{"report_id":"6096cc5d-8606-49a8-a69b-05dd0317169e","version":0,"status":"done","tags":[],"date":"2026-07-28T17:16:34Z","url":{"schema":"http","addr":"auracoin.click","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"188.114.97.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"auracoin.click/","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"title":"Aura Coin on Solana","dom":{"size":59705,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (40770)","md5":"a18b54bf65a75abfd5730e641f9448d7","sha1":"a26f8092560ba40626adc23ccd9ed6bc61ddc657","sha256":"e0f9d0afeda1c9c1d0a4922edc94260a20db7ecc4b4fac54355c44f3151c8794","sha512":"6116e572d674b82a21fe29f04df65e4e11a94179cac98a2cfd32d50f85a8a8d395942fd07e682a90d43271fca9fa2eac2488cae12e0cd2a58bc313ef5d9c93da","ssdeep":"1536:+zqyrYCvXtHTBmkxvR/9VLCcngFar67OEO+e3U5h1D88gCkAHAyaGQAgapVaZZfh:+zqsgV+v","tlshash":"94439468b242093b350751fab5d1cf6cd27566c4de232a8ef2b880c2e7c6d768e67174","dom_hash":"domhashb35f662102e0a8fa1bcea2a8a34febe7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"auracoin.click","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"188.114.97.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-01T17:16:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"auracoin.click","ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-28T16:38:46.944583Z","last_seen":"2026-07-28T16:38:46.944583Z","alert_count":29,"request_count":29,"received_data":2279019,"sent_data":14236,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-26T22:23:14.439231Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":530,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-26T22:19:52.505461Z","alert_count":0,"request_count":3,"received_data":148035,"sent_data":1719,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.dexscreener.com","ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-06-11","domain_rank":2085659,"first_seen":"2022-05-19T18:07:24Z","last_seen":"2026-07-28T16:19:41.920816Z","alert_count":0,"request_count":1,"received_data":19602,"sent_data":522,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"auracoin.click/","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"350fe58303b7381957fcd76f87923b32","sha1":"7fc7f9a50f83264598ea7cfb0786b4c70b96a4df","sha256":"d93c6d38ee41099d05c81a6c59499aa2c0a9aac70556744db03986e5233f1db1","sha512":"5a6a69c97f0284b470887d38ac0524a36f807ab66ffbc6821a96a98594a4ef3b278aaf13fbe2d9c21b0a8d7f56ae518bc0fa2e1b779423d179058e0c13522acd","ssdeep":"24576:mhBggpxfK56YFHVl0rXkBoaIiIHnm1GNmJutWViRI5nK42eMJAmKYnFyLlMzD0L2:mhBggLK56YFHVl0rXkBoaIiIHnm1GNmc","tlshash":"9f15a51a51f393198660c8d83daa34cd0c48785188de3ae9ebdc9ec7c7548e2719f7b9","size":945393,"data":"","first_seen":"2026-07-22T19:39:00.841578Z","last_seen":"2026-07-28T18:01:23.939012Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/index-BK18UiMJ.js","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc18cdeacbf490ed3a8bc9d0a804fbdc","sha1":"5906be12b18b52b93382455f1da86edff86b6602","sha256":"c53c5b71b9e6ccf3e11984462988671483259368e19f628dd5fa4af523f319a1","sha512":"a3066a4e9a5cff779b795c95cf1476ac241c075d1a748719c4a916457ea235123c3359f5a474438bb31c0692e57d7f01159a3669e4ba710e668dd0a163b6c337","ssdeep":"1536:Ns3Pvx4JkllX+57OyEK6WBMHZNuCIIyE64c3fs4Ju8apgiM64pVjtPim9w44TSo7:iPZ46e5LUHi9E64a7Jpapj4pVjZE+dg","tlshash":"78146d987195b66a96a307f1205f8607723d1e139d2f4ca1f124ec9a6bb400661bfffc","size":206095,"data":"","first_seen":"2025-07-17T12:06:37.529367Z","last_seen":"2026-07-28T17:29:13.493072Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3794df9d16b3999923d0012a418c42fa","sha1":"857027a8b4f684547ff75ae9a662ad4e678c6b8a","sha256":"33ef6ccba6ba1a5ce0b15d41b9f3bcb6bf8a06233b00cae22f1b6823030391d4","sha512":"a6a95bd94963541d3727c82f26363ff2abba569b5e11cc7a19a171b7c91a12fba8ce9b93840b33dfe180af2111de086c596fac365b01180db9601facd3fd77e8","ssdeep":"","tlshash":"6c21d05860b911320c3325e9b9db96a4bb3080237086ac17374c91537fd893c2ebf856","size":1333,"data":"","first_seen":"2026-07-28T16:38:55.752782Z","last_seen":"2026-07-28T17:29:13.495787Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/_nuxt/assets/index.js","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7e74f7abadf3a4d34ac232b360e75de","sha1":"2ae6e9df230e4c3b60a23f550e9a4b9c0d7598c4","sha256":"9e3c7277547a6a848ebfc19c47a18c9c67f71433c7471938a62b150e7d42664d","sha512":"d4f514061d0baf308fe7f4bc1e4fdad1b442690aa56936b5129b3a503173f514c49b3d82e2e80eb017bd47de06b50432694a30d2efd72780ba7f4109305b8b24","ssdeep":"24576:wFpy2N3pcJ6I/DLlCx5WV+sOaOf3QHKHg/uls9U3EvfKm22hE/MYywV+plgzD0Ly:wFpy2vcJ6I/DLlCx5WV+sOaOf3QHKHgO","tlshash":"9325a61701f392559670ec943ca93cf91cc87861885e3aa9e78e9dc7d2108f1b35ebb9","size":979689,"data":"","first_seen":"2026-07-22T19:39:00.837147Z","last_seen":"2026-07-28T18:01:23.884526Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.16.24","filename":"https://auracoin.click/_nuxt/assets/index.js line 1 \u003e Function","line_number":3,"column_number":784328}]},"http":[{"url":{"schema":"https","addr":"auracoin.click/5.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.074Z","timestamp":1785258964074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /5.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-a26f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqINbFENCpmLDrtAg8%2BdLL9TfkmtOti7n%2FVFfaexiicdNfR%2BoEnbOMHFVE5FW%2F8pY0UQVvZrs9u4bYStsYb%2BcX0EtC8qZ%2FD0%2FswH2A87vZNW1Aq2681vu0VvDL2TTgodXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d7ab156bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41583,"size_decoded":42333,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"45b65772a82f1bf30c3522d5d32877c3","sha1":"9d5a01371ecae8fdb6d81e464c35a94355da8cd3","sha256":"9cfc1c0c042190834b78fe824a7c900f4f06b96c4d007b15888d29e46866e4ae","sha512":"64ba57ea3969885ad97635b09ee97bcf32eb63376e1c705706f1eb0f2255053b8e8c21a71d568a53d5e5b90410011ae71c398d99eace49ae40a701e6477c34bc","ssdeep":"768:s4NAw9rB8Ef5ePm7dufxxX01RSGry46iz2raneJgcS5K4tX6jnAks8CLQc:/3/5B0XX0DSAy46RaExS5K4848CQc","tlshash":"b2137c375e7400f2c253cbe8b68b8593ef7f273abf4a341e676605eab611289c81055d","first_seen":"2025-07-17T12:06:37.533825Z","last_seen":"2026-07-28T17:29:13.483963Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/6.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.076Z","timestamp":1785258964076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /6.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-8751\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=As8Eu%2B4DEv7RDgEajIT2VyuaPwa7u7J%2FgmSsgD0n2HGNOfk%2BEUBAwl6orudS5uqJ%2FwMKgN4gwcQ0dvrU6gz%2F1JJhVy96ujxAVpkNHMyYMKkOIy7rvOEiFgD5cbvAvoYBaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d7ab256bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34641\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34641,"size_decoded":35387,"mime_type":"image/png","magic":"PNG image data, 1160 x 300, 8-bit/color RGBA, non-interlaced","md5":"59edce0d351afc83e636ff729b8577e3","sha1":"8df9a4cc3a119189c25d8bf18223b377249eeb7c","sha256":"f276a28087520733bb237914395d27c238e8416bd86e5f2ce7fd254134a79a61","sha512":"ea1211d7db5c0388eed0a26dc03c33e74b009bdabd369b80d2b3b2d9525a52e1173dfe75e5f5d9b320c62733fce58db835502a99ae54956cb548742a81d265ec","ssdeep":"384:+4VVYLz0snGh+epHt+aB3IG2Qa57sw+N2spcuxrZKvCIlMI9pMIcp+S4L/2qbNAK:73YLzhGh+HaxIZKTz9rSCFlIclq75Lrj","tlshash":"90f2142bdc24221bc478523267573ad4c2b25c8fa17d2eae5bd968700faf4e8f275c45","first_seen":"2025-07-17T12:06:37.524208Z","last_seen":"2026-07-28T17:29:13.467581Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/13.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.085Z","timestamp":1785258964085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /13.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-a75a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DhuYduPr9fqX%2FRHkDYOYof0PEIgtkkpoaXSjpo7T8I56svb%2BgWiyGvxWjqX8VDyVtIDhWbrf%2BnKFFTNNM7WtVDZ1qWAnZ2I59kbS1N%2B0BFp0%2F4qyRv2X3KmeSplhWiOYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8ab956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42842\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42842,"size_decoded":43588,"mime_type":"image/png","magic":"PNG image data, 1162 x 194, 8-bit/color RGBA, non-interlaced","md5":"199642bfe164f9fe5b4bb39e631652e1","sha1":"c878fbf69f640b54c3b3734ea59f4a5e74b4d89a","sha256":"8b7901fd439a14defc5cc5e171c8920535e672ad119fddadc836cda1d2aade32","sha512":"dadef10e4dcb7c42eace5a0ec58e48e08134204da91bdb515c57444988ead8bad4744c61ebb2f849f12bb2d110feb8c0625c305776f7efa271d7c38009d8a92b","ssdeep":"768:zwl8AxcY127RpDYF8zeV0gto8qLfrv0GWE5kXuHFgZxP7sdTfzHaaZTZzi:7scq2VpcFGK0T8qT9TaXulG7sdDz6aZ0","tlshash":"28139d375c3468e3d82bd0ad70cb9527fe2b473407027a7a7fb729d8b6199659e4208c","first_seen":"2025-07-17T12:06:37.526492Z","last_seen":"2026-07-28T17:29:13.488129Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.232Z","timestamp":1785258965232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 28 Jul 2026 17:16:05 GMT\r\ndate: Tue, 28 Jul 2026 17:16:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-29T09:17:14.495684Z","times_seen":38435,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":2,"connect":16,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/api/is-banned","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.281Z","timestamp":1785258965281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://auracoin.click/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:05 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zTIEdodZ78f0wuKm%2FduyLgIULXjQapUbFnaVH30tsYG%2FfyWm60IF%2FeLKKTpAFhsFi6xXwucD58d4%2BAbww4OfkK2Pi%2B5756mYZc%2FKqZvCA6N67fvsr5vbDqMjm%2BsNPXJC9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22587950b4a56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":770,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-29T08:56:26.297097Z","times_seen":118402,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/7.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.077Z","timestamp":1785258964077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /7.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-9ee1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c5ncslYBRycSdzLDeW4JFapqzkDKbId9HulkMpM403EG8NkM7vSVxoJKAW5gfNAHQkYNQXGGk6nYKA%2FCxIVUpv5SO9AolP1lEdRKCUHcnHI%2FheGdPM2VtCQzXkcr5bAL4w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d7ab356bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40673\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40673,"size_decoded":41413,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"88248de61b22999f41b70addeeaf83c0","sha1":"5fde1a4df769f679e0d0479c82980db24c262fce","sha256":"cf94ebfa406787f951a41347c57de328422348abbe504842ba0e811f6b468e58","sha512":"7a42321bfa8708243e73ee33ff6005a1fe2780e462e891226af21190a7cb4023cf6ea1b5220a4deb42d4f1d0da51069c4dffb0fedfa1bc1fbac89c2c10cb8994","ssdeep":"768:s8u6+4QzGJxCgyAVEseAnav31TYva31Kh/gG9CzyR9znYJRHXvWrAVRzQ:M4QzsCMKseAmp1KpgkCz2tnYJRHuroU","tlshash":"65036c0bcf84e497e158ee72574be2bd98b50ea7600c8e5e0ba52cb96c435c4f732d25","first_seen":"2025-07-17T12:06:37.531553Z","last_seen":"2026-07-28T17:29:13.485476Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/15.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.088Z","timestamp":1785258964088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /15.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-a83b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epMTIFtbUQj%2FyzOqJgon8%2BOgEq5NMyU0zCsRkq2GFfIXRTELlLfZH0eg141hWxte9rTEsWmLViIn6m0FKnu1DC%2BUrYpm0YiQIGVBsMTtnqB3jdVqC8PX0OtKRqvUoTcGbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8abb56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43067\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43067,"size_decoded":43809,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"13e9f53f9cad690ac0e0104be84e96a2","sha1":"90ad334fc15e3ecb4dfe8a638c4acab20867c2b7","sha256":"68f20a5bb22cdeeeb516756dbbb0383573105959216bf83ec62e080d267a7067","sha512":"41a3c4e25146ac9cc7572b30117fd05cdaaa8c3bab98519e11a8219edb3122ec11013dc5fc6d22fbf7293a913cf6d22e33004a42af3a7d0670de11af450347f5","ssdeep":"768:sqBuBYlK3umwXL2ejddj6rAg8oePm5aZ4nALC6KQxWN+3Aa60LfbCHuW0+:N1srwXLHJdj6r92P2ay6PxR3APEbY","tlshash":"6a138d73cc3d31eb9047a869279b35e5da3e06477286be0f5f6818bd8e03085e531d6a","first_seen":"2025-07-17T12:06:37.52178Z","last_seen":"2026-07-28T17:29:13.479077Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.156Z","timestamp":1785258964156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-bd94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rzkElGAVqEwDTK5NyuEtE28ZaVbquzZlEnLYNWCZrZe1h3Bvh5y3s1PMkC%2FU4gbN7JeU%2Bq2nXmkucZO3doNu0or%2F%2FG2h51HbNAJ98VDEpNxmhCde4B5ciii6J0tlTlv2sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878dfad256bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":49280,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.158Z","timestamp":1785258964158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-bd94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cs1fyvbRk5XR6kQwaJDg56%2B4ETBnImfFUEbYxYpl4921qYQoQThEyleR0j69cY0i5Esfj5ObadSZ%2FiOZKZlG2z1N4gh%2FESPFz2YHdGcGZaF6VTRky9JgffegJXOow%2BMYqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878dfadb56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":49280,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.358Z","timestamp":1785258965358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auracoin.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 533151\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":18,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/4.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.072Z","timestamp":1785258964072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /4.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-99c0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68I3QdEg5UEaLcrugMmGKqNqBBDyzKNnVHCynVWqInCBDjQ1%2BsSJa8jOueUIVSLf6pctAhzyCCgu6ag8M4pejtxmA17Avm17C5k9s6%2F9kytSSkkN0xFgM%2BS5U9R%2FiStsnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d7aaf56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39360,"size_decoded":40104,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"b6bcad539553e6d52fcd39d5c2c86e55","sha1":"d6553bcbe46118a99b952df76827b937750e3b74","sha256":"90dced4fcb4140cd7e98b9fff2dd2d3d35e08d33e0070cfd6e5fdd3dcd6ebafc","sha512":"97830825671c17b141a0149d3471a46e37649a4cff12d3e999b53178d64fa168535779968f5756fb659d550ff134271e0707c70bb4eb19087e843675d2fdd36e","ssdeep":"768:sCpbBt9gd6Es5091jYbClA8H4EP0k+qP0bFiwm9NMs:1bBt6wEsA1jR1Y80cP0bFias","tlshash":"50036907559439b28e3bdd3c38db4e55be9310124293da75ce1f04ceb68ed692ca391d","first_seen":"2025-07-17T12:06:37.5308Z","last_seen":"2026-07-28T17:29:13.47667Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/9.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.080Z","timestamp":1785258964080,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /9.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-b3d9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e1WaZMZ8kxdbQ%2BfpmFlOyiltN7mMjj%2FpHRptJhDOaoNNU%2FtLxGLlNV%2FHDsrphlJJm790uXTRxRWvV36hng19QGlLChde6NXuqjK%2FjKDXBqYc1rwV%2BU7w6%2FxqqybrkG3Y8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8ab556bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46041\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46041,"size_decoded":46791,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"5cdb41d4f109ae3870d2ef244db03098","sha1":"0061556d27a4edb6e4e38ae65a78187fdf836f1f","sha256":"e97ec34c69e07337480cfd0b2d147dbe294ad753e472d39463419a452e49b40b","sha512":"9cfb599de7b2f2ab34af79dd27b26f481ea9aca398f67e3c6be5594f31a501149ad355a2d14a672ae102da4cf81b185b5070889a35ffc2a9858542869121fefe","ssdeep":"768:s0GkmKM51nIEP6eiRJOwU0h7jADHQ3asfbVA0F5jZuK+bYqz0d862SV1X:r1DonINeiRJf/hJDy0EHwN2S/","tlshash":"f3239d374e7494b6c2c7de8c7a5b4886ff3f226f7a46701a2327599fa346299cc0125c","first_seen":"2025-07-17T12:06:37.522598Z","last_seen":"2026-07-28T17:29:13.477548Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/favicon.svg","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.664Z","timestamp":1785258965664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:05 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6863d331-19b\"\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eDZgx%2BhwOJCEIW%2Fk0bNJ3c5xWyN5mVP6zpLyh8Qwe9%2BuPgT%2B1R4j1jlvDQck8dMEHkQNYKpR7OoC9SbO3CRwGKfuk7yMO95%2BrFRAd%2BWbi5SHODCqUJjk5j2NUVlef%2BdZrw%3D%3D\"}]}\r\nage: 2269\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a22587976b9b56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411,"size_decoded":969,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d24f631b0c3206e7b53de09d47eaf1b2","sha1":"c042f4bf945832b350e3bd46a0ac9082464bdd53","sha256":"e37ac53eddf2969709ec7ea2250ad1c96c580438ff44a9e6e09cfb0c020ede18","sha512":"2be365717cb036ca9e39d48e6d9922197daed624e4bfb697248c2d4eff3fa876f12cb0d24ce8237ce341b3fcd3a7a8616692d2d9025f99f35071ff50c9e97187","ssdeep":"","tlshash":"cee02b91e94965018504d3100b5cf71382d574efdf6500e796c185b5b64b2dbac25fd4","first_seen":"2025-07-17T12:06:37.513938Z","last_seen":"2026-07-28T17:29:13.470728Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/3.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.071Z","timestamp":1785258964071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /3.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-cb80\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RohT3i9gzegKTzTOj0efzd47q6oHIxN44UdOpu%2Bg1iIv7cYqUkk2UDwtR1EZSLYB4MFxmglcILk53nj55ntynVrx6TnAqru3EBXUhP7J%2Fu6qBIK3ZoADB6edDbeY0LBqAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d7aae56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52096\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52096,"size_decoded":52836,"mime_type":"image/png","magic":"PNG image data, 1160 x 242, 8-bit/color RGBA, non-interlaced","md5":"13f7b98754f9256d374c5fb573c97fdf","sha1":"374f8d7f89a22e661db76a1ff99cb196fcdaecd1","sha256":"4b1a0289633ae458ebbc5deeea24fb53c9a19381d58e759b10bbaabfa4aba647","sha512":"7d04fb344be36e5219773f5960e565c0e802c03fcf38ba194c7eb266008144ebde3772e39d2e2cae76761a13c2239ccf2fa3442ec262b58a06b58a9e8ab7d5e0","ssdeep":"768:K1m19ky4YerPFXRx+t8xLwBMSfc9ZxaZFdcSPbT8z3rkYln/:nKMerdzPxgcHxandcSn8z3rkYF/","tlshash":"54339f271e7490f6cb83ceac760709c7fb6fa26aaa4a755a2721418fe707699dc0540c","first_seen":"2025-07-17T12:06:37.532361Z","last_seen":"2026-07-28T17:29:13.479853Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/8.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.079Z","timestamp":1785258964079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /8.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-a947\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9dmPc2oOH1UReMV4D4pSNfUOPOsiYS7Y4K5EpquvH69fYnrSSJcjDcavgfMNc344oGv3GzXLziVO7yGS8uzN2i%2FvwtDsCu8fstttImlioNlSRXJUDDtV0soSV6ULQkc4g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8ab456bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43335\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43335,"size_decoded":44073,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"b1a02cf80f26705146f0c346cd712d34","sha1":"f59c60b1fcd2f4982a4d30795a94265724a7c855","sha256":"d1c613cbc0804a52a4e98e48280444e7ab76810b60388e0f248a75be0e1d8c28","sha512":"2314ee1d07ff2a4f95f7dcd4e10cc8c981d76dd9d0549198ba984e75d9b158ef736d92db7484e90a98d9fbebb125ed44ee6a367dcff0394c4e31dd1e7ac5661c","ssdeep":"768:stCj4ESyZqCsDTJN+NH4r5byQFNds+qb3MBZKhHZg2aSZ/FlpKlGgyGplSE///O:6b3PTj08bfhq3k85B/FlpyGLG6E///O","tlshash":"5f135e0a43d1d9f7c3d9ef27075acb7d85bd6abea80e0a4417262e9b3c436d9035254c","first_seen":"2025-07-17T12:06:37.533139Z","last_seen":"2026-07-28T17:29:13.48653Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.361Z","timestamp":1785258965361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auracoin.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 533151\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":29,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-28T17:16:03.560Z","timestamp":1785258963560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MnwDBnGjBn2dKBFSwC8H%2FGu%2FIApboywo1%2FaGAK9%2Bmip7f1yP7ajpuSENCSLNIqewJW%2BoKkSHR%2BjDPB1y3usB%2FaVpChVG5nK6iRUyMizTCPS7OE4bNOi87FwQWO63dW6ZsQ%3D%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Tue, 01 Jul 2025 12:53:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a225878a8a8756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":101658,"size_decoded":36511,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (63933)","md5":"72be56f079b78c2b0150c344307573fb","sha1":"28d0747cde99c5765ec27aa8df86b30f097375a1","sha256":"c8c1725cc6f6b3a34f6cbb44f75efd95cc9d1cf2f1140011c084961c6ca9b986","sha512":"c1ab4254393526402a7b7a35c15a2e38734e0f2a3941dd3ed1d4fa640c14c9085c58e659aaba13d1130e6485226e174919e25d0864c43558a973dcc5dbf4cc91","ssdeep":"1536:E5JR1FD1L1DnJWrAWm//43Zc1OQqGGSKWMXbds44hBoZoFkoj4SjjpzSHXY2m+Qw:M1t1pJ6CU2ucM","tlshash":"1da35439094d2b1e33330dbeeb43967e6ea665dceb1644cfa59e70ddc3568208612de0","first_seen":"2026-01-24T14:40:15.185594Z","last_seen":"2026-07-28T17:29:13.483219Z","times_seen":15,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":23,"connect":16,"send":0,"wait":279,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/12.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.084Z","timestamp":1785258964084,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /12.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-86a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFtRs%2BsnUNMvEGgHaKelZAHxVx75UQ4PS5uQA7OBc5zjtsbIWNWAldaAEgcvacth5biYLj9q2sIGKGrTK36u6Oc3ZmMT5H979XIdqWwJO0vWvgxH5BORlZmek1RKejyXKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8ab856bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 34473\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34473,"size_decoded":35211,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"304d705b87ade0b8733eb4ddc8903e29","sha1":"48a140360be949109f4af8589e1c2c146f1c0f71","sha256":"53d952c7483a4438dd933b1651aecd3852ec6b9046bcb7bc994feb9fe21ee2f1","sha512":"3629b4bf5bbf851cc6600d5ee01e83272b3f6d7aa361170757c6adcaa333424d11c9a79879cf58ace873022e5e6ebe8a0dc742eac17abb9da5dd0c5476a91d0e","ssdeep":"768:s3bKv5ipiR2WtFtB/aNa0056uokGZ9OUU5ktioeu:kbKxipfWHYhOUB","tlshash":"10f26a0bd76389bbb08890623809b31b8552ce73b926ed1565cab98f57d3fb40f32c51","first_seen":"2025-07-17T12:06:37.530044Z","last_seen":"2026-07-28T17:29:13.481648Z","times_seen":19,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.153Z","timestamp":1785258964153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-bd94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FNblfeFBrEkqT%2F28%2FlHw9eZFqDyssB%2BDdK6Y0xpo6AfDdcCCbAn%2FsjekM%2BlftRoQlab%2FuRMMhw8yIrOsq%2BFItqcfmniBciPM1XgBF9VObAY%2BhVaWz%2B%2BNuXcI6GtZyEhoMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878dfac956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":49294,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.dexscreener.com/latest/dex/tokens/DtR4D9FtVoTX2569gaL837ZgrB6wNjj6tkmnX9Rdk9B2","fqdn":"api.dexscreener.com","domain":"dexscreener.com","tld":"com"},"ip":{"addr":"104.18.38.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.503Z","timestamp":1785258964503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dexscreener.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 08:21:04 GMT","end":"Tue, 20 Oct 2026 09:20:41 GMT"},"fingerprint":{"sha1":"8A:72:F9:DD:CB:C2:89:0C:90:E0:90:07:E3:E0:F0:43:79:73:64:E6","sha256":"20:C2:05:CD:92:98:DD:03:AF:68:B2:FC:46:93:04:2C:04:86:C1:66:8C:A0:D9:E3:15:9F:A1:52:CC:4B:88:B6"}}},"request":{"raw":"GET /latest/dex/tokens/DtR4D9FtVoTX2569gaL837ZgrB6wNjj6tkmnX9Rdk9B2 HTTP/1.1\r\nHost: api.dexscreener.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://auracoin.click/\r\nOrigin: https://auracoin.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nset-cookie: __cf_bm=EoByavoDoxtpeO3IfIDmTVRYHTGOjtxM9.hkQSLgUNI-1785258964.5220919-1.0.1.1-DPZDoL_QZASRuDtfsP9ttEhbCIxWViDGN2I8XalciM4c0GkMxNJBDsTI4YgcRI3.5kQK_dBfn_0dkby4TgHkVY0xzMQ0vOpOcCUJ6nPucTkdTbMvgfWqulnInWIJExk_8Q8MetJFlWG8WDNM8bX45A; HttpOnly; SameSite=None; Secure; Path=/; Domain=dexscreener.com; Expires=Tue, 28 Jul 2026 17:46:04 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\netag: W/\"494f-v6sZDPECt420QFdvpJioTJ5y2K0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\nexpires: Tue, 28 Jul 2026 17:16:34 GMT\r\ncache-control: public, max-age=30\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\ncf-ray: a22587904bddb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18767,"size_decoded":4401,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"884059570730908a165c89750be4ad3d","sha1":"bfab190cf102b78db440576fa498a84c9e72d8ad","sha256":"f1b5058125760ec53c7993460f1ba079f74022821c071a9f7ab2bbf52e301705","sha512":"d7382d9505338ce88891340d40a9d6eaabe53db268a904d06a9908591cb6c7410b13d59683c332b3145792fac8ebfcc79bec1b2e870f7fdc0ca87b4a671c143f","ssdeep":"384:NGWUJ7LwrWUJ7L6jtWUJ7LtmWUJ7LYc8WUJ7LQLoJyWUJ7LoWUJ7LIsWUJ7LrWUO:NGWUJ7LwrWUJ7L4tWUJ7LtmWUJ7LQWUg","tlshash":"a48284bb47e8396fc3009ab2209b383da1d571c74b9db94fc194dd8a41c876fd90e958","first_seen":"2026-07-28T17:16:37.809615Z","last_seen":"2026-07-28T17:16:37.809615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/api/config","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.282Z","timestamp":1785258965282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://auracoin.click/\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:05 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffStmJD9GR4%2F70YvzhnpDrE3aCIm5z9zibXDnv650WEmNPcwNWrewlqvh2uRtEtHeUuD2kO07WigSHoI6F%2BCGz%2FAFLeXpfK8SRlO3V81YDzwdhBtcIgBPy1oH7Aa13uGcQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a22587950b4b56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":176,"size_decoded":915,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"bdbd3bb88332b33f0d94c468424a1718","sha1":"8102f60235ffeb867a453f7ca050d181fc495133","sha256":"9c81398686aacf3052e68513e298b32f6065705f492162c7088eeba829c38c81","sha512":"37fd4f1f951e3a99c897674398c681e829f05e7f3ab0ea73e00fd8189f780dafced5978ac4a25ac387eb7ca2f8ceccfea18ed89e6d5aa74a0905573b14ba7a93","ssdeep":"","tlshash":"7ad02b34c3159a46ae3d12c7db557adb607e1f80643954d33122e891040d6928b9865f","first_seen":"2026-07-28T17:01:50.770188Z","last_seen":"2026-07-28T17:17:31.447188Z","times_seen":4,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.360Z","timestamp":1785258965360,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://auracoin.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Jul 2026 13:10:14 GMT\r\nexpires: Thu, 22 Jul 2027 13:10:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 533151\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":1,"connect":0,"send":0,"wait":23,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/10.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.082Z","timestamp":1785258964082,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /10.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-998b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIpTWj7SPjEN3%2Fy9tSf6eTwYy5S4WzcpZOGwm2VKCAsqD%2B5dqbCnml175hRUWq4ea1l75I2F4TEyrEeJSx%2Bq2zKQm6vDm97JYf7Klp%2B3WAxxHuXpQ6wihgzs6Rybf2YIig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8ab656bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 39307\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39307,"size_decoded":40051,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"8ab1c45af587a9636d6e8d30e3652f08","sha1":"1b93c2c4510eaeff473566e867904d28d913a6b0","sha256":"4b6052fade74d6b1f8934f20b184a65834c36ed40caec7bb19b3cf8575590077","sha512":"54fb2bb50e394dd105a10f8289042902f7c0f1c10b68eb1051d4a219f42ec053c963c574a5e913a3a7072348d1d637dba9e94a7014312347f295fcd59e739ad7","ssdeep":"768:sBfiffQzH/zPVymuufixLwZVFOZH2IX/sdLQBZI1XG/D+:YyOH/Zym5swZSZWIX/saEz","tlshash":"24038c37dc70b09bc86a91a5521b34e2ee3e169373113e4f6f2502b9de135d0eda189d","first_seen":"2025-07-17T12:06:37.527794Z","last_seen":"2026-07-28T17:29:13.487338Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.155Z","timestamp":1785258964155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-bd94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1M%2FoML%2BCLQHR3OkrQGUYDuARt%2B8hdxGffpzp%2FWjVb9rgNNwyf15FtCE%2BgSj6cLh52hnj2PRUujHmmV0onBwGlBRNddV09lGX4XKFBvBiRIT25rAoMWTxt%2BNnSHXUm4fvww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878dfacb56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":49284,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/css2.css","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.054Z","timestamp":1785258964054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: W/\"6863d331-4ffb\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3yRLknxrDTupoGCZ4Wo8oPc4LUel5SG2f5bQOxnZPhKb3DbE6Ge8UQLFjclxxu%2BXf4yYS8DYHHG8nNELgYayL%2BODWinYYGqhIPMp1jjD2AsLKQiz6zr9qHU%2FIC79qtdBQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d5aa856bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20475,"size_decoded":1672,"mime_type":"text/css","magic":"ASCII text","md5":"b32cbdc09be8ca664e6523dd806d5930","sha1":"59a65cfd0f0be3e965f3efe96f3835c48869b8d3","sha256":"e524aa72cc77c4d0fdf460b495339b8198b5cc7c63414ba217f1cb049d845d7f","sha512":"b4b6ce137bef9724cd4771132014c74517e5b7e86aa1dc3929e6c3fe712c5ed6099cc7b13ea8ebed745b30ea15bee653b8aeece8deef1356ecf3aa5a6a1e545d","ssdeep":"192:WpTmpLpQpO3tpdp5YphTnspO3G25RyTAz6O3lV5iTTNSbO34o5DMTOB0O3/v581P:WxmtmCtHg/5aOkvWsk1i6kbGYU","tlshash":"2f927a91002b6400e7a71cc277cf3f3aaedd6044a049da782ffd0d8a6cdada913a575d","first_seen":"2025-07-17T12:06:37.52566Z","last_seen":"2026-07-28T17:29:13.490818Z","times_seen":23,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/14.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.087Z","timestamp":1785258964087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /14.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-145f9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YbQ9Lzq0%2BnFuIEGJvXWDd79np0%2FG4Fu7M8Js5iZg3YUyRkMCbvxS80Koa41sj66uE%2FtLJ7Phj9yU%2BQQg4Qa%2FFYpKpR72UfMPmUQ44DYIhAVLRYoN7uthQglvi1%2FuSsn%2BnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8aba56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 83449\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83449,"size_decoded":84200,"mime_type":"image/png","magic":"PNG image data, 1160 x 420, 8-bit/color RGBA, non-interlaced","md5":"40a5bdd3a4de64c27b50de2b83a01fae","sha1":"feb12749a5b5ff5a7919add73e0d85939fd5e034","sha256":"b1cbcc3fee742d8e089fe246c08653f71255ce41e4a84e2d23e4b1c718e92580","sha512":"b1efe52c363f0b179b87de91104f720576574a247319cbb782d569dbf8adbe59c4a3aba95923a328912abcc250215acf8f2f33ad93a5bb6ba9a8943175f1dfe8","ssdeep":"1536:bIdT2Z6mdI3In9NsoicuzLcOTDnIXj+Td1Tlyqm+HWjDLOO:eiF6InclcqLCj+TjJymMDr","tlshash":"fd839ea09b8946758ad7ef11038709d4c84d752fb8cf46d4fb862bd37c83bda492861e","first_seen":"2025-07-17T12:06:37.527113Z","last_seen":"2026-07-28T17:29:13.468813Z","times_seen":19,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.160Z","timestamp":1785258964160,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-bd94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWlWhCPVutDF3gy4szvWlVpq3GEhU0M4M5Ggxdh1%2F9nCcCOhWyR76KUW7n%2BM%2FNgz0mV%2B5QO64ibg7wfiXWSWC68e32e67X%2FBIE3bI6v0kC1ImiDsaFRAmSuMutEqDo%2FIcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878e0adc56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48532\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48532,"size_decoded":49284,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-29T09:59:54.453505Z","times_seen":248857,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/api/visit","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:05.470Z","timestamp":1785258965470,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://auracoin.click/\r\nOrigin: https://auracoin.click\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:05 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDow8PjLnaKy4sO4IQ06LKWqYP4A9vMbmP3w4wTlGUAEN3mRNZHMpVOEJ4E84md%2BO5YR7m%2BU5tSxzMatV7kjAYcv6TIN%2Fu379l4Ac2k9zij0Lk9Cd7bT%2Bm5hV4EY3ddvPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a22587963b7d56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":728,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-29T09:54:34.294684Z","times_seen":443510,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/index-BK18UiMJ.js","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.056Z","timestamp":1785258964056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /index-BK18UiMJ.js HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: W/\"6863d331-3250f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sV3NWnXEHZMv2pXgXCYgObMv1LkiEWRxYS0mPFLhyRhi3oTBiy9Mcc31tHJPLGigUzdNTS02JHHnfXcgjBbpnQsEZNi5dExd5KiVM%2FblfKeFifDyFJyoUnQQkpjyd%2Fo9NA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d5aa956bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206095,"size_decoded":56915,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"cc18cdeacbf490ed3a8bc9d0a804fbdc","sha1":"5906be12b18b52b93382455f1da86edff86b6602","sha256":"c53c5b71b9e6ccf3e11984462988671483259368e19f628dd5fa4af523f319a1","sha512":"a3066a4e9a5cff779b795c95cf1476ac241c075d1a748719c4a916457ea235123c3359f5a474438bb31c0692e57d7f01159a3669e4ba710e668dd0a163b6c337","ssdeep":"1536:Ns3Pvx4JkllX+57OyEK6WBMHZNuCIIyE64c3fs4Ju8apgiM64pVjtPim9w44TSo7:iPZ46e5LUHi9E64a7Jpapj4pVjZE+dg","tlshash":"78146d987195b66a96a307f1205f8607723d1e139d2f4ca1f124ec9a6bb400661bfffc","first_seen":"2025-07-17T12:06:37.529367Z","last_seen":"2026-07-28T17:29:13.493072Z","times_seen":18,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/index-4kMf4BGK.css","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.057Z","timestamp":1785258964057,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /index-4kMf4BGK.css HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: W/\"6863d331-80fd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8LYFfmX%2BGmhJgfxBgxmBuel1C0A7sOEZlUIA7NYe%2BED01fdMJOgcbbz1%2FGjXv7iCrWesjrwYa1xXJpQjlGK9Qmp9BgCGIq0vffxbDljOL%2Bzr3HI%2BdqGtPTwSA8U738spg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d5aaa56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33021,"size_decoded":6927,"mime_type":"text/css","magic":"ASCII text, with very long lines (33020)","md5":"5c29083be86140aaa87f39c01929e588","sha1":"dd250ff3330e33fd8c025d34f4fefd98243e74b5","sha256":"8a869d64c4090d3cda5234019894eb11215d5c4dd41cc83a2f892c1785496c14","sha512":"ebdc261efea52c5079a1ec751a6487d57113a1474697997b7c3f3a755718e4a6f44a55044057b71c5b21d4889bb78d110371c2e830cf4f5f27361313f219061b","ssdeep":"768:Lz0GZ9CoiUHf86gFcZNUrhZ/rHGjhvb/XxxrR6:Lz0y9CoiU/86utZ/rHGjhvb/XxxE","tlshash":"2fe2961da760513f6d1792e1d2d8e65cba3db4c1ef362bbef68a000167c23f60967a04","first_seen":"2025-07-17T12:06:37.520072Z","last_seen":"2026-07-28T17:29:13.49447Z","times_seen":18,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/_nuxt/assets/index.js","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.058Z","timestamp":1785258964058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 22 Jul 2026 18:58:35 GMT\r\netag: W/\"6a6112db-ef84d\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EyprveW49mj%2BsJwGehkQauFxDThR8k%2BUExlLlMc%2BnSOVQTYxsUS%2BhQdAExZEh8LwomHVuvrFimgXXqw41hYsYibhoXSNJ7Wv5ewi6TyYMHi9bIUDNtDvBt8cS9OyvpdYKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d5aab56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981069,"size_decoded":237532,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (62882), with no line terminators","md5":"b7e74f7abadf3a4d34ac232b360e75de","sha1":"2ae6e9df230e4c3b60a23f550e9a4b9c0d7598c4","sha256":"9e3c7277547a6a848ebfc19c47a18c9c67f71433c7471938a62b150e7d42664d","sha512":"d4f514061d0baf308fe7f4bc1e4fdad1b442690aa56936b5129b3a503173f514c49b3d82e2e80eb017bd47de06b50432694a30d2efd72780ba7f4109305b8b24","ssdeep":"24576:wFpy2N3pcJ6I/DLlCx5WV+sOaOf3QHKHg/uls9U3EvfKm22hE/MYywV+plgzD0Ly:wFpy2vcJ6I/DLlCx5WV+sOaOf3QHKHgO","tlshash":"9325a61701f392559670ec943ca93cf91cc87861885e3aa9e78e9dc7d2108f1b35ebb9","first_seen":"2026-07-22T19:39:00.837147Z","last_seen":"2026-07-28T18:01:23.884526Z","times_seen":106,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/1.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.066Z","timestamp":1785258964066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /1.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-66b7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DBRbWQhdpmPn%2BNhzqAO9lvrzBJV%2Bdn1o7dUIPsL86lBVj4G9g4Z6bfdF6hCnWu%2F%2BjILYzCyfHsf%2Br99zhcfUFNKeJ%2BBqb65y6BZ%2BLB1F0djxq3LyYzBkzKocHkwVYGvZpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d6aac56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 26295\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26295,"size_decoded":27045,"mime_type":"image/png","magic":"PNG image data, 1162 x 120, 8-bit/color RGBA, non-interlaced","md5":"49d6097a40af8462a090ccec27e8826c","sha1":"3bea42f7e36586f158c26660656cd491a079fcdc","sha256":"8d5f301490fee23dede060537f2aa3a20497c27751946430480b629fb78c9bc5","sha512":"27355a6d48332679032c06bb4bc73f094328b64912722e4db13d9946f4986f7d38fc4f790ab6a723227891b0e28b671aeb1eab96c6d1d46d742f29b9a833ea7f","ssdeep":"768:0sIyi4S0Ts6ATS+lzJNB64BpGAeJDQzOi7dd5:t3if0enNNMuQDFe","tlshash":"37c27c77d3973cd6682e63363ca308059c5bc5a817384eeb14cae9611ebe608f3e116c","first_seen":"2025-07-17T12:06:37.528622Z","last_seen":"2026-07-28T17:29:13.495167Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/2.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.070Z","timestamp":1785258964070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /2.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-89e3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fp9R0kH0zP62nu2umpEbKXk3kH9EUy7upw%2F9P8T5useJpGwJTkJ%2F%2B0kY%2FqjXtubXmWbZ1%2BnqGJK1E4V8jhp3rsb2P9fy2SnLj3R6jWWtNEkRdJAYRqwnZT4rfuPZP7BxEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d7aad56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35299\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35299,"size_decoded":36045,"mime_type":"image/png","magic":"PNG image data, 1160 x 200, 8-bit/color RGBA, non-interlaced","md5":"838139ed8bc264c6de9e1f83299455d3","sha1":"b9b7f16be81a2836cc83cf4cee8e06113a962c62","sha256":"d86ecba465aafb7f81ad0c649c963d32eaff95896fa452c1a9ce7489ba19bc6e","sha512":"c1c2dbc0ebf505466d7b230de96d7cf7a69a02b48abf25efff115ea61860496767c6f2c21c73271944110fb3847d3608772c5c1c173dd7ac93dec9a4f06d4b52","ssdeep":"768:sme1c8enOQ8ersZaBCJzDYLDkbKV3CZU17e0SZP6N:OPavppBGQDEOyZek6N","tlshash":"23f27bb7ea252997d17856b578e7031469738afd433db5611ce36d90f3ec9cd30a2208","first_seen":"2025-07-17T12:06:37.517809Z","last_seen":"2026-07-28T17:29:13.484696Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auracoin.click/11.png","fqdn":"auracoin.click","domain":"auracoin.click","tld":"click"},"ip":{"addr":"172.67.192.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://auracoin.click/","date":"2026-07-28T17:16:04.083Z","timestamp":1785258964083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"auracoin.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 19 Jul 2026 14:55:30 GMT","end":"Sat, 17 Oct 2026 15:53:03 GMT"},"fingerprint":{"sha1":"DD:00:DB:4F:B5:BD:A3:2E:B3:D9:EF:44:6C:45:16:F9:2B:1F:7C:0C","sha256":"2A:68:D1:2E:FA:37:F8:4A:C4:D6:28:5F:E2:51:5D:9C:F4:35:46:D1:EC:F8:B5:7D:9D:66:C8:4F:C6:8C:6B:8B"}}},"request":{"raw":"GET /11.png HTTP/1.1\r\nHost: auracoin.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://auracoin.click/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 28 Jul 2026 17:16:04 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Tue, 01 Jul 2025 12:23:13 GMT\r\netag: \"6863d331-10f0c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 2269\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbDqQH4IVGECaEi8bujnj5cJ6h28yboQR%2FEJR9t6C0dGUmjwapmZoyL0virDx7m48Nb%2FKeU7LaO8bovCVElAWr8kPgRypRXNJKFHYSGZuqIrQxtN5n9Ow1TH7dzr1d85Aw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a225878d8ab756bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69388\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69388,"size_decoded":70131,"mime_type":"image/png","magic":"PNG image data, 1158 x 380, 8-bit/color RGBA, non-interlaced","md5":"901827f361c64714a0e458fbc7c99f15","sha1":"a631fe19db81c5d0c95dc85474dbe8a768b3205b","sha256":"f8f2d5149f424b8d43efc206a9c490504ea93bd810327b3ffee0437f174dd675","sha512":"b50dfde73d2b7cb2a6df6a8898b3c232799178918538e0f8615b87943f9566518b6d0ebf1280662a34af2c4d09d6aeed67fc586cf4a270bf5fb4fae7be67e463","ssdeep":"1536:4VxKoTFx38wXcUfczfvMk/XCIwI6I+9OhqV+LjH0yJYL1Axvx:OxNTFxjMiczMk/CIwI679BV+fUd1wvx","tlshash":"07638da3c63d15b381736f36168156e8442c1aaeedff6411ebc93d566b3fbce2400869","first_seen":"2025-07-17T12:06:37.523301Z","last_seen":"2026-07-28T17:29:13.478316Z","times_seen":19,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-28","alert":"Sinkholed","trigger":"auracoin.click","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}