{"report_id":"50e96380-f24f-4795-955a-fc75550992cc","version":6,"status":"done","tags":[],"date":"2026-02-01T16:35:48Z","url":{"schema":"https","addr":"koindefi.org/","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"koindefi.org/","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"title":"Home | KoinDefi","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"koindefi.org/","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-08T16:35:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-01","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"vi-ya-5.jivosite.com","ip":{"addr":"51.250.107.138","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":942827,"first_seen":"2022-10-08T00:12:24Z","last_seen":"2026-02-01T13:04:34.085868Z","alert_count":0,"request_count":1,"received_data":198,"sent_data":583,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ytimg.com","ip":{"addr":"142.250.178.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":436,"first_seen":"2012-10-03T19:11:04Z","last_seen":"2026-01-26T00:10:10.63715Z","alert_count":0,"request_count":1,"received_data":60576,"sent_data":459,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yt3.ggpht.com","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-01-16","domain_rank":1275,"first_seen":"2014-01-15T16:55:17Z","last_seen":"2026-01-26T00:04:14.722964Z","alert_count":0,"request_count":1,"received_data":1837,"sent_data":524,"comment":"","tags":null,"fingerprints":null},{"fqdn":"jnn-pa.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1579,"first_seen":"2021-11-16T06:12:21Z","last_seen":"2026-01-26T00:01:33.970125Z","alert_count":0,"request_count":2,"received_data":1201,"sent_data":1185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telemetry.jivosite.com","ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":346139,"first_seen":"2015-07-15T08:41:42Z","last_seen":"2026-01-28T18:32:05.263821Z","alert_count":0,"request_count":1,"received_data":111,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-25T22:25:49.134356Z","alert_count":0,"request_count":1,"received_data":58888,"sent_data":455,"comment":"","tags":null,"fingerprints":null},{"fqdn":"koindefi.org","ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2026-01-21","domain_rank":0,"first_seen":"2026-01-24T22:35:57.905695Z","last_seen":"2026-01-24T22:35:57.905695Z","alert_count":152,"request_count":76,"received_data":5571073,"sent_data":36604,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]}]},{"fqdn":"www.youtube.com","ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-02-15","domain_rank":286,"first_seen":"2013-04-13T07:43:20Z","last_seen":"2026-01-25T23:57:13.18734Z","alert_count":1,"request_count":8,"received_data":3809411,"sent_data":5070,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-01-28T13:12:00.468627Z","alert_count":0,"request_count":12,"received_data":2133908,"sent_data":5522,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"node-ya-5.jivosite.com","ip":{"addr":"130.193.53.144","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1947235,"first_seen":"2023-01-18T15:13:00Z","last_seen":"2026-02-01T01:08:07.122856Z","alert_count":0,"request_count":2,"received_data":1488,"sent_data":973,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-25T22:14:35.458366Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1090,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"08b7c3f461d99ec5e89f0889a8ddfb6e","sha1":"604b0516d0eefbbd01956335a95f4f18778645e8","sha256":"7eda77412670045459db35a6f5cacc8e29c86eede77cd3d19e6b9a8576305fb2","sha512":"6d5cde51a520944b11200979598894c2fdf439191913dbe66b76b45588beaeea360dcc9408aad3051dcfdf8f2139885d643f3666d299073d2f837ae81d40c5bc","ssdeep":"","tlshash":"5ac08044e35068a005d1dd60cb5b4d19dd4c23c25f0d693c1230d6059e46af17527247","size":159,"data":"","first_seen":"2026-01-10T09:13:59.629465Z","last_seen":"2026-02-02T07:55:56.370932Z","times_seen":1407,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5571c89194d45360f01353bbc712b3e2","sha1":"c7dbf783ab695e25f1a9296a194c60dac35698ea","sha256":"1ebd70264628f188c8d0b9964bf01c8e9fcd204ffb67650022dac13dc56afa4e","sha512":"fd6d4dd334425e7ae6058fcfbbc6913bd09f08063b1b52a55f1b2166e4004ee1595ee68606bfb0c219ebc5f6dfb4512247b2a9dd38b4060ba772edd3f3967283","ssdeep":"","tlshash":"c710000000000000000030000000000000000030300000000000000000000000000000","size":2,"data":"","first_seen":"2023-05-17T18:21:55Z","last_seen":"2026-07-27T07:03:19.077685Z","times_seen":2644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c582dec943ff7b743aa0691df291cea6","sha1":"23d8e0156062165ca3736e9f1e364d414e1d82d5","sha256":"ab5b62081b1d305e78d0daadb2cd23470b3faeb65af7370627798b7219ea2061","sha512":"0b1daa69f17fd2f7db335d60b6e11571676f6fe2cc2863b58373d682512030e54c59a8d318355568168557003813404d2123b19aebe065ae0086369f4fd5edf9","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000000000003c0000000000","size":2,"data":"","first_seen":"2023-03-11T13:53:04Z","last_seen":"2026-07-13T06:54:38.065348Z","times_seen":4073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4dcbcd3afb14e01ebfc9b82933a213b9","sha1":"e93a1f440e0d9de82c563fb8d0483b9bc763ccf2","sha256":"70f983972909eece32373a3a9fe15212e020074e14cfd8626af15ab1f1f698a5","sha512":"ad0fd58326fea0db86923c8d5f359c310ba95cc2a0c2026ac148e9bcfaaac75cb14fda6c2b609f1f956561af77d04d97d3ebc51db3531ceb90779d5f9547d9fb","ssdeep":"","tlshash":"93a011880888e80202a32c80c00a0eccc22822208a88ca8820b08308033c88a0008c8a","size":78,"data":"","first_seen":"2026-01-10T11:53:30.07965Z","last_seen":"2026-02-02T07:55:56.418406Z","times_seen":628,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c419b06b4c6579b50ff05adb3b8424f1","sha1":"e3f284cae2097a55ddbaf92f45b91ea8506b49bf","sha256":"5e657ff6158d3e2a6d23e2a523917a2305acee9423365e268695c4b7b8919f4c","sha512":"0dafd28b4938d63e0d62125bedf08227b21f652162b40a924a0bb66559c17c922829b1993ff14aaec4c2b925ff08b9112ef12150a98da20a3fa898de44dad4d9","ssdeep":"","tlshash":"c710000003000003000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-13T07:57:12Z","last_seen":"2026-05-08T15:16:28.126014Z","times_seen":1753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6247dd5d2d787d98a0d5e4966146d550","sha1":"51dcfa67e8318f689e1a4589a9def15c6f9a23bd","sha256":"cbb9ab7439a233ff75c44799819b7a7de5fdb18f4e30f0236430bc751530c211","sha512":"bcdab3f3db437167cf01baaa88913e053ea2ac769bf14381fb70e62ae10544ef8f11c327a24e01218936ae2800ed21453d065820542d1222b87117980536c637","ssdeep":"","tlshash":"92b0922e6c926024a05c1116a01c008a6b8cc9bb83c814a862054cb5ea9a0ba03847b0","size":108,"data":"","first_seen":"2023-08-01T01:42:54Z","last_seen":"2026-07-28T16:58:35.290389Z","times_seen":295905,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1642ddb4dc793370ca4111edd2d4da5","sha1":"546c2df58d657fa1eedb72d0eb2c33aa4deceac9","sha256":"c0b81b35b25be665c5e8aeb4a9e987d41073ea34eac284af1878d708ba8863a8","sha512":"cf602ba2d8520d2da1f7325e4a1c2a1fdd347d58efb8d0b282f831bd8bfe8ac7f81c6f9efd6dbb51e28e4c79f9277500cf726f959fa0ba878c6658c3df816727","ssdeep":"","tlshash":"1fe06814a2633764332b262344f717660507e43b752002987e3c32c91b2332e73f9847","size":419,"data":"","first_seen":"2026-01-24T22:36:05.155258Z","last_seen":"2026-02-01T16:36:05.211319Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d94c806ab12b32ca6a47427bb5481985","sha1":"3d925699e3d24d2c5627680fb471961830585d63","sha256":"fe1511ce6cad336a2a1ef8c8dd2a0a6a4ee1014add88e388f9e5971a8e04f250","sha512":"643d002424ae2dd9dc11da24aa6de27f077ccb7ad41d3d22f2dccb88534be6c9ac5a9bcbce2d0bd5d96063b787a9c33179d600d465327c1e34a342eeacc8cd46","ssdeep":"","tlshash":"cb80000b2c0a200e830b30a020cf208800e200c0000088020b8880883cb202b202280c","size":26,"data":"","first_seen":"2026-01-10T08:40:28.759679Z","last_seen":"2026-02-02T07:55:56.346858Z","times_seen":1476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f24f0f3f42ef0732fd0c6f28e78658fe","sha1":"89567ae0af03e73aca384179fce09a66b5c46d26","sha256":"be48ad6c41e11b3ea37ae87547db12044aaa9a7895bef4de1911866fbcef9d3a","sha512":"33d5de35e1a6f366213662e61ad4b384ca61c7d6908800e9c9247dd92d582d4fb95b5fbb67f797e4898fe779e5ee9b2e543d0bf7e4fb9ac5467bb7e4bd7ca80c","ssdeep":"","tlshash":"0db012481802b88070c2ac3054594dc8812a421794a56050f870fa8c2738582012ddcf","size":94,"data":"","first_seen":"2026-01-10T08:40:28.897562Z","last_seen":"2026-02-02T07:55:56.347693Z","times_seen":1419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1e4ee8a7aa78976dbb1c6c6bd84a774c","sha1":"a4e2e13981be493ddb426f5f1d40af2529093900","sha256":"dda1a51537571bf7b71772794188f1362b081d028cd71a7cb65dd770c2895744","sha512":"cb79dbfef4eb8ac3f89f3698ff1b27f2517cb3f428307b61a054d9878db6fb3e43f94e055228f6fb4b3a81765d7af1f605175cd5ca45592e373bdffbd101a3b2","ssdeep":"","tlshash":"c7100000000000000000000000000000c0000000300000000000000000000300000000","size":2,"data":"","first_seen":"2023-03-07T22:29:05Z","last_seen":"2026-06-24T07:00:50.720524Z","times_seen":2286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"23c5c5efb66a953737f76abda4bbee2d","sha1":"5ddcc08ebd2e9c7cff96782f8391e1df8faedd68","sha256":"72a61a5e7210d2c835033d56b947657a9ab2966e17b3baacf71df580381a4a39","sha512":"05ce496cb22833d4f33279f87413d294901c0eddad6f2f0f49227df35e7604911c13875b1c4108711869a2f82e40257c948776afd900b263a7cfd48329af7efc","ssdeep":"","tlshash":"a0b09284e1d070205310a220afab2127a5de275405c408e02122948aa5317027a1a618","size":107,"data":"","first_seen":"2026-01-10T18:56:15.339741Z","last_seen":"2026-02-02T07:55:56.353291Z","times_seen":660,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0f13909530017a3ec21d16835300c3cd","sha1":"ae145aed32f9e28bf997a793b75b49bf2cc1b2a0","sha256":"65d063971a6f36bf3c885253958edf332aebb8b8e00fcf4af0130186b504a1cd","sha512":"e4d24b3d722ca18fba0ec81a42e4b6facad463cdf9667b78700bf92d8c1fa27e24cd84087f1969f821254789fa3c783540b3362e051a9c396e40bde7f7c5f7d1","ssdeep":"","tlshash":"a2d023c0cc8d50330301dacf52c386fd8e5054416431860d0e71c27c311f430a0cec4c","size":226,"data":"","first_seen":"2026-01-10T09:13:59.572674Z","last_seen":"2026-02-02T07:55:56.300665Z","times_seen":1417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7405ceb2813b0f90ace74494d21ef4b8","sha1":"c9b2ef049e2a57bda63fd1cc78251ce6a2187e99","sha256":"2fe1d324f7166b7b7983b7d13c8925b9d57cf35df31b0617a23c2a63da6557a7","sha512":"81b89f40345b878efab99d7177fcbb5e5a56d1fd9fbf00dc276488d51edcf69787f174489d902b32b4893aaaccc066c9865ccd9c6fd9960cafe9ed8f2195a0da","ssdeep":"","tlshash":"c71000000000000000000003000000000000000000300c000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-05-01T06:59:53.771372Z","times_seen":2565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/js/charts.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c8fe21cd23d8d5128286eef5032fb6a9","sha1":"21dda6c13b02a8af40db1fe177083a66eb0a3ee6","sha256":"01cdce0d50254b4db067d1f28e17df6fc6dce63ab828139157b8d08e449327a6","sha512":"443caaae81d7ef4f6d2126d3d5a2c40060bef24185c2aa361178454d05f00f16a01d5358a5f0d1c6fd5ef91857f983e2da7d41b9fb8e5c13ac138a4c8995d91d","ssdeep":"192:WIu6HStE1i4yCu6HStE1HiWyu8i21Vyi2gyAz/MaLhY//CzaLa4/JrDtraq:WCaEarLStCSrDz","tlshash":"c962fe1af0b395225563706d07af4a209371b883990def28bd1c8b705fac52ea6f5792","size":15698,"data":"","first_seen":"2023-05-21T21:25:32Z","last_seen":"2026-07-27T13:05:26.985074Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0d80d99d7f209071a284c9ab6d14accf","sha1":"c91e7389c28a7b35eeb114484808a20cddb8c20e","sha256":"0cb21d1de060008bab472c15c63e6f15828de601f85deff00d701d26c0f6819a","sha512":"59df0ea3f533182f0884e52768ba3b5b1dea918c81a430aed117aa60584df1bfc3569ba05dc9c95426cd97513318e2bc4272ec2771e3528117cefce002576740","ssdeep":"","tlshash":"0aa012b01c1dd3d81271c03118250410d6cc2205f8260d086219825248a81067f02014","size":83,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-28T16:57:11.388128Z","times_seen":339222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3dfe3d7a171097592cb00d6a57b6f845","sha1":"29b1930481ec92d813a66ca893468ae710b71a85","sha256":"f0a85e81a4cdc5b0ffa6b6bae7015c00d3cc730d040c955859d3b797aaba3ce9","sha512":"938f53fba26d901ea3165404993803cd844ec5cb3cfce3c2385823b8ded3c440f260b8a11604f997efcd1b1e2356ee89cd86facc52094ad6f4fef0cc5ea05466","ssdeep":"","tlshash":"c7100000030c00c0000000000000000000000000000000000000000000000000000003","size":2,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-08T15:16:28.073779Z","times_seen":2727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7dc10e66da5549d351765bd940b81be9","sha1":"e066dc148a3af0bb86ed9438d432a81402e778bd","sha256":"7abcf6dac49247ef3111e13199b86b909f5ee306b0599c64c5b76b20ca3972a2","sha512":"eb6224b629b8faf5b2e313e0d988a9314cc661b424bddb7e1cd2a4ed787025b396ee72eb4a2d3655dd6febc9b284c4daa05b83bc1fd6536f7f9ce25b8709ed21","ssdeep":"","tlshash":"c710000000000000000000000300c00000000000000000000000003000000000000000","size":2,"data":"","first_seen":"2023-11-22T17:53:32Z","last_seen":"2026-02-02T07:55:56.325059Z","times_seen":2473,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c582dec943ff7b743aa0691df291cea6","sha1":"23d8e0156062165ca3736e9f1e364d414e1d82d5","sha256":"ab5b62081b1d305e78d0daadb2cd23470b3faeb65af7370627798b7219ea2061","sha512":"0b1daa69f17fd2f7db335d60b6e11571676f6fe2cc2863b58373d682512030e54c59a8d318355568168557003813404d2123b19aebe065ae0086369f4fd5edf9","ssdeep":"","tlshash":"c7100000000000000000000000000000000000000000000000000000003c0000000000","size":2,"data":"","first_seen":"2023-03-11T13:53:04Z","last_seen":"2026-07-13T06:54:38.065348Z","times_seen":4073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0f13909530017a3ec21d16835300c3cd","sha1":"ae145aed32f9e28bf997a793b75b49bf2cc1b2a0","sha256":"65d063971a6f36bf3c885253958edf332aebb8b8e00fcf4af0130186b504a1cd","sha512":"e4d24b3d722ca18fba0ec81a42e4b6facad463cdf9667b78700bf92d8c1fa27e24cd84087f1969f821254789fa3c783540b3362e051a9c396e40bde7f7c5f7d1","ssdeep":"","tlshash":"a2d023c0cc8d50330301dacf52c386fd8e5054416431860d0e71c27c311f430a0cec4c","size":226,"data":"","first_seen":"2026-01-10T09:13:59.572674Z","last_seen":"2026-02-02T07:55:56.300665Z","times_seen":1417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9d0137bffa0f20d5e8e9f54f2c84cf0a","sha1":"39edf6d919f82b9692a2edfecc78427a82567c42","sha256":"269d4d56785ffc82f3ed05d8ee3b84fc18d7474663ddd06c6fd285165190bb19","sha512":"0b8b09f13f8fbeb3546c08a3501f4060ba8e5f762722ffb1a53be6d0e297abaf9719d48d50cac29940e403702c66627187396b8961aee26586ac934568af2ea9","ssdeep":"","tlshash":"db50000000300000c30000000c30f00003000030c00000000300c0cc0c000300000000","size":10,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-28T15:43:12.157691Z","times_seen":184647,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"51792c67c588ce8139b246f015ed8a85","sha1":"d3148f014e0f4790ff65a8004585d17ed319833f","sha256":"6f70d853ba1dee4fc189490cfe4b6b1ab59f5853344cd85576bd2a4af2b506fe","sha512":"963ef7a25d5437d1a045dedfe34afbab41db4c620e4378606ca3b7b0c4219e51fda11b9b0e0b761093eda33aeac0e532a27b3f1a1ee110c13ba1433cdb28c067","ssdeep":"","tlshash":"cb60003f03000003300003ff0c0cf30030fc0c0c000c033c0c003330000300000c0000","size":15,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-07-28T15:43:12.182243Z","times_seen":176413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/7bfb7bc/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc00deaabfafd48080a08fc0d7f841b5","sha1":"3bf17f3bd75349b1ba1f9b78c6117fadd4620310","sha256":"be8a7243d87cc8bc1c523f0b10a41c149622c9c6af30b6a4e8231b1506cfd542","sha512":"1f3d4801665e172b54578e6d0d71f066c72df7244512cf00026104acbf6f21dab5de812d2679f56b2414ae7f40fd4963f61db75bc7bfc0893c8a3debf65638fc","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeEJK:C7H7ObdFkOIphZ8wjFCmK","tlshash":"af22d71ee7017f360fa613c3744f7b5376a480e592646cb5d89c826943b9bcab217b8c","size":10598,"data":"","first_seen":"2026-01-27T14:54:11.499444Z","last_seen":"2026-03-31T09:24:10.733781Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c057b3a5f7871b1230b499595bfc17d4","sha1":"462477913b76a8b25c08d2f4f197739203afb2e7","sha256":"c0e6e52741a0faed7b563241a5f373b68471f92437377f2bda3a13bf09b14213","sha512":"cf9dc1718e6ce00fe4dc6f6f3aa0f626d427937ca691ecb2e31f3a9e0fb3778f23a924f27b40a46e8e98022ba99fdce3f4d5b25373ec843c11003757993eee05","ssdeep":"","tlshash":"57e06800e2cd11b086abc532d0633d610d12633272fe8fb65910df22cab04e35bd7883","size":388,"data":"","first_seen":"2026-01-10T09:13:59.619317Z","last_seen":"2026-02-02T07:55:56.400295Z","times_seen":1420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"09d11bffef2b44eb6c6a7b8682ccfb47","sha1":"113c7cc79deb808af9e2f3439bc35da0c9d12fb6","sha256":"e199ae5be6823d6ad595a48c2216454dadde44bb2b1c51c5e75af09fe9c44944","sha512":"2a795cd595e1acac3a28718e36a26be475e7370779afce2598684094c16fdbfea4de0fd65231bace3a242660edc6aabac781d7c20ab890d08450b6367821fb41","ssdeep":"","tlshash":"47d09738cd4c383408d0d2024b71ccbc82ecb842389482002119d060fa33ff5b7cd914","size":255,"data":"","first_seen":"2026-01-10T10:31:00.25169Z","last_seen":"2026-02-02T07:55:56.361462Z","times_seen":657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/UY-avjtWhxoWY-HLq4-cVr97HNozDPWiH7V1DOIgy7M.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bd572c67e62f1efbf662725fd4a3c43","sha1":"560c8d72e2c640421230b9021a9ed954b809f3a2","sha256":"518f9abe3b56871a1663e1cbab8f9c56bf7b1cda330cf5a21fb5750ce220cbb3","sha512":"a7111e9de8f70cb03925b123703ebf6160a871e287589035ab4d9c7eda5df654321723ea3b551e4dae0a659e0a8adf07c4d408792c40abf8b0607ecd73b36254","ssdeep":"768:juQSywGeBCQxvY7bLkAjNq3pdKAZ64YLf8RtoQhpi7vxXaeZwFTOEbCXyk1Mr4/7:ju3zbCQdUbI2PAbQ8TEwFTOVVa8/7","tlshash":"ca43f9def2d2733059e3a5d2409b461fd2bb37550c88186f7922e7f46a35887902bf29","size":58055,"data":"","first_seen":"2026-01-10T08:40:28.654847Z","last_seen":"2026-02-02T07:55:56.236828Z","times_seen":1484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"77123f679f81545d283d847c9ee49934","sha1":"bcdf51b424ba147918e22fceb3ab9a0d56b762db","sha256":"352e4daef003ba075d28e0115e43437b0d4ee8337909029394b2ef5991578309","sha512":"10b9a678f08cc55d73eb5ae6bd2eaef3a2dd256a4102ce5bef15b1f1380e9460f2a1b15efe87ed47779c7800eb573ffaf4845ded54b36c3d970d3a68f8af6c9b","ssdeep":"","tlshash":"90d022c1f2a781784a97c479403f2622aca62b84ac4c9f318703f2c9c1300870f3b953","size":202,"data":"","first_seen":"2026-01-10T09:13:59.566563Z","last_seen":"2026-02-02T07:55:56.344286Z","times_seen":1406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c209d5603054fa651df40c4170190258","sha1":"ceec23bcb55da491bd697e83e74017f35dc3ace4","sha256":"82405c6e711d4e6a09982a2b400241fe15e07f7cd2005bc585254fa1fc24ea23","sha512":"a89bbe6b7185bfae080b770a5c9297b13c83db2cf7a8d0253212c7232c66ea40e291b8d583e9af1380e8f379a87a8e8a39263f9ac2c8639fb6e67a55277001c9","ssdeep":"","tlshash":"c7100000000000000000000000000000c0000c00000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-08T15:04:56Z","last_seen":"2026-07-26T09:40:20.698028Z","times_seen":2016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61e9c06ea9a85a5088a499df6458d276","sha1":"e2415cb7f63df0c9de23362326ad3c37a9adfc96","sha256":"fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4","sha512":"61037724a2fb00a12fa8a53ada233f54ff7fc6ee02048e579b83a127ce79fc03906c35b5307beb18a3cf5021fe031ae6587448d4d60a082d73252fe2e2f4ae7f","ssdeep":"","tlshash":"c700000000000000c00000300000000000c00000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T08:03:09.011587Z","times_seen":79772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5dd37a35d548b7e1d5b3e7877b22676e","sha1":"6eee5355bb192a6eaadda8aeb76e35c9cacf2172","sha256":"2e92a4cccb0d9b15ec77237ee16ec658ac4d45055818ec30cdc3dbf0c3db8092","sha512":"9e42014e45df7c8d545c3a11db8bc8a4b2dacabcc767a053f373da50e405ce166019f19087b75afcb80a6fceb3dae4889f92eb11911f79958563cc3f591140ab","ssdeep":"","tlshash":"c7100000000030000000000000000000000000000000000000000000c0000000000300","size":2,"data":"","first_seen":"2023-03-26T01:53:10Z","last_seen":"2026-07-28T00:30:38.912464Z","times_seen":3963,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d48a24ae9672ee573050e4d3aeeebe4d","sha1":"8f8c4d27852980a1ec5a8b1aba30769001314ec8","sha256":"53e5b7d706a350fe98d52499058624e15cddc1541f17370f94a899a386c50255","sha512":"02dd385ce15083c89617859325e29ce885ae235c8c5be416828066dcb5db78e69229802d87aaf759224e2656ab4c23bf1740ae1d357cfdb57ebf78ab77488921","ssdeep":"","tlshash":"43800020202088288888200b20308b8abaa0a228a83a2000a08c8e2cb822e80a038820","size":29,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-28T16:57:11.367752Z","times_seen":187128,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1892a845aa81b9ddb8b6ef6920d742bb","sha1":"0075569a5a4198b9812be41eab8956188aa19e55","sha256":"6ba6c11bd8700086c8f00d11c7e22487a9c13a211f57e0cf06bb9e365fa87704","sha512":"475d9132eb4852a71e0ce58250abf7fc9470fb67a2cf8784e8d4bed9f84fd2049a2a36cf0c983b2570593f44c6255a98cfd6ac0276bde072328d7c287847e545","ssdeep":"","tlshash":"906000000000000000000000000000000000000300000000300c000003000000000000","size":13,"data":"","first_seen":"2023-03-07T01:06:23Z","last_seen":"2026-07-17T09:12:16.906744Z","times_seen":4431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"accb66f0ecd826aac89065990e1da97f","sha1":"3c5339881a1720deed325383e8c3839b7748d254","sha256":"ca68fe3f50735b174e950c34f54dc1f4469d57f94c55f259174e8ee730ea86c4","sha512":"52408933e4d4f3fc5069da409f56adaa898366c9c2b71abc013277b38aba5e7dcac15868ffef3495cc1a64af8cbe1bdd7dcf79691ec2b15ac2eb8a3fa76f3370","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300000000000000000000300000","size":2,"data":"","first_seen":"2023-03-10T23:00:59Z","last_seen":"2026-07-28T05:14:50.047301Z","times_seen":2847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"fbade9e36a3f36d3d676c1b808451dd7","sha1":"395df8f7c51f007019cb30201c49e884b46b92fa","sha256":"594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06","sha512":"5ae625665f3e0bd0a065ed07a41989e4025b79d13930a2a8c57d6b4325226707d956a082d1e91b4d96a793562df98fd03c9dcf743c9c7b4e3055d4f9f09ba015","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000300000000300000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-28T16:17:31.842046Z","times_seen":60910,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T16:57:11.272152Z","times_seen":246167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/js/jquery.bundlef86ef86ef86e.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3144957924486e0e937b305e17abae3","sha1":"761422685fbff9060b925f39550d72482571f03c","sha256":"c1cc5db5934c0de882f00660f9a708ee51f91eef90cc490872ddf169b6dcd321","sha512":"4119f3f330793baec02685836509598679389abac28ca6057615e4ddfbbde2eda128fcc7eeafe7a8b5fd48886a70e5403aa363857144e0e7d379c20c7eb35840","ssdeep":"6144:5k6oxeeQP4aCWfmwpjr9T5filT6uYvZEQ+iV4OGrA3mBX2cl8Qc2OftOkzQPCbDz:Ux5QP42MVOGKcl8QwFOkzQPCdOHatld","tlshash":"9dd439887291742643ab30f5513f010fb23b69a9a40e8468f579d8e97db8d8d217bf7c","size":649907,"data":"","first_seen":"2026-01-24T22:36:05.10483Z","last_seen":"2026-02-01T16:36:05.129935Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b8ba2d36f8b0d94515a11c5c2d0b8ce5","sha1":"9db89b29454b065d1b18268c7630a4810db0a01f","sha256":"3749d615205fd0da186992246243c071ce253b37aba18686f066cb0b63a50631","sha512":"45d062ed95400f93151d58fc11589e6a72c73a2071d02a6633eadb8efeb3260c861fb407ccf06a4dd348285407a0f85ffc67e0203423dcc7affa5e395257ec82","ssdeep":"","tlshash":"b6c08ca52b8ff4a6919324a4582f12a9c296890196448659f22006842ab0a0d60cfe4c","size":159,"data":"","first_seen":"2026-01-10T09:00:22.42811Z","last_seen":"2026-02-02T07:55:56.302792Z","times_seen":1439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a8875b006f7a22534747da1518883d15","sha1":"13c1c1282700b5ce0d35f066d92f0a7c4d9eafb0","sha256":"e5b385cb400249c772e1a02581433291a94c50669eb6a078fcc6568004a43e39","sha512":"55198096cdd73e512e267080435d6d8ad1012b7e2b62fc62f84bf22275d5ab6dfd3b5c06787d7dc33d205a9295e19213b3164a7bdcd6eff868495de8a25c607b","ssdeep":"","tlshash":"8ee0c000fbb2400071e6c4e5dedbe64fe499163085998c5e72319c9a1b7bcfaa608a69","size":352,"data":"","first_seen":"2026-01-10T09:13:59.562139Z","last_seen":"2026-02-02T07:55:56.373664Z","times_seen":1408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2cc43ad532377e05783b919d86a896d9","sha1":"69e00bdb15ac21186c8d27764e6311759ba5b99b","sha256":"007cd5f5a967155b6963ac5de46c369ee23237414c3f576b4197fe46229808ce","sha512":"404182f4b51a22a4a35e58480d372a65db2465803ca23913e379199413edf84fa74dcf0f92026d8561dcc35bdff981cb98a38c8f50ae05f7224e5c7b42b30c92","ssdeep":"","tlshash":"2cd022c93c4978d20279238888ba01f7e2fbb8dc78068b40c32442002a3ca3a5464402","size":199,"data":"","first_seen":"2024-10-31T11:08:50.83142Z","last_seen":"2026-07-28T15:43:12.125213Z","times_seen":155574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2f5ff47436671b6e533d8dc3614845d","sha1":"54fd1711209fb1c0781092374132c66e79e2241b","sha256":"cd0aa9856147b6c5b4ff2b7dfee5da20aa38253099ef1b4a64aced233c9afe29","sha512":"19f142b018f307bfdf1c7009d15a29417c96d8678d2982eebce4961b2e67eeb118a8ebb1d75b70087c3e65bc793450e3fe4a10002befa2d038e5aed4796937f2","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000c0000000000c000000003","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-28T16:17:31.710783Z","times_seen":53015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"882841ff577ffa615c4668bc1f2e996b","sha1":"d2bd4dcf5ba68a69b0ada085f77ad9961bf117ad","sha256":"cc126eaa49ab264b147695c688b9d275bbdc959a5e80f0b618f8b1917696e086","sha512":"c0f79ffbfed5c0ee2f28c75a817a7b39d45dabcb1faf4b09aca4ced883f71327d1fdd0785487b4947f7bef9a5b2881afaa894ea8b923b9aa1d166050414d30e2","ssdeep":"","tlshash":"4bb0122c67789059415432c71edb54e8ccf02bc606509470836050016030fd001ded5c","size":106,"data":"","first_seen":"2026-01-10T08:40:28.909688Z","last_seen":"2026-02-02T07:55:56.301546Z","times_seen":1472,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e18eb9d0972d240f1a5456179bb6523b","sha1":"65255f106adcff2907a98e295a8e7a38fe2884c4","sha256":"3d68db2b85d5a2915743399f09dc438963f0c50f68b02df05d47a372661603e8","sha512":"bcd5a6c26fa1f7a77f5614a7b28e238701d698cc0c96ac5d03d97628d8622125cd0cfdaf54b1db96ef25320a3fca7584abd343d67bdfb9f272ca3ef8572b360a","ssdeep":"","tlshash":"d4c04c38402080e98659101c7434fb80bd7d3b973163e047da3c621c65f5d017c94b11","size":134,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T16:58:35.290973Z","times_seen":259730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/remote.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f0a414a93c850ded95908135c044764","sha1":"975a29f733e6ed039c9c712044fccc2e9204e080","sha256":"51f637fbaade48c690d79f8eacb212c96cbb7e69f067829d112a2e3bafe75904","sha512":"20172945f157dde0d9e0b51a340636df9475a0e369f5d5d57e270af55e647fc2866b6b9d61042ef2ea3baff42acde69f9b8df909a8b4eff43e2c8e2278d95c4f","ssdeep":"3072:HdeoXlaXIUAkcWjoVLkmx19sGAxS401rdQHKjfQiMD:c4laXIUAkcWjoVLkmx19sGAxS401rdQB","tlshash":"5bc3f69df145712122a3f4bd183f201ada3b3598e888432cb249d9d66d7890e527bffd","size":124770,"data":"","first_seen":"2026-01-28T13:04:55.177636Z","last_seen":"2026-02-02T16:53:06.019995Z","times_seen":2796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"85454f106a1146a23a110ce72c032c45","sha1":"73e6c6c3013e0705bcd8a8bf4a3d6932e1cfce05","sha256":"d141d799d6d57a45013a7a34b2f7a5b464b852165a92bebd0288210b0135b291","sha512":"32e0258b584d421258e7987ce0f26da10012305a5dcfc39c3496d1a6c4ae4e89264599064956c9be09d8f86439c3fe2070baf9e1049f7ac27ff79fdf9e206ff9","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000000000f0000000000000c000000","size":2,"data":"","first_seen":"2023-06-15T17:32:37Z","last_seen":"2026-05-30T20:32:47.769107Z","times_seen":4225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"accb66f0ecd826aac89065990e1da97f","sha1":"3c5339881a1720deed325383e8c3839b7748d254","sha256":"ca68fe3f50735b174e950c34f54dc1f4469d57f94c55f259174e8ee730ea86c4","sha512":"52408933e4d4f3fc5069da409f56adaa898366c9c2b71abc013277b38aba5e7dcac15868ffef3495cc1a64af8cbe1bdd7dcf79691ec2b15ac2eb8a3fa76f3370","ssdeep":"","tlshash":"c710000000000000000000000000000000000000000300000000000000000000300000","size":2,"data":"","first_seen":"2023-03-10T23:00:59Z","last_seen":"2026-07-28T05:14:50.047301Z","times_seen":2847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"15ec95242d8aea5ed78dd4616ff9cccd","sha1":"6cd389f5be079a384d3860477fa9102a3cbc1e9b","sha256":"4069ce91af436ca50fbe6e347885fe8c6003a2b6680c1a15b16c82fa8669e688","sha512":"4b9fcd65d10997801dd7d008ce1f0a37364c6548671f3a02455df6c842a5a73d80bef45466be7c5666f5e644ba9039f5277316b809c6100740237b232fbe423e","ssdeep":"","tlshash":"24a024001f3c0d1000c144113c4f74df4103104151111c0415fdf7d035347c50011c0c","size":78,"data":"","first_seen":"2026-01-10T10:15:42.485502Z","last_seen":"2026-02-02T07:55:56.401026Z","times_seen":664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f0e976b756b6afe7f40bca206a2d7150","sha1":"db9bee9a7bba93a60330ec5ef1334d9c164fcd56","sha256":"029b84af88c5d6ced58173997a15fa47011e198e5449027d87e2f7b871f332c2","sha512":"486596b8b7d88539b3147ed55749794ab08962047191f33ff9915fd4e4a8a9a24bc164c0d44f24357b6e9dd72d1ccd88f981aa0cf2c7df585a83000d4baccc9f","ssdeep":"","tlshash":"3f8000883cbab30e8222283223ab200aa2ae28c232088e00a00080803a3003a8032c0c","size":29,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T16:57:11.272152Z","times_seen":246167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"61a6f2652a0b6db05139abddb9b96ab7","sha1":"05548eab56f32db3c8c42fd2487a3f3b3ccf0ee1","sha256":"cc6e0d6af3dc4f620458aa79c4f4c0631ebc1bd55a148f5e9a06ea8874885831","sha512":"f2f89b1252cfe849de0cb4e8e8b7ee29cf99c563c5113ede3c45d470d5d14c45e0a3e30e560a79d14bfd4c46943c24a8444a1e81e4a0e93addf71ebdeaccaef4","ssdeep":"","tlshash":"4780047cdd4c5c350f157415001740441177700d50150005170004c44f311c5140fddc","size":38,"data":"","first_seen":"2023-03-11T13:53:37Z","last_seen":"2026-07-28T16:57:11.266879Z","times_seen":266732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4c62bc4fd3c4e105cb3fb62fb748d59c","sha1":"f6e2d1e74e35ec4c4740ba02e890b98bda11417f","sha256":"9f4a6a370cd350425d8ac08047e7646116468672e99765ca198e6d463ee5286d","sha512":"5cb125ce0b7fdde81c6df58f6e27943a130f0d9e2a366d94ea8ed926da635dfe2b2c5778a14ed99bb35c7b2a48dcd12090cbac18370611d1c0438e1c2621efb4","ssdeep":"","tlshash":"6cd0129b738060e3d797fea709580020c1ef0b8402d2753d42d5d51070fe9ce83461e3","size":203,"data":"","first_seen":"2023-06-16T07:31:00Z","last_seen":"2026-07-28T15:43:12.078764Z","times_seen":191052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bf66e4d57d94bba33a8c5e3da371c134","sha1":"d87f9dceac119f8a44d67258182e1f44d8c34e48","sha256":"5e2f2e1bb0569d472deb80e382249a0bc2d3914faef839ec33c432994c9a1063","sha512":"2a55f09ed4a046ff16f56f63aa50fffcb2932e8db6fe82250e8107ffd3902aee5c718d22a5048608a766e0925cc72de3ec07485408fa35611e7ed353bf1a340a","ssdeep":"","tlshash":"e3a011880888a80202a32ca0c00a0eccc22822208a88ca8820b08308033c88a0008c8a","size":77,"data":"","first_seen":"2026-01-10T09:13:59.602147Z","last_seen":"2026-02-02T07:55:56.367221Z","times_seen":1420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"310c3d07091fdedcb8bfc1b4f563bddb","sha1":"edfd5a56cd3e6d0200030ce0b07879cc16d2544a","sha256":"604d70fd2f11f0b6525af7e9abc4575ba4a683b90a847dce4e2c90e8f8be8f54","sha512":"7b1dc5c72ec69b81cce45342dd2a8748ecfe39296ec387193bbb4c09a3201fa5f76ecfe28eea64a672d068a1549878db2ab357b8d8982c9d1000ea1be0ded279","ssdeep":"","tlshash":"c7a0020f2c0b292906f32991696f08ced796b33339860a48216acb88593d24d509bf5d","size":73,"data":"","first_seen":"2026-01-10T08:40:28.880331Z","last_seen":"2026-02-02T07:55:56.326757Z","times_seen":1476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"53f4b507da739c0e34d0b5e3fc4f1e91","sha1":"a93a212f7eca012dceb852f364cc2c34026f0dd8","sha256":"6722e8efbbbcd7891ee407444fed337c72a2a0fae0e083b5f8d5722dd1eb45a2","sha512":"258357bcd1c12d6d6b4ff5c34d0c5903dfea5361b9228c35a6076eacc567094ef3dda47a56f88fdeab6e321917efcd3f30572f895216dc30f1a2f5feb93864be","ssdeep":"","tlshash":"c7100000c030000000000000000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:27:27Z","last_seen":"2026-07-14T03:05:58.138681Z","times_seen":2999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f54d5e52ba5828b7dcf7d74699994acf","sha1":"4a3ab00ccd9f81925076ef11b0e594d175d65fda","sha256":"53dd81a851061fc7a4d5c9a0630f2c1914824dcb8796480e3c442bb8c585af11","sha512":"12cb9737175d83a25179667bcfc01f6e5222111ff275d69855f22679e81c4434d8c98800e62daacad570430bbeb7ea145a33fe35a823e160f80f30c150cbaf0a","ssdeep":"","tlshash":"42a0240514054c1004414400100d0ddc415c110131055f44f0f4c1cc177c0c1313dccf","size":79,"data":"","first_seen":"2026-01-10T08:40:28.804472Z","last_seen":"2026-02-02T07:55:56.362387Z","times_seen":1412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7405ceb2813b0f90ace74494d21ef4b8","sha1":"c9b2ef049e2a57bda63fd1cc78251ce6a2187e99","sha256":"2fe1d324f7166b7b7983b7d13c8925b9d57cf35df31b0617a23c2a63da6557a7","sha512":"81b89f40345b878efab99d7177fcbb5e5a56d1fd9fbf00dc276488d51edcf69787f174489d902b32b4893aaaccc066c9865ccd9c6fd9960cafe9ed8f2195a0da","ssdeep":"","tlshash":"c71000000000000000000003000000000000000000300c000000000000000000000000","size":2,"data":"","first_seen":"2023-03-10T09:11:58Z","last_seen":"2026-05-01T06:59:53.771372Z","times_seen":2565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2f6b764a39d5620af010ad5023c9b1ff","sha1":"b2ba271120a7fce00ca66fe0b28c830f7b15b833","sha256":"04ab0fb619488b8e83beda7bb0067e15ba6a6aca314e068b4b8648e5a348e053","sha512":"dd748bf7da293d318b691018dcf65398faec5a611fb4f5c467300831f425471b1e6fd529e54b7f397dd8420137f437832968e88b31254a501367a5d70ced2d17","ssdeep":"","tlshash":"50a024440415fd0005037455103f0d4fc0055f0057044f4171704d0017354c5000fcc7","size":77,"data":"","first_seen":"2026-01-10T09:00:22.45804Z","last_seen":"2026-02-02T07:55:56.293967Z","times_seen":676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a5c244fde4e6f1ade71beed5c11edb59","sha1":"6bc634a7f8505a2ce340807aecfa1e50c2a578b3","sha256":"d561924e4295103128924509bbe71b3eed6625592d75ba3cc35c365189d6081d","sha512":"6ed66e7a246ab961cedd150553b6a9aa692988813dd4ee30c8b7d78d80bb8765a828112c6860d08eb382cae34e22bdd76ecda5ee1c9c7ee25a49b1d2639474f9","ssdeep":"","tlshash":"966000300c000330c0000c00000c0000003300000000003003000c0000300c0000000f","size":13,"data":"","first_seen":"2024-07-23T18:45:20Z","last_seen":"2026-07-28T15:43:12.158783Z","times_seen":174310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/zA6JB7HaRB","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"584bcbc08bd30633e0cff8f2980d986e","sha1":"7a4a7b2c54ddb865166af88db57fa1c535de516a","sha256":"5da0ad62b9d02ebe47ded813b03de73e0e5eb1f40f98d6efa0d5621c3d7394ec","sha512":"0e447a7235556ee32b1c62c463b9d38d18ad14be9850f3f6408f56e14d05b0cc52f093f67c85788ac7049a59a16e8856f19bd68d91bdb70fd900444ef7e0b38f","ssdeep":"384:boU4JkQamum040drAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtMqAfX7WO8UFWcPY4","tlshash":"07822b6e7959b97743b208f9606f6209733549ebd404c930a401ea4d7db8ade813fef8","size":18065,"data":"","first_seen":"2026-01-27T14:42:26.365744Z","last_seen":"2026-02-11T06:40:43.375974Z","times_seen":300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"24cc3dc813f384fde380df619f1525cb","sha1":"56399e3ce57ff98d68c7de98a563e572230dff6b","sha256":"5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b","sha512":"fdb6e7d3b9452cc36c1e877ebe47c50c82fd413f2cef945f808e47b081da88ae6aaac7aa14386687c59479e19c856f6031d7ae666fe9c5b54a0b6fe37fa062f7","ssdeep":"","tlshash":"027000c008088802080aa02008800080220088023e0a0e0008200000832000280a28aa","size":19,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-28T16:57:11.381663Z","times_seen":235474,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b95d379b504a50dc3848c1d7fb030fd9","sha1":"fd0c6a79983ef72b1ca2249b08c22bb3ecc3ae6e","sha256":"e2404ef1f1b7a59ee0871d071ed12a594aed30991d50265e894f4b19e657f028","sha512":"932f2fd3b07f062c65aaced86ea7973d2f7936787a0087b8d797c8934615bf7b81aafcc3aeb9a42857b45dd1e47ea3d0f3c367323eb455951085dcc13eedb172","ssdeep":"","tlshash":"81c02b8034c8e23b0932004f005a68ccc9103011c00d001380b191e0a0b16de5c2d588","size":130,"data":"","first_seen":"2024-10-12T22:57:38.675732Z","last_seen":"2026-02-24T20:52:52.763042Z","times_seen":81393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"219505d4d5ae5b145370ed3cef98cfa3","sha1":"89498e7304c8074715c729700b3955fc065531b0","sha256":"d298bd11845e65f3a66d13d3a5ab32c91d5430be6dd23c2bb70ef16c03e21751","sha512":"c169611018ff9ff3e5d894a922f07106d329ca6d9668b9dab35bed80b825bbe371edd8cbb5a63171e6f300470e690bf74d7704b7109cf78b286207e396916335","ssdeep":"","tlshash":"314000000000000000c3c000000000000000c000000300000030c00000000000c00000","size":6,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-28T15:43:12.118099Z","times_seen":175282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e795f2b1b495c31028edb86cb4f4e7b5","sha1":"d5d0d2d9e1538e5869ff9828d64664b94d6de653","sha256":"02c0ff09b0683b8853beac78e1dd6a3af9a8e10691130f6e1ff99647756e541f","sha512":"1cba9dc68dc86057efe7d75d45a8e4decc5cc620fe727688d90c1296a4498ab19425aa6de6ed4ab88f8216c266f70e39a30bf849715ad7c174910f4414d406f3","ssdeep":"","tlshash":"6f41427ea3a4193b45fa787e21af560620726654e0158c0c813e76846cb1a4b21dbf5f","size":2084,"data":"","first_seen":"2023-10-25T23:30:09Z","last_seen":"2026-06-07T08:19:02.131151Z","times_seen":267242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3cfdd339d0d4529705154323fdf59fce","sha1":"acf6707e72c270ae3fae64a263b621c5494827ac","sha256":"fa2c96908148a8dbfd6d943347bee1be7b7889f9b1163dbc9998ecc27786edfb","sha512":"bdc45036b47609a2e03705d71fc9a5efd3e68c33996e52c8866b68d40958d93c6923830c7570b0d03db48e77d24c9dd5b2cdc0a0d23830ded71109f2c9b5912a","ssdeep":"","tlshash":"0af02399fbc7806410b2773b843e012bf4f2aa801900cebbb2c2a2f12d5600bd023f35","size":462,"data":"","first_seen":"2026-01-10T10:15:42.420614Z","last_seen":"2026-02-02T07:55:56.291387Z","times_seen":1412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"0cc175b9c0f1b6a831c399e269772661","sha1":"86f7e437faa5a7fce15d1ddcb9eaeaea377667b8","sha256":"ca978112ca1bbdcafac231b39a23dc4da786eff8147c4e72b9807785afee48bb","sha512":"1f40fc92da241694750979ee6cf582f2d5d7d28e18335de05abc54d0560e0f5302860c652bf08d560252aa5e74210546f369fbbbce8c12cfc7957b2652fe9a75","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000000000c0000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T08:02:25.192432Z","times_seen":78873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a4747dd17cc2daf6962f062fe36421a3","sha1":"15fe499b8906e4a474bb166c15425112f7a13122","sha256":"7cc5f1d161e21300c6eba0791dbc268742d6a10c5ffc80c61878254b5c828f97","sha512":"933e8b9369213b3d652740ce00a90f62f2e93fc93aa57912092db94d5d006448bf4d00832983ac88bed6bd0d5cdfc89ebe21c5997a5341d6127374f82dadda3a","ssdeep":"","tlshash":"e4d02bc1900a180906ed55f75d93cdbc7174740fb1d4e52c223947d62b3e9d3400e624","size":261,"data":"","first_seen":"2026-01-10T10:30:59.970381Z","last_seen":"2026-02-02T07:55:56.407396Z","times_seen":633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9b43e4ebcd79a8f5a24431f297384b49","sha1":"ccd55aa77ae965de8d4a44285438482876dae9a1","sha256":"b79f07d3ee1eb852400073054ce5c93adfb280bc7719d28f70e8aad8ec4a987c","sha512":"5eada4821298a6d31f1e5e316a889ac51c32093d7f90bac2aebeced7c1f70b4f66b38d27064a4b1ac69df382bcd69903440d7714daa6d11040b6ba9564b98766","ssdeep":"","tlshash":"9a7000082c08200a0a223022288f00880222088008008000002880802e3a80a028280e","size":22,"data":"","first_seen":"2026-01-10T09:13:59.573577Z","last_seen":"2026-02-02T07:55:56.386759Z","times_seen":680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb41acda56881e1855ebef889bad4961","sha1":"12f032f80c4aec7d3be17c60e1f27218719a5dea","sha256":"844269e5c7a56fe45c8a6e2bd226b1d08784a453ad655ed08a60865cbc4af1a5","sha512":"fa17a7aa9bbbe5e16a4b095f8cdafeb380d99c049b48bcdd48726fd33af9a8611dc35abb1924c60278f9dd73328619a264b2b78aeec0313f6a7f256c6c81638a","ssdeep":"24576:ph11pxAyqV0CVR19x5BJqeVuJrBLLbw+dtWX0DtAqXc7cdWc:ph1LxAy80CVLJqeorBLLbztWXGWc","tlshash":"92c52b8db19675602263f0bc943f610af23b354c984c872cf26ad9ea6d7480e517bf79","size":2658344,"data":"","first_seen":"2026-01-28T13:04:55.385988Z","last_seen":"2026-02-02T16:55:23.343225Z","times_seen":3502,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-01","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e81c4e4f2b7b93b481e13a8553c2ae1b","sha1":"1758356db21759f7c5a0da9b4dd1db8fd6feab3f","sha256":"7175517a370b5cd2e664e3fd29c4ea9db5ce17058eb9772fe090a5485e49dad6","sha512":"36d8e4a9dd068d9e023d28cae898f401218dfbf8319f7218f5702da1c51d667dfa22cc11c353ff13d65491a7ea09564c6f6c95f8b9dfc3fd1ebdee9b00727ca6","ssdeep":"","tlshash":"c71000000000000030000c000000000000000000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-03-07T16:58:30Z","last_seen":"2026-06-17T06:58:10.293464Z","times_seen":3498,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"136aa19650d9dbc24b67bea4f77ceefb","sha1":"5aa5661d61437733da64bfb353eae15dfc16523a","sha256":"8e34c00375a489b6770d0d6518126a89f335852df474937f46f997d4a9be2a6f","sha512":"992d9f889d20c65e9199469692383c64c12609ffc91711cdfdb18384a40bb334a223afd1dd308983d3d2d538b09f038e9fddf715564a649b479fa60ed610f2f8","ssdeep":"","tlshash":"36c02bc1e396926843d3646f46761571e59a1b89f40c86704380fcc991a015b473a557","size":146,"data":"","first_seen":"2026-01-10T09:00:22.471164Z","last_seen":"2026-02-02T07:55:56.306732Z","times_seen":1410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5168a016be67941344bdda968ee8a7c3","sha1":"1283d79f3449d479d852e9d52091df95909cf6b2","sha256":"11b9c662693813657c478724fbf03d58599aff160c2e1b941fe1374b7b839b5b","sha512":"1a87e4a8f2ab0da14007081fef38931fd70e2a481079f9352a9c3e6f58fdf3b76b7ab045eff737e205bf868ccfe731f4f09c2a085e1c0037e0783c6b127c32d6","ssdeep":"","tlshash":"4cc08045e35068a005d1dd60cb5b4d19dd4c23c25f0d693c1230d6059e46af17537247","size":161,"data":"","first_seen":"2026-01-10T11:53:30.144205Z","last_seen":"2026-02-02T07:55:56.414859Z","times_seen":672,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"373bb03255dd0dc506407197397bb633","sha1":"4e0302aba2047f573ba55eb510e6831361d81318","sha256":"4ab62afaaddbd3dc5e8c4917f9b5a9a0a19061722c3280850bca2b1e98ebb5d0","sha512":"539d1735f947759ddda29e52d3d3ba8719a0919c667c1e7cb5cd0bace2a541bbf58ef46e4f3daffdd8ff3587ca8c901788f85ac52d60bf8777f1a8f9df9fbe61","ssdeep":"","tlshash":"b2f0d41ecdc3277584c262c560eb6ddd557831010dc7d12f3c94f778a1a0083540dec8","size":500,"data":"","first_seen":"2026-01-10T10:30:59.969238Z","last_seen":"2026-02-02T07:55:56.384428Z","times_seen":656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7b8b965ad4bca0e41ab51de7b31363a1","sha1":"d1854cae891ec7b29161ccaf79a24b00c274bdaa","sha256":"1b16b1df538ba12dc3f97edbb85caa7050d46c148134290feba80f8236c83db9","sha512":"917148ec47923f2e0e3d73142ac4f94ec4c73078865ba6d29f0ea172cd6f4bf34db699af5c33535d3694d4aef91a11f916004d0382f794448a8550623d34c985","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000c00000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-28T08:03:09.244157Z","times_seen":63461,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d01fd9b01e9dde8bd3dc247afbfb7218","sha1":"7058849d4ff0e3150b247cf2d3e39bb52e9ec9a1","sha256":"a5713dc015b27286ec0cdd8fe5c20e055cada2827cbffd1ab4aa1c26528b59d4","sha512":"39efe23e8b1bc846e3965469c0867bb3f4d3511e8b8d7f82622acd68ec0d129067ff1e727230b5c97945669437c58d758713c2b05359109eedef14d7e846ee45","ssdeep":"","tlshash":"c7100000000c3000000000000000c00000000000000000000000000000000000000300","size":2,"data":"","first_seen":"2023-06-15T17:32:35Z","last_seen":"2026-06-29T05:46:01.082723Z","times_seen":1738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3dfe3d7a171097592cb00d6a57b6f845","sha1":"29b1930481ec92d813a66ca893468ae710b71a85","sha256":"f0a85e81a4cdc5b0ffa6b6bae7015c00d3cc730d040c955859d3b797aaba3ce9","sha512":"938f53fba26d901ea3165404993803cd844ec5cb3cfce3c2385823b8ded3c440f260b8a11604f997efcd1b1e2356ee89cd86facc52094ad6f4fef0cc5ea05466","ssdeep":"","tlshash":"c7100000030c00c0000000000000000000000000000000000000000000000000000003","size":2,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-08T15:16:28.073779Z","times_seen":2727,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5d43ef05e57cdeab7895fe8a3b6ee014","sha1":"19671e4e00cc9b5f8f6a6167c1ea8800ee539aeb","sha256":"b7893a0611b91f5fe47ce3889faf375eddbda47517f4e44c8c338eef6d2c41e5","sha512":"535346ebfe272e052e64dfa1845da29662c36e84fa5a946e52dcbb2cf4d894851a102180fb1c04603f86ec920d89fdfb62c1ddc14ea81ba4cec7d4723ad5598e","ssdeep":"","tlshash":"8db092a4a20c0b5812813919ad2b06e950e42704f82994884ac0ae2548e0a41568ead8","size":116,"data":"","first_seen":"2024-07-19T01:23:55Z","last_seen":"2026-07-28T16:57:11.359278Z","times_seen":189646,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b640f7845a4341a89d25c0ca0f9b26f4","sha1":"5b98b63751f6e77fe954f5b95388d615eb263003","sha256":"3fdecbfeaacc1474406d975d54141cd22c1be7ed72ccf31bf23f5304e2b50164","sha512":"ec2592241ccbd9a0e93c49ad07121af8cb3acb2a4d8fc25e4f4599a1052d1fb51c9ef8538ac383c52e1205f9b6a17525703f2c4d4bd0d69fc090c04f93943066","ssdeep":"","tlshash":"2dd02b38e11c422b26970b4197c2183b05004642dd011d7b2eae28eb7044c9a9a1481a","size":256,"data":"","first_seen":"2025-03-17T23:26:20.961709Z","last_seen":"2026-07-28T15:43:12.124478Z","times_seen":167508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a931635074a5017da74948b67e16c76f","sha1":"a6799582ad16a7c1ab8221c166268130df6691d2","sha256":"1fb437ac78114eda813a7c4d5771b6d3aa34908a5ca3b743d5eb5c79088cf82c","sha512":"7c96bb515bdba9ad60854b433d24e77982a321dd7ca71599fd8f79acee580802f56829a5dbb7f64932a51ad50d18a9438251a6ad8127ad2b2e332811033d2c7b","ssdeep":"","tlshash":"a5d023cc3941f262d06274b9041704dfd173384a1e1cdf4184154875667c5d9407f4c4","size":206,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-28T15:43:12.169861Z","times_seen":207784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b683545a7eb04fa715a9b50b3a076967","sha1":"b4eb98c7cc1a1c8a8d883ce4f56465e2f40893a8","sha256":"42f6709b970267a4868188ca71440972db76afafa17f5a470efba622734ee873","sha512":"a8825b30892c5013ca6f5ea90bedf1f98dd1f138ca3bb25ee6bc855a8f3a055427f682c8fcb012914337c8bdf83f9dc7f81095e2ea85293c67f14d7e7a4506b6","ssdeep":"768:3ARhGDDLrOYHwJGDPxcBjmJ5OighJ6mqNX+yq4pg8sRefhc4XvbjYpFv:wSOUKdighNyrpzsIfhzYnv","tlshash":"385352650868a8729893e547ddb5ff3e8ce816790bc49a6ebcbbc35c01ec6510daf413","size":66294,"data":"","first_seen":"2026-02-01T16:36:05.265576Z","last_seen":"2026-02-01T16:36:05.265576Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bce87c857571353d52a984d051446b37","sha1":"00130b2bfa91e9e2547857e892c3effec8630d8c","sha256":"ef7481c99881ba542ff1b93f3c646db8d2295b747edfa0d9f67337d610e90cc4","sha512":"47768b8e059e7d74b8082721bb9efa379bdd5811d32237c2685a559c9e4e6aa1152d86bf74673231ccb5d0d979cbae515cc8a987cb966bb743a4e7298d0aebd6","ssdeep":"","tlshash":"c7100000000c000c000000000000000000000000000000000000000000300000000000","size":2,"data":"","first_seen":"2023-03-26T01:53:10Z","last_seen":"2026-07-24T11:24:31.980019Z","times_seen":5075,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"7d3db0c9cf632716b719f183e166f2f8","sha1":"c7de3672e1c4fc3fb43980264ac48881f540bae4","sha256":"d507daa163e0d32e953bc09cff64b83fe86fe271d662b571174789f54182c8ea","sha512":"9597a5dd7e47661bf8ceb049bb11e63db7e1a0820f2b83f3da0d3957fd3ccb48e4b9cdf64f39ecb39bde8de428de27ed50f7ba3453e3fe802bc44398fc2c561d","ssdeep":"","tlshash":"26a002382925bc1145d332e811ce0c8cc273a386b1284ed8d6704e98277d167bf06e8e","size":71,"data":"","first_seen":"2026-01-10T09:13:59.600749Z","last_seen":"2026-02-02T07:55:56.303438Z","times_seen":1417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9a116c50d133c8648404081885194300","sha1":"aef41842ab637007acc118fdd2f2e678f7a91efa","sha256":"d32a29b4a83ca5eef3e0d1983db8f61e5d2208c876892ff120d790080433a4ba","sha512":"38cbc328aa3e4502e0eef843eaab9fab783dc9aca1a6b025bf0eff6a48db719ffac26808f23705811025eaf7ce5ebb2ed0e5b7d5a113f1f38551320f9bf2b8d0","ssdeep":"","tlshash":"c7100000000000000000c0000300000000000000003003000000000000000000000000","size":2,"data":"","first_seen":"2023-03-08T12:10:41Z","last_seen":"2026-07-26T09:40:20.637143Z","times_seen":2511,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c66c40a437d74348c83c1113ff7a77e4","sha1":"74fb51cafed9ff9d7d32532dc83c2874fa36052d","sha256":"46c2f46244cc579677fc74aa99107d3b463263923a62578ef847dc708a2ac71a","sha512":"306f1e10ef93b33f736ebf961faa5639e744ecf40219dc71d2cc1356c6ccdbf9de53a6716203d2a781d0fb185bb25c3fe2800ff3d81716f9c934fc92555b4a12","ssdeep":"","tlshash":"fcc08047f1c7d3f5049280d605ab035f0d8d57645d92c41b27035e72dc5001b4173d5d","size":179,"data":"","first_seen":"2026-01-10T11:53:30.105245Z","last_seen":"2026-02-02T07:55:56.386032Z","times_seen":651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"763263a3bee417b0ff233e6ac3612a13","sha1":"3ac082fad5e356b32403a2f6f4ab6211b1ca34ae","sha256":"6e1b3094acad3a145324967fa04a9678a702d0642f0ce31a769e99ba0962f415","sha512":"5977964100d64433d48c1257a8b7d25016d23306fad7674b7b65635981883375a26dfd5fc28f13d10bdbd168e3b80fa9f4db03822a7d36ccc258e362e7c1a4e4","ssdeep":"","tlshash":"289022280802020203a3bcc000ff08c800208002f0e000800a3302002a28a8a2002f2c","size":56,"data":"","first_seen":"2026-01-10T11:53:30.157376Z","last_seen":"2026-02-02T07:55:56.308714Z","times_seen":673,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"bae3f90cb000352645e35fad60da411c","sha1":"00023f94c170125b979cb1914925d06ab1abfbce","sha256":"1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12","sha512":"d83d07979674822b4c966ddcb3bd4feb84830834e1f9fb255774ae237056cc357599e3aab9c6f47242aada2148a65c9ea11c859b1e8f550004535cc363fa02db","ssdeep":"","tlshash":"03800000203008388088000f3032cb8afaa0a22ae2322800c8a88c2cb0e8f80ba28838","size":35,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-28T16:57:11.067817Z","times_seen":183158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe81353f0c3e106bb59598d92fd49a12","sha1":"cd09955588a1d236a25a76d3f774418a829cb5c4","sha256":"a366197fa3629365ab26195a99befce51c8f8ec90252df02e0b4cb44bd52d020","sha512":"91e97b195ebad1859d88fadc65abbc0fa276dc9677360385b98b783ab0530df5b002a775fbaf9e7d410fd4eae4110ac653c4459c3fbbc125c7e2b93d5082fc8d","ssdeep":"","tlshash":"991135251b715c27806a296232dfb309b8262372583c91dc8a81e365933661bbc3235e","size":1033,"data":"","first_seen":"2023-06-13T01:22:29Z","last_seen":"2026-06-07T08:19:02.155739Z","times_seen":241207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c0a7541996c32d14982efe4470c40119","sha1":"61f1dbf1a7575092a02175a4294139ff47f38eb5","sha256":"f31af34b5c8e509bec321455474c029cb0babf1eff730f49d2eca2c355d61fcc","sha512":"0bf36e8938a4d53a82d7b58de486526fb01f32294db257e095e8ac0bcf6194e3f132f731f1334969c95c498dfe17fd8093709392e3f1f4273864ca363972b65f","ssdeep":"","tlshash":"2e70000a2e2c200302023020208f028c0ca2808008008c02028880802c3200a023282e","size":25,"data":"","first_seen":"2026-01-10T08:40:28.73087Z","last_seen":"2026-02-02T07:55:56.397196Z","times_seen":1478,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c419b06b4c6579b50ff05adb3b8424f1","sha1":"e3f284cae2097a55ddbaf92f45b91ea8506b49bf","sha256":"5e657ff6158d3e2a6d23e2a523917a2305acee9423365e268695c4b7b8919f4c","sha512":"0dafd28b4938d63e0d62125bedf08227b21f652162b40a924a0bb66559c17c922829b1993ff14aaec4c2b925ff08b9112ef12150a98da20a3fa898de44dad4d9","ssdeep":"","tlshash":"c710000003000003000000000000000000000000000000000000000000000000000c00","size":2,"data":"","first_seen":"2023-03-13T07:57:12Z","last_seen":"2026-05-08T15:16:28.126014Z","times_seen":1753,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"20736f8251223b0a90a9e3ce3cf85ba5","sha1":"1751c6f47ccf14bd24adc4f3b52230f9ef9f94f7","sha256":"0e56152260f2ad5b0cebb95dde0e066d1cced826b13c31788d25282a7bf3c12c","sha512":"3ed43d3b49e77928459ea86becc153a81b2c32afd320136e22a15920519287be77b45f9f031cda9dee5c91180c42ca56abd399429c5a40c7edfbc1535254b43f","ssdeep":"","tlshash":"eed02284b6d3e8a0907087a411be13eaed0a365418aa2820642482a86b9c0b6d10be82","size":211,"data":"","first_seen":"2026-01-10T08:40:28.776491Z","last_seen":"2026-02-02T07:55:56.340981Z","times_seen":1401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"47e3865e607a352b91b870ef8aeb9db3","sha1":"156a20b193ed3804c45387c1aeea1e26e8c2d329","sha256":"fd9176bc82b07e8654354bfdc064d0bcfeb874daee421383e7fb1202f1bb3f31","sha512":"b556923125d638fd4dc203f8f878b44913356326f0e5e1f0a4e89c538bc746b776245d8382aa5d2e6d9834112ea405329924357c62aca9c61da91a0772a7569b","ssdeep":"","tlshash":"a3c0c0c46bc2c06457e2f433c73b02b0e4086885c84443f05100fd8cf6b02e76138624","size":177,"data":"","first_seen":"2026-01-10T09:00:22.493716Z","last_seen":"2026-02-02T07:55:56.368767Z","times_seen":1401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"4d411fe24aed1b24432e22cf17c38e50","sha1":"007cba995ddecd3d4185705516b9021aa515a2f2","sha256":"68fc10ed34b8343bbb0e45fb633f47e5e9aa3bd70a238e85821bd1a4cf49225e","sha512":"1b365289580c7bf30df6ba48f6637dad2dca411b2dcf0232ebc39e3bf5bbf807a153df46da85486f2f5ff2fceac0c26240da4002d786dafdb51fe7e00c700b2f","ssdeep":"","tlshash":"64b012189809f88c34430e6034cf4cec80100317d00609c45631934c23641111405ecf","size":96,"data":"","first_seen":"2026-01-10T11:53:30.123418Z","last_seen":"2026-02-02T07:55:56.371725Z","times_seen":663,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"3b75b8f356d75a2470129288a116cfef","sha1":"610d1a13a151e90332136afad7b56f0d72dedec9","sha256":"7ff974f15abb15832b0e830582b9388c18498eb217b2995d6a4fb1af952770e9","sha512":"4162ebf758b509df23e3cb328e103457957426f90c607936bbbf302689cf41aad8ebd2390c36e425335967a55dcaa9f9f44eaac1ee18599dc885214a3540f755","ssdeep":"","tlshash":"def02e75e0bf397672a3c35f5497441d18e1f513375eac0348b161f92c1229d5056553","size":484,"data":"","first_seen":"2026-01-10T10:31:00.041942Z","last_seen":"2026-02-02T07:55:56.366351Z","times_seen":678,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5ea99c040a93ae35539b7694ab57732","sha1":"4316151f10ec2ed775b0336c360e6050aac671ec","sha256":"461eb5eaa4d52557436d7fe9e2ea15b063d3f20bb10f62d9adbe03db081ddd26","sha512":"af6c25c648d6e5d04d1970b64641e64eb4beab8b0ed19aa321866492292582e6ecf1b48c3f373f2f4fca100b1232496e2bbc44eb5a3a6f53ec8529fb2398c642","ssdeep":"","tlshash":"daf0026f62d1e303add275d318f3380fd8a05b105dd96c4f9d2e2ae446b85f72599c80","size":629,"data":"","first_seen":"2026-01-10T10:15:42.471789Z","last_seen":"2026-02-02T07:55:56.433996Z","times_seen":656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"31dd5a97841f322e142b6e8a53101c0a","sha1":"f4de5b51b4c8914d89fb2f9627d446c4ee64723a","sha256":"2c8e3f3669da72b2e9ee2b1e30fcb1fcf9dc3882929ec8dc7fd4fff9c82370b6","sha512":"5761542153968ac90678271b9f4469e18d2bf5e202d9b2fa30aca0a0f4b8be953bf9b71d54bd27d9bfe114b6bea97f8373362d11fef609804c84c84b69c65cab","ssdeep":"768:jq8OwGeBCQxvY7bLkAjNq3pdOAZ64YLf8RtoQhpi7vxXaeZwFTOERCXyk1Mr4/dJ:j1PbCQdUbI2JAbQ8TEwFTOLVa8/j","tlshash":"bb53f9cef2d2733059e3a5f1409b461bd1bb3755cc88186e7922e7f46a35887902bf29","size":63323,"data":"","first_seen":"2026-02-01T16:36:05.283123Z","last_seen":"2026-02-01T16:36:05.283123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6b894dacd9ff47738b5ad6e1b8cc08e2","sha1":"7c95ae8ad1e27b49326af9345e2cc1db93009be9","sha256":"7908c8d1aa9f9d34b8b48788b42ff6857a3e630e366c7899e669d19befb2f7a7","sha512":"87fee08253db6f93dd3848ce3af3838baf2ae6799a6b6f866dcacf293e301f2adaae332d2e70cbef1dbbaedf7f942e6574c6d4af30312b0cbb6dab7b382b3507","ssdeep":"","tlshash":"89700008ac0820088a22323a308f02888022008008000200002820802c3300a02a380c","size":22,"data":"","first_seen":"2026-01-10T11:53:30.085708Z","last_seen":"2026-02-02T07:55:56.290186Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9f502ac14e14405587d798139e860b5f","sha1":"b267cfc679f39f2d95f9d3fa41bca0eafb931aa6","sha256":"39d2483e41bf71db160191d9a148b4bc26c0739e732727e37be0f18bdc8cabca","sha512":"f5bc3d4834c9c4ed165d49476795fb1170fdc577b58fe4b21dfc67cfb4f6eebf045a3812ef48a2f15758e790ce7e111cf9dbd9ffcc3438288c7340e6eeb7661f","ssdeep":"","tlshash":"b1c022ccbb3e600d9121f90031f84e46cb4125ac4407ede3a70128b4448180aca1f406","size":194,"data":"","first_seen":"2024-08-23T10:18:17Z","last_seen":"2026-07-28T15:43:12.192549Z","times_seen":174425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a9223ef28d68961e13c945ad949f3096","sha1":"71b8458e774110ff8cd0259b8c4c02409ce74135","sha256":"7593196bb0d91b0d80af4c5f57d9f53caf6a3c3b8856f8f41cabbe1c369fe29b","sha512":"eb2966fed1eabd2b3afef55809ee891a48d6da4fd9bfeab9446f26af9d8e9b17f5a5a2fc4230f8e98f66d1be505cc0785d22b6a3dbf17cccddcb1cc8958664e5","ssdeep":"","tlshash":"41800088ae883002c02230a0228f008ca02332ea3a220a28203800c30cba2ca2203c3c","size":34,"data":"","first_seen":"2026-01-10T08:40:28.787054Z","last_seen":"2026-02-02T07:55:56.306066Z","times_seen":1141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"561c3ce5a390378b67b23b3592058a0f","sha1":"06660707dd57fe8253e3d324239aa9c22ab384e8","sha256":"7fbaecb8047ab79b0336c301d2f71822bb9f9bd06080eae57b8d6a9924500c3b","sha512":"b04ec39cd8ac7192497d786df01bec9aeae631320e7ce49abc9022e89f5b264fde76fdeb26bb15130c959268fa786c4deee494da9eea78829a342b988e164222","ssdeep":"","tlshash":"c7100003000000000000000000000000000000000c0000000000000c00000c00c00000","size":2,"data":"","first_seen":"2023-03-11T13:35:29Z","last_seen":"2026-06-06T16:00:32.453552Z","times_seen":1713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"173a08c5d6adc5c93611a599bcb2c717","sha1":"735a7301e66ae2c3584357f7bf0bf09eefb62df0","sha256":"271e6368679a21c3416e2a0325db33d6bc445d601c72a49914081b5efd0cdf3f","sha512":"cf15a9aa7e406207f3b85c7ab7d6453fd2351616b4dbb2db767ad854f866ae8256045b8cb74948f44d09fedb6c200c56fa2e2ab83d1ab997f5b0068edee7349b","ssdeep":"","tlshash":"b0800000c08a0030c3200c082008c28038802002a8f2002208200000a0032fca0020ca","size":26,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T16:58:35.294032Z","times_seen":257794,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/embed.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01d8a1a7856ccd0a02d4d634d032e148","sha1":"80f5dd831cfbae9f282d4f02d4d062715ace9a07","sha256":"48f9fa7a6c3fb8fa94d7dded5b42dbe167cc53b425f2c6567ada3453ffff157e","sha512":"02dec72dc62e93ddb2b13205b9c4606d8bf080956226adcfb812e2dd42a306ef24ce371d2e4acbd0480f839195e2dd3cdfe2c4582556c78b9f5141e65e07e8ca","ssdeep":"384:gYRgyq+e8sfLDKScdwxEUTnI7Os3vpyzoJ1AUe+/aYdr0LMSIPEc7Nad6nthED0d:0+1sfaEEUVso21AU5tr0gaEthjjt","tlshash":"4de2c54e73a4a4249556e1ee180b2104a73760cc68a0a76c773edaf9ad70d19b07ff74","size":33164,"data":"","first_seen":"2026-01-28T13:04:55.080339Z","last_seen":"2026-02-02T16:55:23.168578Z","times_seen":3546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cdaf78ad0d5ed30d0bcdb8ba7b52abc5","sha1":"6eab50f1ff64ddd5a9eabbb67e022db9d96c5286","sha256":"f416ba7a6eeb68233a645e984d37802d420768dcf1f8da13fc941e3a7203e0f2","sha512":"d50b3cd7535f04ab58e60b865c7d160b1fb8e98fd3112f07a3bfa3c2d59b5082c0778f40909d9877fe99cf1a68ea88a806b6f6820beedcaa833773413ff29ef0","ssdeep":"","tlshash":"82d095d3f7051064060090c567e7d5701754ff1cd1db2d4688f2c1c41021850709ec1c","size":252,"data":"","first_seen":"2026-01-10T09:13:59.59474Z","last_seen":"2026-02-02T07:55:56.314773Z","times_seen":1419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6bc6a2fa61dabab455ee58ca50835e9c","sha1":"1f1dd7fc87a0186a1a151fb5077db21df73eb603","sha256":"6cb8c1fb2403db821adb73c6250244032101f7b94aecdd62139ab6aa880aeb5a","sha512":"231efb2b680058663d1f50312893c9a5774948874d4265b0c367a63e21bb7da1dcc2988705e7ef1ab5f2c55a55c9013474ded28eebfc8bad019b439c52467b87","ssdeep":"","tlshash":"47c012b41104a1bd11a782f0977b69a5294172062a4c8d489972719401a503863c1143","size":178,"data":"","first_seen":"2026-01-10T08:40:28.921916Z","last_seen":"2026-02-02T07:55:56.385226Z","times_seen":1417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"9bbeee13af6d73e0c8e06ac7bac02dd6","sha1":"c25b212cca0a42569fbadc7090db82ade67871dc","sha256":"d88b824276b6469dc60a048c240b228cb71a1bd9ba1a1784f8ba1c5c7fcae9e3","sha512":"bbeceb85de625e42c6b621b08197657ccd88c4bc8f3eb766d2229a3782241177dbedc22b1f6b5b42d93270f323aadeab73f034e08c1683fa3d86b4b8117ec9c8","ssdeep":"","tlshash":"cbc012b41104a1bd11a786f0977ba9a5294172062a4c8d489972719401e503863c1143","size":180,"data":"","first_seen":"2026-01-10T11:53:30.170559Z","last_seen":"2026-02-02T07:55:56.368065Z","times_seen":688,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1769519031","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"37393b7d113e9e2367f49c9b3df04408","sha1":"262ff49276a7f2ec20ebef9fe09795b687383d4f","sha256":"d953fd5ac472d0909157d640c8a59d20685ea0ac220251f7bc6713bb7caaff25","sha512":"19a683080b7efadc6e19101ed7136feaf352136f16cf78a8e1e11b175f7f0992aee6b91b3d61dfaf48976d6bb0ade5e85c823b3f3bd97f4bfc6e54860f40f5c4","ssdeep":"24576:jThLn7wUSC3nfYeUxnM2UmYIfH6+oOaKU5XhKYRapIuAtBetm7L2A7AgPgef7mt7:j1Lx3AeUxnMKY4doOaTRapIuAtBetm7c","tlshash":"9e656bc5b2c5f46203d355e6a03b2005b33a285a340da068bbbcdcdbe95658e6377f79","size":1541020,"data":"","first_seen":"2026-01-27T14:42:26.373076Z","last_seen":"2026-02-11T10:34:11.306988Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"ec7e53845feb375870343182efd0b929","sha1":"63e71d0c5bcadc37a725d971054eb55e017f6989","sha256":"a2253e1fad60aa1ccf31416ca8cde6ffaa5af2510733c7186adc04a503346c5b","sha512":"339f50fe30462dd6204552b2d3d3fe5cbaeea2cadcfbde096f16b40f1d985a5a68ebb227dbbb9f37c9451a36376ed392b7fb50c6e661963124146bac7e03284a","ssdeep":"","tlshash":"cf50003cc00000c0000f03000300000cc0000c00c0c00300c3cc000c3c0cc00c000000","size":11,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-28T15:43:12.135537Z","times_seen":173160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"be765a9b1b69a8e6428d00a6dc72382a","sha1":"20b90cd0d5db838f7483de7ba73bd3ffb0ad48a9","sha256":"bd3b46c4f2cfaf571153cc8e4f6e1e7ecb2cac5479fa605ec119df612c43f1e1","sha512":"67988d2264fd9dd0f65589ae8c909b01c4b646ba52b0a7bc811bd78aa753ca48ec811b9e770ba378d49e8b69cba0661167446bedc3ba22a9dc5c19af67da256d","ssdeep":"","tlshash":"6f70000c2e08280202223022288f00880022088000008000002880802e3ac2a0082c0e","size":22,"data":"","first_seen":"2026-01-10T10:15:42.34603Z","last_seen":"2026-02-02T07:55:56.308062Z","times_seen":1409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c5a819461a9417a298426f0aa15067fd","sha1":"714cfa8fce31506c0ed4f6ae994d826242d18868","sha256":"abf78e30f3bb6b5a196ced2e9bf7710c0a5d6c510a52fccba40e608c638ffecf","sha512":"d18802df053055cb09c2b48a0ec9cbebe821ddf2690492bc8637263eed1032713d26fbf8b4c4011adcb2dc4ff0404a124559efc128fb5d9e01414dd34e0407a4","ssdeep":"","tlshash":"1fe0c200e3de717083ab8850e4a77e211a01134277becb6485a99fa15a708e5528fc0b","size":307,"data":"","first_seen":"2026-01-10T09:13:59.644687Z","last_seen":"2026-02-02T07:55:56.317278Z","times_seen":1406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96a7adf4e5d699c1840b8862d265bad8","sha1":"d9a4d2275a960218c3d27954f7adcf4e68caf27c","sha256":"a24ff24be799d6bc1caa44c89d1f18c55925f59e75b3e5a3de30d4cd9cc775c9","sha512":"f52aad083dfd4a26abe060c64c90233cc6383f35e7998efc14c7d0d4904c810e5290db4d5b0f983f0cf2bf2530cd5684b7f5eec40037dd8b3d8817ea5f95d902","ssdeep":"24576:YBLLvbYoMlmldKe+3ju8LIU5rVGLF6PDdrdEZ5w3gsaSBw5fH6u6F6:YFL4mae+3ju8lXQF67drdEZ5w3gsDw5J","tlshash":"47655cd1b2c5f4a507e701e6943b1002a33a1c1a740da458fbbcdcdbaa5a58e6337f79","size":1508762,"data":"","first_seen":"2026-01-27T14:42:26.374156Z","last_seen":"2026-02-11T10:34:11.306206Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0d8eb5d3b0fb5ccc34803a2434e4043b","sha1":"0762d34ae28857643554c9e9d1c41cbf3fb72390","sha256":"9bfd62ce9d48454d274cb0d41f3b21a7317a0b26f96b381fefb8c559f544da93","sha512":"7f95c366210e1987dca310e6408ebd75ede303762c373042387bb6bd1fcaad5f1d67ccb3113a1bd5300ca68af0322143b1196d997a35d8536bf7984324366742","ssdeep":"","tlshash":"e5f0780c0614689ce80a9c9cc6c9ab608f5c5237ba423025f82f460dbae3fd74831457","size":633,"data":"","first_seen":"2026-01-29T18:46:57.486425Z","last_seen":"2026-02-02T19:28:56.589576Z","times_seen":3591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1249ab51832d31d2c1a0ac36b9ffaa2d","sha1":"0c3d7a19ac7c627290bf031ec3df76277b0f7f75","sha256":"84ce1cfb6c4a34180ff26df002e3d56fbc2afd24f8a338f8cd88d331ed50a8fb","sha512":"b93b0c4092b2c820b1a2480d7c0cd1f94fda65a38e890b12c9f9f553d6a748bc65f0973493ab7b8881fa7612be7e0c2abd4143900acc9aaaaca5c4a73f44f9c5","ssdeep":"","tlshash":"c71000000000000000003000c000c00000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-11T14:49:53Z","last_seen":"2026-04-30T04:25:20.67919Z","times_seen":2083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"21c2e59531c8710156d34a3c30ac81d5","sha1":"909f99a779adb66a76fc53ab56c7dd1caf35d0fd","sha256":"bbeebd879e1dff6918546dc0c179fdde505f2a21591c9a9c96e36b054ec5af83","sha512":"3225dff071cd0ccff736b0b159cc722963310c008472be814669451a062c25c5f7654f079d3e0ae1cf2fda1551a5a0b1f5e988383be7d383d57f73d4012c4024","ssdeep":"","tlshash":"c700000000000000c000003000000000c0000c00000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T12:02:52Z","last_seen":"2026-07-28T08:02:25.105936Z","times_seen":78777,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"63a1a32071f929d8a05fa0ef2df52cc5","sha1":"c8382cfed09810b2fbbe5136618da2285c0dddff","sha256":"b111da02373eba00b93e26d254d1def651f906840acebbb24ffc91fa029c4449","sha512":"4198315b53b419530b8dceea7741446feb031239408629ff8fb05efb6144f72626dba6947d0afc307a3737023b7a7875be86b79e9e061724d5406c6ca8b733ef","ssdeep":"","tlshash":"c8c0c0c46bc2c06457e2f473c73b02b0e4086885c84443f45100fd8cf6b03e76138634","size":179,"data":"","first_seen":"2026-01-10T09:00:22.502218Z","last_seen":"2026-02-02T07:55:56.309645Z","times_seen":669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"46cb816c42804df47f9f0f1102669aab","sha1":"21e0871933af0201152f417eece3b0d51e281f30","sha256":"bbea5c31e2df314df7d41dda2b2f239e999e47d9f1d4f907646d488a5a0987c1","sha512":"3a014247d7b155eee2b6e0f632f118c9feebdae3474222fe4b13bd3064c1957009b199dde19d77376a6d8427c531053ae74ec376b103d1e29b5f1b31c3a98d8d","ssdeep":"","tlshash":"f6d022d1f2a781784a97c479403f2622aca66b84ac4c9f318703f2c9d1300870f3b963","size":204,"data":"","first_seen":"2026-01-10T10:15:42.453477Z","last_seen":"2026-02-02T07:55:56.29258Z","times_seen":679,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"05b8c74cbd96fbf2de4c1a352702fbf4","sha1":"320ad267d8d969f285eda5c184f5455bd29c8c95","sha256":"44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba","sha512":"1ab6ceacde9b312b4f32d7c9f2d54448e82264c30807e4db86ec8e295791c1fb9aafb38985b2054e589c0a0a2830f1a389312fb2912dc2f9c949231967e03545","ssdeep":"","tlshash":"f6400000000000000030000003033300000000000000000000000000300000300000c0","size":6,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-28T16:46:39.546315Z","times_seen":156596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e213815f8e0b9954f8d43e3a59f8b742","sha1":"563796cb191f082f24fc52b017905533a0ceccc5","sha256":"842c53eb438fb28e95c14d32423b0fe01bf557c9e623b684b19663d497bce97e","sha512":"b5bae6d10c35f01992dcc33c3f24a7cee7ac0fb56cf4a9e79453d213297ffe3b8e6e4b3eb7de9b1d10a5ca2638e81ac3fd3e66e6d76d157a75163ac7caea4f89","ssdeep":"","tlshash":"ad60000ffc0c330000033030003f000c003300000c000000000000c00c3000f0003c0c","size":14,"data":"","first_seen":"2023-03-07T01:11:47Z","last_seen":"2026-07-28T16:57:11.360261Z","times_seen":202194,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/js/scriptsf86ef86ef86e.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b524e97b00f7cce97ab90136c408ad23","sha1":"3ceb877a24d467c87985f0c2d4f733ab565f41fe","sha256":"6816f376194db071935fc6c7533f5c20e9ff2712bdf0e2d757c1df8e8ef89bed","sha512":"3422ea19d5d0804559a96e3e7f083ec47e2a65f69984bf98b155af49b50ed3985fae24075b3cf41b8a3a666762515a397c6e9df85c0ffe9170d23461cfef0a13","ssdeep":"384:gARApaVp36wFzUrmjbHK0hJqKi2sZAcA/XTvBSOymJ3SWKNBJfVu/zxHvWvYuvjS:gAR8u6d+bVhQtIx/FfzVzan4Bt","tlshash":"0c037349f130246a84bf332d5eff4406eeae5127884686217dfc41c88ff191a96b5fad","size":39530,"data":"","first_seen":"2023-05-21T21:25:32Z","last_seen":"2026-07-27T13:05:27.000841Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d9163ccc0fd9108b22b1473735b61553","sha1":"306495e1ca6a322e6a2a0b418c2e4a46e90ef14e","sha256":"d462d6592b94e9168a052ee0db8d7588a569d3782a2c9a29972f6b9156b53a2f","sha512":"d85bfb9de39720a65a12e4c5d1d64073280b350069e65719169a0c085b02560a8814923aaa25ead9cd79f50caaecf09dfc1992802f722a392ac15a2d02b547c2","ssdeep":"","tlshash":"0af02e75e0bf397672a3c35f5497441d18e1f513375eac0348b161f92c1229d5056553","size":482,"data":"","first_seen":"2026-01-10T09:13:59.565689Z","last_seen":"2026-02-02T07:55:56.29331Z","times_seen":1405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"11fa0b1f5f50f0b081a4cc72e6a233e1","sha1":"ae8a3472e3e7f908a11880bec057238775f2cf7c","sha256":"271ba4e1835882dcb2bfbe19e3d0a347659b9856cc9df5ba88aa94708182cbdb","sha512":"9a088a70a5f683b31dc534afaf6c86db042a8fed9df458bcba5e59f6c45cd2ae7e100fd68426ea3d0dc9b9d906ea125db86afde865970ddde1d1de5365d5b98f","ssdeep":"","tlshash":"2c90024a3c059a5905632461accf68ddc052151915051c0565b2c290573c5894405cca","size":57,"data":"","first_seen":"2026-01-10T09:00:22.449167Z","last_seen":"2026-02-02T07:55:56.387536Z","times_seen":682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8d8b85adc4d2474a84fbca1381afb3c7","sha1":"3815645d5a8680fd3ed4ce5a3b82f8d432448698","sha256":"3eb8abc484d33a620c974de75babdd2caae4fff7dc8daad7d860dd41c93ee611","sha512":"910cbf3ddef06885833d1127febca48a7f76337a577db0e125a3157ee738bba15ad1d30405e79e1de60279b2605f489b16d8b258fd17bc0c04bce685d65fedfa","ssdeep":"","tlshash":"08a0124823d0a000e671241804070a80b1a069046d1f22048280018d60d0682405c509","size":83,"data":"","first_seen":"2023-03-07T01:02:15Z","last_seen":"2026-07-28T15:43:12.026155Z","times_seen":208136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/7bfb7bc/chatcontainer.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a054d2745a5d5ea7c52daae679b1536a","sha1":"a11b047e8ad24a35088846f72dd8ed2c6476ff95","sha256":"263900aca7be3f9000922bfdd14bb0165774d5c0478b22e53108f4f8ff76e485","sha512":"7eb3e1e62c3435c6edf5746ccbda215199879f5a96c7cc66b558bde662604bedf32aa85047990e8d9a53597a63ef7c48e3eec501b6c1faa6783cb14515db766b","ssdeep":"1536:gmNa6AOoGVoBFYgRAinKijNFLCqRXIRBbJSPnVzTK3VfA/tO4JnkFAkLtkA9rsKG:VxVgqg6iqmfwFbtkA9rXDeCqLRU3JcN","tlshash":"73342ad071d0e8bc42e641daa43f6100f2292d2df409b958f3f8ddd99b5698e3266f39","size":244489,"data":"","first_seen":"2026-01-27T14:54:11.501191Z","last_seen":"2026-02-11T06:40:43.391261Z","times_seen":97,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/embeds/3c895743/www-embed-player-es6.vflset/www-embed-player-es6.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"03eff4e031af965d3ba5b7c928e35031","sha1":"52ecb715244d2582a51b3ba70034210fb244b694","sha256":"4a7a84a6e2d04904cbcacf479f9f4175414595489fab032621d7ba2a0e65b2dd","sha512":"2231438fc03f82ae1705f5f87835c2e94537c4f70db3444d106289cf10e17a1aefda2833e65bb8e392ced6d7d9dd94b22590e12eb6e80b52bf2737f25e21d707","ssdeep":"6144:Ct5Q9sb1IDS3G/EVeq/CYln8Jz23fkm83+Fd95nt7MKIWuHlXQ5PYdC3nyi63sRI:Ct5Q9sb1IDS3G/EMiCYln8R23T83+Fdw","tlshash":"ca745bc977a270a742a394f4503f1502b538a896f80cc8bcb99cddda2d2595a437bf3d","size":343219,"data":"","first_seen":"2026-01-30T14:54:36.671332Z","last_seen":"2026-02-04T18:22:09.146567Z","times_seen":4192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"424e1569e6da11aa31a8f3232d038e44","sha1":"53fc5533fb9f562341b7cb614b672fcaa8ff7244","sha256":"c303875bcafbfe1acb2d781a4cef1f15f9ca7299362538851463c90f76775f1e","sha512":"af7fdc1bb4b45318cfe2819fa29fdf474c1f55da7e355e4fe2025158978ca9286bcc578ef0c820cd148a0e9622068676f7a8355b1e7d4f7b317820363815e6a1","ssdeep":"","tlshash":"97d0a78611d73545b54037a391497c8cc099e40e5a9819507131c5901db1c5f1147908","size":211,"data":"","first_seen":"2026-01-10T09:00:22.443193Z","last_seen":"2026-02-02T07:55:56.304085Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"69935f963ee2e3140d1336e1140dda75","sha1":"d7d5f347966ee68e0cc908bbfce539df9755489a","sha256":"f774f6ea98bbbef6df355b351b6173650033fd2bc345702bc8185d87a4f6a93c","sha512":"3e0338d254e6ebc5966b3a0341d8e6bf35cb625624f76cd1f78c7625332dc365fd7bab236ed1bac847e5b09779a4bf19e78dfb0054dd0c73a664d235a247ed70","ssdeep":"","tlshash":"c1c02bc1e396926843e3646f46761571e59a1b89f40c86704380fcc9a1a015b473a567","size":148,"data":"","first_seen":"2026-01-10T09:00:22.468988Z","last_seen":"2026-02-02T07:55:56.315601Z","times_seen":680,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","size":4,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T17:01:14.191646Z","times_seen":279253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"72147c067f1dda93a8cf5b3c79a111e9","sha1":"ca5059871911274ef8f5a5ddfe3fef5738deaeef","sha256":"1c77e1c8e1e0d2127b3486196fd7e54c43defb9222f09056779c280e9d697972","sha512":"093ba29f59b5ca294270e7cc0fe3106ae7c9e6358d024c5d1bee4e6e5ed88ebe7fcdbfe661092fd50c01c566dc3f753f2c0f5e3302359eec4fdaf248d5f7044b","ssdeep":"","tlshash":"519022a02c22b0a000202230800f0032e30322c3c0c88020c022c82a3c30c0008c080c","size":56,"data":"","first_seen":"2026-02-01T16:36:05.3152Z","last_seen":"2026-02-01T16:36:05.3152Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"591264a6fde6d6607acf7bdf7c95f719","sha1":"24f9757cb2558b034f59f7e4934c958b3d04e98f","sha256":"1e0c5533d641789c147d1e44652c848aa09ae35a67a60046313ff2bda59247b7","sha512":"96130bc4a4505b499a32c99d6c0e9576b1498c1643f792bdf8ed7bcd3df6a401a8738a81724311b5d776fc5542013bd8737562b9171be936821f2d7b509565d2","ssdeep":"","tlshash":"8ca0240514054c1044414400100d0ddc415c110131055f44f0f4c1cc177c0c1313dccf","size":79,"data":"","first_seen":"2026-01-10T08:40:28.808849Z","last_seen":"2026-02-02T07:55:56.345168Z","times_seen":1412,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"561c3ce5a390378b67b23b3592058a0f","sha1":"06660707dd57fe8253e3d324239aa9c22ab384e8","sha256":"7fbaecb8047ab79b0336c301d2f71822bb9f9bd06080eae57b8d6a9924500c3b","sha512":"b04ec39cd8ac7192497d786df01bec9aeae631320e7ce49abc9022e89f5b264fde76fdeb26bb15130c959268fa786c4deee494da9eea78829a342b988e164222","ssdeep":"","tlshash":"c7100003000000000000000000000000000000000c0000000000000c00000c00c00000","size":2,"data":"","first_seen":"2023-03-11T13:35:29Z","last_seen":"2026-06-06T16:00:32.453552Z","times_seen":1713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"64d8c858156192a16a990983d35fb3f9","sha1":"1ae03179ebb040c510ecf6f785c0002f21932433","sha256":"bdfd55577f7056ab007e88fcfe9352e9805fc05f504131193cbe81c001162fd3","sha512":"e6c8b62010e24ed3c7a59b3d92aa3165bc2270274b755e8ecee06a238fe29682b08510402a6e8b7b3f85027d7e403447ed4694ec2bc43c136d5c0f1cb1b3f23a","ssdeep":"","tlshash":"cd60000c3f003000000000030000cc30c30cc3c0c0f000f3c003000000000000003f0c","size":15,"data":"","first_seen":"2024-07-23T18:45:21Z","last_seen":"2026-07-28T15:43:12.162023Z","times_seen":172046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/js/sweetalert.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b971c1d5bfe2ffa736bc4cefac29073","sha1":"a82f2200aecc7ae0209d1ef78aa8acaad0b1b508","sha256":"5ab2ef9ee2116123fa5de836f57fc463692b3d4e8f45f6401ce5861021851592","sha512":"538a7d6b641fe94d3125eedcb94f858a468804f7a5280f573b19c14347a6b2b9a8a9c6aec4d92a155de59287302c47dc4f58e547587e55ec2adb31672e5bd647","ssdeep":"768:4kTsnFnQf2PTNZrv5EShXqzOGShX9WyZa:EQ2PrrvONyZa","tlshash":"6cf2b69939fd61b3067b10a6538f5d45bb308027b004ea91b9fddb800fe0d654ba5fea","size":34735,"data":"","first_seen":"2026-01-24T22:36:05.093696Z","last_seen":"2026-02-01T16:36:05.167716Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"679fc93b1e0248b0517e1a1e638681fc","sha1":"86995ef172bf835b60c8da8cc2f7bb25757639cf","sha256":"16300b1c5acbd8247def3e32578c42981c29c48081b21b93a67d2bcfc124d275","sha512":"3017b3e8aec00bcabe109426033a7718350d548c47fd29184c54102d6691bcad134e594417c0aeff461b83beebd451775f2d109d4814ad56ad14eecd4e5377c5","ssdeep":"","tlshash":"308004445d4c100045f11450574f01cc407750013110c0dc0770c1c017303c7501fdcd","size":38,"data":"","first_seen":"2026-01-10T09:13:59.576323Z","last_seen":"2026-02-02T07:55:56.396269Z","times_seen":659,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"d5048ea6a4a46eb5df1dbda87f5aa7f9","sha1":"7e55c9ede895c42e7513b2e3672db3a77760af89","sha256":"399b666578f382c746e0d23e0b353994d53dd50633b68a34a4e4d19f6079e8ee","sha512":"1fb6105561b48e5fb1535abdaba521c79c47f9ab488e857d9d97f169c33e1bd471760efd7d9c53a0b8ee97509384bb0268a6c3e0362473538d2eaebeafce1a0d","ssdeep":"","tlshash":"92700008ac08200082223038388f02888022008000080208202800802c3300a00a380c","size":22,"data":"","first_seen":"2026-01-10T09:13:59.617724Z","last_seen":"2026-02-02T07:55:56.341779Z","times_seen":1411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"af1ba5ae4931af8770ec71d48b5949c2","sha1":"8138a015866f8fe9ab2b6daf46dfcf6d82c9354a","sha256":"e5dfa1daff1fc6d87b02c772ed6cdb3991a1e4d13b520f429d4ddf0a89739b9b","sha512":"844330e15a3c880f136dee6127d20642a5e4720c5275b576e1a275a8c2a6b8d0445e2ced5246ff2d2ddf6cf0df8ffe1b0fb9b83f32ef4dec0bcafdd93f0633f6","ssdeep":"","tlshash":"c710000000000000000000000000000000000000003000000000000000000000003000","size":2,"data":"","first_seen":"2023-03-26T01:40:55Z","last_seen":"2026-03-05T17:10:14.407559Z","times_seen":6608,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"434b91da2ee1cc2cdf0431a9dae98f10","sha1":"11f66693b97c76f5fcf5003fa4a0f342216858c3","sha256":"78f5e38467d2c7fcb837f09f94fe6044dd950544ebfbb4ac9e98a098ca4a0904","sha512":"933931d9c5e60e8b45aa230374565949c25b661ef6fb1ead717fb1370933ec3fd806c10d3ac01cb25bfbae164fe90d522d53fbce9648594d440f2e0f0c692700","ssdeep":"","tlshash":"089002d82995b0102252712b8167014a691a36c552142815845081e93c11025c817a49","size":49,"data":"","first_seen":"2026-01-10T09:00:22.505458Z","last_seen":"2026-02-02T07:55:56.313697Z","times_seen":1408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"175622f084b162e2444a2236ac182bba","sha1":"a818065138b95aa18cd6870014eac97ad6233074","sha256":"aa3507c14b04849c7ced4dcd52eb5ca5073691f226b99a3e380d0456dd239ed6","sha512":"c3137779e36f044df2e28a53345c996e4f3c99e60b30052615bc0fe0af7c6f54aaa407b3f09cf4cf9962f1df827065a05e5b1961df83847cf682d674bc7ee3c6","ssdeep":"","tlshash":"6df0d37f61c193125dd175e218d7295fd8f227809cd5880f1d7226a085bcda750ced51","size":638,"data":"","first_seen":"2026-01-10T09:00:22.403767Z","last_seen":"2026-02-02T07:55:56.352424Z","times_seen":669,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a42256350b4bfd099fe51c6ca0cd93b0","sha1":"ee375b8e2049ad01696dbee651387d7bdc858ff5","sha256":"cc746df8076df3bf944bbbedfd73be4268b3913b97f6fda23b93d3a909d4d6ae","sha512":"2dd6de6a1bb2a157213ede21288808ec1c8496983de8184adcc512bfe96902a2bf3fb6b2faaa73abc5e89a363005ca0b172660449ca5a9ad8a05586aac628104","ssdeep":"","tlshash":"60e07200d3ce307083af8040c0b3be202a012b5373fd8fb08a918fa24a709e1428fc0b","size":316,"data":"","first_seen":"2026-01-10T10:15:42.46871Z","last_seen":"2026-02-02T07:55:56.355796Z","times_seen":1410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"a0114f1065b7b6442fd9ee7504e26a8d","sha1":"3939b1a4f8cdf351eb39c95327e0efa25872a5bc","sha256":"1d29af528cb1fac0b25f0e7ade8a4794ff89843394f894148fce7c135eb8d18c","sha512":"af6bbde6f18a9f26ce947fd8f9216f138213eec2375f1fc6ab6944268b1471b5f907e403b08e79e97ae7b195941e04a42bd48936e29ae981deefd78bfec4b32e","ssdeep":"","tlshash":"00e02627a213146252241542b00b4c8c9af53d16ac6e2c8f8a606754086ded688afda0","size":322,"data":"","first_seen":"2026-01-10T09:00:22.513024Z","last_seen":"2026-02-02T07:55:56.318061Z","times_seen":1286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"faafc315b95987fc2b071bcd8f698b81","sha1":"fc5d4b9117ba9e87388174aee4f4970bdfe8d066","sha256":"a417aa4975c55a9b975ccd869a6444593fee6fff2868bf7a5811509f66b7224d","sha512":"389f0457a3c0cbbbe19fe8d27695218c10c56c773ce428e9c5ed6afd646b68b84a4d391f6ebdcd6c1c271c55ed07ea6ed5c094ebcb0144e048ca4d21face51a7","ssdeep":"","tlshash":"c710003300000000000000000000000000030000000000000000000000000000c00000","size":2,"data":"","first_seen":"2023-03-29T21:01:09Z","last_seen":"2026-07-25T03:16:09.758476Z","times_seen":2050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6a894cb4bc0e9a5e53c1e97ed01e94eb","sha1":"00d72240015bcb4bb2280f414aedf5ce47ac4238","sha256":"0cafc060f9aab80a00de7a2e51fcb2e64b694b2b8eeba448f93720e3261507e5","sha512":"d6b0ea185ee7c447df64864ce8465af349fd2f878149d9df40f2950a4aba165c73d93bd6942280550efc746bcfff539db90e99f71e6fb7c4505cbaef04717cf7","ssdeep":"","tlshash":"0c700008ac08202082223838308f02888022008000020200002800802c3300a80a380c","size":22,"data":"","first_seen":"2026-01-10T09:13:59.568034Z","last_seen":"2026-02-02T07:55:56.415603Z","times_seen":1404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"cdaf78ad0d5ed30d0bcdb8ba7b52abc5","sha1":"6eab50f1ff64ddd5a9eabbb67e022db9d96c5286","sha256":"f416ba7a6eeb68233a645e984d37802d420768dcf1f8da13fc941e3a7203e0f2","sha512":"d50b3cd7535f04ab58e60b865c7d160b1fb8e98fd3112f07a3bfa3c2d59b5082c0778f40909d9877fe99cf1a68ea88a806b6f6820beedcaa833773413ff29ef0","ssdeep":"","tlshash":"82d095d3f7051064060090c567e7d5701754ff1cd1db2d4688f2c1c41021850709ec1c","size":252,"data":"","first_seen":"2026-01-10T09:13:59.59474Z","last_seen":"2026-02-02T07:55:56.314773Z","times_seen":1419,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"66e1e68dec2b8cce9fb8404c3d4f7d28","sha1":"295221bdc774990c92059ae16c775b781ca67642","sha256":"c38986639c5b69ca975924028b7e99adfe3ea538c79434f23b50af7117c98bbf","sha512":"b819e02cb445000a39f45bc6b2cdf8c89e30c9477090f59db2b23f0ba97df184598454c02712352422d44779c9312b9ac4055d3c1bc4862804b55eb8143ea0dc","ssdeep":"","tlshash":"5ab012481802b84475c2ac30549d4dc881294213e4a56050f870fa8c2735581112edcf","size":95,"data":"","first_seen":"2026-01-10T10:30:59.993311Z","last_seen":"2026-02-02T07:55:56.349592Z","times_seen":670,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8fa14cdd754f91cc6554c9e71929cce7","sha1":"4a0a19218e082a343a1b17e5333409af9d98f0f5","sha256":"252f10c83610ebca1a059c0bae8255eba2f95be4d1d7bcfa89d7248a82d9f111","sha512":"711c22448e721e5491d8245b49425aa861f1fc4a15287f0735e203799b65cffec50b5abd0fddd91cd643aeb3b530d48f05e258e7e230a94ed5025c1387bb4e1b","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000003000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-28T08:02:25.122021Z","times_seen":68644,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"96d66a4d9708fdb6dd5597f3bbc7d624","sha1":"e10a66fa8a836f6f948941262b70e1fc928a446e","sha256":"3cabac574ada654802fc1c4518d870f0791a9a3ac31371677e75fb683e47ce89","sha512":"06c25bc4dba52367cbe19252c1a013e1714a198141d139939944422266aaaed60ea3953c5d0f890a7f9ce7887c5f2a4cbb47173d06f829d50ac33f6f353c015d","ssdeep":"","tlshash":"ebd023cb729c1114574337141eef0448bc64b4d70dbc941d8649581058011ede03aecf","size":195,"data":"","first_seen":"2023-03-08T14:47:45Z","last_seen":"2026-07-28T15:43:12.133331Z","times_seen":207817,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8fb965e7ead2924508e97e5326bd3b1","sha1":"fae376d0cb54d4433b7bdc9aba04690cd6cb5d27","sha256":"57bb660c2fdf4369ff8e37f99b26963dba87c120b80c443ff3d31e030ab3a0f5","sha512":"c03eb6a1004f9dfcd1f960a6ca70a77932794808f72476b276bb16f02d0a1855fb2d93d07aab7c0c040d4b3c0eb4f861a4c1a9368a27e3a6430e425ff6ed2568","ssdeep":"","tlshash":"8e60000c00000000033000fc0000ccf00300000cc003c0c0000000000f0000c3c00000","size":13,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T16:58:35.296155Z","times_seen":254460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"1092a58c5c07de227eea8ec27debbcdd","sha1":"7b86a7e925be4261f1ad5d0bcc83bc63f65fb458","sha256":"62a53698cd554b013c614b36d82c9a60362bbc30523b2564785e454f47bb0c81","sha512":"ac4f207beabaec6ecc10eb761dfb129bd487af02e52e63bd9862c991d480a6fce182bedffd448dca765f6627bcb27f7a4eef95d17f097984d57c4dc3558c8bc3","ssdeep":"","tlshash":"c71000c00000000000000000000000000000000000000000030000000000000c000000","size":2,"data":"","first_seen":"2024-10-31T19:16:49.308128Z","last_seen":"2026-07-20T16:23:37.277566Z","times_seen":1480,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"39b52f1f03bc7a7c247c1c0174befaf4","sha1":"61be35490cb0ceff89e6b57b2cb9b9e8bda9de1a","sha256":"ddf95e50ca01faeca7e5e83bc125cbce5ccb3a53dcea174e41fb416a6ee3b822","sha512":"b15919ad1547e210f9bde402e0d9c4d3b24a9a286bd6bc901076fca5212c69cece14217705503c0fbc428589d822a8e60d5660a56f83f60db21eaced44a16e84","ssdeep":"","tlshash":"a52151daf5e63329bde567c840f7861bd172a942be568c4f4d4341f02d2096ba813e0f","size":1176,"data":"","first_seen":"2026-01-10T09:13:59.61091Z","last_seen":"2026-02-02T07:55:56.295836Z","times_seen":1415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b0dd47a595af59a455b0702a52785fa2","sha1":"fdb1d0f14a314dbfbe49a9843e0d545f1616d444","sha256":"fc9c307ce7e19d672a0a2ae7914be6726e43a13ed7e5134775d6e1d181cc0148","sha512":"532776157db014398499017c1c2f6a3e9c7d0bc2298651f9b80dc97b5863bd2c625184dc510482208d76cbf39a76fbd1a804e24568431047ce6d5c45ec7c81a8","ssdeep":"","tlshash":"4de07200d3ce307083af8040c4b3be202a012b5373fd8fb48a918fa65a709e1428fc0b","size":318,"data":"","first_seen":"2026-01-10T10:31:00.217129Z","last_seen":"2026-02-02T07:55:56.318813Z","times_seen":681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"53f4b507da739c0e34d0b5e3fc4f1e91","sha1":"a93a212f7eca012dceb852f364cc2c34026f0dd8","sha256":"6722e8efbbbcd7891ee407444fed337c72a2a0fae0e083b5f8d5722dd1eb45a2","sha512":"258357bcd1c12d6d6b4ff5c34d0c5903dfea5361b9228c35a6076eacc567094ef3dda47a56f88fdeab6e321917efcd3f30572f895216dc30f1a2f5feb93864be","ssdeep":"","tlshash":"c7100000c030000000000000000c000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:27:27Z","last_seen":"2026-07-14T03:05:58.138681Z","times_seen":2999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"faafc315b95987fc2b071bcd8f698b81","sha1":"fc5d4b9117ba9e87388174aee4f4970bdfe8d066","sha256":"a417aa4975c55a9b975ccd869a6444593fee6fff2868bf7a5811509f66b7224d","sha512":"389f0457a3c0cbbbe19fe8d27695218c10c56c773ce428e9c5ed6afd646b68b84a4d391f6ebdcd6c1c271c55ed07ea6ed5c094ebcb0144e048ca4d21face51a7","ssdeep":"","tlshash":"c710003300000000000000000000000000030000000000000000000000000000c00000","size":2,"data":"","first_seen":"2023-03-29T21:01:09Z","last_seen":"2026-07-25T03:16:09.758476Z","times_seen":2050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"316546b26633b470ac69adb1f9d99001","sha1":"14a4038df629aa48dc306e7a33db4b11a491d3b3","sha256":"9879c3f573212fdc8063dacb7de352b7235f179cd953ec49c886b55e86fe1e07","sha512":"b4c30968924b174757503da75cdd6320fc2ef29b4ed268535c274692916f52f6f8fa7d489b3b8c6935c52696e947268b184bc7d638847c59a2c64510638a28be","ssdeep":"768:96SF/lVmzK7rAVEozFzafPtUPYT5VGnF/17XTohwOl1oPrtXoqyu:NsNaHtUPYSnV1X0VaPr3","tlshash":"83f2e1db9060efedf05a4f36481eaf2c515c4890cd4972d3b4927392e9de319f08d46a","size":35800,"data":"","first_seen":"2026-02-01T16:36:05.328779Z","last_seen":"2026-02-01T16:36:05.328779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b9ece18c950afbfa6b0fdbfa4ff731d3","sha1":"c2c53d66948214258a26ca9ca845d7ac0c17f8e7","sha256":"e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3","sha512":"b2396a002fe7aec008808687d7cbacb340b7f7a090008382f3c95870f6fb10415f61f5737c102d4bfec58fe525407ea2001e761dab1da8a501d9523921f0ec21","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000000c0000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:18Z","last_seen":"2026-07-28T08:02:25.099843Z","times_seen":53545,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"2510c39011c5be704182423e3a695e91","sha1":"27d5482eebd075de44389774fce28c69f45c8a75","sha256":"aaa9402664f1a41f40ebbc52c9993eb66aeb366602958fdfaa283b71e64db123","sha512":"2241bc8fc70705b42efead371fd4982c5ba69917e5b4b895810002644f0386da9c3131793458c2bf47608480d64a07278133c99912e0ba2daf23098f3520eb97","ssdeep":"","tlshash":"c700000300000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:11Z","last_seen":"2026-07-28T16:17:31.768398Z","times_seen":60620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e1671797c52e15f763380b45e841ec32","sha1":"58e6b3a414a1e090dfc6029add0f3555ccba127f","sha256":"3f79bb7b435b05321651daefd374cdc681dc06faa65e374e38337b88ca046dea","sha512":"87c568e037a5fa50b1bc911e8ee19a77c4dd3c22bce9932f86fdd8a216afe1681c89737fada6859e91047eece711ec16da62d6ccb9fd0de2c51f132347350d8c","ssdeep":"","tlshash":"c700000000000000c000003000000000000000000000000000c0000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:15:05Z","last_seen":"2026-07-27T13:01:51.723334Z","times_seen":63969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"8bcee3f0e32c06db7599177615172ff7","sha1":"34190d8219b8b0d0b70ee6452ac93141a212a96c","sha256":"94e37fe16e40c914a3b91c25763f0cd4b41c154d3f7737acd4b522fca91a4b46","sha512":"86d25ad7c75d01674b0ad6b3f503eaa560200dc9f5c797f14c7e8b21f8dd476d26390eacd0013465e83f4a139ccc5b6904c9208e2608393e42b6041d55c3049a","ssdeep":"","tlshash":"7ca02407140d4c100441c500100d0ddc455c110131055f44f0f4c1cc177c0c1313dccf","size":79,"data":"","first_seen":"2026-01-10T08:40:28.917898Z","last_seen":"2026-02-02T07:55:56.375711Z","times_seen":1415,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"f465da03521180d47c811a98c793a2d6","sha1":"9b76105ff4c8bb84cd630914d772f4cc73df0155","sha256":"e8183224e440eb4578fd87c4c47735f9ede4c43b1c6ebbdcd7033e98aba6a009","sha512":"b10685b1bf88080c98cfa2493e4c1734797a6ee17e9d59ddd7cbd685a9596d4c908ac2a12be9ea2aed3f6ac67ced98f3c6e76b1882f6c0731d1dd60ae5de4156","ssdeep":"","tlshash":"7450000000303000c0c300000030300003000000c00000000300c0000c0000c0000000","size":9,"data":"","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-07-28T15:43:12.087917Z","times_seen":185295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ac1839a14c0a34dcd7efca3a01be5a7","sha1":"d6ce94dd7148440de7cd068e4591d734e4f21cc6","sha256":"3dc57c11fecc0d840a2fe8f74634f7e9a156beed84fff89f629a8a33817ad554","sha512":"13ecab2eadbce9c454a6abeead1b128450bf6d76c9c933ae6de857fee1fe2d0e417e4bb139395fee9ab7d03fbe96da9026ccc59fbbeba535b1871c09b9af4f76","ssdeep":"","tlshash":"67a00263c529d5570038567055973116e12867608915e50c035a560975ea42bfed859a","size":62,"data":"","first_seen":"2024-01-04T23:32:41Z","last_seen":"2026-07-27T13:45:40.571381Z","times_seen":6174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b1e352d7df43667b99b037d2b25b931f","sha1":"ba532ef8d08a3b3ed153851e19715ab647a60a83","sha256":"68f6cdeafdc8e9466cd19b80199e72842dbdb40a264a688a229aab4293807b41","sha512":"5dc7fa73e319ae823c77c32f8de06e7fec57206ad1c12777bf7db6ef6fe6079902737dc0ba3f4107c6bfaca2be32fda436607909502c3347cbe9e2d6c8fd5ad0","ssdeep":"","tlshash":"d9c02b4f8350238283ab5a600042477f909000ca2c80a93c4ba4e08780985428893d1d","size":135,"data":"","first_seen":"2026-01-10T09:00:22.519025Z","last_seen":"2026-02-02T07:55:56.391402Z","times_seen":1410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fcef8b2c30226b18472fb7368bb34675","sha1":"a7b4abf9fd49a389b0ace910b07e1cef98a2b4eb","sha256":"b813f3111f4f7a12b232d485534a67e730102c0caea4f182523fa7dfd2b1dbc6","sha512":"15dfc420dd44bd3d4f6e2c71108a87e758b0269d05580b333eab5c8c60028fd6e2f562337b39e03526c24dc002aeb2ef76377db0e53073b5600e8aeddb9a51be","ssdeep":"24576:iBLLvbYoMlmldKe+3ju8LIU5rVGflSPDjDdBq5w3gwaSYw5fH6u6FU:iFL4mae+3ju8lXClS7jDdBq5w3gwyw5F","tlshash":"5d655bd1b2c5f4a507e701e6943b1002a33a2c1a740da458fbbcdcd7aa5a58e6337f79","size":1506960,"data":"","first_seen":"2026-01-27T14:54:11.529532Z","last_seen":"2026-02-11T10:34:11.309979Z","times_seen":277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Regular.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Regular.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49516\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":49516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49516, version 1.0","md5":"4702686fb1679679583db2b0655ce47b","sha1":"f37a899865e8040bede69226040f21d46406198b","sha256":"6793abf92943d13b77b76fdf300ce8b6514464fa2bf2c1479e600c709dbed74a","sha512":"1f7d94ef53a3a220586c3b25317927a042760dbb5efdbcbd0b03617578af8b34c193925e817d41694b419e136e464b0c70befad6c0c5f684219a090600de26fe","ssdeep":"768:H1mUqiylPjrnG0pA6U9tEEPvM+WIjwYNjtbCZUcn5Bz84x34dHrjDBMvdW:HJONrLpAV9ZPvWIJjt459xoBvudW","tlshash":"d22301819d274315cc49e5f6ad85b89b841f6b2203e40f081d445819ebf87f37e6bd8b","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.602821Z","times_seen":116,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":635,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/mask-c-light.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/mask-c-light.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Light.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Light.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49268\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49268, version 1.0","md5":"0caa2667cc5997bf6e54e86a6f7e0697","sha1":"1aca9426d6ecf6c36aa1994d8b47a9bc63b2ba08","sha256":"0aadfb39cd42b417e91e913a6a8fcbe8b4038d0bcf0efdb669312e6114f3adb0","sha512":"1bc6310c7175326ba81e6e0923fdcf2f1828f336322b834e4ccb4176ce2554e1e914cfa5a18766ad9d102b3d22c11d29fdb8311b93c719a896dd02863e53ad0f","ssdeep":"1536:3sQk0lfvDfSjUu2mBdXXoPp6j4l77EzVDweT5:3YyfvOxhBtkf77EzCu5","tlshash":"eb230299c9215a4db8d14575344165b9c30ccb847ca3d636bf317e8d30a1ce736a7acb","first_seen":"2023-05-21T21:25:34Z","last_seen":"2026-07-14T05:46:02.114439Z","times_seen":77,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":552,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-SemiBold.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-SemiBold.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48924\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":48924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48924, version 1.0","md5":"9af4a50c2a5a672c4d01d9ab50e04176","sha1":"96b359ab3775bcf9a3aec11bbaa78d12121ce324","sha256":"3b4a3185d9490f0f5c2b05c4d881bcc6cd33706cf0eee7079c883792456979df","sha512":"6429569e564553db09ba23bfa148c7cfba9ab21cd994e983841ad3549fd579eeb87bac5f8699e12b7bbd733f286a8b06ae568f160a8b4b07ed0838eeadb8f479","ssdeep":"768:II9GjtbMmb/ZsMQHBAcZVEtb126vHb3wlycTlmTrVKbgotJTjTieNi+:F9GembBsvzZYR26v73yUfVO9jHeT+","tlshash":"b423016171cb9c97c93ec3e2a3d2618866a2e18cb53f08251bd13701944bddfa7a781f","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.654463Z","times_seen":91,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yt3.ggpht.com/_-mtUXVahyBGXSPnxpWOxgZBJJEFDxtXCKQaNuiQ8EspTn1e16yjsncHj6znoDzOcLOfK6yWXMA=s68-c-k-c0x00ffffff-no-rj","fqdn":"yt3.ggpht.com","domain":"ggpht.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:21.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:59 GMT","end":"Mon, 06 Apr 2026 08:37:58 GMT"},"fingerprint":{"sha1":"44:03:99:AD:03:F8:63:6E:5F:94:83:E3:32:A3:BE:20:4E:75:F5:69","sha256":"5A:84:A3:5A:65:AF:42:FA:28:49:68:DB:26:80:22:C7:C1:ED:E1:45:3C:D0:3E:5D:52:A8:13:D1:C4:A8:86:64"}}},"request":{"raw":"GET /_-mtUXVahyBGXSPnxpWOxgZBJJEFDxtXCKQaNuiQ8EspTn1e16yjsncHj6znoDzOcLOfK6yWXMA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1\r\nHost: yt3.ggpht.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\ncontent-disposition: inline;filename=\"channels4_profile.jpg\"\r\nx-content-type-options: nosniff\r\nserver: fife\r\ncontent-length: 1255\r\nx-xss-protection: 0\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nexpires: Mon, 02 Feb 2026 16:35:21 GMT\r\ncache-control: public, max-age=86400, no-transform\r\netag: \"v1\"\r\ncontent-type: image/jpeg\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1255,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 68x68, components 3","md5":"007a36ad66926674f464e00beda512ac","sha1":"2bed6a991d60a4dcf3a576178372a4fc385a1616","sha256":"d00fd772336e7522bfe6ca275234bad189aff1661c3f21bbe98d04b3113864ef","sha512":"1ce85f99659393bf5feca799000183d9cfe687d915dc472f35906081508dc9b5fc0d1a7b11c30900195e540f7e0808ef969261d7b566767e7a302bd3652acb04","ssdeep":"","tlshash":"0821b48a36754db1ffbb94fde611a384a5c97e00fba06009729ec912230d980ca2026a","first_seen":"2024-12-07T07:14:54.973872Z","last_seen":"2026-07-27T14:57:54.703781Z","times_seen":63,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":100,"dns":1,"connect":28,"send":0,"wait":48,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/js/jquery.bundlef86ef86ef86e.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/js/jquery.bundlef86ef86ef86e.js HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 189613\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":649907,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"e3144957924486e0e937b305e17abae3","sha1":"761422685fbff9060b925f39550d72482571f03c","sha256":"c1cc5db5934c0de882f00660f9a708ee51f91eef90cc490872ddf169b6dcd321","sha512":"4119f3f330793baec02685836509598679389abac28ca6057615e4ddfbbde2eda128fcc7eeafe7a8b5fd48886a70e5403aa363857144e0e7d379c20c7eb35840","ssdeep":"6144:5k6oxeeQP4aCWfmwpjr9T5filT6uYvZEQ+iV4OGrA3mBX2cl8Qc2OftOkzQPCbDz:Ux5QP42MVOGKcl8QwFOkzQPCdOHatld","tlshash":"9dd439887291742643ab30f5513f010fb23b69a9a40e8468f579d8e97db8d8d217bf7c","first_seen":"2026-01-24T22:36:05.10483Z","last_seen":"2026-02-01T16:36:05.129935Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":178,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/fa-solid-900.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/vendor.bundlef86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 73852\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":73852,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73852, version 1.0","md5":"fb493903265cad425ccdf8e04fc2de61","sha1":"fef2f08d60e907750df0bc41ce64a7139642ddf0","sha256":"7798165ee5a3c6809310d8261dcbe7c8d0c12d795b7b09a71af3eb86ec8f33f2","sha512":"321c63dc142426eee5e8c048e1d5a3e29fa1407f660f927889029e3a1db4e8b5d085ab7b757e5b9ee711646ff4adffc7730cd0cea16ed2d95e4be125a9d9b081","ssdeep":"1536:SuS+6SpmWvQxPsoy7ducmwmoyDU8ashRtSxxKEX/0KD:Zxc6asogducmG/OhRAr1P0KD","tlshash":"537302172360deb0fe84a66aed78df89911a5f07635ac039c4e3f4b598c401efae45e4","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-07-28T16:42:25.966155Z","times_seen":7854,"resource_available":false,"data":null}},"time_used":537,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":518,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/css/color-1.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/css/color-1.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 240\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":692,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1923c45469e4c1a9563125beb1e1d5fb","sha1":"f926f6551eaee271566901b3544073dfeb2f79e3","sha256":"5612732954a905fbeefc6f81e708f68d9b74985c06ce129dd0c4ff92519a704f","sha512":"562104c5ed40adc528458729fcafb69bb8673145fbaa92bdbc6c13deabd29aa12becf7ac251b738d587bc2fd614ffc0427019caa205e5a157a6df6fe69f737a8","ssdeep":"","tlshash":"4a01f694fc02683b7a7a09ef7a04d11d933f50a74f80637a3cc411e453e93846dba479","first_seen":"2026-01-24T22:36:05.110636Z","last_seen":"2026-02-01T16:36:05.133378Z","times_seen":3,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/images/logo-dark.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/images/logo-dark.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 02:14:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168535\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":168535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3308 x 1096, 8-bit/color RGBA, non-interlaced","md5":"84b2bc003b1677feb81ad3d4bd34f9dc","sha1":"458b744f9a8b57cf5e7b76cc257a3d600159abd1","sha256":"cb34448530fae45bc0de24b71fa48cf8753e66926a29161532096d88910f04ce","sha512":"1b7a353bab2e7d18ba2b1bd3f23cf964509acbc17a4912bcdaeaa3029f5009b2d0c50c635c3ef35e26e9dfc833ff6ce32298c6c93a970612ce7f80176fe5fb66","ssdeep":"3072:boGg+jzquy47S6Hd4e5DA6FEn5P3pOidrz0g9PNpU3tWq:Uwjd7S6Hddch9rY6PNcH","tlshash":"d5f31229518a0d88dd80a0b42c770bf8773ec76d58a4fb7a67bb80eb7e8f1518161c75","first_seen":"2026-01-24T22:36:05.067071Z","last_seen":"2026-02-01T16:36:05.134291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/service_1587017692.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/service_1587017692.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 38709\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":38709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 232 x 190, 8-bit/color RGBA, non-interlaced","md5":"e7760dfe34176f0809029394d6b2e5eb","sha1":"4aee8515ebeb191e2c4118cca3d91bcb12878cfc","sha256":"08802bfa4e026d942d8289d55a6ddf6689dbe5eec3634cc591f4fa7eba915bf1","sha512":"a96ff54c725c8c292c7506806bc684a27384ccbadbcf87d47e7a310b0e395a7a04db52ab8436725735be475b590720f03c23a52389f71d60c5d3a12db6a44822","ssdeep":"768:QW6M3BmJOFNohDrg0SDWxx1mTW5WN31EL/KGmnzH:QF+uESDrg0wkYTW5M10+T","tlshash":"2003f1ebcf4ed6066196925fcbcd41e548f1af45661854c18e302beae313164b0d77f2","first_seen":"2024-12-22T23:17:14.885863Z","last_seen":"2026-02-01T16:36:05.136674Z","times_seen":5,"resource_available":false,"data":null}},"time_used":805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/generate_204?4XiQHw","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:22.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /generate_204?4XiQHw HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/41JCpzvnn_0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T16:56:23.922969Z","times_seen":17583285,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:22.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-1396\"\r\nexpires: Mon, 26 Jan 2026 23:25:03 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-26T23:25:11+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.548227Z","times_seen":16641,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/youtubei/v1/log_event?alt=json","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:24.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"POST /youtubei/v1/log_event?alt=json HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Request-Time: 1769963724765\r\nContent-Type: application/json\r\nX-Goog-Visitor-Id: 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\r\nX-YouTube-Client-Name: 56\r\nX-YouTube-Client-Version: 1.20260130.01.00\r\nX-YouTube-Device: cbr=Firefox\u0026cbrver=134.0\u0026ceng=Gecko\u0026cengver=134.0\u0026cos=Windows\u0026cosver=10.0\u0026cplatform=DESKTOP\r\nX-YouTube-Page-CL: 863108022\r\nX-YouTube-Page-Label: youtube.embeds.web_20260130_01_RC00\r\nX-YouTube-Utc-Offset: 0\r\nX-YouTube-Time-Zone: UTC\r\nX-YouTube-Ad-Signals: dt=1769963721300\u0026flash=0\u0026frm=2\u0026u_tz\u0026u_his=2\u0026u_h=1024\u0026u_w=1280\u0026u_ah=1024\u0026u_aw=1280\u0026u_cd=24\u0026bc=31\u0026bih=-12245933\u0026biw=-12245933\u0026brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C1170%2C450\u0026vis=1\u0026wgl=true\u0026ca_type=image\r\nContent-Length: 13850\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/41JCpzvnn_0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13850,"data":"{\"context\":{\"client\":{\"hl\":\"en\",\"gl\":\"NO\",\"clientName\":56,\"clientVersion\":\"1.20260130.01.00\",\"configInfo\":{\"appInstallData\":\"CMiB_ssGENPhrwUQh6zOHBCV988cEImwzhwQprbQHBC36v4SEL22rgUQ-s7QHBCL988cEPbW0BwQyPfPHBDxtNAcENnE0BwQlP6wBRCIh7AFEJSD0BwQhNTQHBC72c4cEL_bzxwQhM_QHBDJ968FEMGP0BwQrtbPHBDY19AcEJS20BwQ0MKAExCZjbEFEI2w0BwQ597QHBCV19AcEIHNzhwQ_LLOHBDwnLAFEIzpzxwQvKTQHBDevM4cEJbbzxwQndCwBRC45M4cEL2ZsAUQzN-uBRCK1dAcEParsAUQ2vfOHBCc188cEJjd0BwQwNfQHBC-irAFEMbGzxwQsciAExCts9AcEOzN0BwqTENBTVNOUlUyLVpxLURMaVVFcFFDbkE3TUJiYlA4QXN5b0t3RUE4M19CY3UzQnZzbXVOMEc5Z192TU9MZEJkMTE0VUxPTHZ1aEJoMEgwAA%3D%3D\"},\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"browserName\":\"Firefox\",\"browserVersion\":\"134.0\",\"osName\":\"Windows\",\"osVersion\":\"10.0\",\"platform\":\"DESKTOP\"},\"thirdParty\":{\"embedUrl\":\"https://koindefi.org/\"}},\"events\":[{\"eventTimeMs\":1769963720889,\"latencyActionTicked\":{\"tickName\":\"ep_init_eps\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720891,\"latencyActionTicked\":{\"tickName\":\"ep_init_epe\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963721379,\"latencyActionTicked\":{\"tickName\":\"pe\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963721380,\"latencyActionTicked\":{\"tickName\":\"ep_init_wes\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720479,\"latencyActionTicked\":{\"tickName\":\"srt\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720292,\"latencyActionBaselined\":{\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720383,\"latencyActionTicked\":{\"tickName\":\"nreqs\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720479,\"latencyActionTicked\":{\"tickName\":\"nress\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720506,\"latencyActionTicked\":{\"tickName\":\"nrese\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720298,\"latencyActionTicked\":{\"tickName\":\"ntcps\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720383,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720322,\"latencyActionTicked\":{\"tickName\":\"nstcps\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720383,\"latencyActionTicked\":{\"tickName\":\"ntcpe\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720692,\"latencyActionTicked\":{\"tickName\":\"wffs\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720951,\"latencyActionTicked\":{\"tickName\":\"wffe\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720677,\"latencyActionTicked\":{\"tickName\":\"rsf_pj\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720790,\"latencyActionTicked\":{\"tickName\":\"rse_pj\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720676,\"latencyActionTicked\":{\"tickName\":\"rsf_pej\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720701,\"latencyActionTicked\":{\"tickName\":\"rse_pej\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720676,\"latencyActionTicked\":{\"tickName\":\"rsf_pc\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720726,\"latencyActionTicked\":{\"tickName\":\"rse_pc\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720677,\"latencyActionTicked\":{\"tickName\":\"rsf_ecj\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963720752,\"latencyActionTicked\":{\"tickName\":\"rse_ecj\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963721388,\"latencyActionInfo\":{\"isNavigation\":true,\"actionType\":\"LATENCY_ACTION_VIDEO_PREVIEW\",\"httpProtocol\":\"h2\",\"transportProtocol\":\"tcp\",\"isVisible\":true,\"loadType\":\"cold\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963721393,\"latencyActionTicked\":{\"tickName\":\"ep_init_wee\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963721396,\"latencyActionInfo\":{\"serverTimeMs\":61,\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"-1\"}},{\"eventTimeMs\":1769963721456,\"screenCreated\":{\"csn\":\"5vvuurA4A06VPXn5\",\"pageVe\":{\"veType\":16623,\"youtubeData\":{\"servletData\":{\"serializedServletEventId\":\"yIB_aevSGPibv_IP_YHq-A8\"}}}},\"context\":{\"lastActivityMs\":\"37\"}},{\"eventTimeMs\":1769963721457,\"latencyActionInfo\":{\"clientScreenNonce\":\"5vvuurA4A06VPXn5\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"38\"}},{\"eventTimeMs\":1769963721457,\"screenCreated\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"pageVe\":{\"veType\":32594},\"implicitGesture\":{\"parentCsn\":\"5vvuurA4A06VPXn5\",\"gesturedVe\":{\"veType\":16623},\"gestureType\":\"INTERACTION_LOGGING_GESTURE_TYPE_AUTOMATED\"}},\"context\":{\"lastActivityMs\":\"39\"}},{\"eventTimeMs\":1769963721458,\"visualElementHidden\":{\"csn\":\"5vvuurA4A06VPXn5\",\"ve\":{\"veType\":16623},\"eventType\":16},\"context\":{\"lastActivityMs\":\"39\"}},{\"eventTimeMs\":1769963721458,\"latencyActionInfo\":{\"clientScreenNonce\":\"MdhDJhKCUgL2lnIB\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"39\"}},{\"eventTimeMs\":1769963721459,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"trackingParams\":\"CAAQru4BIhMIvtnJ1ty4kgMVD9VPCB2wpw4S\"}]},\"context\":{\"lastActivityMs\":\"40\"}},{\"eventTimeMs\":1769963721463,\"latencyActionTicked\":{\"tickName\":\"fs\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"44\"}},{\"eventTimeMs\":1769963721495,\"latencyActionTicked\":{\"tickName\":\"ftr\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"76\"}},{\"eventTimeMs\":1769963721499,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28240,\"veCounter\":3}]},\"context\":{\"lastActivityMs\":\"81\"}},{\"eventTimeMs\":1769963721499,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":28240,\"veCounter\":3},\"eventType\":1},\"context\":{\"lastActivityMs\":\"81\"}},{\"eventTimeMs\":1769963721500,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28239,\"veCounter\":4}]},\"context\":{\"lastActivityMs\":\"81\"}},{\"eventTimeMs\":1769963721500,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":28239,\"veCounter\":4},\"eventType\":1},\"context\":{\"lastActivityMs\":\"81\"}},{\"eventTimeMs\":1769963721518,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":139117,\"veCounter\":17}]},\"context\":{\"lastActivityMs\":\"99\"}},{\"eventTimeMs\":1769963721518,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":139117,\"veCounter\":17},\"eventType\":1},\"context\":{\"lastActivityMs\":\"99\"}},{\"eventTimeMs\":1769963721521,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36842,\"veCounter\":19}]},\"context\":{\"lastActivityMs\":\"102\"}},{\"eventTimeMs\":1769963721521,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":36842,\"veCounter\":19},\"eventType\":1},\"context\":{\"lastActivityMs\":\"102\"}},{\"eventTimeMs\":1769963721525,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":127299,\"veCounter\":22}]},\"context\":{\"lastActivityMs\":\"107\"}},{\"eventTimeMs\":1769963721525,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":127299,\"veCounter\":22},\"eventType\":1},\"context\":{\"lastActivityMs\":\"107\"}},{\"eventTimeMs\":1769963721526,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28663,\"veCounter\":23}]},\"context\":{\"lastActivityMs\":\"107\"}},{\"eventTimeMs\":1769963721526,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":28663,\"veCounter\":23},\"eventType\":1},\"context\":{\"lastActivityMs\":\"107\"}},{\"eventTimeMs\":1769963721527,\"visualElementHidden\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":28666,\"veCounter\":24},\"eventType\":8},\"context\":{\"lastActivityMs\":\"107\"}},{\"eventTimeMs\":1769963721544,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":23851,\"veCounter\":7}]},\"context\":{\"lastActivityMs\":\"126\"}},{\"eventTimeMs\":1769963721544,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":23851,\"veCounter\":7},\"eventType\":1},\"context\":{\"lastActivityMs\":\"127\"}},{\"eventTimeMs\":1769963721545,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":36925,\"veCounter\":5}]},\"context\":{\"lastActivityMs\":\"127\"}},{\"eventTimeMs\":1769963721545,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":36925,\"veCounter\":5},\"eventType\":1},\"context\":{\"lastActivityMs\":\"127\"}},{\"eventTimeMs\":1769963721545,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":28664,\"veCounter\":34}]},\"context\":{\"lastActivityMs\":\"127\"}},{\"eventTimeMs\":1769963721545,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":28664,\"veCounter\":34},\"eventType\":1},\"context\":{\"lastActivityMs\":\"127\"}},{\"eventTimeMs\":1769963721552,\"latencyActionTicked\":{\"tickName\":\"ep_init_pr\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"133\"}},{\"eventTimeMs\":1769963721582,\"latencyActionInfo\":{\"clientPlaybackNonce\":\"umzxPmD5r95zSd_H\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"163\"}},{\"eventTimeMs\":1769963721591,\"visualElementAttached\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"parentVe\":{\"veType\":32594},\"childVes\":[{\"veType\":96714,\"veCounter\":41}]},\"context\":{\"lastActivityMs\":\"172\"}},{\"eventTimeMs\":1769963721591,\"visualElementShown\":{\"csn\":\"MdhDJhKCUgL2lnIB\",\"ve\":{\"veType\":96714,\"veCounter\":41},\"eventType\":1},\"context\":{\"lastActivityMs\":\"172\"}},{\"eventTimeMs\":1769963721659,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"241\"}},{\"eventTimeMs\":1769963721660,\"latencyActionTicked\":{\"tickName\":\"ol\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"241\"}},{\"eventTimeMs\":1769963721660,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"J75EHsftBbgev5E4\",\"clientScreenNonce\":\"5vvuurA4A06VPXn5\"},\"context\":{\"lastActivityMs\":\"241\"}},{\"eventTimeMs\":1769963721660,\"foregroundHeartbeatScreenAssociated\":{\"clientDocumentNonce\":\"J75EHsftBbgev5E4\",\"clientScreenNonce\":\"MdhDJhKCUgL2lnIB\"},\"context\":{\"lastActivityMs\":\"241\"}},{\"eventTimeMs\":1769963721893,\"latencyActionTicked\":{\"tickName\":\"pot_ist\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"474\"}},{\"eventTimeMs\":1769963722572,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW8KBgoEYUdJZhICCAEiEQoDCgF0CgYKBGFHSWYSAggBIhEKAwoBaAoGCgRhR0lmEgIIFQ==\"},\"context\":{\"lastActivityMs\":\"1153\"}},{\"eventTimeMs\":1769963722576,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACpAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAJkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACZAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAJkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACZAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAQQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACZAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAPkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAABBAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAJkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAgQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAACxAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAKkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAmQCIYCgMKAWgKBgoEYUdJZhIJEQAAAAAAAFlAIhgKAwoBaAoGCgRhR0lmEgkRAAAAAAAAJkAiGAoDCgFoCgYKBGFHSWYSCREAAAAAAAAgQCIYCgMKAXQKBgoEYUdJZhIJEQAAAAAAoHdA\"},\"context\":{\"lastActivityMs\":\"1157\"}},{\"eventTimeMs\":1769963722659,\"latencyActionTicked\":{\"tickName\":\"ftl\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"1241\"}},{\"eventTimeMs\":1769963722762,\"latencyActionTicked\":{\"tickName\":\"pot_if\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"1343\"}},{\"eventTimeMs\":1769963722763,\"latencyActionTicked\":{\"tickName\":\"pot_cms\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"1344\"}},{\"eventTimeMs\":1769963722765,\"latencyActionTicked\":{\"tickName\":\"pot_cmf\",\"clientActionNonce\":\"jR535Nmg_GTMrmyX\"},\"context\":{\"lastActivityMs\":\"1346\"}},{\"eventTimeMs\":1769963723577,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChYvY2xpZW50X3N0cmVhbXovYmcvZnJzEhAKDgoIYm90Z3VhcmQSAjUzGgJtayITCgYKBGFHSWYSCREAAAAAANyYQA==\"},\"context\":{\"lastActivityMs\":\"2159\"}},{\"eventTimeMs\":1769963723579,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWMSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIRCgMKAW4KBgoEYUdJZhICCAEiEQoDCgFtCgYKBGFHSWYSAggB\"},\"context\":{\"lastActivityMs\":\"2161\"}},{\"eventTimeMs\":1769963723581,\"streamzIncremented\":{\"serializedIncrementBatch\":\"ChUvY2xpZW50X3N0cmVhbXovYmcvZWwSEAoOCghib3RndWFyZBICNTMaAmVuGgJtayIYCgMKAW4KBgoEYUdJZhIJEQAAAAAAADlAIhgKAwoBaQoGCgRhR0lmEgkRAAAAAAAA8D8iGAoDCgFvCgYKBGFHSWYSCREAAAAAABiLQCIYCgMKAWMKBgoEYUdJZhIJEQAAAAAAAAAAIhgKAwoBQwoGCgRhR0lmEgkRAAAAAAAAAEAiGAoDCgF4CgYKBGFHSWYSCREAAAAAAAAAACIYCgMKAW0KBgoEYUdJZhIJEQAAAAAAAABA\"},\"context\":{\"lastActivityMs\":\"2161\"}}],\"serializedClientEventId\":{\"serializedEventId\":\"yIB_aevSGPibv_IP_YHq-A8\",\"clientCounter\":\"16629\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: br\r\ndate: Sun, 01 Feb 2026 16:35:24 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 31\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5e1fa6fd9abd549a576f3f24b1d3c8d4","sha1":"d5335d7f7d33be6a0b663f03b2df4df2521c4a87","sha256":"d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336","sha512":"96e6938256b8e5924210f8e8e54a85d783fa2c01d5fbe5d2a8df7655fed9ef8be73c7cd8bf042c3c84302134b7418711397eece32f081eb7e824a519cc06b4e3","ssdeep":"","tlshash":"1c800038a8200b22232000ea202888322ac8c8203200ca28830200280cc0a0000a2282","first_seen":"2023-04-05T04:40:08Z","last_seen":"2026-07-28T16:57:10.959115Z","times_seen":282341,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/remote.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:21.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /s/player/652bbb94/player_ias.vflset/en_US/remote.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/41JCpzvnn_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 36043\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 31 Jan 2026 00:33:08 GMT\r\nexpires: Sun, 31 Jan 2027 00:33:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 Jan 2026 05:02:45 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 144133\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":124770,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (544)","md5":"9f0a414a93c850ded95908135c044764","sha1":"975a29f733e6ed039c9c712044fccc2e9204e080","sha256":"51f637fbaade48c690d79f8eacb212c96cbb7e69f067829d112a2e3bafe75904","sha512":"20172945f157dde0d9e0b51a340636df9475a0e369f5d5d57e270af55e647fc2866b6b9d61042ef2ea3baff42acde69f9b8df909a8b4eff43e2c8e2278d95c4f","ssdeep":"3072:HdeoXlaXIUAkcWjoVLkmx19sGAxS401rdQHKjfQiMD:c4laXIUAkcWjoVLkmx19sGAxS401rdQB","tlshash":"5bc3f69df145712122a3f4bd183f201ada3b3598e888432cb249d9d66d7890e527bffd","first_seen":"2026-01-28T13:04:55.177636Z","last_seen":"2026-02-02T16:53:06.019995Z","times_seen":2796,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/images/section1_1587021330.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/images/section1_1587021330.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 61169\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":61169,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 570 x 642, 8-bit/color RGBA, non-interlaced","md5":"aa7bb8c2961df34bffcc9939e107d6f8","sha1":"77ff49b46839aeefaee2107f3c104dfa24228dfe","sha256":"bdcf2025b56ab4337c561c0d0677fb0f723585d9ecb2a8595ab0d9ab36a0be01","sha512":"92a86c2f095eba5ad7c3921ee8ee468c36e4d55000757f606ed9a078b0c619411a5a96fb454dae89a897bb37b9e8dcd2f30018f38e941c6f72169b454a22dba2","ssdeep":"1536:uEDo1RKfi//5afMUU3PJoXPJKVwNfmE8OGIbnZ:uE+//BaEj32XBvNLvGIbZ","tlshash":"1a5302cdec3ff126b05a77d9b28b6be709b80db505b041dc806ca50cf8e6c269127746","first_seen":"2026-01-24T22:36:05.103407Z","last_seen":"2026-02-01T16:36:05.142654Z","times_seen":3,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/coin_1586964758.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/coin_1586964758.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28314\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28314,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 512x512, components 3","md5":"1034d21016269913e130b26e0d78f8a0","sha1":"dbbaeca4891807ef5a17dac1a2d9b8e8996c5538","sha256":"0275b20943f75b764ac8fdbad59c5f69c76636194630e9b6cb3cabe24463c7c8","sha512":"fcff56d994eec38c22539b8cf78b1f9c89ca7bc43c7caf657043cadd90469ac4cea2daaf324bd8d4e5e49f9194846ce5afcb2042e3c1c64ca46b6e3bf9d7fd7e","ssdeep":"768:X646LVNPzPN2oRLMyBy0qZ+/DKyZOos5tRoJG2nYthc:X6ZrN380qZCDrXs5H2G2Y3c","tlshash":"4dd2ad974a098be27aae43e1bd931cdd1f8a274dd5513dfb40920fc7be24102599d82a","first_seen":"2026-01-24T22:36:05.079888Z","last_seen":"2026-02-01T16:36:05.144371Z","times_seen":3,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Light.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Light.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49268\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49268, version 1.0","md5":"0caa2667cc5997bf6e54e86a6f7e0697","sha1":"1aca9426d6ecf6c36aa1994d8b47a9bc63b2ba08","sha256":"0aadfb39cd42b417e91e913a6a8fcbe8b4038d0bcf0efdb669312e6114f3adb0","sha512":"1bc6310c7175326ba81e6e0923fdcf2f1828f336322b834e4ccb4176ce2554e1e914cfa5a18766ad9d102b3d22c11d29fdb8311b93c719a896dd02863e53ad0f","ssdeep":"1536:3sQk0lfvDfSjUu2mBdXXoPp6j4l77EzVDweT5:3YyfvOxhBtkf77EzCu5","tlshash":"eb230299c9215a4db8d14575344165b9c30ccb847ca3d636bf317e8d30a1ce736a7acb","first_seen":"2023-05-21T21:25:34Z","last_seen":"2026-07-14T05:46:02.114439Z","times_seen":77,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-5.jivosite.com/widget/status/2705455/zA6JB7HaRB?rnd=0.8210348873707605","fqdn":"node-ya-5.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"130.193.53.144","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2705455/zA6JB7HaRB?rnd=0.8210348873707605 HTTP/1.1\r\nHost: node-ya-5.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://koindefi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://koindefi.org\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/4.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 144\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0731aa0703fe67f9a2da03e23587ed6e","sha1":"f41a391d99558b0c7d3ab828f46c85df9b0bd18e","sha256":"2a5cdc29f318efa0b5fbbd7f22a66432a85555cb4e1951d0f712a4c3bc95524b","sha512":"4a5f1bea630d99ea99ecf6f01f875f806f3565ca01abf6b614eb6098a1ac528dfc59d25a9bda7ad0f37b702df8170e34a7040e4bc74887d0476973a17d6d7c7b","ssdeep":"","tlshash":"a6c08c29443908e806808b15b08b7b0a0824012218c1cb28b285a540a1aa951814e003","first_seen":"2026-02-01T13:04:42.996311Z","last_seen":"2026-02-01T16:36:05.145236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":101,"dns":26,"connect":33,"send":0,"wait":42,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/icons/icon-bg-a3.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/icons/icon-bg-a3.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/brand_1587023619.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/brand_1587023619.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8188\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 272 x 72, 8-bit/color RGBA, non-interlaced","md5":"e5874c346a98b0fcde934a21dfe2c1aa","sha1":"3a57c3906a19a1c42243bdf139ff01865bc084c4","sha256":"10d5eb5957870b5df80fce77e5f6bcc6a2984d4627e09a9c1547b2e435f10431","sha512":"47b77696b140af966a712567724fdde5df424d7a719d0de061c59550155f6ab70f4ef974dac4eb88faf64661feaa06134bdbad92eebb7e0901c795b77d0de203","ssdeep":"192:ZZuo0DFvLTtyzIwP+ZEa4bH+gmAnYtLBPiiGlbF:3uxDFzT4swWmCLcNF","tlshash":"82f19e3f9eca5113bebf6458847cbf63f59cc260d1d1d062ac1cace6120427fe966668","first_seen":"2024-12-22T23:17:14.958238Z","last_seen":"2026-02-01T16:36:05.147129Z","times_seen":5,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/mask-f.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/mask-f.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":408,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/themify.woff","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/themify.woff HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/vendor.bundlef86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 56108\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56108,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 56108, version 1.0","md5":"a1ecc3b826d01251edddf29c3e4e1e97","sha1":"9394f35bd2addd24666b79bfc36d4f9d247cb01d","sha256":"0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7","sha512":"2329063d667b5480a2862fe4e11154b4dabf3b8782fd67be79ebfe55bfda96e28e70f8f438f73c7ef9901afcb16370897c3022c8b649a33cb74459c610cca00a","ssdeep":"768:tImTAHYFg71fAWsOKi5qSy5LBaK+mn2noN5IO3RCtebWA8ipCWUa:GmTp0gpBpv2a58oSA81","tlshash":"244328747f6a5b2bde839db9fe850e5160f098c61f43f123c09e98522c7b7a88979143","first_seen":"2023-04-05T04:30:11Z","last_seen":"2026-07-28T16:17:20.564011Z","times_seen":31826,"resource_available":false,"data":null}},"time_used":558,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":543,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Bold.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Bold.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49132\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49132, version 1.0","md5":"a4388a3476c182dda53a535f11348f42","sha1":"cdda1ae0e568fddb27189d53d4968266439ca893","sha256":"ad24649b3b8ddfa72af99ed37813a77d9abfb15de3969576716ce238fa1d7f14","sha512":"7a07de8f8bf58cd350bd9564a5b0627f9b2c703f4101407cfa69e083cdbc6e9c936fcf2c544b3f0a6aa87e63c606d84ae4a3d7468c2ed8b37e09ab742b9055d2","ssdeep":"768:fZP/7GsxA77g8stTjl0LrjVzmkRuibMOa7OPWJLueilQlGiVJHsEDkRe/cHS2Ngz:RnqQAI8soLvdLug5a7RLuef9JTD6Zv9C","tlshash":"352301fc149931f287a04d137b1686091da7efbe0131aefe7535a0554ad3a01ffe9858","first_seen":"2023-05-21T21:25:34Z","last_seen":"2026-07-26T02:49:32.45741Z","times_seen":90,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1769519031","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/bundle.js?rand=1769519031 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 339222\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69775d6e-52d16\"\r\nlast-modified: Mon, 26 Jan 2026 12:26:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-01T13:08:15+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1541020,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e888b104bcd2d5652c359b53cc01edfd","sha1":"9c2e3d01cd597cdd33b73d83e5074fa7d6117fdd","sha256":"1aa886a657e03d3137a821599089663c73905ba79e31981cac6e52ea98c3763e","sha512":"eb3be1d7e0761d94ea770f6ba8de4822d65824849c9dd1a10ef042bc924a5dfd95ab25e41a71c026e05398d9c66133d56dc835fde8e24dd264ea738635b43b61","ssdeep":"24576:jThLn7wUSC3nfYeUxnM2UmYIfH6+oOaKU5XhKYRapIuAtBetm7L2As:j1Lx3AeUxnMKY4doOaTRapIuAtBetm76","tlshash":"e2254ac5b1c1f46502d355e6643b2009f23a285e7809b064fabcddcbfa6659e6233f39","first_seen":"2026-01-27T17:31:54.464177Z","last_seen":"2026-02-11T10:32:00.187893Z","times_seen":181,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":59,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:22.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key\r\nReferer: https://www.youtube.com/\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.youtube.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key\r\naccess-control-max-age: 3600\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T16:56:23.922969Z","times_seen":17583285,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":77,"dns":1,"connect":14,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/css/sweetalert.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/css/sweetalert.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2258\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0862d17907b9cc4e4374b540690c0dd6","sha1":"0eb540f9a6eda209bf993d67a70df31cde7f2486","sha256":"67c4d6f91122526f73490306647e1b7d98b9d9526032a11309b3c5946441d4ff","sha512":"7fc80dfc885f23ed04f4573f2cab6356ae32c1f85801578c18ab040b30d41dc149e6d795c2f293aa2ce6fb96bce0520d85fae076f8d7f211096de9b68a8d624c","ssdeep":"384:K8t7DgOgFB9FstFKRF0PvFWFmwHH3CX1YtqemnERpazA5:fgOgFB9FOFKRF0PvFWF61YtjmnEnazA5","tlshash":"2a4233eb2df41648e76b835452de8f68633c9083691bec7eb7c010ae8f805d9519a752","first_seen":"2023-04-17T22:27:10Z","last_seen":"2026-07-27T12:35:01.164835Z","times_seen":386,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-28T17:02:12.488891Z","times_seen":144460,"resource_available":true,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Ikon-Crypto9015901590159015.ttf?h952os","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Ikon-Crypto9015901590159015.ttf?h952os HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/vendor.bundlef86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36856\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36856,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 26 names, Macintosh","md5":"bef3efbbdb9185490c96bc8cf9dea8df","sha1":"f253a2d2c831062b220768486abf99b7cc199f89","sha256":"f2930f02641676853a581498482cb6d3af4e920b02f10f9cae1a1693a0cdf478","sha512":"2f6cb1040efd0f7bfb634c553a2a63eec5be83dc23cb5511b5d2265d6f2cf33ee5026c9a0e43ea0cd9606bf76462743bdf08913e29264253426764b28d03b2f3","ssdeep":"768:R5uPswFDfjVl/f197jVv5k7rinfX1ncuXtqWLRmykRZAe:R5uPRFDfRl197jVvkS5cpWL+Rn","tlshash":"6bf27d0bd39acf9fc5576af78d50f22b4ddbd222573aa34665ca9c08c5094a0ce6432f","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T13:05:27.026855Z","times_seen":132,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":550,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/service_1587017664.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/service_1587017664.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10505\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 210 x 202, 8-bit/color RGBA, non-interlaced","md5":"35d4ef59a4cb4edf593ffa154687003b","sha1":"bfeb2c399b3b76b1406fa7f6aa07be14b521f982","sha256":"34859bf7aff6f1c354aaf6a9d30be9633792ed9de7a73e6610d9fb507230ec7d","sha512":"8bec5c0d896cc4af085970f79b8f6a953d3267e9bb5290473c596603067da471c458c87c7c477d56c5d418bedd1f20839035a5d68e8587fe474a57dd51ab9a1c","ssdeep":"192:VzJ6Xx23Xujl3doyHp0H9BnVXLOq5laqJW0MYmNomIrOmVGri+VO98QyCZjKTdgI:ZXujleyKH9BnZBIqHMYIoma/8iL6nCxs","tlshash":"3522cf1336b5dac65f02847e789c35dbe7a3223ddc867b99a854f89138b0641ac77c06","first_seen":"2024-12-22T23:17:14.888775Z","last_seen":"2026-02-01T16:36:05.153271Z","times_seen":5,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/polygon-line-a.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/polygon-line-a.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/coin_1586964821.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/coin_1586964821.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20081\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":20081,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 512x512, components 3","md5":"7ee1f747b7774fbfac20a1cf69a74292","sha1":"909dcab8eca5d546f7061b8239563df0676de7f5","sha256":"3fef78bad09ae0a9f3d420ebf536a0888775da97123e1743b6c3f27e471a230b","sha512":"5ccf76a6144efc08271f21927a721857863602489a5da9fb0271128b5aaeb65b87448aa8835c743a315dcc5327a3b714e90342dd46eba5590ff560aaae55a796","ssdeep":"384:XWhmnghplsYEHeZ1JxSSkTLGIIurgXLJ3lOyFhdeB/5BF1dj8Nvs3oEB3JXTx8:Xs/flsL+Z1JzsCIpgbJ3lOy/QBR18vsg","tlshash":"b39207078d058bd3a02c07edbd031de96f892b5cf9862aff15630ecb79106625e9e06d","first_seen":"2024-12-22T23:17:14.928042Z","last_seen":"2026-02-01T16:36:05.153964Z","times_seen":5,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/coin_1586964871.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/coin_1586964871.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21289\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":21289,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 512x512, components 3","md5":"0a7eab5bfd3345812a78fc147efb1dd5","sha1":"6a74ee23478c7d47858e69ea583c63aa063d85ba","sha256":"aa8d6e8330ff07715d8214e3f77ea81c339a898e62423364440512ffcd0d1296","sha512":"e75194ad4f425da5dc0123b9520556e1d55078189cf77330340b3e72a6361738b4d5604e3f01527c8017620c001a951ab8252198fcd791875f7a270311dbbf90","ssdeep":"384:XIXW9fMJwuGUExCUcdyxJjaYBVtEW7n7lOlpHSqdGeD3jAGdN0XZicX3b:XKCkAfVROYBoW7BOlGs3nNwNHb","tlshash":"50a24a138d588bc3b525d7e9be034d5e7b892e5cad5136fe01a24ed77f106204e8e06e","first_seen":"2024-12-22T23:17:14.930613Z","last_seen":"2026-02-01T16:36:05.155292Z","times_seen":5,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/base.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:20.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /s/player/652bbb94/player_ias.vflset/en_US/base.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/41JCpzvnn_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 691334\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 08:22:48 GMT\r\nexpires: Thu, 28 Jan 2027 08:22:48 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 Jan 2026 05:02:45 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 375152\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2658344,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (979)","md5":"c33b1e0b758c3c9955952aeef0747e2f","sha1":"70d00e425ab528a4d041a9557ab24139c11b9068","sha256":"59efc6df5a8c03de36117102668f7c128e7339cfc83df82c1f26fb51dbb3dd21","sha512":"3ba8a34722856f94e671eb82346a5e270e9255b3eb204ffa7f44a5ad86ac011beeb0ce406ec5208198e795fc5d9b83a3ef50a0c704555724a374ca13c0015636","ssdeep":"12288:KhYwAQXy5EEEEb3h1FGSfdN7YowN+8LBh0wCgobleyu2+asqJFtZ9OtFhNyhQ5ts:ph11pxAyqV0CVR19s","tlshash":"9b252accb196b6601267f0bc902f160bf27b3504940cdb6cf266dada2d7490a957bf78","first_seen":"2026-01-28T13:04:55.129224Z","last_seen":"2026-02-02T16:55:23.175419Z","times_seen":3533,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-01","alert":"Hunting_JS_WebAssembly","trigger":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/base.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Medium.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Medium.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49368\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49368, version 1.0","md5":"c9b71db74c678649db55e9ff2a6ae4a9","sha1":"d30bc652962b0d46d06bdad61ab123bfd0ed53bf","sha256":"ac5bf0ec2dc9d22e8d1f68387d6ff759c013b66b402d56e379e1e3209293e13a","sha512":"15c8ba5af39c0f654a126f9fb576c581b6876850038b97d6745cf7cb8046b0e76fc92d705b39d93f5c0a0bf09236286bb30d3d3bb16c8629c0ea9a11ef93a9ec","ssdeep":"1536:xBlnH+T5TMXr521sxXXPDhX6tYuMHnHkWx36Azt:xjnmTMdVXMYjnZcAZ","tlshash":"ff2302cb1566b1aec3f8274cd4dd020dcaf081a1e82af5513906b41b8f5c75de625aef","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.557139Z","times_seen":95,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:20.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 21:35:41 GMT\r\nexpires: Thu, 28 Jan 2027 21:35:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 327579\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-28T16:57:42.240207Z","times_seen":948498,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":161,"dns":3,"connect":7,"send":0,"wait":17,"receive":9,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/zA6JB7HaRB","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /script/widget/config/zA6JB7HaRB HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://koindefi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1192\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Sun, 01 Feb 2026 18:35:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc90\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2988,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"6f33c36441ba1ffcd97f04f26916b7af","sha1":"dfa81296178df762e962a70bc4665bee560fb498","sha256":"994dc34c9a9a634f6b7480acbf932bcac2c8bf795919b0d6d465841ea3473447","sha512":"86d179c4e63738178206bc921c5781e9ee0ba5c20d56164a1b5d2ee0a7329d8bcc44e1cedbb2880a3f3df4f5216826d015996b368264be43d73b4acbc27eee03","ssdeep":"","tlshash":"4e5163721c491cbb4a8bfb83b0cbbd4254784793db810e71da6dcd3c3a97694131ba5a","first_seen":"2026-02-01T13:04:42.999972Z","last_seen":"2026-02-01T16:36:05.158768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":128,"dns":1,"connect":62,"send":0,"wait":286,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Light.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Light.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49268\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49268, version 1.0","md5":"0caa2667cc5997bf6e54e86a6f7e0697","sha1":"1aca9426d6ecf6c36aa1994d8b47a9bc63b2ba08","sha256":"0aadfb39cd42b417e91e913a6a8fcbe8b4038d0bcf0efdb669312e6114f3adb0","sha512":"1bc6310c7175326ba81e6e0923fdcf2f1828f336322b834e4ccb4176ce2554e1e914cfa5a18766ad9d102b3d22c11d29fdb8311b93c719a896dd02863e53ad0f","ssdeep":"1536:3sQk0lfvDfSjUu2mBdXXoPp6j4l77EzVDweT5:3YyfvOxhBtkf77EzCu5","tlshash":"eb230299c9215a4db8d14575344165b9c30ccb847ca3d636bf317e8d30a1ce736a7acb","first_seen":"2023-05-21T21:25:34Z","last_seen":"2026-07-14T05:46:02.114439Z","times_seen":77,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Bold.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Bold.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49132\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49132, version 1.0","md5":"a4388a3476c182dda53a535f11348f42","sha1":"cdda1ae0e568fddb27189d53d4968266439ca893","sha256":"ad24649b3b8ddfa72af99ed37813a77d9abfb15de3969576716ce238fa1d7f14","sha512":"7a07de8f8bf58cd350bd9564a5b0627f9b2c703f4101407cfa69e083cdbc6e9c936fcf2c544b3f0a6aa87e63c606d84ae4a3d7468c2ed8b37e09ab742b9055d2","ssdeep":"768:fZP/7GsxA77g8stTjl0LrjVzmkRuibMOa7OPWJLueilQlGiVJHsEDkRe/cHS2Ngz:RnqQAI8soLvdLug5a7RLuef9JTD6Zv9C","tlshash":"352301fc149931f287a04d137b1686091da7efbe0131aefe7535a0554ad3a01ffe9858","first_seen":"2023-05-21T21:25:34Z","last_seen":"2026-07-26T02:49:32.45741Z","times_seen":90,"resource_available":false,"data":null}},"time_used":646,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":644,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Bold.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Bold.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49132\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49132,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49132, version 1.0","md5":"a4388a3476c182dda53a535f11348f42","sha1":"cdda1ae0e568fddb27189d53d4968266439ca893","sha256":"ad24649b3b8ddfa72af99ed37813a77d9abfb15de3969576716ce238fa1d7f14","sha512":"7a07de8f8bf58cd350bd9564a5b0627f9b2c703f4101407cfa69e083cdbc6e9c936fcf2c544b3f0a6aa87e63c606d84ae4a3d7468c2ed8b37e09ab742b9055d2","ssdeep":"768:fZP/7GsxA77g8stTjl0LrjVzmkRuibMOa7OPWJLueilQlGiVJHsEDkRe/cHS2Ngz:RnqQAI8soLvdLug5a7RLuef9JTD6Zv9C","tlshash":"352301fc149931f287a04d137b1686091da7efbe0131aefe7535a0554ad3a01ffe9858","first_seen":"2023-05-21T21:25:34Z","last_seen":"2026-07-26T02:49:32.45741Z","times_seen":90,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":531,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/images/logo_1599259857.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/images/logo_1599259857.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 02:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168535\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":168535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3308 x 1096, 8-bit/color RGBA, non-interlaced","md5":"84b2bc003b1677feb81ad3d4bd34f9dc","sha1":"458b744f9a8b57cf5e7b76cc257a3d600159abd1","sha256":"cb34448530fae45bc0de24b71fa48cf8753e66926a29161532096d88910f04ce","sha512":"1b7a353bab2e7d18ba2b1bd3f23cf964509acbc17a4912bcdaeaa3029f5009b2d0c50c635c3ef35e26e9dfc833ff6ce32298c6c93a970612ce7f80176fe5fb66","ssdeep":"3072:boGg+jzquy47S6Hd4e5DA6FEn5P3pOidrz0g9PNpU3tWq:Uwjd7S6Hddch9rY6PNcH","tlshash":"d5f31229518a0d88dd80a0b42c770bf8773ec76d58a4fb7a67bb80eb7e8f1518161c75","first_seen":"2026-01-24T22:36:05.067071Z","last_seen":"2026-02-01T16:36:05.134291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Medium.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Medium.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49368\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49368, version 1.0","md5":"c9b71db74c678649db55e9ff2a6ae4a9","sha1":"d30bc652962b0d46d06bdad61ab123bfd0ed53bf","sha256":"ac5bf0ec2dc9d22e8d1f68387d6ff759c013b66b402d56e379e1e3209293e13a","sha512":"15c8ba5af39c0f654a126f9fb576c581b6876850038b97d6745cf7cb8046b0e76fc92d705b39d93f5c0a0bf09236286bb30d3d3bb16c8629c0ea9a11ef93a9ec","ssdeep":"1536:xBlnH+T5TMXr521sxXXPDhX6tYuMHnHkWx36Azt:xjnmTMdVXMYjnZcAZ","tlshash":"ff2302cb1566b1aec3f8274cd4dd020dcaf081a1e82af5513906b41b8f5c75de625aef","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.557139Z","times_seen":95,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/images/logo-light.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/images/logo-light.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 02:14:57 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168535\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":168535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3308 x 1096, 8-bit/color RGBA, non-interlaced","md5":"84b2bc003b1677feb81ad3d4bd34f9dc","sha1":"458b744f9a8b57cf5e7b76cc257a3d600159abd1","sha256":"cb34448530fae45bc0de24b71fa48cf8753e66926a29161532096d88910f04ce","sha512":"1b7a353bab2e7d18ba2b1bd3f23cf964509acbc17a4912bcdaeaa3029f5009b2d0c50c635c3ef35e26e9dfc833ff6ce32298c6c93a970612ce7f80176fe5fb66","ssdeep":"3072:boGg+jzquy47S6Hd4e5DA6FEn5P3pOidrz0g9PNpU3tWq:Uwjd7S6Hddch9rY6PNcH","tlshash":"d5f31229518a0d88dd80a0b42c770bf8773ec76d58a4fb7a67bb80eb7e8f1518161c75","first_seen":"2026-01-24T22:36:05.067071Z","last_seen":"2026-02-01T16:36:05.134291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":644,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT","fqdn":"jnn-pa.googleapis.com","domain":"jnn-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:22.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:02 GMT","end":"Mon, 06 Apr 2026 08:38:01 GMT"},"fingerprint":{"sha1":"00:CB:E3:62:3C:86:A7:11:87:F3:A6:90:20:C5:3B:40:22:3D:A4:45","sha256":"95:06:BF:37:D3:97:28:E3:54:05:91:BE:0D:2F:72:C7:C5:B0:4B:1C:FA:A1:FF:85:13:D0:DE:4A:8F:A2:55:1D"}}},"request":{"raw":"POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1\r\nHost: jnn-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw\r\nContent-Type: application/json+protobuf\r\nContent-Length: 1618\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1618,"data":"[\"O43z0dpjhgX20SCx4KAo\",\"$zVI5UgpRAAYf795QP-_elfOn20H2j-qnADQBEArZ1C6Z4vRWuUwhk80I62uAcFlJx6SDshNAqiq7tNiqtwbkzBajDcSiImPrkXbZIra2ngAAAVzOAAAAF_QBB-IAUqjfhqJnyvyiS56gVoahSDfL78xiJlsx7DpTXDPVr6J6Ntijh7YGvrkYSMKDPJ6geKVdjzrrKQgMvWI-7u8ouG82sDCEVE1r2k3h7RCKutQlZ_IFA_VeDxrwoG10S-Lxc33eGMHPD7I7sBR94kB7ov_Bo-gaWwqEn_HrazgU3CwjR6VDMxSGUpNw2q4A8iQhJ1BGr-I-yOGfkjlFr8XiNbVPt5hjH2BzeSj4TJcbISWkl6Xu7LABP9kIFfIfskMIzaVkoNNA-QLH2I45Kr7ymRL8EsZjyJGzOwxrOi_8FpjjTbzw4Jydamjk0QeO58quQmZHLhStk6jSz7rHCV7gfKu2Uig11QwTojTc18_fInjcOLHsqcIACOk4eMtOzmfdaCCUxDHSJmg0q5m-vs2o3JuOHF03MthJdoiY8SMxQZ7iwqvq4A1rlESqoK-GHAO5ISq7yP1jgUIyR8f7Hg5s5WZwdTpvzv1A5AHQPZkgT2xjoEWeC8Ow_A3cZKVBZVZW33MpLMZGZZZMW3CYCqkrYex_UrB6fJH9p8NGsOBCTYlao848Lhl0W604N_ebkD8ptTaLvSuasiFDqB9ktVZ0SlpvlXE-22cWLrpCfgfpy03SvB1zrUpTb3IeR0wxQ8HK3TXETNDo1Jer9uzT8u4SmL0y7t9tH47fc-6jmD1v_HzJuiDmZSeC0pOP6B7fF1uOuzigO4m5vMfWKk8ySDGx-KCR-bYlVhl9e0xJH3VIpBUjQrTUirw7z4NKFehJL9m0rkRkHNZcgfPBSSGvwQpuP9qBGE7KUWohApz3oUV2AvR4XGP5N9Z1Ns4aEC8r-x7qRDGpf71QvzfTa6EbSaMdcyyZJtlnalR-u3jijaGIZXkO96Y5mQwniV3MwRlFQ3Pfa2Z3Wk5qleNoGnsK78r0YdJSu3bcFr0MuzTp5ernf16heWd7OQan1IhlgnHQW5EefWmY_60tubIQnh4fuN0OYQ_NAE9aHpFCjSWpm0s1q-3j-gVidb9tdNhDOchF1j04vfR0SnAnLojkE8bRRHQXX3H67nCKppT_Bz5lDwTPczrrkhzCaw61YxBK2LIzE_S9gVgvmsPoAXgc5EZRMcIQcyjXAFRI2-6B9wlSbscUfotRvCxcQwfhd57l7EuHxHVb0chiSdJkjXqdOKh6890M8qeTQmct0VwbkZD_BRxS2caWSOC5C5MF_YzSlXV9ru2pdPh7D17OR7fxpKZx6ZTQqvs6jKY9_RyZWI5DAq_7IU5m7RUatOUlEKA4g8iYwDURUtvAlAOEsETG4zeJdbZPfJ0mD0U_yRzYEfMrqHprRKvV-uDltOta33rJzGGnFCCdCvT7I_C0AgebsGAnHeNt8z6QFDu80EYX0J_38pRGNbQvWCUe9sAB6_UeA99821Pfkb2Cr7VQQIAFa8uaCixKzVnkAHrK9P-ecEh3w-BWqUXPm26NbEAMYx-YqQ\"]"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\nserver: ESF\r\ncontent-length: 118\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.youtube.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"822c0bcb69bcc8fb7ad86eec0bb6ce64","sha1":"313313d4446372fe2ccb140353309331c84251ab","sha256":"9ad6c135a162019cf2c72c86aabd626af8ca1b8339d174c20b9a2cf2e1d21b72","sha512":"3f04db6305ad18b25bd5264e5e0b8ebd896bdd6c66fdc7ded5bd384e33115f1de7a5f938d9861e6cbd87417b0e1d4b07637d752f670c2708c6d446d6c9a665d9","ssdeep":"","tlshash":"97b0122c516838d13af94f1951a75404f70741007ee0c68079920ac743a48369fef08c","first_seen":"2026-02-01T16:36:05.159741Z","last_seen":"2026-02-01T16:36:05.159741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/dot-c.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/dot-c.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/coin_1586964934.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/coin_1586964934.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25322\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25322,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 512x512, components 3","md5":"52727395e2563d83be9f28ccb773214d","sha1":"09cddc89307b36530d8a00299699e34103f44867","sha256":"3118de11219222d1e9f590f350b61d1aaf7ba5dafdd441a7960f10fcabbcc369","sha512":"70c7be48d71619392b278a84b78d8e20bc64ec6c96b0a5c088c7815b6df750f832aa7035f3e4c68904466c6b6f2819ae97e597229cb35385ab31098a201addc3","ssdeep":"384:XrQOfywduYzMtOLFjtc5NS1sS5dDkSNpTcsPaDflfVDK1:Xrjfy+ZzM2j6/SxhrNptaDflfVDG","tlshash":"fcb25b079806dbc2b01883d8fe431ed97b463b4de88335ff41925edb7a653225c9a25d","first_seen":"2024-12-22T23:17:14.933026Z","last_seen":"2026-02-01T16:36:05.160817Z","times_seen":5,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/zA6JB7HaRB","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/zA6JB7HaRB HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6201\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"69775d6e-1839\"\r\nexpires: Sun, 01 Feb 2026 18:35:20 GMT\r\nlast-modified: Mon, 26 Jan 2026 12:26:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18065,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18065), with no line terminators","md5":"584bcbc08bd30633e0cff8f2980d986e","sha1":"7a4a7b2c54ddb865166af88db57fa1c535de516a","sha256":"5da0ad62b9d02ebe47ded813b03de73e0e5eb1f40f98d6efa0d5621c3d7394ec","sha512":"0e447a7235556ee32b1c62c463b9d38d18ad14be9850f3f6408f56e14d05b0cc52f093f67c85788ac7049a59a16e8856f19bd68d91bdb70fd900444ef7e0b38f","ssdeep":"384:boU4JkQamum040drAN8OX7HMiqJISOVJBz8U08wYWcPY4:RtMqAfX7WO8UFWcPY4","tlshash":"07822b6e7959b97743b208f9606f6209733549ebd404c930a401ea4d7db8ade813fef8","first_seen":"2026-01-27T14:42:26.365744Z","last_seen":"2026-02-11T06:40:43.375974Z","times_seen":300,"resource_available":true,"data":null}},"time_used":491,"timings":{"blocked":171,"dns":22,"connect":58,"send":0,"wait":93,"receive":1,"ssl":143},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/icons/icon-bg-a2.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/icons/icon-bg-a2.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/652bbb94/www-player.css","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:20.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /s/player/652bbb94/www-player.css HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/41JCpzvnn_0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 60472\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 08:16:07 GMT\r\nexpires: Thu, 28 Jan 2027 08:16:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 Jan 2026 05:02:45 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding, Origin\r\nage: 375553\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":524183,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"608e1322c97235a5d31798917491c155","sha1":"9fb91878f472ded689bfc379d2117cc39bcd005c","sha256":"4a3d9f50726e2dc48728329f15bed529b17e8e1238c784566e6e97a03a710e83","sha512":"adccf1b27780d5c871c45636227a56b5a23c9905e83a8ed7b16ae5607679fcb66af4cfccb93af82774c50148431dd1b9ce84d7a4bc08cf2cbf5c2e397f00ab76","ssdeep":"6144:Gg/+vm2kqMMg7UFBhBYoNuf5Fg5eo6otm:6eUMMg7UF2oQf5Fg5eo6oQ","tlshash":"76b4ea72f0d1233cf21b8d9997d9964d7239d983e2e22aeff11165dacbc77811326206","first_seen":"2026-01-15T11:05:33.205143Z","last_seen":"2026-02-02T16:55:23.221975Z","times_seen":12960,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telemetry.jivosite.com/w","fqdn":"telemetry.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"94.139.253.159","port":443,"asn":208677,"as":"Cloud.ru","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"POST /w HTTP/1.1\r\nHost: telemetry.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 298\r\nOrigin: https://koindefi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":298,"data":"{\"event\":\"chat_invite\",\"widget_id\":\"zA6JB7HaRB\",\"chat_mode\":\"online\",\"site_id\":2705455,\"device\":\"desktop\",\"visitor_id\":\"6eb9d69df6f02e9f\",\"widget_version\":\"182.7.0\",\"shard\":\"ya\",\"param1\":\"default\",\"param2\":\"11\",\"param3\":\"label\",\"param4\":\"online,time_on_page,time_after_close,time_after_invitation\"}"}},"response":{"raw":"HTTP/2 204 No Content\r\nserver: JivoTelemetry/0.9.7\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T16:56:23.922969Z","times_seen":17583285,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":117,"dns":21,"connect":44,"send":0,"wait":44,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/images/section6_1586953116.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/images/section6_1586953116.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 479968\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":479968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1530 x 1011, 8-bit/color RGBA, non-interlaced","md5":"45393bb87e4336998d7c9735cded2bec","sha1":"22423fda3d77626a41aac9a350cee266133b2f2e","sha256":"199f6973b34ace2091b1ec88a6a993783b743bcac1f4e4e5e29d8fec9dfb5b53","sha512":"3ff8b7ee7cc20c2171564c8fcfd6d79eeb226b68c895a576c41fc9d7bfe7c138ff11699b8b414b58f4fdd98ec6ed1a74a1563b650921aeac4f98793af9080f2a","ssdeep":"12288:/MAOCTgQeSZJFYnFt+6IA2if0jUzcpMmEVWj:NTgQeSZJ6O6bRf3BmES","tlshash":"42a42303e3e9b07f537be3082785131396ad6b11cea4339ac1c5f56c31e949286b5adb","first_seen":"2025-11-18T03:56:12.260608Z","last_seen":"2026-02-01T16:36:05.162623Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":963,"receive":219,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/player/652bbb94/player_ias.vflset/en_US/embed.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:20.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /s/player/652bbb94/player_ias.vflset/en_US/embed.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/41JCpzvnn_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 9435\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 08:40:04 GMT\r\nexpires: Thu, 28 Jan 2027 08:40:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 28 Jan 2026 05:02:45 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 374116\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33164,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3391)","md5":"01d8a1a7856ccd0a02d4d634d032e148","sha1":"80f5dd831cfbae9f282d4f02d4d062715ace9a07","sha256":"48f9fa7a6c3fb8fa94d7dded5b42dbe167cc53b425f2c6567ada3453ffff157e","sha512":"02dec72dc62e93ddb2b13205b9c4606d8bf080956226adcfb812e2dd42a306ef24ce371d2e4acbd0480f839195e2dd3cdfe2c4582556c78b9f5141e65e07e8ca","ssdeep":"384:gYRgyq+e8sfLDKScdwxEUTnI7Os3vpyzoJ1AUe+/aYdr0LMSIPEc7Nad6nthED0d:0+1sfaEEUVso21AU5tr0gaEthjjt","tlshash":"4de2c54e73a4a4249556e1ee180b2104a73760cc68a0a76c773edaf9ad70d19b07ff74","first_seen":"2026-01-28T13:04:55.080339Z","last_seen":"2026-02-02T16:55:23.168578Z","times_seen":3546,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/7bfb7bc/chatcontainer.widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/7bfb7bc/chatcontainer.widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 14837\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69775d6d-39f5\"\r\nexpires: Fri, 06 Feb 2026 13:08:31 GMT\r\nlast-modified: Mon, 26 Jan 2026 12:26:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-27T13:08:31+00:00\r\nx-node: m9-up-gc33\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77195,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"04bab55cc7f5610c5598886157bb416d","sha1":"a1c12372111460909483f6499e4859aa65227e21","sha256":"69733b6f2058967dc426107d7e179bd0f1bf0e76263c6f5e222816fcc2d916dc","sha512":"ffd1245b68943941cf7b78795518711efa8ca4b2110dd35c2b8c2fa912d078a331c199b4dbcb2a2b2eb9c9bf469d46080a521eff2d22e71db0be2f730bf82c1c","ssdeep":"768:8SXbBfPCQomLSQxoBC+Vnnz9g6Wujqns0ahg9mV+Ng+4T7:8SXbBfPCkSQQHVxVnWns0ahg9mV+2T7","tlshash":"8773a562f6c0652df02bc536eca1b7b8783dd05297232fbae644b734c7861e71762609","first_seen":"2026-01-27T14:54:11.491696Z","last_seen":"2026-02-11T06:40:43.385263Z","times_seen":96,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/s/embeds/3c895743/www-embed-player-es6.vflset/www-embed-player-es6.js","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:20.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /s/embeds/3c895743/www-embed-player-es6.vflset/www-embed-player-es6.js HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/embed/41JCpzvnn_0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 105675\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 30 Jan 2026 13:46:55 GMT\r\nexpires: Sat, 30 Jan 2027 13:46:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 30 Jan 2026 10:07:49 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 182905\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":343219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1196)","md5":"03eff4e031af965d3ba5b7c928e35031","sha1":"52ecb715244d2582a51b3ba70034210fb244b694","sha256":"4a7a84a6e2d04904cbcacf479f9f4175414595489fab032621d7ba2a0e65b2dd","sha512":"2231438fc03f82ae1705f5f87835c2e94537c4f70db3444d106289cf10e17a1aefda2833e65bb8e392ced6d7d9dd94b22590e12eb6e80b52bf2737f25e21d707","ssdeep":"6144:Ct5Q9sb1IDS3G/EVeq/CYln8Jz23fkm83+Fd95nt7MKIWuHlXQ5PYdC3nyi63sRI:Ct5Q9sb1IDS3G/EMiCYln8R23T83+Fdw","tlshash":"ca745bc977a270a742a394f4503f1502b538a896f80cc8bcb99cddda2d2595a437bf3d","first_seen":"2026-01-30T14:54:36.671332Z","last_seen":"2026-02-04T18:22:09.146567Z","times_seen":4192,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/css/app.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/css/app.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29815\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":241750,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (326), with CRLF line terminators","md5":"a0ff0cfd00476a212e772bbdd091b68b","sha1":"4b74b0f986c42a2b4512d505c048abcbcfb68e56","sha256":"076bf62749a5672407e0e4355cef78308ab08b524311aea47415c4fc54d1cab9","sha512":"a476827ecd136881f5ea1c43d029f1af9d4f41797f2950e2faa35a0da3d51ec15f9c899415891f473bc09e141bd5d35b11ad0848b99da3b18be4f3c32a865807","ssdeep":"3072:Ma7YKeu7PPONQ1h7lD1+mt9YZOoJ+/wzWHucjx8bfvLNa:N7PPONQ1h7lD1+mt9YZOoJ+/qc","tlshash":"2334736a891221451237bb789bf71714fe795073cb0605eabbcd6289cff29f84161e8c","first_seen":"2026-01-24T22:36:05.071066Z","last_seen":"2026-02-01T16:36:05.165512Z","times_seen":3,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/update_1599490535.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/update_1599490535.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 81009\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3","md5":"dc23e1767ba7709345a97a27b9d28a12","sha1":"87a9b4ae214e186ff76b808d18fcf6f8f55d0987","sha256":"f5187999b2c1e8a150245b32b76f686fb810a733c72da780063eccc65a7b8eb5","sha512":"585c7bfe8960cc7f8c8c5268b381dd89fbc80e44785a525c50e18647d9bcea71d2f5dfe9c3f0701b20347c82f1507cc77ccc03153e04d82cb122c71837dc5480","ssdeep":"1536:LGbn8LQybo2Y0VbEGFq6M9M/2oHfShm85iWsnS3C2Zi8joXlNxHVU4MbnvQ:L0QVFRMmWhlbj3CcZ0X11HM7vQ","tlshash":"2283022d3b88e2426997c7fc573047bedfdcb254ef5e45500f4eba2168c4296e19290e","first_seen":"2025-08-06T15:34:58.133704Z","last_seen":"2026-07-27T13:52:26.899122Z","times_seen":9,"resource_available":false,"data":null}},"time_used":977,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/js/sweetalert.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/js/sweetalert.js HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8350\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":34735,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (480)","md5":"2b971c1d5bfe2ffa736bc4cefac29073","sha1":"a82f2200aecc7ae0209d1ef78aa8acaad0b1b508","sha256":"5ab2ef9ee2116123fa5de836f57fc463692b3d4e8f45f6401ce5861021851592","sha512":"538a7d6b641fe94d3125eedcb94f858a468804f7a5280f573b19c14347a6b2b9a8a9c6aec4d92a155de59287302c47dc4f58e547587e55ec2adb31672e5bd647","ssdeep":"768:4kTsnFnQf2PTNZrv5EShXqzOGShX9WyZa:EQ2PrrvONyZa","tlshash":"6cf2b69939fd61b3067b10a6538f5d45bb308027b004ea91b9fddb800fe0d654ba5fea","first_seen":"2026-01-24T22:36:05.093696Z","last_seen":"2026-02-01T16:36:05.167716Z","times_seen":3,"resource_available":true,"data":null}},"time_used":946,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":946,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/shape-a2.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/shape-a2.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/7bfb7bc/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:22.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/7bfb7bc/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3407\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69775d6e-d4f\"\r\nlast-modified: Mon, 26 Jan 2026 12:26:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-01T13:10:57+00:00\r\nx-node: m9-up-gc8\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10600,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10573), with no line terminators","md5":"fc00deaabfafd48080a08fc0d7f841b5","sha1":"3bf17f3bd75349b1ba1f9b78c6117fadd4620310","sha256":"be8a7243d87cc8bc1c523f0b10a41c149622c9c6af30b6a4e8231b1506cfd542","sha512":"1f3d4801665e172b54578e6d0d71f066c72df7244512cf00026104acbf6f21dab5de812d2679f56b2414ae7f40fd4963f61db75bc7bfc0893c8a3debf65638fc","ssdeep":"192:2P7mk/7Obf14M6bOIpUTPqZ8BijFLeEJK:C7H7ObdFkOIphZ8wjFCmK","tlshash":"af22d71ee7017f360fa613c3744f7b5376a480e592646cb5d89c826943b9bcab217b8c","first_seen":"2026-01-27T14:54:11.499444Z","last_seen":"2026-03-31T09:24:10.733781Z","times_seen":1154,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/7bfb7bc/chatcontainer.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /js/7bfb7bc/chatcontainer.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 58232\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"69775d6e-e378\"\r\nlast-modified: Mon, 26 Jan 2026 12:26:22 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-02-01T13:08:47+00:00\r\nx-node: m9-up-gc88\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":244489,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a054d2745a5d5ea7c52daae679b1536a","sha1":"a11b047e8ad24a35088846f72dd8ed2c6476ff95","sha256":"263900aca7be3f9000922bfdd14bb0165774d5c0478b22e53108f4f8ff76e485","sha512":"7eb3e1e62c3435c6edf5746ccbda215199879f5a96c7cc66b558bde662604bedf32aa85047990e8d9a53597a63ef7c48e3eec501b6c1faa6783cb14515db766b","ssdeep":"1536:gmNa6AOoGVoBFYgRAinKijNFLCqRXIRBbJSPnVzTK3VfA/tO4JnkFAkLtkA9rsKG:VxVgqg6iqmfwFbtkA9rXDeCqLRU3JcN","tlshash":"73342ad071d0e8bc42e641daa43f6100f2292d2df409b958f3f8ddd99b5698e3266f39","first_seen":"2026-01-27T14:54:11.501191Z","last_seen":"2026-02-11T06:40:43.391261Z","times_seen":97,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/css/style-lobeliaf86ef86ef86e.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 46649\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":293174,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (441)","md5":"2c454d8e3c75b08493cdd2d94e3ad43f","sha1":"dd1dfd8590286ce154ea432dfc030bedfa9b2ed9","sha256":"2f5155fd97cbb79d14ef981679c62213685861379ffe3f90c0fc928da1dfbced","sha512":"3204cf03baee5c8033f02aa020a816fb1ecd3a52d4097ed8331d142f302184ead4518c88cbab37013b702de9b4175505dfe7d3c2fe866f0751caea164d195282","ssdeep":"1536:QJBXB0BPB5zXrMQiyBDOgIe1KevECKwTeAlqNRuf/KwesZI4DMoEQkYc/5lWvOP2:eBXB0BPB5zXYQiyBDAevNe150LlL9Its","tlshash":"5f54dad3b711114c7127e2e6bae3dbe4a3395243f20a19bce5d53419c24c8e8367bd9a","first_seen":"2026-01-24T22:36:05.074501Z","last_seen":"2026-02-01T16:36:05.1695Z","times_seen":3,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":324,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/global_assets/css/icons/fontawesome/styles.min.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/global_assets/css/icons/fontawesome/styles.min.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6298\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":29126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28964)","md5":"2910dab50f804e9c35358f4f08504b6d","sha1":"3c62f4c4c336fc752a589e44d2819be124ac7dcc","sha256":"a95e8c9888ce7e5ccb6e4acac503de49adc92c7fdfbee785e723be5f8c5ad8f3","sha512":"a4d6c698317d9ffd2412636d35e8171304bba5ceb4d0a28e16d139d4c05e454fa2590ae15a2f9a847b50d5cdb56b5969cef05a3beffc5cd2f75042309644cba5","ssdeep":"384:zu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdE:clr+Klk3Yi+fwYUf8l8yQ/eY","tlshash":"e4d250e8e54c01d66731c48bff81b36862b6f73dd5844d99f01f690c29d22a522c6fba","first_seen":"2026-01-24T22:36:05.083548Z","last_seen":"2026-02-01T16:36:05.170044Z","times_seen":3,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/coin_1586964800.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/coin_1586964800.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 26030\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":26030,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 512x512, components 3","md5":"cc6d3a6f7d6af6b49be44d79c896a8fc","sha1":"f1153273b0f24ba7f97e65f3b5bdeca3a579fffa","sha256":"308d9bf117adf777e4edb8c074346d94cd6eb53e8b415c2516531b91a12d1042","sha512":"632008212305e89bf5bf3b2fb8a419d6ec9e09d45bce9f01d7804d699c0af293ff8e02dc44a24a8ff481c78258fe51f94fa8cc72504cefea7f1fad06672ce8b6","ssdeep":"384:XDuDm67hw510qWKxsj2HdKFdHS51IiUnmuStR+mKARSp3lZ2aD6Y/2C0xlLg+f:XDSD0VtxXuA1umpUXWSdZeY/23x5","tlshash":"f8c27c138d199b83624c93f9bd470d682f8b2708a4863aff45622edf3e426625ccf51d","first_seen":"2026-01-24T22:36:05.075431Z","last_seen":"2026-02-01T16:36:05.170563Z","times_seen":3,"resource_available":false,"data":null}},"time_used":960,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-01T16:35:18.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Tue, 27 Jan 2026 20:26:41 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11017\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"SweetAlert","description":"SweetAlert is a JavaScript library that provides alternative alert and modal dialog boxes for web applications, with customisable features, aiming to improve the user interface of the default browser dialogs.","website":"https://sweetalert.js.org","common_platform_enumeration":"","icon":"SweetAlert.png","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":82047,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1912)","md5":"4d7fe5eb8bd4fe6576cba2ca64f494be","sha1":"7c0d70bcc32f4fa3f0d18280e7321dcf4d8f27f8","sha256":"3505163cdb69d73366a219ae8e9a0668e48c70b5f78e8b96aaaf24c8d2375544","sha512":"58ce7ec07a414af30a3edaf4225403ec364c648740e4b919760a4e8f87919d4e87423da49bf499a91dcc4d704763f7320992e334f857e9228d49dd129b682b7a","ssdeep":"384:OHkcxAUqNL7qe+bXFdgUATJsWDSeiHdTd371b3UIpYBxQ4D3g8zTo9cx5I8f7THV:OHk9jP+zgAxbkIYL/l1nFgsn3tN","tlshash":"b183412164f12637009784e2aaa16f5b7fd1e61bca1b864472fc4be91fd3c82cd6711e","first_seen":"2026-02-01T13:04:42.902083Z","last_seen":"2026-02-01T16:36:05.17114Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1418,"timings":{"blocked":545,"dns":1,"connect":161,"send":0,"wait":321,"receive":1,"ssl":387},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/css/sweetalert.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/css/sweetalert.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2258\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13051,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0862d17907b9cc4e4374b540690c0dd6","sha1":"0eb540f9a6eda209bf993d67a70df31cde7f2486","sha256":"67c4d6f91122526f73490306647e1b7d98b9d9526032a11309b3c5946441d4ff","sha512":"7fc80dfc885f23ed04f4573f2cab6356ae32c1f85801578c18ab040b30d41dc149e6d795c2f293aa2ce6fb96bce0520d85fae076f8d7f211096de9b68a8d624c","ssdeep":"384:K8t7DgOgFB9FstFKRF0PvFWFmwHH3CX1YtqemnERpazA5:fgOgFB9FOFKRF0PvFWF61YtjmnEnazA5","tlshash":"2a4233eb2df41648e76b835452de8f68633c9083691bec7eb7c010ae8f805d9519a752","first_seen":"2023-04-17T22:27:10Z","last_seen":"2026-07-27T12:35:01.164835Z","times_seen":386,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/polygon-fill.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/polygon-fill.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/global_assets/css/icons/fontawesome/fonts/fontawesome-webfont5b625b625b62.woff2?v=4.6.3","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/global_assets/css/icons/fontawesome/fonts/fontawesome-webfont5b625b625b62.woff2?v=4.6.3 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset/global_assets/css/icons/fontawesome/styles.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71896\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":71896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71896, version 4.393","md5":"e6cf7c6ec7c2d6f670ae9d762604cb0b","sha1":"97e438cc545714309882fbceadbf344fcaddcec5","sha256":"7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73","sha512":"dd945face918edf20b7283b7416ae7b3735269945e3f3e379e770425024c1de1fcdc7cfb952381d295d0d1f58c8ab191fd29030f2051d10501557bd7bfbe3658","ssdeep":"1536:tA4xrPyfyECsyz2wCjYfhO/ORzc7erabg5Z06GEQMo:t3jayEC/2/OI/gcq+bg5C6G7","tlshash":"756302f87e71b01d5a306f74e56730e2491c9283e79593f8a8297cb681b2f493742c7a","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-07-28T15:02:50.495185Z","times_seen":41740,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":529,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/dot-b.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/dot-b.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/css/vendor.bundlef86ef86ef86e.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/css/vendor.bundlef86ef86ef86e.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 43377\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":288240,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1154)","md5":"874779b74c3d659c7c421c710b220b72","sha1":"a52a6e3a2ed52d6762e98c5ade9c54edd73b8271","sha256":"6d4f2920624906e344b675c460997f29a9c5b48da894a5a4e83a53cd5f58e8bd","sha512":"9b69bb1aaf43a5458027a05165a8c8953ee57268837782c13173b16401570252dc87cd968b05ef8afbff84d17a5ab0f038ef43fc09e57e71260c138f83f362ad","ssdeep":"3072:1IKTHT9rB7OGB5Oa//XRt57lEmIFBr5ilKmP8f2Gcc:1IIHT9rB7OGB5OIRf7jKm8f2Gcc","tlshash":"37543ffbe15a11445322e1987283f7e85739b228d6014cbae5432d5ce3c9b8966e3fcd","first_seen":"2026-01-24T22:36:05.123835Z","last_seen":"2026-02-01T16:36:05.17243Z","times_seen":3,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/global_assets/css/icons/fontawesome/styles.min.css","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/global_assets/css/icons/fontawesome/styles.min.css HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6290\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":29151,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (28989)","md5":"879b065b2874e4824314a7ce8a75c755","sha1":"2a67556f643c746cf67080d46b0fec2478db2c28","sha256":"5570a1b784613164bef6bdcdd46fb982531b57c765a95e5b5061a48dac5e1980","sha512":"194a0fe477f7f2037708eab5672fa0859d74739b6b2841a56f47928dc5baa1456b0c5418db6861cb60e3aed62d087214942f841888fb3bb731683cee431305bc","ssdeep":"384:Iu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdE:zlr+Klk3Yi+fwYUf8l8yQ/eY","tlshash":"f9d250e8e54c01d66731c48bff81b36862b6f73dd5844d99f01f690c29d22a522c6fba","first_seen":"2026-01-24T22:36:05.11768Z","last_seen":"2026-02-01T16:36:05.172972Z","times_seen":3,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/kelvin.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/kelvin.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 113791\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":113791,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 864x1080, components 3","md5":"f322bfe64baf70886d0b008314c5d838","sha1":"e336a85ef05d3b937e4edc938a85589251125e46","sha256":"1e527832887d18d46f6275d6bd4831b779729bccf08aef75de7f72819e67efd2","sha512":"934fe8bfc94b48c41510d58a56ebd715be050aed4c99d539eaaf06d9519e82c150bd3e59130db745b118f6d950e9a1dfcce45567b2fe95d36cb7b2bc1145eab2","ssdeep":"3072:ukn+P5xWDoVSLaB/gdxhmi+/gos/06Wu20CSebfkeIL5b+:CB+obtgdjmi+/6/Cu2J7fFIVb+","tlshash":"7db312bdabfe2647f4beae78043cc27c016685e55ba6673652daeeb10541cd484f0cb0","first_seen":"2025-08-06T15:34:58.013814Z","last_seen":"2026-07-27T13:52:26.899856Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/brand_1587023646.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/brand_1587023646.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6445\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 232 x 72, 8-bit/color RGBA, non-interlaced","md5":"f436394093e74ff173e165f6415a8675","sha1":"cbde1197da2b9bcc8739d06b3445d0ed202d45f9","sha256":"d6a69f1894dd64f1c936d6804a627478a3696615cbd53809e997103563b40fb0","sha512":"855fdb408b7e4955178208244bca5a10b25ebcd5e3fe105f9ab32101419b35752d0e7855bd505387809546f0bf1e451619ebd5638dde62e10b4e70ab3b70608a","ssdeep":"96:eQoNth+7k1qs99LKYOAkzubNMBP7Rt49IZA3NVCWXTUt5suOEMt7HiJgJoSNde3f:4p+Qss91K4kz+NkxZ+VotBMt7n2Sg4Ly","tlshash":"5bd19fb7cac67f2bb34537931e09144ea2cd4f54edae5849460ce7297933bb0419e226","first_seen":"2024-12-22T23:17:14.945523Z","last_seen":"2026-02-01T16:36:05.174431Z","times_seen":5,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/coin_1586965030.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/coin_1586965030.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28049\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v90), quality = 90\", baseline, precision 8, 512x512, components 3","md5":"56e3f3310b6c7642079858700a026db5","sha1":"33866f427306cf2586d559adae641347d0bd9161","sha256":"987e1e0a7c6f56219f17cf0db7cad9f2c0ac18cfa7c0f4f971e72fbdbf97c5d0","sha512":"7257f9a2e735b5ba70b7ced9cf9f76c5f16aea61ef6b932181c49b292119dbf7eb4f7bbd2487530219c2279543a8062407d9f6a57757a54f799c468dc2646822","ssdeep":"768:X646LwKbXdqdT+z7+dZnYKgzfrO80U8m14LbEZF9vuSCPxl5:X6VD09+ed1YNzfrOs8m14kBvtEx3","tlshash":"6ec28e17cc0cc7c3a66887f87f5b1f9c2b8e2b4ca62536ee51a54dcb6e116439d8901a","first_seen":"2026-01-24T22:36:05.077765Z","last_seen":"2026-02-01T16:36:05.176575Z","times_seen":3,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/1513499671.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/1513499671.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109583\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":109583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1014x690, components 3","md5":"e193cd672094e66b3a2c24b83ecb6005","sha1":"3edddf0cb3b5e48a5634fe9c9a44b65baed225c8","sha256":"26194da047eef3e75bd95db95c866bd4998a03fb83306fcf1ef1503e44d8aed1","sha512":"ac64dd4521b75613e04c30f5294d052344d47aab82046c0530b954d0ec12ef04d1cdb9d4183f53af4f3d832194d2aa71251df850881aa36df1a35768a3a369f3","ssdeep":"3072:XLCECZ93S0OEzyIWuGdZosPYrYreQRS7hXkQ:FAicT4dHPyYreQIh7","tlshash":"89b31211e2b52431a7399bb6c7148fc9f6bff444c4252b7bbad65c7660c8dc0e44a2b4","first_seen":"2026-01-24T22:36:05.089449Z","last_seen":"2026-07-27T13:52:26.900614Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/js/charts.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/js/charts.js HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1915\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15698,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c8fe21cd23d8d5128286eef5032fb6a9","sha1":"21dda6c13b02a8af40db1fe177083a66eb0a3ee6","sha256":"01cdce0d50254b4db067d1f28e17df6fc6dce63ab828139157b8d08e449327a6","sha512":"443caaae81d7ef4f6d2126d3d5a2c40060bef24185c2aa361178454d05f00f16a01d5358a5f0d1c6fd5ef91857f983e2da7d41b9fb8e5c13ac138a4c8995d91d","ssdeep":"192:WIu6HStE1i4yCu6HStE1HiWyu8i21Vyi2gyAz/MaLhY//CzaLa4/JrDtraq:WCaEarLStCSrDz","tlshash":"c962fe1af0b395225563706d07af4a209371b883990def28bd1c8b705fac52ea6f5792","first_seen":"2023-05-21T21:25:32Z","last_seen":"2026-07-27T13:05:26.985074Z","times_seen":34,"resource_available":true,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.youtube.com/embed/41JCpzvnn_0","fqdn":"www.youtube.com","domain":"youtube.com","tld":"com"},"ip":{"addr":"216.58.207.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:37 GMT","end":"Mon, 06 Apr 2026 08:36:36 GMT"},"fingerprint":{"sha1":"3B:E0:E5:F9:29:67:7C:CD:9F:4B:2E:72:2F:20:B9:2F:CB:54:B7:B1","sha256":"55:85:99:45:F0:26:85:DB:26:19:FA:38:7C:72:4B:68:4F:17:29:6F:E0:72:86:F7:0F:3E:8B:22:F0:36:74:42"}}},"request":{"raw":"GET /embed/41JCpzvnn_0 HTTP/1.1\r\nHost: www.youtube.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-content-type-options: nosniff\r\ncontent-security-policy: script-src 'unsafe-eval' 'self' 'unsafe-inline' https://www.google.com https://apis.google.com https://ssl.gstatic.com https://www.gstatic.com https://www.googletagmanager.com https://www.google-analytics.com https://*.youtube.com https://*.google.com https://*.gstatic.com https://youtube.com https://www.youtube.com https://google.com https://*.doubleclick.net https://*.googleapis.com https://www.googleadservices.com https://tpc.googlesyndication.com https://www.youtubekids.com https://www.youtube-nocookie.com https://www.youtubeeducation.com https://www-onepick-opensocial.googleusercontent.com;report-uri https://csp.withgoogle.com/csp/youtube_main/allowlist, require-trusted-types-for 'script'\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\np3p: CP=\"This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info.\"\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"youtube_main\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube_main\"}]}\r\ncontent-security-policy-report-only: report-uri https://csp.withgoogle.com/csp/youtube_main/strict;base-uri 'self';object-src 'none';script-src 'nonce-LK5vcgr7WuZDpMSB6kicwg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval'\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube_main\"\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\norigin-trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9, AiDEBptUfVeO93q48VdVMe/ubupazdAl8AaHP+NBzdnW8quUcHdzJUyGSfrmtpKJu7EOvwRp9ug2rEo3XU+WMAMAAAB2eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJEZXZpY2VCb3VuZFNlc3Npb25DcmVkZW50aWFsczIiLCJleHBpcnkiOjE3NzQzMTA0MDAsImlzU3ViZG9tYWluIjp0cnVlfQ==\r\ncontent-encoding: br\r\nserver: ESF\r\nx-xss-protection: 0\r\nset-cookie: __Secure-YNID=15.YT=EWfXg-D_pwhv86Ylg8p6in6x31NoJYURFrg_xh69vcMVRP-mVn03cpbGGmSCcpAlOx-1dO1l1YMvUDcU9w2_GW6EnAA6fMN6b6ctXS-6GIFY5PS2KPXkodxHNq83btMpDt_NJ6iNPyG90dUrR28wvHE2IHLpoRvWl6QtrxZxJoh8mtTxEmmoKkMzPniAyXEycXPMjZ5m6TnnH3zDypPiOPnGiI3KxuNoBcSCUhbdLnuMsXD240n-UtQggYV7wq2_imyNeSeQx3gJzQZx9fn59WtZPm-VHMRa4Yme4D66UECJ7JHvrK37Nlc-jETWKgm7g1oNXcMfTMxk87l4meTGGQ; expires=Fri, 31-Jul-2026 16:35:20 GMT; path=/; domain=.youtube.com; Secure; HttpOnly; SameSite=none\nYSC=m7FmQexFetg; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none\n__Secure-ROLLOUT_TOKEN=CPaS7d_BwJjN_gEQ9efH1ty4kgMY9efH1ty4kgM%3D; Domain=youtube.com; Expires=Fri, 31-Jul-2026 16:35:20 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned\n__Secure-YEC=; Domain=.youtube.com; Expires=Mon, 08-May-2023 16:35:20 GMT; Path=/; Secure; HttpOnly; SameSite=lax\nVISITOR_INFO1_LIVE=48ZNr0l6hIc; Domain=.youtube.com; Expires=Fri, 31-Jul-2026 16:35:20 GMT; Path=/; Secure; HttpOnly; SameSite=none\nVISITOR_PRIVACY_METADATA=CgJOTxIhEh0SGwsMDg8QERITFBUWFxgZGhscHR4fICEiIyQlJiAw; Domain=.youtube.com; Expires=Fri, 31-Jul-2026 16:35:20 GMT; Path=/; Secure; HttpOnly; SameSite=none\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118095,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52328)","md5":"539f18224bed64dc727cc30528368373","sha1":"ed26b013e856320b12206e2342fc2e584454a846","sha256":"2ae86e2473829197cbfd08b02123cbe55f7ff1dab2c9e3e5243252fb4885127e","sha512":"8c5a40c4b9944d4fa5dd8528c847fa9354301c2e4474f972f9554fa076fbbfab05b0d31488593577f29500ca33e2f28f585cff4f47f9e22bb53f990ef5d24c1c","ssdeep":"1536:oSOUKdighNyrpzsIfhzYnWksNaHtUPYSnV1X0VaPre:V2Nvytz8LesUfVBHe","tlshash":"6eb31a650824a872d8939907edbaff3e9ce801794bc5956ebcbbd35c01ec6510eaf413","first_seen":"2026-02-01T16:36:05.183387Z","last_seen":"2026-02-01T16:36:05.183387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":86,"dns":1,"connect":21,"send":0,"wait":95,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:20.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:55 GMT","end":"Mon, 06 Apr 2026 08:37:54 GMT"},"fingerprint":{"sha1":"C9:11:F3:8A:1F:95:BA:78:F0:71:09:AC:AA:E5:AC:D1:ED:83:E4:04","sha256":"61:45:36:53:9C:8E:E6:E3:72:93:D5:B6:2E:25:31:08:2F:70:5B:C8:FA:43:EA:70:B8:CE:11:BF:74:C7:92:98"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.youtube.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 21:35:41 GMT\r\nexpires: Thu, 28 Jan 2027 21:35:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 327579\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-28T16:57:42.240207Z","times_seen":948498,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":162,"dns":1,"connect":21,"send":0,"wait":8,"receive":5,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Medium.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Medium.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49368\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":49368,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49368, version 1.0","md5":"c9b71db74c678649db55e9ff2a6ae4a9","sha1":"d30bc652962b0d46d06bdad61ab123bfd0ed53bf","sha256":"ac5bf0ec2dc9d22e8d1f68387d6ff759c013b66b402d56e379e1e3209293e13a","sha512":"15c8ba5af39c0f654a126f9fb576c581b6876850038b97d6745cf7cb8046b0e76fc92d705b39d93f5c0a0bf09236286bb30d3d3bb16c8629c0ea9a11ef93a9ec","ssdeep":"1536:xBlnH+T5TMXr521sxXXPDhX6tYuMHnHkWx36Azt:xjnmTMdVXMYjnZcAZ","tlshash":"ff2302cb1566b1aec3f8274cd4dd020dcaf081a1e82af5513906b41b8f5c75de625aef","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.557139Z","times_seen":95,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/update_1599490927.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/update_1599490927.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 70338\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":70338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x810, components 3","md5":"07bb8c7556f030f232cd1f9861959c85","sha1":"c8bb4733a7f6406ed1534c3f5a4673676015886d","sha256":"7e885d7a35259ea45a63ddc231f26974a152ff3c4ea5f20b688d6f7ee035415e","sha512":"3d1c3dad2e48d1e92f8a1925b476ea845a4a678c36c1bd26b03d033a73d241a41efcc9aa289607fa2067634ad9a9e6cfdbe560da19360c591e940300fd1ea7ea","ssdeep":"1536:g4RnHj4Z0PNcmrgAXhFQuFycZGjU18MV7JQGRtAUzoK97:THE+PmuMUJVTYuP97","tlshash":"4363026a36ed157bc014f63a8f93501c0af3cc11e0867ade918ab69d4b6f7a81d7d0b4","first_seen":"2025-08-06T15:34:58.06155Z","last_seen":"2026-07-27T13:52:26.331932Z","times_seen":8,"resource_available":false,"data":null}},"time_used":965,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/brand_1587023602.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/brand_1587023602.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8819\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 72, 8-bit/color RGBA, non-interlaced","md5":"dfef629f386dcf73599b8dcc364ad3ee","sha1":"b50d33308f277cf2913304797f02de39821ed966","sha256":"6d224e8f89f606e5b5f7c0caf08915592e55a89a553c330539e978516b83ff2c","sha512":"9ce2e5edbd3f0f882ce5fd82e6b481f6e3c46764078a1c2253263201c6c8e37163ba46c050268aeddd11d961e3b05f33b94779fa1434240b9281e53c93e364f1","ssdeep":"192:y5yzR8TSvVVdxfHFeo2lYwa5PwjP2eJZn0hn:yO2mNVP9eoiYP5PwSeJN0hn","tlshash":"4102af8e111810dd500517edbb3ab93fb7c55488c7b4e4b3a0ffcc6e27a2a0b82653a1","first_seen":"2024-12-22T23:17:14.950869Z","last_seen":"2026-02-01T16:36:05.186387Z","times_seen":5,"resource_available":false,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/icons/icon-bg-a.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/icons/icon-bg-a.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/brand_1587023633.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/brand_1587023633.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 10692\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10692,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 72, 8-bit/color RGBA, non-interlaced","md5":"33cba00737a552cccf90cc4b198dabc9","sha1":"16d90a1c1247b7c7a45746798e05604c37595489","sha256":"d970a072c0be14414eb10b264c26f2ba1c08110b293dadf7072582d76093113f","sha512":"4645ddc61d86408a4de3dc2c62e2fbe5e4298abd6e5fc2feaff2b313935efdfec2b192a4cea8f9c9437d403d4323999ef11a9eeed50bdd25bf3c50f094cc8435","ssdeep":"192:iyL1IwMHT1T9r1zsdEUDImqeSuFSE6Er1zodsUJGGtg1MGe45an:FL7MHTJ9ZzsdVlqeSuL6M1kd3ptgSP4y","tlshash":"6222aec5c781a3ff88c5f581b1e678689e82c562b05952bf972f0a9952c33cf2286d64","first_seen":"2024-12-22T23:17:14.953361Z","last_seen":"2026-02-01T16:36:05.187459Z","times_seen":5,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-SemiBold.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-SemiBold.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:33 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48924\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48924, version 1.0","md5":"9af4a50c2a5a672c4d01d9ab50e04176","sha1":"96b359ab3775bcf9a3aec11bbaa78d12121ce324","sha256":"3b4a3185d9490f0f5c2b05c4d881bcc6cd33706cf0eee7079c883792456979df","sha512":"6429569e564553db09ba23bfa148c7cfba9ab21cd994e983841ad3549fd579eeb87bac5f8699e12b7bbd733f286a8b06ae568f160a8b4b07ed0838eeadb8f479","ssdeep":"768:II9GjtbMmb/ZsMQHBAcZVEtb126vHb3wlycTlmTrVKbgotJTjTieNi+:F9GembBsvzZYR26v73yUfVO9jHeT+","tlshash":"b423016171cb9c97c93ec3e2a3d2618866a2e18cb53f08251bd13701944bddfa7a781f","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.654463Z","times_seen":91,"resource_available":false,"data":null}},"time_used":645,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":641,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/brand_1587023527.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/brand_1587023527.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6607\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 232 x 72, 8-bit/color RGBA, non-interlaced","md5":"9f1a82735c61a412f7fb2e1089373977","sha1":"4fb1fc9a696d6ca988eaad924644ad90d1129ba9","sha256":"dba0818b2f3648ca99a989087ab4fbeaaa8894b95475f2eee05ac99331618189","sha512":"d73026053cc605d1581140baca2b26daf798339f4fd9d21a4fe542537ce2fa701cf18cc2376cea9b56617b46dcaf86c832849cac58a2406d8a1553799506857c","ssdeep":"192:xu70KYhyIrI0Zu48+cxzajBgs0bXOKqyS:k7VYhyI80Zu48+cISO0S","tlshash":"fad18f43e45279037882a626f1d8549211b1ed3e64234e84df5304374afd67cb4fb9ae","first_seen":"2024-12-22T23:17:14.955717Z","last_seen":"2026-02-01T16:36:05.188373Z","times_seen":5,"resource_available":false,"data":null}},"time_used":949,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":949,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/images/logo_1599259857.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/images/logo_1599259857.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:21 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 02:23:09 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168535\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":168535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3308 x 1096, 8-bit/color RGBA, non-interlaced","md5":"84b2bc003b1677feb81ad3d4bd34f9dc","sha1":"458b744f9a8b57cf5e7b76cc257a3d600159abd1","sha256":"cb34448530fae45bc0de24b71fa48cf8753e66926a29161532096d88910f04ce","sha512":"1b7a353bab2e7d18ba2b1bd3f23cf964509acbc17a4912bcdaeaa3029f5009b2d0c50c635c3ef35e26e9dfc833ff6ce32298c6c93a970612ce7f80176fe5fb66","ssdeep":"3072:boGg+jzquy47S6Hd4e5DA6FEn5P3pOidrz0g9PNpU3tWq:Uwjd7S6Hddch9rY6PNcH","tlshash":"d5f31229518a0d88dd80a0b42c770bf8773ec76d58a4fb7a67bb80eb7e8f1518161c75","first_seen":"2026-01-24T22:36:05.067071Z","last_seen":"2026-02-01T16:36:05.134291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:22.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-16b0\"\r\nexpires: Mon, 19 Jan 2026 23:57:24 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-19T23:57:32+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.463772Z","times_seen":16642,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/update_1599490766.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/update_1599490766.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27408\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":27408,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=960, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=640], baseline, precision 8, 150x150, components 3","md5":"dff80d08ebfb11b16bd47a23ea9285e5","sha1":"54c971a12da79f2a5af0ccc9169612085a0832fa","sha256":"029a9f73596373572da3aa2b3bf601804ae209e0fbc6bb74e81ffcf3a4f374b9","sha512":"bceb0009cad30118b05084dd7b28d34c5015b86abfea49aab2a23cc7d1298a2446908c196351b8dfce51e6d227ffb841004b96103992fda2b737f20c33cd0ccd","ssdeep":"384:Krd6j/WAa7iFrd6j/WAWn2B5YNg7He6zHeWBgkh7aY1PKJ2h:KkTS7OkT+2PYydz+Agkh2Qh","tlshash":"a4c29e35abe3dd62f8d0963d1db1d39393219b85926376c6381c6a443f3b2926d2c21a","first_seen":"2023-12-01T08:51:25Z","last_seen":"2026-07-27T13:52:26.8731Z","times_seen":58,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/images/emoji/1f44b.svg","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /images/emoji/1f44b.svg HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1618\r\ncache-control: max-age=864000\r\netag: \"69775d6d-652\"\r\nexpires: Sat, 07 Feb 2026 05:50:00 GMT\r\nlast-modified: Mon, 26 Jan 2026 12:26:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-28T05:50:00+00:00\r\nx-node: m9-up-gc11\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1618,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"df7ba0f4020ca70048a0226d1dfa73f6","sha1":"416968aebe0a4a2405100efa809350ca000668ad","sha256":"1c8231e24838de4ad2d966d5cb48563a2a6e540a15848d337fa3c466d0730775","sha512":"e68d3d5ec28f34d1181758ead8c670d88377d2e53d0ab86a59771a98f3a06b89d84347db2a2ae44b987c6bb934b198a35a82fcb876b329c16dd5f4457aa651ed","ssdeep":"","tlshash":"0a3144c23fb4e17804eed3d18f1ad5396a2a906993730ae0843d5b495047987f057ba0","first_seen":"2023-04-06T20:35:31Z","last_seen":"2026-07-28T13:30:16.382759Z","times_seen":5007,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/7bfb7bc/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:22.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /css/7bfb7bc/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\ncontent-type: text/css\r\ncontent-length: 25421\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69775d6d-634d\"\r\nexpires: Fri, 06 Feb 2026 13:08:10 GMT\r\nlast-modified: Mon, 26 Jan 2026 12:26:21 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-27T13:08:10+00:00\r\nx-node: m9-up-gc234\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137137,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3d535c04d65858afe0a12432b339687a","sha1":"a5771af25e351bf84a6cc82ca25f5778d9591387","sha256":"8c79267a02fd27279631f6829784848f94847a26b3823c2a1d1db3bbd92f7651","sha512":"46643e9bf1fa1bee258763e1fffd02d26dab2717deb4bc19c9bba21123d5113da071a8c874785f52f032c47d2e32a0c7d60acef8a281c524f6647d248e092172","ssdeep":"1536:nL5UTK8y26P63rhrDugyT2f2WSxpaym6L6/+1lk4MUV6lF0PQliqOWOQD86Ec/oO:RWlrZM4","tlshash":"cfd3e856ead2a53ce91e942acd85aa7ca63dd102cf230dbff344f3e147c66d21276409","first_seen":"2026-01-27T14:42:26.354986Z","last_seen":"2026-02-11T10:34:11.234574Z","times_seen":296,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-5.jivosite.com/widget/status/2705455/zA6JB7HaRB/6eb9d69df6f02e9f?","fqdn":"node-ya-5.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"130.193.53.144","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /widget/status/2705455/zA6JB7HaRB/6eb9d69df6f02e9f? HTTP/1.1\r\nHost: node-ya-5.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://koindefi.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://koindefi.org\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\nserver: foxy/4.0\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\ncontent-length: 144\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0731aa0703fe67f9a2da03e23587ed6e","sha1":"f41a391d99558b0c7d3ab828f46c85df9b0bd18e","sha256":"2a5cdc29f318efa0b5fbbd7f22a66432a85555cb4e1951d0f712a4c3bc95524b","sha512":"4a5f1bea630d99ea99ecf6f01f875f806f3565ca01abf6b614eb6098a1ac528dfc59d25a9bda7ad0f37b702df8170e34a7040e4bc74887d0476973a17d6d7c7b","ssdeep":"","tlshash":"a6c08c29443908e806808b15b08b7b0a0824012218c1cb28b285a540a1aa951814e003","first_seen":"2026-02-01T13:04:42.996311Z","last_seen":"2026-02-01T16:36:05.145236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/images/pattern/8.svg","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:33.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /images/pattern/8.svg HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:33 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 21610\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"69428756-546a\"\r\nexpires: Sat, 03 Jan 2026 11:58:34 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-23T12:53:21+00:00\r\nx-node: m9-up-gc5\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":80592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1993b235d19af6bbff52cad6fe23c24f","sha1":"ecb3ed1a8e1cea947400931f007c883e5725077a","sha256":"397ce0dcfc0b7160273d3c56e1a893127851f17700eacc653e80c7d4edff8df9","sha512":"0c8ac28429583383b2e638c186245c870ccf36782adc85640cb9c09c9c746ca07f6e4dd9c6445e572b20fe24e2544b0496510ef062b709b01f946d6ccea037a2","ssdeep":"768:byIS3G3O1DqkZyyQon5ionk5fcCGBlIHyhIoKpNOWBpaWwoiV+uqF0qpamh6KJ+N:bU34oDq8yyjGf6KoK/pa9OfV4Zl","tlshash":"3f730ff53b2cf2ec14876b6adf32c8641b5e70b57f13d698961d8ab48047d45ea8bc10","first_seen":"2023-11-15T10:16:26Z","last_seen":"2026-07-23T15:42:10.701721Z","times_seen":1209,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"vi-ya-5.jivosite.com/zA6JB7HaRB?6eb9d69df6f02e9f","fqdn":"vi-ya-5.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"51.250.107.138","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:23.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /zA6JB7HaRB?6eb9d69df6f02e9f HTTP/1.1\r\nHost: vi-ya-5.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://koindefi.org\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: l21MRHf3Rk+vBn1STk123A==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nConnection: Upgrade\r\nUpgrade: websocket\r\nAccess-Control-Allow-Origin: https://koindefi.org\r\nSec-WebSocket-Accept: nO3ZmH9+IbWRB2cfVxrtlVEIO0Y=\r\nServer: hand/3.7\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T16:56:23.922969Z","times_seen":17583285,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":36,"send":0,"wait":35,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/images/section4_1586959693.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/images/section4_1586959693.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 377313\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":377313,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1583 x 1017, 8-bit/color RGBA, non-interlaced","md5":"625bd92445eec2d065f5b1ffb38ce595","sha1":"f6bfc040b4562e6cf70153a876547c81980f8a49","sha256":"080daaa8d1c446ca1eea237961b3e89e89c8ee0ee6515cca409a9e5a7b9e6468","sha512":"2325754910b19703ba97dc68239a4898dbadcd774b8aad16f552aa92a39713cf003f5653f5328795e406e6de9d3a8b80e01dd9788519f5d9568f44edc13d683f","ssdeep":"6144:2r+m9Ay6kxE2LuE9dT+Qq4LeDxT+Uh/QvI4clC2a5N1iU1i8HOEjW:2r+m9Ay6TpQqDxT5/da5N1iUD6","tlshash":"bd84231be5cba388d705723c7d9c260c269280bd7296f5175a30d7c1df9d71b9c9a2b0","first_seen":"2025-09-07T19:58:35.4485Z","last_seen":"2026-02-01T16:36:05.194352Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":962,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/brands/service_1587017714.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/brands/service_1587017714.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6642\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 212 x 212, 8-bit/color RGBA, non-interlaced","md5":"b0bdc8b84ee42ff118446100d4116db4","sha1":"e32a4b82211c77217646cfa9fd7342d14e964687","sha256":"f94347351596f778807f83ca5e8c4fc963e1af4e82ff05b5c5632e8fef676a14","sha512":"504d37f202a238bd39574551294e77b0f9fd8699dac29c22d16680716867964f2be063d0df273fabfa0a923d63aa4740aa3b66b8284a3e5944bc52bc7e04ec26","ssdeep":"96:9PLc4EIXK1Op9CG5hltMOKagKkEK+0JRCa1+1UvJsEASPJx3nHUOsoWPXT4C:9PLxFZoIzKekEKxFvqEHrXHE7","tlshash":"f3d19f1296e38204d9079736d2048234fffa76434772bd20bc55227f5379bf6a6a5544","first_seen":"2024-12-22T23:17:14.913335Z","last_seen":"2026-02-01T16:36:05.1967Z","times_seen":5,"resource_available":false,"data":null}},"time_used":807,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":807,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/js/scriptsf86ef86ef86e.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/js/scriptsf86ef86ef86e.js HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8133\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":39530,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (610), with CRLF line terminators","md5":"b524e97b00f7cce97ab90136c408ad23","sha1":"3ceb877a24d467c87985f0c2d4f733ab565f41fe","sha256":"6816f376194db071935fc6c7533f5c20e9ff2712bdf0e2d757c1df8e8ef89bed","sha512":"3422ea19d5d0804559a96e3e7f083ec47e2a65f69984bf98b155af49b50ed3985fae24075b3cf41b8a3a666762515a397c6e9df85c0ffe9170d23461cfef0a13","ssdeep":"384:gARApaVp36wFzUrmjbHK0hJqKi2sZAcA/XTvBSOymJ3SWKNBJfVu/zxHvWvYuvjS:gAR8u6d+bVhQtIx/FfzVzan4Bt","tlshash":"0c037349f130246a84bf332d5eff4406eeae5127884686217dfc41c88ff191a96b5fad","first_seen":"2023-05-21T21:25:32Z","last_seen":"2026-07-27T13:05:27.000841Z","times_seen":20,"resource_available":true,"data":null}},"time_used":948,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-SemiBold.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-SemiBold.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 48924\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48924,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48924, version 1.0","md5":"9af4a50c2a5a672c4d01d9ab50e04176","sha1":"96b359ab3775bcf9a3aec11bbaa78d12121ce324","sha256":"3b4a3185d9490f0f5c2b05c4d881bcc6cd33706cf0eee7079c883792456979df","sha512":"6429569e564553db09ba23bfa148c7cfba9ab21cd994e983841ad3549fd579eeb87bac5f8699e12b7bbd733f286a8b06ae568f160a8b4b07ed0838eeadb8f479","ssdeep":"768:II9GjtbMmb/ZsMQHBAcZVEtb126vHb3wlycTlmTrVKbgotJTjTieNi+:F9GembBsvzZYR26v73yUfVO9jHeT+","tlshash":"b423016171cb9c97c93ec3e2a3d2618866a2e18cb53f08251bd13701944bddfa7a781f","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.654463Z","times_seen":91,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":538,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Regular.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Regular.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49516\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":49516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49516, version 1.0","md5":"4702686fb1679679583db2b0655ce47b","sha1":"f37a899865e8040bede69226040f21d46406198b","sha256":"6793abf92943d13b77b76fdf300ce8b6514464fa2bf2c1479e600c709dbed74a","sha512":"1f7d94ef53a3a220586c3b25317927a042760dbb5efdbcbd0b03617578af8b34c193925e817d41694b419e136e464b0c70befad6c0c5f684219a090600de26fe","ssdeep":"768:H1mUqiylPjrnG0pA6U9tEEPvM+WIjwYNjtbCZUcn5Bz84x34dHrjDBMvdW:HJONrLpAV9ZPvWIJjt459xoBvudW","tlshash":"d22301819d274315cc49e5f6ad85b89b841f6b2203e40f081d445819ebf87f37e6bd8b","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.602821Z","times_seen":116,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":525,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/Poppins-Regular.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:21.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/Poppins-Regular.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:21 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 49516\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 49516, version 1.0","md5":"4702686fb1679679583db2b0655ce47b","sha1":"f37a899865e8040bede69226040f21d46406198b","sha256":"6793abf92943d13b77b76fdf300ce8b6514464fa2bf2c1479e600c709dbed74a","sha512":"1f7d94ef53a3a220586c3b25317927a042760dbb5efdbcbd0b03617578af8b34c193925e817d41694b419e136e464b0c70befad6c0c5f684219a090600de26fe","ssdeep":"768:H1mUqiylPjrnG0pA6U9tEEPvM+WIjwYNjtbCZUcn5Bz84x34dHrjDBMvdW:HJONrLpAV9ZPvWIJjt459xoBvudW","tlshash":"d22301819d274315cc49e5f6ad85b89b841f6b2203e40f081d445819ebf87f37e6bd8b","first_seen":"2023-05-21T21:25:33Z","last_seen":"2026-07-27T04:08:00.602821Z","times_seen":116,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/update_1599491491.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/update_1599491491.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 105127\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":105127,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1350, components 3","md5":"541cd9d4ddeeaf15a1d90d9161fc17a7","sha1":"623a2bcd6e3955367e2ed0d09532afd0f433c6a4","sha256":"7a8519daf1d2ef4e5d1c85026191608eb72a5bbbafe29082d9062590aae974bc","sha512":"982dda6b466134837b0423119a01a938f65dc561480def0adb0ddb58fb016139cef2221d065a4f545bdef5ed46c7539baa038a4912c92e5eac83f73555d32b33","ssdeep":"1536:FNhFUdg8XeuuhXUulVHOxFn1ebKsuY/0Ugt2takKkf4KjPn+Ri/8KN:Fd0puuuhEu/S8CYuuaQf4eP+YdN","tlshash":"bea3022530e1ab4231b7e7fa96506e7df0a1c64369cfa2da80098a5832cf65734d0b67","first_seen":"2026-01-24T22:36:05.120872Z","last_seen":"2026-07-27T13:52:26.901483Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":804,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/js/th/UY-avjtWhxoWY-HLq4-cVr97HNozDPWiH7V1DOIgy7M.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:21.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:38:47 GMT","end":"Mon, 06 Apr 2026 08:38:46 GMT"},"fingerprint":{"sha1":"75:E9:26:C7:DD:92:81:20:5B:89:A0:8B:39:66:D0:FC:A9:48:0E:11","sha256":"D9:D6:E8:97:8C:48:98:BD:41:C2:5C:82:66:57:E8:87:9F:34:86:DE:9D:FA:BA:AC:CD:B8:AC:96:81:9F:33:89"}}},"request":{"raw":"GET /js/th/UY-avjtWhxoWY-HLq4-cVr97HNozDPWiH7V1DOIgy7M.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"botguard-scs\"\r\nreport-to: {\"group\":\"botguard-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/botguard-scs\"}]}\r\ncontent-length: 21946\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 28 Jan 2026 06:24:30 GMT\r\nexpires: Thu, 28 Jan 2027 06:24:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 382252\r\nlast-modified: Mon, 05 Jan 2026 11:00:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":58055,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (56823)","md5":"5bd572c67e62f1efbf662725fd4a3c43","sha1":"560c8d72e2c640421230b9021a9ed954b809f3a2","sha256":"518f9abe3b56871a1663e1cbab8f9c56bf7b1cda330cf5a21fb5750ce220cbb3","sha512":"a7111e9de8f70cb03925b123703ebf6160a871e287589035ab4d9c7eda5df654321723ea3b551e4dae0a659e0a8adf07c4d408792c40abf8b0607ecd73b36254","ssdeep":"768:juQSywGeBCQxvY7bLkAjNq3pdKAZ64YLf8RtoQhpi7vxXaeZwFTOEbCXyk1Mr4/7:ju3zbCQdUbI2PAbQ8TEwFTOVVa8/7","tlshash":"ca43f9def2d2733059e3a5d2409b461fd2bb37550c88186f7922e7f46a35887902bf29","first_seen":"2026-01-10T08:40:28.654847Z","last_seen":"2026-02-02T07:55:56.236828Z","times_seen":1484,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":92,"dns":1,"connect":28,"send":0,"wait":29,"receive":7,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/images/polygon-line-b.html","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/images/polygon-line-b.html HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/style-lobeliaf86ef86ef86e.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 317\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":708,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"2382378378c002d88b9a507c712c3349","sha1":"2e894db3808b554abadc8b144338ad9e2ea937ba","sha256":"37a4e56c497e170de6e152bc479624eb8d7ccb35bad5a190f2fdb17ac699cffa","sha512":"2120f9ae9e5d63ee9aa5aa25e24081662059bdeb01afd8b21ddb8bdfff22832ea0c1dec51dbcbf714e1e82537d624f0ddf0b862ff218b9d2a38941fbe63c3258","ssdeep":"","tlshash":"db01152a8181680fc0231051fa51d2646159421262870f60779ff657f6cd16b5a723dc","first_seen":"2023-03-13T06:39:47Z","last_seen":"2026-07-27T12:38:42.669854Z","times_seen":7578,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/update_1599490616.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/update_1599490616.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 101977\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":101977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x1080, components 3","md5":"68d67a2e3bc66b3c664f69e0eaebb737","sha1":"088d2047282bc634db84f248fa33f3e1412695c8","sha256":"2a4ad4c903852e2b10707447bfadedbb2fa5c992b6eb092d80438172b2d2d728","sha512":"07c8a1385c84b827e3d370102deea539f480f99a86947ae70df4f9ba39697d2611031ec0aa8b6e74d7526339cb8e566576bf7c69259252b60e38c0539c069008","ssdeep":"3072:KWBn6c2hFx+UjorxaMCsmA8Xu7BXKwjdDXpop06IOQM6I:KO2hH+UjuxPCkysVK0DXKp0dM6I","tlshash":"8ca3126feac87d05c413984fc7266c2b69ca00acbd961efd2876dc799113d422b0f768","first_seen":"2025-08-06T15:34:58.095097Z","last_seen":"2026-07-27T07:04:46.446475Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":806,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset/review/update_1599491224.jpg","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset/review/update_1599491224.jpg HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 143655\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":143655,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 864x1080, components 3","md5":"322dc02b6caf66edfdadd90ddb1756bc","sha1":"76912a6c247e880e3daa2c47252d91a3469ded39","sha256":"16f521b3395d896a3f3022320bee18bc2cfa173f2d5fb3b302d4cbabdf6d229f","sha512":"3442a4efbb01ea9ae7f520134e76e4ddc44c90471b93ec78edbea29c9ef562ef357842db2beb37ee59202e6f5bc9027347b8d601a6cfa3e124667bdf41696ed4","ssdeep":"3072:Ye/i/UgCrFZsprusRvvdhHi/aXyJxAXAqVSLbkn6UrZhbT2wSsR5buLbds:PnWisRnjpCJChVI66UPT2wSsvuG","tlshash":"5ce3126bbe449bb7bd2feba0590dbc093106cdbb94e6cf1504669db0d20aed4f4094d1","first_seen":"2025-08-06T15:34:58.068047Z","last_seen":"2026-07-27T13:52:26.273089Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/images/logo.png","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/images/logo.png HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 22 Jan 2026 02:38:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 168535\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":168535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3308 x 1096, 8-bit/color RGBA, non-interlaced","md5":"84b2bc003b1677feb81ad3d4bd34f9dc","sha1":"458b744f9a8b57cf5e7b76cc257a3d600159abd1","sha256":"cb34448530fae45bc0de24b71fa48cf8753e66926a29161532096d88910f04ce","sha512":"1b7a353bab2e7d18ba2b1bd3f23cf964509acbc17a4912bcdaeaa3029f5009b2d0c50c635c3ef35e26e9dfc833ff6ce32298c6c93a970612ce7f80176fe5fb66","ssdeep":"3072:boGg+jzquy47S6Hd4e5DA6FEn5P3pOidrz0g9PNpU3tWq:Uwjd7S6Hddch9rY6PNcH","tlshash":"d5f31229518a0d88dd80a0b42c770bf8773ec76d58a4fb7a67bb80eb7e8f1518161c75","first_seen":"2026-01-24T22:36:05.067071Z","last_seen":"2026-02-01T16:36:05.134291Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":948,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:22.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sat, 05 Apr 2025 13:51:50 GMT","end":"Thu, 07 May 2026 13:51:50 GMT"},"fingerprint":{"sha1":"91:23:D5:42:EC:58:B2:51:EC:57:F6:5B:46:CF:F5:2F:07:F2:2C:A3","sha256":"15:FB:10:F4:11:BB:CB:AD:9E:84:5B:16:F6:74:34:08:80:C0:40:EC:9E:C7:48:9B:F2:28:5B:50:81:78:82:8E"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Sun, 01 Feb 2026 16:35:22 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"69428756-eb0\"\r\nexpires: Mon, 19 Jan 2026 23:58:02 GMT\r\nlast-modified: Wed, 17 Dec 2025 10:35:02 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-01-19T23:59:05+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-07-28T04:56:45.491731Z","times_seen":16640,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:19.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /s3.tradingview.com/external-embedding/embed-widget-forex-cross-rates.js HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 01 Feb 2026 16:35:19 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-07-28T17:02:12.488891Z","times_seen":144460,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":635,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"koindefi.org/asset2/front/fonts/fa-brands-400.woff2","fqdn":"koindefi.org","domain":"koindefi.org","tld":"org"},"ip":{"addr":"66.29.141.235","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://koindefi.org/","date":"2026-02-01T16:35:20.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"koindefi.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 21 Jan 2026 00:00:00 GMT","end":"Thu, 21 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"32:E8:99:1C:F9:3B:5C:CF:B0:F0:70:41:9E:3D:7E:E6:85:58:05:B7","sha256":"F0:AA:52:F1:D9:BB:C7:DC:4B:BE:90:27:5C:71:8A:22:34:48:CD:08:98:4B:68:19:1D:58:2D:22:5B:6E:35:2F"}}},"request":{"raw":"GET /asset2/front/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: koindefi.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://koindefi.org/asset2/front/css/vendor.bundlef86ef86ef86e.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 08 Feb 2026 16:35:20 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 29 Nov 2023 12:58:15 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69608\r\ndate: Sun, 01 Feb 2026 16:35:20 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":69608,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 69608, version 1.0","md5":"659c4d58b00226541ef95c3a76e169c5","sha1":"333b0d6bb7e10601f4bd99e048608d5581be2a98","sha256":"05dbc51654b96590d176c27efbcef2cf4ac0497499a9f28b731b73eea399070c","sha512":"f828ff15e9c248b0845703a80be535e05c414fceddde9f5d4346b3f31f94c8171b5a70a3a795216d78dc8ed8b40ba3b41e9347569d782de8200cef2ddc34c1c0","ssdeep":"1536:25Ov32/VG3rQ+yOQIOMH6xit/Q/mi8xpaKr56tFUPE1m8C:25OvGdG3sg7OS6+ji8xpaKN4FU8M8C","tlshash":"0f6302db7101f3d9188af02198ec32acded05a5aeb60e546d8971a1bc40397f4ff980b","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-07-28T16:42:26.100149Z","times_seen":3132,"resource_available":false,"data":null}},"time_used":510,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":491,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-01","alert":"Sinkholed","trigger":"koindefi.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ytimg.com/vi_webp/41JCpzvnn_0/maxresdefault.webp","fqdn":"i.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.54","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.youtube.com/embed/41JCpzvnn_0","date":"2026-02-01T16:35:21.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"edgestatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:36:36 GMT","end":"Mon, 06 Apr 2026 08:36:35 GMT"},"fingerprint":{"sha1":"C3:F5:C6:98:D7:37:1A:9A:29:9B:1B:96:A5:78:70:DE:15:E7:05:71","sha256":"4E:A8:4C:59:13:0E:32:49:42:21:FE:53:CB:C8:98:6B:FA:71:54:F4:A9:49:D6:A7:0E:68:6E:E2:BE:A1:71:F3"}}},"request":{"raw":"GET /vi_webp/41JCpzvnn_0/maxresdefault.webp HTTP/1.1\r\nHost: i.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.youtube.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ncontent-length: 59946\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 01 Feb 2026 16:35:21 GMT\r\nexpires: Sun, 01 Feb 2026 18:35:21 GMT\r\ncache-control: public, max-age=7200\r\netag: \"1675782010\"\r\ncontent-type: image/webp\r\nvary: Origin\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e7c3a73f555da4c5b3940e32f6f9657","sha1":"baf87b72ce1f14faf7306e6d46839df93050e06c","sha256":"b3fc49c69c740b841e87e3b6b76628ac68152cbc10729adcae89417e32628391","sha512":"9108afe88993a7a37582b5c3596207ee18a01dfb576555800233e59a75080c7bc6190197667f8bdf62c4f8927cd3801165c1b5c3f2d7bea0a98a3be564e0c077","ssdeep":"768:SVEi96dRL20pJMZ25HhdrTBL3xgkJa9LsHhVeY4K/GxQAOhGLTjit3xlNQ2QsgDL:SVhw5jMZ2vChqYnxdLTjgnmsgDKqeJKT","tlshash":"e74302452cb39e22ff2de077650b6010e4bcbc1223550fcb8469837ee69b2d492b9972","first_seen":"2026-01-02T04:17:18.725508Z","last_seen":"2026-05-18T07:11:54.773418Z","times_seen":7,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":91,"dns":0,"connect":15,"send":0,"wait":29,"receive":25,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}