{"report_id":"5b713f41-d87a-4f7c-9a31-143c5531b50e","version":6,"status":"done","tags":[],"date":"2026-02-26T15:15:56Z","url":{"schema":"http","addr":"checkingcoin.top","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"172.67.162.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"checkingcoin.top/","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"title":"AML Check | EVM Wallet AML Compliance","dom":{"size":133306,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (15678)","md5":"f6ed71a0e1598465f39b3d4c81098c79","sha1":"13cb640ec62fa57fb6e2c6cf0b1fc012a1f5c47c","sha256":"d9c6be574ff7ef4cbaae72cbeb8d27283e037f3f17f4c4235fe4b5bf67f0d028","sha512":"7f340b6fd16f6bc504daa4b876dfb7ec112ca3c2e2167c02f1040ffd27b21745f6b5dc1c6a46ecf9fc379d1137c217ba3d86b7baa1424a90a9586ee3c8101e08","ssdeep":"768:ejHVeoIgwCywApDpUUfiRL52+UJi/c839YC+/Xmyp5GgWuKaDjaUmSdgYwdAy:IcoIgw7lDpjj+Um39k/XKa4WgYwN","tlshash":"0cd3b86206f31076b92bc2556ba66b083750d403d92a8e1db6fd924ccfc3fdd9963368","dom_hash":"domhash0236259b713fc4c85ff4b7d2618f2863","first_seen":"2026-02-26T15:16:03.702962Z","last_seen":"2026-02-26T15:16:03.702962Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"checkingcoin.top","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"172.67.162.52","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-02T15:15:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"checkingcoin.top","ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-24","domain_rank":0,"first_seen":"2026-02-26T15:15:57.045106Z","last_seen":"2026-02-26T15:15:57.045106Z","alert_count":15,"request_count":15,"received_data":1200958,"sent_data":7341,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-22T22:18:02.864626Z","alert_count":0,"request_count":1,"received_data":25422,"sent_data":547,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"checkingcoin.top/","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"94da53b5dccee5fd2636e8eddf97e1b0","sha1":"e3ff0fa5b9fb66db7f6ae44ca6fbff400a6d0de2","sha256":"a1d17a8a9b0d4e8bcf2c814b9de6a00c0219b97666aa2bf3ae4aadfc0dd57ffc","sha512":"f1f2347c89d43f3c22a23f6f1f30db0226ae93e6df7465440d4d1e70ee3361e68f66f674b7680d25b7e6b56e2fe4cfdfd4d36578adc0567f60302924337294df","ssdeep":"","tlshash":"da21be2f31b1107504fb35aaa39b97d836204083644689173e5dcf091f15ee169f2aee","size":1386,"data":"","first_seen":"2025-12-14T14:06:54.223883Z","last_seen":"2026-02-26T15:16:03.746646Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/zekpg.php","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1b284e4a3665f23c959a0d70efa86ef","sha1":"fd7916c83221fcc2a4397ce521df5b02f87313a1","sha256":"f52dcd25f10cb379c197b15d978814dc0864985d1485f6daec9c278e11151b94","sha512":"b6e47614c336e95c319a2d7112d806371038f5483549cb841f29b131417b28481825af559b3426e5e679e03a0a0712f15fc087a98a469effac45a2953b923186","ssdeep":"3072:2v8EdDO/w7FtibCQJDqCmpn0IwaZyUAqV0flHUqS28n05EXphqJW:mRO/w7Ft8dDWn1hhvn05khqJW","tlshash":"dc64a6ca998145aebb59529eccf6ac44d0444d13b95ce4e7eaddfc80712af32c08739b","size":315753,"data":"","first_seen":"2026-02-26T15:16:03.743965Z","last_seen":"2026-02-26T15:16:03.743965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"26e62655c1bf1f5ea5a3d366c8eafa7e","sha1":"59bc25e6cda93beedce788b9e76f4a488ca781b7","sha256":"d28f3a284724a9264cea15333fe52fc3362ab83264f47ac129fa9346d9dc2e96","sha512":"53871fcd211d39baaa98f0b109c5ce3e25905a8da046db23fcfef0c81961cbd37e629ca777678933936a240fcf30e810148d547aee000de6604402c2f54e6f77","ssdeep":"3072:pPvKr0y7OYbS4h7qiZQ58I4SZys4SVkXNHUSie8XOP5i71zOro:/mN7QlBRnXOhIzOro","tlshash":"50349199db43859c8b69518fc4b6f849d0448d27c9ac78abde5eccc13629f6280c71bf","size":245124,"data":"","first_seen":"2026-02-26T15:16:03.749605Z","last_seen":"2026-02-26T15:16:03.749605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73280e8e09fb5e472a1567160e2b6258","sha1":"e33f105347c83edec57d7476d178f9b3fa135ae1","sha256":"6918e41da39e79fd7d41e9d4e1f63db8b0666991f09a6a7c125620837dd8f9e7","sha512":"acb8e551037621bc0dd517990504bf8e815762effc95bbd1131b016ae60e5b1a2f0fbe482244df983c017a5f53eebb630113cbc5bb9800b3e7f5f1f2296c6e0d","ssdeep":"768:xLAspWaC1fcX3mRPicR7VWW9Oji5c6QcYchCczcZjcQDgwdVM8c2GKrRIHciSsI:xLpWZ1DPaVEi","tlshash":"5f53e9e1995bd4e49e0612ded037ec01e0285963ceadf583b92cdec2752df62858b13b","size":62931,"data":"","first_seen":"2026-02-26T15:16:03.752429Z","last_seen":"2026-02-26T15:16:03.752429Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/polygon-matic-logo.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/polygon-matic-logo.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 04:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9d-fc3b\"\r\nexpires: Sat, 28 Mar 2026 13:44:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5452\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajvhke5slg9qxt9bGMq5C6lfYIqZUnXo5sCknohAwPfqqdEPnCM8%2BtXCFXDO%2BrbQO8GZ9UTlP5FuDLlHTMajaLzemwY%2B5YBnMwkK6%2B0kBmk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d406612f8f9ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"b046e8937c9e68931dc3d8acb2d95a53","sha1":"2a58e7908e32b2fe463112041ba6e2714512185b","sha256":"1f0a0dc7b5f75150bfbef6268243548f57784e0beed47254165b3edc4c09df4f","sha512":"9ef62c2ffddb472229d61c873cc27b212a30636bee9dbb36cef25167113916a6591397c2fc0481763bce6bfed418a44a87b6f8a180c6fb74dc803c98b7ba2446","ssdeep":"768:cWW3oIDFOrYfdSBRZiz4k0cP+RR8CsrQvqB4XPHcLggzZJS0I71n6NZ6uHmYa4tT:rWNfEe0cWMZQyCPpa/gqcmHY0","tlshash":"7653b08d6df9faa1ca915d3c73b30fcc8752a4f5e9528ed7c6da611aa0402497cc20f2","first_seen":"2025-04-21T12:37:03.373756Z","last_seen":"2026-07-03T02:24:13.447399Z","times_seen":45,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/arbitrum-arb-logo.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/arbitrum-arb-logo.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 04:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9d-1faa6\"\r\nexpires: Sat, 28 Mar 2026 13:44:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5451\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36W%2Bfdnj8QaYoXA0I9SwFYaQumVHiUUOKLQ3j7kSp7ft7a9Q2FqqRMKweQQXYX%2BkRSUxPOzSkaFTvOWMcdkyBCs8qNfgboibHdp4YD4fNBM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d406612f8faea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129702,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"1a223d405428d8a0254c5788d07b1eb7","sha1":"f48bde656d2828d3f1e6a10c15f97b6bf98615d5","sha256":"e58e51e08533f100fd93d7b2cd6c1c4ad9456bcbc4a2486c9cef041e84e77343","sha512":"2d7206ca15750c0d35ced7a54dee679d4531c4581642cfb0f7cde10e71dc38bdf811989155ada1113bb3aa6de8bdf8c06de08323d50a9ef63456c443b4e1af38","ssdeep":"3072:OOoU8cN/rWKZ9rda1d85EuHeC8EEF3Z7t4IAVZOsDC:Y2NZrcF14Iq1W","tlshash":"78c3f10e4b3bdea8d18189b0bbfd4fedc61413ca8a099392c65e85183b7f7d5271b502","first_seen":"2024-10-16T12:59:18.345833Z","last_seen":"2026-08-03T13:24:07.576591Z","times_seen":61,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/avalanche-avax-logo.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/avalanche-avax-logo.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 04:39:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9e-bacb\"\r\nexpires: Sat, 28 Mar 2026 13:44:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5448\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=93wM6bXOQQT24FMrLA9DfY%2BW%2BAJIH2kVCsEAw6PU78kz%2FUFTf8bZACorbaT52b7YL7cH6yM8W2zIS%2BuOvSpuOdG7wWp1C2ZZhma8WeFCgUc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d40661308feea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1503 x 1504, 8-bit/color RGBA, non-interlaced","md5":"bcfbb16284d0fe74e311ef8e8ac5e22b","sha1":"af82ffac7807c7a1871c1f26591980e54c1402a2","sha256":"ca2d5f17dcdbd41bdf1eab39ab129864d4ca1da0491b577556a644bcba04312e","sha512":"07cc427d55d827d55756a58aaf65d0648063e8922ec60dbeb630ba6d61ca41d7d099ee368fa6c5f91b52774d0e0490055805b9a44865a0ff81075eb345b05c02","ssdeep":"768:BOe6Tb9TW531NpPPWa1ZAVHbfXysSdOcmoZTjSUyL6qoocRMIEVo6VGJipce2UAF:0W5lrW+Z+bKsS4oZ3qzoH+IEC6VGJipM","tlshash":"a423e16431852082fd4b59f3ea6e2e5e93d5332be4b0a2035b75e4b4e9ef29275f1c01","first_seen":"2023-06-11T20:37:55Z","last_seen":"2026-07-27T07:21:53.050663Z","times_seen":236,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/rsz_base.jpg","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/rsz_base.jpg HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 04:39:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9f-117c\"\r\nexpires: Sat, 28 Mar 2026 13:44:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5451\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KtAmZHW%2Fk%2FCnfjNMKJbBER0Rx4TAJDBZuH74RpD4xhm9UF6lpAQ8XFHHHY7wrCZfBcz0sDviSFnwIS5%2BprcDbybyJUKzD4IFi3NkaGjsT0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4066130900ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4476,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"de38f5f3a743dafbfb5535b085d710f2","sha1":"f3d0dbf86f509a59082f6c179e114339bfd102a5","sha256":"15a654f050fa37637d896a674030460ffb40570226868403de2d62adf302d63e","sha512":"1659272d65d99a5a2be93ccb121a9b71ac847275bca9cab6fc26cdf8184e25437dea6369b27d34cb695286cc502db3a4d789b57b1306a4f0900e8d818150ae32","ssdeep":"96:duIuSLV5yXqIt6T8J5xcfyjN31owBteNmm78CQtk/jBdR5a+/aQBQZYf:0hXJj3MNmCUk7BB9QI","tlshash":"b0916dfbd770e6273f06b2311b84df6d7fb04824d740a8eb96c908622b8d66948354f6","first_seen":"2025-07-12T17:33:09.259734Z","last_seen":"2026-06-08T08:30:11.753159Z","times_seen":23,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/rsz_linea.jpg","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/rsz_linea.jpg HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:36 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 04:39:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9f-4c9e\"\r\nexpires: Sat, 28 Mar 2026 15:15:35 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PGknSOnUs2g50sgKOZ9fwfrgNoM0qvfO3uYVwbyCPPcyDSjnCnnzoBABxqVXVK4cTccFK5LZ9frwQMhj2hA6j8RlfaloIyi6ExzP7yhgHdQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4066130903ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19614,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"906f19db5504230713012be4be894220","sha1":"0f732b5835b882bf8d19d9bf1390691d6659fd88","sha256":"40f72135e691f34bdfdff81a53615bc68f2311b8e4db3e4c1243ee07ad23a042","sha512":"34490337baebed53df585158a78d9b0f039d7aaf27e852b242983cf717c852eb28e2364beaea31b1d43c18085cf5e4ce95fd6f2cc952ff554a30c123e1a22f90","ssdeep":"384:mlZo1cZQTtikicpPxHGlZKH+MWqLngsXUl0/cgzUcD4RjG:mY1GQh7PZGlZKHaqLnzXUl0/cGjDgjG","tlshash":"6c92d17d731a05d5fd067003ecaf77ce08add2d5c4237a31924f5a70b6bb4a16638188","first_seen":"2024-02-05T02:30:15Z","last_seen":"2026-07-30T05:48:28.351865Z","times_seen":54,"resource_available":false,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":624,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/ethereum-eth-logo.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/ethereum-eth-logo.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 04:39:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9d-27343\"\r\nexpires: Sat, 28 Mar 2026 13:44:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5450\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N1kXlztrCuDUobP0EivwagIxxhdWEdLzjuEvR0fa0VqilYjCsRVQMHHHtAwsVUnyKDTQi9yaCbAQyGzla%2BF87DG5Yzl5RNgv%2BDNn8n6uJL8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d406612f8f8ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-02T16:40:36.981503Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/bnb-bnb-logo.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/bnb-bnb-logo.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 04:39:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9e-19908\"\r\nexpires: Sat, 28 Mar 2026 13:44:48 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5445\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HTLaltsxjZqpp3heytH%2F8H%2BZCd2siIpB8Z8F2%2BfJXknHsAu6QXqlilrRaYX6%2Bk4P%2BA4CBYf01ATtFwDy3337Q%2BwPvoZydRl%2FAsEVy%2B%2B18LQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d406612f8fcea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"9faf561e1bbd427d5d739b539249357f","sha1":"fbfac48e3c8c1caa9d17b8a38281eeef0d996d43","sha256":"86d65436ed9470ff4447f0ffd6426fe2622577421866e49933d2615bdb2a1a18","sha512":"aff23cde575e2cc346d303da8f1b432981bbbdeacbc02cd64f8808add90933033b8f0121cdb48b406e24fbc47234cccbcea1ba8b90b83ebfb0165f76087e04ba","ssdeep":"1536:FdYeBHIGj69qzWK89JQJV+04SoKLSc/viVXad7CL2gKpjc4f5XdG6YJhonwT/sv:zYnW64z03Q2pKrd7CKlac0JGwDsv","tlshash":"3ca302b6a3a5ec45e9939e3cec3e2ee2d774837fca4c5dd07ad09201121463aba154dc","first_seen":"2023-05-31T01:01:46Z","last_seen":"2026-08-02T03:55:04.105186Z","times_seen":324,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/24091.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/24091.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\ncontent-length: 625\r\nlast-modified: Sat, 14 Feb 2026 04:39:59 GMT\r\netag: \"698ffc9f-271\"\r\nexpires: Sat, 28 Mar 2026 13:44:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 5452\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BaOIZdyfyIcTR1ZJDhgUQtLDZN0%2BQn3kbmJ%2FO4YoV4sE97FgdDetWYQ9t6E0Qg9dJz9PdXMcqirBEQmh%2BiZw0%2FC%2FAYo07QCMTjxAW%2Bb6BX8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d4066130902ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":625,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"035536cd5ca5f7b10c36295af0538df9","sha1":"68310240ae9a8d13db324002cf82c6733cc99d01","sha256":"080b264aeb42edb8b876be540125dff85438bbda8e4b4fc9daec66c50b4a2d4e","sha512":"a9c8f7abbd337a791179213c6dd2b6ccf6bcd13563bfbb19cd62ef96f481e0fc9d5192dd396b553aacf865677ddc9ae10ef97d3feb8da0a056cf2d3b28e8fc3b","ssdeep":"","tlshash":"bbf0622b1f15afdd8d6e213581406b3d12a204d2524a3cc5fcda426fb31e2a0ade9f87","first_seen":"2023-07-08T23:40:32Z","last_seen":"2026-06-10T11:30:58.589086Z","times_seen":16,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/rsz_scroll.jpg","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/rsz_scroll.jpg HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 14 Feb 2026 04:39:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9f-4502\"\r\nexpires: Sat, 28 Mar 2026 13:44:45 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5431\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cnTEgoSTViYSAcipDq%2FJ4uhFMLOPGOxFNKRKLuQIczELfgbHQZ5nAeVzjCRVamiGLLRAl9EgMsn5bvrsABikTiBP85JI%2BNJlFZCTPiwL8As%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4066130904ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17666,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"f4a6281f45f892e49c00910c5b426330","sha1":"91beff8dce3de4351a277aa13c04245e9b4a5013","sha256":"a5115e74fd08480b7e2ff99a87622ac35bbd0bbf9ce5866b828fef6bb0248d9b","sha512":"1024d235925d434800cc3e9d8ff1d8b18b38a85323f87bbc982ce8755a71eb1693a8c8e1a2ff5aa843b292d05f75fd3ecc0629cbf9eaf05433beb5213da901c0","ssdeep":"384:ckVXXMGZ/nHXnNvZvm6XjvqluGQ1zpeRv5S43yNN+8i8JIE1:ckdX3/nHXnNZvLXjyJ84v5S438XJIM","tlshash":"4382c0ee490284ba33d0fe5c62b1d92375439a0375c91209be2a6568da3d26bb8e6449","first_seen":"2025-08-21T04:35:16.313168Z","last_seen":"2026-05-12T07:55:07.023723Z","times_seen":18,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/css2","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/css2 HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 11412\r\nlast-modified: Sat, 14 Feb 2026 04:39:57 GMT\r\netag: \"698ffc9d-2c94\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VxWQJprIYcUVs0v0Ms0t%2BDeX3KY0GG7eaNtlcJKu%2BYjYIq0uqqquHAjoUzZa803tWcpNyd45%2BjtHPFnhAl1japftHO%2BKCiSsrI0L4r2S8hw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9d406612f8f4ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11412,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"d9dd7e0a2720be451b4dd9c3a8ae13ec","sha1":"cdcf4ff920308f32102d758245a7284621ec0c08","sha256":"4bb7acd1ea48c6b77d0cfc1c4c545f57ad7e1cbb331a6f00e2d17e21535816dc","sha512":"3cf30d9f763822931fc0b2c2bf4aaa3fc69b8d4cc1fe9245e3a09f54024a3ecf30844463dc807db0c54c8eed931701d1483364d1f20fd84c0083a5cae7348764","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfWcGGDZx/GiZC4GRZfRG4ZYiG/W:fOGCDKDgRt","tlshash":"d632f0a1002b9504eb531cc637cebe32bd8ea1566091da799fff18989d9ec32132476d","first_seen":"2025-10-31T02:14:53.894276Z","last_seen":"2026-08-02T23:59:00.352531Z","times_seen":142,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 26 Feb 2026 15:15:35 GMT\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-08-01T08:27:41.616604Z","times_seen":146,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":97,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/fantom-ftm-logo.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/fantom-ftm-logo.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 04:39:59 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9f-1893f\"\r\nexpires: Sat, 28 Mar 2026 13:44:43 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5451\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GsToUKU3e9x%2BSuuW7vIIcRbxD4824GNHDAXfuP93KLCDvgOy6khyTHOOELCJiYB0yPDAv0yBf2PcfaJtJbNXy92OBN%2BYNym9nivpLqOuAE0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4066130901ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"61c8d8bf24c5e91548ac21b6925dccbd","sha1":"224b52da921ae675cc8e39f8b48f2819fcedf1a3","sha256":"54c8134148ed87dd10551af3a1593c2b9e33e438646906b0e555db00a4b5c411","sha512":"419e08ab727d36a836004cac486c6e2fa7119ae7924bb33d014d6898bdcd61a90689d1b537b1a3d2e087fd363cde280b51e4e2f51eea574670a6725fa0f0f212","ssdeep":"1536:Tv7RG8Z86bURRfP4DUZV6HV5aHu0o/dDGwA7dzvDJkUY/Rznk65wV+XoDB7kSEm:Tv1R/b4fnV6HVwO0o1a0K65wV3VkS5","tlshash":"6ca3d0bd9f78d858fe300379dab3219065a818fd8f751fc28875724e874d62098ce9da","first_seen":"2025-05-06T13:11:46.36653Z","last_seen":"2026-04-12T21:33:31.315604Z","times_seen":7,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/logo.svg","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:37.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 24 Feb 2026 05:05:20 GMT\r\nvary: Accept-Encoding\r\netag: W/\"699d3190-1489\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WeV7rz1DkLHZB0tO7kPhtyj0S4j%2FqW4BQK6UyZYOC02ftDb4Q3OjdUA6Dha37yZgb6RdYkTGaDkv9Wg%2FRomMN9N5yH72bcA6g1PbOgWMeVw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d40661e9bb6ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5257,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"984003f438ac67ca987a47294c462fa4","sha1":"2255a09d61662e132659aac047c7d5f164501006","sha256":"81661fbdf7defa4f7e3575153420a1d04cbeb76d0f33e01771fb5adb4f3d338a","sha512":"04a788fee6eedd9d13c971ebbe3b88ba62dc6e6fa96c789e3fcd6e18bff2d4d796fc4b1e9525026e2e61739f675af101d3119b5f3a423320b00abbea435d57d6","ssdeep":"96:1Kf8uh12Dsci96GiFgPO3zM+3+/OuyfMqyo5H1igHc+gFkE5Q06UvJWoCi4E:1of2xGNP2M+39uUd1ig8dFVQ06yso7","tlshash":"74b18d75f20a8cf84e28f800f6aeede6bd5380b6104f835675c12d56576458b0eaa72b","first_seen":"2026-02-26T15:16:03.723519Z","last_seen":"2026-02-26T15:16:03.723519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-26T15:15:34.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 05:05:40 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUIM9ve8VRfe2s5w8Dmknaf9lolDK1WEulrdo85v323l9l6BHg%2FJ1AgejFTY4rXHBmBRpJS9pfmZPw0qMkPp7bKL6KjDiCDbkH7BbQsmGCA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d40660d9bc12d96-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":133367,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (15617)","md5":"0067ab4abb98e066c85d2bafcfcbe10f","sha1":"9687723a636d19c380fd97e2d9c1988c59131b5a","sha256":"a2715d4e1aef6411798aa8bfb06fc67132b19ef96c3ce1c5c066e72477d15524","sha512":"4a373da04a7eb61cd3dbfb85f674bfe4917549c7997c38b8aacd45c85101ff8cc9254c5baf91af0be44bc97a044ae9c6e05819a2d135169a167fefc0f87552a5","ssdeep":"768:UjHVeoIgwCywApDpUUfiRL52+UJi/c839YC+/Xmyp5GgWuKaDjaUmSdgYwdAy:CcoIgw7lDpjj+Um39k/XKa4WgYwN","tlshash":"30d3b86206f31076b92bc2556ba66b083750d403d92a8e1db6fd924ccfc3fdd9963368","first_seen":"2026-02-26T15:16:03.725831Z","last_seen":"2026-02-26T15:16:03.725831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":78,"dns":44,"connect":8,"send":0,"wait":671,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/optimism-ethereum-op-logo.png","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /AML%20Check%20_%20EVM%20Wallet%20AML%20Compliance_files/optimism-ethereum-op-logo.png HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:35 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Feb 2026 04:39:58 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698ffc9e-11eaf\"\r\nexpires: Sat, 28 Mar 2026 13:45:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 5434\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GY8swavWnS6zey5YQVbzXwr1ETeXZD3iIuieTX3%2BEWtHK%2BxiKFkBoAqhJOwpNw%2FBVkSPcOUX2qY8qQiVsGHcVfBgTYnE3yyhycWWZR2gnBY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d406612f8fbea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"6af9c1b5f2343b7e326111a5333dd644","sha1":"4f26997c993e11669528832115692d8c0b95f2e0","sha256":"c95023993e5fce039a81e01256e1e88e753465ebf5d844d090432fed6678f009","sha512":"6b655058b46e27636ad80891969bae6ebf5e8da274473b30271ed6affd4770bd59a5af21f2a2e56f5f402937be800d9b48a9eac757eb5b59d004d100589816ed","ssdeep":"1536:MH2QvbXEN0xSeU+B/+riPeq7p+jRnNB+aZ61+S1LE3:MPbX40xSeU9GeqA9NhQHZm","tlshash":"3a73e0665993cee0d0a002beacbd4fc9bf55263cc4591fd24bb8f2354e8e09511278ed","first_seen":"2023-06-22T14:21:30Z","last_seen":"2026-06-05T20:39:27.021022Z","times_seen":61,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"checkingcoin.top/zekpg.php","fqdn":"checkingcoin.top","domain":"checkingcoin.top","tld":"top"},"ip":{"addr":"104.21.90.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://checkingcoin.top/","date":"2026-02-26T15:15:35.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"checkingcoin.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 24 Feb 2026 03:40:15 GMT","end":"Mon, 25 May 2026 03:40:14 GMT"},"fingerprint":{"sha1":"49:91:6F:37:91:A4:D6:D9:FC:F5:ED:2A:35:BC:97:7C:5F:BF:F7:97","sha256":"FB:62:C1:C2:84:4F:32:A0:A7:F8:DF:A4:50:55:19:99:77:14:51:4F:14:0D:E5:C9:0D:7B:A3:73:A1:67:D1:F4"}}},"request":{"raw":"GET /zekpg.php HTTP/1.1\r\nHost: checkingcoin.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://checkingcoin.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Feb 2026 15:15:52 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iOOyRhiNWkBy%2F0PoUG94gU81WVZLHEp6Bc2qWao3fJnLFjG355h8s9nOAo87%2BooX0VG7VZP8hRpzgLl9DetWat64eUBRchrvo1GD7nah%2F6E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d4066130905ea60-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315753,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d1b284e4a3665f23c959a0d70efa86ef","sha1":"fd7916c83221fcc2a4397ce521df5b02f87313a1","sha256":"f52dcd25f10cb379c197b15d978814dc0864985d1485f6daec9c278e11151b94","sha512":"b6e47614c336e95c319a2d7112d806371038f5483549cb841f29b131417b28481825af559b3426e5e679e03a0a0712f15fc087a98a469effac45a2953b923186","ssdeep":"3072:2v8EdDO/w7FtibCQJDqCmpn0IwaZyUAqV0flHUqS28n05EXphqJW:mRO/w7Ft8dDWn1hhvn05khqJW","tlshash":"dc64a6ca998145aebb59529eccf6ac44d0444d13b95ce4e7eaddfc80712af32c08739b","first_seen":"2026-02-26T15:16:03.743965Z","last_seen":"2026-02-26T15:16:03.743965Z","times_seen":1,"resource_available":true,"data":null}},"time_used":17120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16961,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-26","alert":"Sinkholed","trigger":"checkingcoin.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}