:0F:9D:92:D7:E2:23:CE:4C:17:B6:38:17:99:97:AF:AD:73:08:FF:83:13:6A:93"}}},"request":{"raw":"GET /uploads/favicon.ico HTTP/1.1\r\nHost: coinbase-walet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-walet.me/\r\nCookie: __ddg8_=5oNzVAoiOYrKXLWS; __ddg10_=1755559017; __ddg9_=162.158.222.55; __ddg1_=X8AXD5LylyfaoQLdAB6V\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3aee-62ee44e19d180\"\r\nset-cookie: __ddg8_=vHSUhQ1g98DzN8PS; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\n__ddg10_=1755559018; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\n__ddg9_=162.158.222.25; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\r\ndate: Mon, 18 Aug 2025 23:16:58 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-encoding: br\r\nlast-modified: Mon, 24 Feb 2025 14:39:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xxkbkqa7uILLLH75%2FLb6%2FYBLmDCjEtSp7VJ6ZyMYnjV08GehcnkwD0YB1E1MsY%2Fd6CryEa2OkTTkywqszlDFlVPu6FQ6nOwuhGmKra8vfQ%3D%3D\"}]}\r\ncf-cache-status: BYPASS\r\ncf-ray: 97151f36acc65690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"168c93f19e088d4c47c54b9b479375c8","sha1":"f191339aefa1cccf77b7bd11cdd7bff1415816ce","sha256":"cb78475a81f4958e1a82835a4403b5284c0104d8a1a975531e8d667b115d913b","sha512":"e555a7125b00e3414ff4828eea595b426349bd8111a76ecc15775142972a64acb5aeb084a97d369601e22e5363fdae89e8d2d516c833e4ad7ae73cbc63659975","ssdeep":"96:j8qyLBqUJa8BfcAukAuJAWYnoPo3ugBI7DzxMyA5/E1q6jZkR1/:j8qyLBqUJzfNQ/WIoPo3ug+7DGHsA9","tlshash":"0e6293f5b005e940d1200f364c66cafc31ba3db83c60b15bab54fb1f0b3b9a55952b6a","first_seen":"2025-08-18T23:17:22.435753Z","last_seen":"2025-08-18T23:17:22.435753Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"coinbase-walet.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-walet.me/","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-18T23:16:57.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-walet.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 02:16:21 GMT","end":"Sat, 20 Sep 2025 03:13:54 GMT"},"fingerprint":{"sha1":"01:F5:CC:BC:20:88:0B:33:17:77:F0:AA:24:41:22:36:15:DC:F9:68","sha256":"66:99:E7:CA:8B:59:B5:FB:FE:0F:9D:92:D7:E2:23:CE:4C:17:B6:38:17:99:97:AF:AD:73:08:FF:83:13:6A:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbase-walet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 23:16:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b2rhc3VJtE4S7lvnK4zDLm4Uo644ISjJD5b%2FcGgJpP0y1azzk0nXvVI4cNZS6G2wB%2FXvoGBmAI2bGyjMi92%2BLihqNUxmZ0AhLMrO0bTqoQ%3D%3D\"}]}\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nset-cookie: __ddg8_=FYXoikNeBpgT20Er; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:57 GMT\n__ddg10_=1755559017; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:57 GMT\n__ddg9_=162.158.222.12; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:57 GMT\n__ddg1_=X8AXD5LylyfaoQLdAB6V; HttpOnly; Path=/; Domain=coinbase-walet.me; Expires=Tue, 18 Aug 2026 23:16:57 GMT\r\ncf-ray: 97151f3358f20b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32650,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1206)","md5":"26528e5082104592ea74ec5aa9cf1c2d","sha1":"9afc74973d54f4aeb71adb5a35dd8a3c157a70f6","sha256":"fd74e71453355bcdcc9ab403cf0bef49f040544f6341e44615a89c994a34c9b8","sha512":"9fe7adff52ea609260552365f88f8c2e85b1ae2b9678b41bb7f31f96781adac661d072904bc31280b245ef604af066ea7e7faf59fa88532143c40d20a141067e","ssdeep":"384:n3vJ5JxcZVAfdiY9nWLMtDy0srFkKkdkpjWAmnWLMtDy0srFkKkdkPlBfwzcJGmf:T0Y2MtDEPGoj3MtDEPGklhw1malhA","tlshash":"ade2942341e971523516f3dcaeb452a8ed22105777fa840b362e4fdd9fe136ce81389a","first_seen":"2025-08-18T23:17:22.441843Z","last_seen":"2025-08-18T23:17:22.441843Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":33,"dns":15,"connect":1,"send":0,"wait":186,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"coinbase-walet.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-walet.me/assets/uYoRiDThU8ho.css","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase-walet.me/","date":"2025-08-18T23:16:57.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-walet.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 02:16:21 GMT","end":"Sat, 20 Sep 2025 03:13:54 GMT"},"fingerprint":{"sha1":"01:F5:CC:BC:20:88:0B:33:17:77:F0:AA:24:41:22:36:15:DC:F9:68","sha256":"66:99:E7:CA:8B:59:B5:FB:FE:0F:9D:92:D7:E2:23:CE:4C:17:B6:38:17:99:97:AF:AD:73:08:FF:83:13:6A:93"}}},"request":{"raw":"GET /assets/uYoRiDThU8ho.css HTTP/1.1\r\nHost: coinbase-walet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-walet.me/\r\nCookie: __ddg8_=FYXoikNeBpgT20Er; __ddg10_=1755559017; __ddg9_=162.158.222.12; __ddg1_=X8AXD5LylyfaoQLdAB6V\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 23:16:57 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92%2FP4zGTzmcQky2povXgHyTzFLLit9gaCwNB97pjecgyu0wqaBkq6akYgpXH5VlQ0TlMl1hXE3Y5q29ZXeF1ADLy4Hh1lTFmql5Cy4Y81w%3D%3D\"}]}\r\nvary: accept-encoding\r\nlast-modified: Tue, 18 Feb 2025 11:32:34 GMT\r\netag: W/\"67b46fd2-db4\"\r\nexpires: Tue, 19 Aug 2025 23:16:57 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\nset-cookie: __ddg8_=5oNzVAoiOYrKXLWS; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:57 GMT\n__ddg10_=1755559017; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:57 GMT\n__ddg9_=162.158.222.55; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:57 GMT\r\ncf-ray: 97151f355a190b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3508,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"a393d91bd0464122fc6e4d50d82a1484","sha1":"e1d86e4b135df0c46b22c7ab0b2f169fd378fea1","sha256":"90495191185604e691399009e7792cf6ef743f8233a849c5aeed1407005695ea","sha512":"0523c83a73f8a6a0e32da4c9b50c06fe30338bad2ec3190624094051a3a9dc7683b8bd245ec82f5ff5d3ecddebe49b13450e726294f2df94657f1809a309afdf","ssdeep":"","tlshash":"98714497a7712144bc0bc57a6c954f05625c9483944fcdacafe1801ccf8869e66b2fcc","first_seen":"2025-05-09T01:44:12.778443Z","last_seen":"2025-12-03T04:36:18.393668Z","times_seen":24,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"coinbase-walet.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-walet.me/uploads/gf0DwK2Lt8sGQIilRNa7Rdbu0yXKCuqNpNcH6J8n.png","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://coinbase-walet.me/","date":"2025-08-18T23:16:57.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-walet.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 02:16:21 GMT","end":"Sat, 20 Sep 2025 03:13:54 GMT"},"fingerprint":{"sha1":"01:F5:CC:BC:20:88:0B:33:17:77:F0:AA:24:41:22:36:15:DC:F9:68","sha256":"66:99:E7:CA:8B:59:B5:FB:FE:0F:9D:92:D7:E2:23:CE:4C:17:B6:38:17:99:97:AF:AD:73:08:FF:83:13:6A:93"}}},"request":{"raw":"GET /uploads/gf0DwK2Lt8sGQIilRNa7Rdbu0yXKCuqNpNcH6J8n.png HTTP/1.1\r\nHost: coinbase-walet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-walet.me/\r\nCookie: __ddg8_=5oNzVAoiOYrKXLWS; __ddg10_=1755559017; __ddg9_=162.158.222.55; __ddg1_=X8AXD5LylyfaoQLdAB6V\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 Aug 2025 23:16:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 162490\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s6chSZGAg65T%2BUxJ7TqeLYhhAniJ5DddYps4rPBWdnDAtcYRVPo3JqZeQ3byN3qC34zBvsxmzWSe7Dt2FobfmvGmpqyUEhbkmPjmvfh1rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 24 Feb 2025 14:39:18 GMT\r\netag: \"67bc8496-27aba\"\r\nexpires: Tue, 19 Aug 2025 23:16:58 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\nset-cookie: __ddg8_=oVUFGSZ6okUPgxll; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\n__ddg10_=1755559018; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\n__ddg9_=162.158.222.104; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\r\ncf-ray: 97151f360a680b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"e97a1069a394a68905d4637949466670","sha1":"154dc238438e7eba941b0fa0a8cca12e60798384","sha256":"e250309bc1780b80178dcd8286468c91098751a51a6f6bf069e2e41725db4bbb","sha512":"81f9fb8768c223f5254195bd59cfed5e2ce7ae3900b3aa4c3f1516ff05cfa203985cb41b9c010a27c161c264d10d9e0122cddea63c3790d078a1c2434e166deb","ssdeep":"3072:zz0jGV73KijvwGj9LDaec9iyWTjQT8nfJ6CDcLFUCwX5p:zzuGVvF388PTsonfXDUS9Xn","tlshash":"38f30209ea8b6cc4f4b63a349d4746e3776414fc8a281bb4c23db07eee5e56c247711a","first_seen":"2024-08-20T10:58:29.067661Z","last_seen":"2026-03-23T01:35:26.21741Z","times_seen":19,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"coinbase-walet.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-walet.me/uploads/gf0DwK2Lt8sGQIilRNa7Rdbu0yXKCuqNpNcH6J8n.png","fqdn":"coinbase-walet.me","domain":"coinbase-walet.me","tld":"me"},"ip":{"addr":"104.21.4.3","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-walet.me/","date":"2025-08-18T23:16:58.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-walet.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Jun 2025 02:16:21 GMT","end":"Sat, 20 Sep 2025 03:13:54 GMT"},"fingerprint":{"sha1":"01:F5:CC:BC:20:88:0B:33:17:77:F0:AA:24:41:22:36:15:DC:F9:68","sha256":"66:99:E7:CA:8B:59:B5:FB:FE:0F:9D:92:D7:E2:23:CE:4C:17:B6:38:17:99:97:AF:AD:73:08:FF:83:13:6A:93"}}},"request":{"raw":"GET /uploads/gf0DwK2Lt8sGQIilRNa7Rdbu0yXKCuqNpNcH6J8n.png HTTP/1.1\r\nHost: coinbase-walet.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-walet.me/\r\nCookie: __ddg8_=5oNzVAoiOYrKXLWS; __ddg10_=1755559017; __ddg9_=162.158.222.55; __ddg1_=X8AXD5LylyfaoQLdAB6V\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-length: 162490\r\nset-cookie: __ddg8_=RMVZDtiC4VqZ3xN0; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\n__ddg10_=1755559018; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\n__ddg9_=162.158.222.105; Path=/; Domain=coinbase-walet.me; Expires=Mon, 18 Aug 2025 23:36:58 GMT\r\ndate: Mon, 18 Aug 2025 23:16:58 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmqxxHvuc%2BS%2FSTZn6AiXYE4LUqu9SMVElW6684TrcHY0S%2BPzqZpfatYCZ%2FARXve989yVQvTUjr8pRoMKD3O7%2BbGrx6LyEdg3otJHjP3T2w%3D%3D\"}]}\r\nlast-modified: Mon, 24 Feb 2025 14:39:18 GMT\r\netag: \"67bc8496-27aba\"\r\nexpires: Tue, 19 Aug 2025 23:16:58 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97151f36acc55690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2500 x 2500, 8-bit/color RGBA, non-interlaced","md5":"e97a1069a394a68905d4637949466670","sha1":"154dc238438e7eba941b0fa0a8cca12e60798384","sha256":"e250309bc1780b80178dcd8286468c91098751a51a6f6bf069e2e41725db4bbb","sha512":"81f9fb8768c223f5254195bd59cfed5e2ce7ae3900b3aa4c3f1516ff05cfa203985cb41b9c010a27c161c264d10d9e0122cddea63c3790d078a1c2434e166deb","ssdeep":"3072:zz0jGV73KijvwGj9LDaec9iyWTjQT8nfJ6CDcLFUCwX5p:zzuGVvF388PTsonfXDUS9Xn","tlshash":"38f30209ea8b6cc4f4b63a349d4746e3776414fc8a281bb4c23db07eee5e56c247711a","first_seen":"2024-08-20T10:58:29.067661Z","last_seen":"2026-03-23T01:35:26.21741Z","times_seen":19,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-18","alert":"Sinkholed","trigger":"coinbase-walet.me","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}