{"report_id":"67464a52-3f57-4aae-ae8e-1f79618b2c9b","version":6,"status":"done","tags":[],"date":"2026-04-21T18:02:46Z","url":{"schema":"http","addr":"ku-coinbase.co","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"172.67.169.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"title":"Genesis Global Exchange","dom":{"size":85198,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61405)","md5":"00df64eed7663ab63dc6fdde1aea9a67","sha1":"13e9b28861080f9f03a88e961c3d44fae62d1efd","sha256":"2b50afdf82988d07c90eb242a11b0e11e0228c716ef6f20dde7667b6f0ce541b","sha512":"3810eac267848b3c50d7145aa6a8cf67db9b11aba15124cf9998f072a003736cd5689280fb53f20fffb02c0eee7d2c7e90dc40dffc44436c26a1820e8af9290c","ssdeep":"768:O90KSoNPBS02oBIiP6RY3qYDaJwGuwux9C6wSO6ynwQekwLfjD1UlmMHDbZDJUBU:O9SwPBKi0uqoa7ui5fwnTjoRHA+jb3","tlshash":"5f837c34350a55b782b3d9c0e9b13f1a35a2f30ec0995d883abc919b1fdbdf0b462564","dom_hash":"domhash1109b9dbafd18956acca2386a25212c4","first_seen":"2026-04-21T18:03:00.696227Z","last_seen":"2026-04-21T18:03:00.696227Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ku-coinbase.co","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"172.67.169.63","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T18:02:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ku-coinbase.co","ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":49,"request_count":49,"received_data":5501378,"sent_data":22025,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"io.st223.com","ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-07","domain_rank":0,"first_seen":"2025-09-12T15:54:09.201849Z","last_seen":"2025-11-07T02:26:41.453044Z","alert_count":28,"request_count":14,"received_data":286810,"sent_data":5790,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ku-coinbase.co/charting_library/charting_library.min.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","size":10858,"data":"","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-10T19:13:12.487093Z","times_seen":1336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-MXlr2x9q.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9463708f034eac85b63208e572009dde","sha1":"021d14dbf2d13dd0645c92467a097c46fc64aa11","sha256":"78285b8f4ad839d231c2203d7170621c8d1b54c56cb404871d7c40aaca6dfd82","sha512":"11bf1e700cbd5be689fb4f9d7717cb5c1c452b4c9d6d549f4220bd6f4dff37195418f33afcdba197d745fec2547da97ed322acc71337f7d8d0e88d97cfb5767b","ssdeep":"49152:C35U9mVBPbjB8JLtAITkrLHiAcEXv4KlI2B2JxqlW3QWpDIlCfpa/0QPUvS8u1ru:7OWZjpKlfBKSCBf","tlshash":"b3d54cc9b645b02183f761b1407f040ab3393e49640a8468b6f9d9d62dbed99737bf38","size":2904919,"data":"","first_seen":"2026-04-21T18:03:00.867875Z","last_seen":"2026-04-21T18:04:17.860471Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-B9OOki9T.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3b9a1f115f03c9658fd250823cb4ab96","sha1":"2245821e39870957c8718aa9cc8cdb54974ea5e9","sha256":"546d8ebc8abe5bf7b5915155584d70e72ea51b5480e9a762e6e7946646f2e3ed","sha512":"7bbb0806d1a0f17ab4609c6f0601d4a4723f193e9868e1c16d282ea17f538d296224a8fda852fef182597e2c47e5ea515f59fac4dddd6b96d8b15647432c23fe","ssdeep":"","tlshash":"1821636fe922cb3ccc6e4448e50ab01011483f84a164d0d4d2ae0d4493a96b0fbbc73d","size":1156,"data":"","first_seen":"2026-04-21T18:03:00.777368Z","last_seen":"2026-04-21T18:04:17.837652Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-12T17:54:25.091256Z","times_seen":4451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c8d516b223e11df78d72d61e0fb94b3","sha1":"5fe9b060b376ad80e4bcb5023fb642cf1fb512c5","sha256":"364dcbe9d34d84443c2a5da9529849287d3dae5df12fd4cdf18fcd168e06dae2","sha512":"68c6efb734a78857325cbc3d99e3cafd4e10bd81023f705a845e5318e422827f9fbcaea3fe83ec4fa8e910868762641b34b094cade077b1db658187d3b660977","ssdeep":"","tlshash":"3001e1af2116746823579087caaf7910657130fd4006102577eca78df7d5b6e85cfb0c","size":732,"data":"","first_seen":"2026-04-21T18:03:00.87303Z","last_seen":"2026-04-21T18:04:17.856459Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-Df3oKn0t.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"30fe7f0bd5cc2f4cda628822ffaac9ac","sha1":"d894c594848b8b727807b733e26b7be0f5c6fddd","sha256":"b2681ef85b01a75ea84b5f5faf0c2383179a4cb8216bdfd4dd182c2c683d9a9a","sha512":"66e3fcb3dc74e8a35f50063e9e5769cc005159177be9a89c503c25c4af9e615edb2ba73c0f7bcfad6f606a23face02b85758d52839ace5e4d3844fc3e6b4976e","ssdeep":"","tlshash":"2bd02b0b18400ff989885cd4980e5ee9f229355c1b2c9d793807aaed43fec85d31e4f1","size":281,"data":"","first_seen":"2026-04-21T18:03:00.7601Z","last_seen":"2026-04-21T18:04:17.836871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e5080514f6e3143b82e0cb2924dd7f50","sha1":"50b25663636180d337c626a501a154e566dc2cef","sha256":"6958d6df8d088286034a7e6b728c5bf91143a379538f7bab4012311d49a9697e","sha512":"a79640b8536833597eea5775a39f9909abb8279b62b78aca9b832c14ae84ba4e5716bd6893a750ccfd2c1506411155aa7f51217f78dff20911246d9b6d805106","ssdeep":"","tlshash":"adc08cc4a0c62d201a06641094af24e890244027b04c5b02cce4dc482e220b88333ed8","size":145,"data":"","first_seen":"2026-04-21T18:03:00.876385Z","last_seen":"2026-04-21T18:04:17.874454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c51e92812024c4509b0b6b45c1b9b5ab","sha1":"1bc9d855f1f41e867d29634123b1f9be531c0e68","sha256":"8c2b197ea628d6a693b2a210d4b36df5dc482c485ac41cfad399e525666f6c19","sha512":"9cbd0534837b4b5574955a9af167a4c8c8732741368cdc3ce5f3cbfb827aff177fe0cba09142905f71ded2213dfe8fd8172fc0d25aaaebd82a5b4cefddb591c9","ssdeep":"","tlshash":"4dc08cc4a0c22d101602641120af26e4a024402a70889b128c94d8482e220b08237e98","size":137,"data":"","first_seen":"2024-12-02T16:36:01.409431Z","last_seen":"2026-08-12T18:15:13.610785Z","times_seen":234,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b32f232e7ae4ae68085095d65968d2ba","sha1":"8cefa51a840d1b8b70b197910f4870c1b7db5c20","sha256":"ff3ed1629b8e5b5e13f1278fe2e6a49b21edbcc25729a6a28acec8f5294f34ad","sha512":"fadfa8b1376653b06934c2e6beac3b953a66aaebd1b256653ca06a260c4c8c0510c24c4b2f53945849f179993240b2cec151d79b2630dfcb34c3874aebfc85de","ssdeep":"","tlshash":"1fc08cc5b0c26d001656641114ef24e490244026b0481b868ce4e8492e220b08233e98","size":140,"data":"","first_seen":"2026-04-21T18:03:00.881475Z","last_seen":"2026-04-21T18:04:17.876217Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d8a0b36a3bb5359d82373fd74ab0a55b","sha1":"109fcd2e9501021577ad657d5701aa40e771b723","sha256":"26b23c11a596c1301030aaa5e72296226d0b2c601ff7b24694d413a401ac9826","sha512":"ebb5fb5d0b9ad70253bc33b31f5fab9fa0efb74a89eefd5b900d6b956970a52ef306b8e62a73b47775339624aef7daf7f4779743b84394f80591c0ea8182f9fe","ssdeep":"","tlshash":"d8c08cc4a0d22d001a02641060af34e49028442670481b028ca4d8482e620b48233e98","size":138,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-12T17:54:12.2785Z","times_seen":2171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1e934bb4287defbcec7721b829ae497c","sha1":"74c6cf43097382bdb8e83906e465517c4e79c40b","sha256":"d549d2ae046c6bee8e20e83ed264bd68433ebc94f6d4a09c7da56956f507d031","sha512":"13bf9a9b3cd05d2c56fa747053ea879387d75a679dc105c0d4ab034d0f93977fb457f9eb59e85b3bf57f5132a3205a921f13a1accd233a4ea9c236119706a15e","ssdeep":"","tlshash":"ccc022c1a0872d1025823a2064bf28e0a03c482ab1085722cc80d818be230f04237fdc","size":192,"data":"","first_seen":"2026-04-21T18:03:00.885427Z","last_seen":"2026-04-21T18:04:17.866732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e5be9631cca2a6675ce179398b3e351a","sha1":"9b2a37943c4e35a8826cf391bd0f95b75cfcd2bf","sha256":"8c91c5df75e824d89b4718ae7d1f6210337914d1784bbd49733b1ba3661fd596","sha512":"795c501a73068b5054db81cc64fddb8d12f98bab51530ee0c27774962c9bf6d5cf1794eea39b398204be15db181222a9e2ff4423d107b78bc95584e9149b05a2","ssdeep":"","tlshash":"5fc08cc4e0c22d101643a65020ff35e490344026b4589b038c99d8593e630f08233ed8","size":155,"data":"","first_seen":"2026-04-21T18:03:00.886873Z","last_seen":"2026-04-21T18:04:17.86214Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f7d3b241a3605a2d7d7e411798b4adaa","sha1":"203cc129ec37858a9b34f4b8c00e4a386e12be50","sha256":"6bc319baa90ff97f19c457b6a22b0e0058fdea48a545ee3039c75af6598a8256","sha512":"484854e070a0a0c677fa5c5ea9e32079bf73bc0ad66f62cc92e70c2b4390ea7dc629a17bf73508bd8d802782d4409455abde7b8b7d96b69c5b5a1b01a6d2f830","ssdeep":"","tlshash":"bdd095ca508236000a01e411b47f25d4f0358455312c1703ef50d44c35525f0c237fd8","size":234,"data":"","first_seen":"2026-04-21T18:03:00.889043Z","last_seen":"2026-04-21T18:04:17.869389Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"afd6dadb9533533d8514ac548303e331","sha1":"0b297795e161099658da59b3912482e86732e56d","sha256":"e378d3c8bb137aed4116bdd0c560231896d500f4edbb80088c14fd8fb220c3a9","sha512":"0df2fd8eb6e505ad35fff7e135feb15d50d1ae87d9990d9fa472fb834b7baf48ca73b3e8850042c74584e60de2daa8b9a4a981e5bef460ab48ad5f8ddb5d03e6","ssdeep":"","tlshash":"6cc08cc4a0c22d101602661014bf29e59024802671881b42cc94e8882e220f08233e98","size":140,"data":"","first_seen":"2023-06-06T09:30:31Z","last_seen":"2026-08-12T18:15:13.615409Z","times_seen":1719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"e29cc4b739166fb0de3dd3960891cf94","sha1":"32bf92595a210346b3fa579ce87df4987f109d95","sha256":"d3b8857aaf83eedf7762ae5079cebc09d4924e13766d06fd68dbb746634f95e3","sha512":"854eba232753dfc9183d3029c72a8ec545156e6a966cbf69fbad7acd252632ee09b17f9666f3edfb4541f58d3d3bbfc9841f999c37cac48586997700b245e0af","ssdeep":"","tlshash":"7bc08cc4a0c26d102602651021bf38e490248027b0481b038c94d8482e630b08237ea8","size":140,"data":"","first_seen":"2023-06-05T11:50:58Z","last_seen":"2026-08-12T17:54:12.19838Z","times_seen":3434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a6721b3f5d47e7d0ae73de50597cd59d","sha1":"0db90ae469b93122834a8b85fdaa7154c2608d96","sha256":"591fcc9a7402426bea9796bbfc6456c173241c324a3f2bc28d09a7c94cca33bd","sha512":"e3ac72cd3a9e28fa5a95f8bcc9f6bb2348306e692c776e1b3e373dca375bed2d60e9d6d45766503ac00aee328655ed97fab7221aac617c5febae36fd7d07c4ca","ssdeep":"","tlshash":"1ec08cc4b0c3af101a82785050bf2de890284026744c5b638d98e84e2e620f08237f9c","size":152,"data":"","first_seen":"2026-04-21T18:03:00.898254Z","last_seen":"2026-04-21T18:04:17.875581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"5948bc3b90afab1829ab7ee61269f24e","sha1":"517e29a82521418181f702543be8ae74a3bf68b3","sha256":"14fc83a84c91770211dc352186f8e87ddc85e87c2dba0c80a159b45897b9ae2d","sha512":"05c079bbf0389ad341941c3e837aca91dc9aff681cee8da0b4560551ba13e6bbb76b01213af6514e6991e3369062870866a41e67e6d67a37038ddba3ddee7d5f","ssdeep":"","tlshash":"a5c08cc4a0c26d002606691010af24e49028802670485b028c94e8592e264b08233ea8","size":139,"data":"","first_seen":"2023-07-01T13:40:07Z","last_seen":"2026-08-12T17:54:12.239401Z","times_seen":1825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"0f40806f855fc503ec7fe0e2cdc6da5f","sha1":"ad59d99993690064ee6565eea713ee4c5260f572","sha256":"954bc1931a5584c910a5391a0e2c05ba7190f3c672433a85c162ac948a74a44f","sha512":"7ea9c1cffaf640bc7083f2306a134368aa54ae775230a1f1990c43817594d950ecbf94412ea7ab6262bb8add4715ab6fffe7579f85b0a1c07f6acc4f8207cd9e","ssdeep":"","tlshash":"1fc08cc4a0c2ad001a12649010af24e49034402770481b029c94e8492e220b08237e98","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-12T20:51:31.815282Z","times_seen":7226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"c0e88513b499aae066f13f6f0edfedab","sha1":"12fd9320e7be26e9257e2a1a39a698a5e2706292","sha256":"3ffd5a1fea533c35c122aeb0a36f3d4a37022e0a14c83167faeaa819b3ee8cfd","sha512":"36b57e74aa71e21ec5489637f206796e8b9097db32c59e4ffbbdd7eb11ce35c2f754178f996bd6e11abc560cdddd3af7cde3fc1847c1a455120b5c26ee4fb838","ssdeep":"","tlshash":"17c08cc8b0c6ad001602e45111bf25e4a024802770481b128d98e8483e220f48233e9c","size":139,"data":"","first_seen":"2023-08-29T11:10:58Z","last_seen":"2026-08-12T17:54:12.229329Z","times_seen":1671,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"d5b9095106d420a9e894653253889d42","sha1":"5906b05cd1abf9cf7939e6ebe29333665bee864f","sha256":"cbd2c27fa7ef3be0a40795283f56b2910112741c9a6771adc57d6e56d814af2b","sha512":"ab91769e0450984c12dcc12607d5b75e1cd75001b96fa71cbdb8036e3e606e79eb378bb0ebb9a13241663ca93a583d0cd17bc98d5f35a3ac62bb75e6d6be08cd","ssdeep":"","tlshash":"e9c02bc4b0c73d001602645010bf34e490344027b04c1b53ccd4dc483e230f08233edc","size":137,"data":"","first_seen":"2023-06-06T20:45:10Z","last_seen":"2026-08-12T17:54:12.199824Z","times_seen":1162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b26e7a9a44f8d5015e5a180cbfcc6ea7","sha1":"19682b4e491bdc984f495b40c03ae7defde51464","sha256":"97dc2506c2401b974e93af92ab45bbd3b572324376d5d9aeece027256844937d","sha512":"8a67f08f74627d2a4f42e4ee4300887c6a0968d12ba20e0dd73ebcd1f95975c0b10ba818033c7ba216af3bf3e9f65599d635330a52df914b2aee1d7b91ed618d","ssdeep":"","tlshash":"edf05c4db2601c009180ad01a4dd0423d6118733890e3d1eb6d82cccafff50f1d3567c","size":447,"data":"","first_seen":"2026-04-21T18:03:00.910974Z","last_seen":"2026-04-21T18:04:17.864372Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-BtnM4fgt.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f235152d5c2b465f18727fcb3a54de0","sha1":"10a30c7a2803bfac821fee1ccd930c6f55ad3c63","sha256":"e56c1ecf04923dae5e0a1ccb09b117496afb6f1348fd595abb88891ce7acafae","sha512":"0760599af3eef5a030f24ace4a339641dfbcb35a6f461438e1254a2cb979f06791501aefab55130599532692bda1d1f25fd413e4478e93ab27171a9f6647ab6b","ssdeep":"1536:VAN1Ai2jD4mwPBKiFu/oaFup5fwWTjuRHT+jbDP8fYzKyj:VAN14joagpFwWvupgofYzKyj","tlshash":"7193ae58f906d93af9b75824982d2420360d3fd9c1d84463b2fd7e421b9bdb87b4e728","size":95631,"data":"","first_seen":"2026-04-21T18:03:00.714312Z","last_seen":"2026-04-21T18:04:17.847505Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"55b2ccec538a4a456f187063bf2fdbe9","sha1":"c3e20cc3a79acd89c75824b061c643676b492046","sha256":"3a96d9fc3f32e8e385309549b3c3f575a2bab19e5959feff176550264d0e6f5e","sha512":"3f649719d4e90d4181fe3402515e4552e8c5f444e17f89c660117c55ad415bb025c19c4e496357691193135eb43f031fcbea511c67503df242e2c421c3c02141","ssdeep":"","tlshash":"0ec022c070d62c1126012908147f28f490344026b1083b02dee0c88c3da20fc833be8c","size":185,"data":"","first_seen":"2026-04-21T18:03:00.912412Z","last_seen":"2026-04-21T18:04:17.867547Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a5299fa0a4da0e77b22e1ebbd744d1db","sha1":"82067eeef1e0c9ffb1a52135f36b29b6dff51e82","sha256":"33a7a33a63bd3cf7b29e94ea386dbc9e98f28f03a704a20b6de0ca1c55651eaf","sha512":"49c1dbb307c89581a82d7d00ee0980109ad1677ae14e4943121eaeb2e93bf17f80599e5cd3ba61ef7fe28d8b112b51ee0785d6b1fad870dd172ce0495373e5bd","ssdeep":"","tlshash":"52c08cc4b0c37d045656641515ff24e490248026b0481b16cde4dc582e220b09233e98","size":148,"data":"","first_seen":"2026-04-21T18:03:00.914678Z","last_seen":"2026-04-21T18:04:17.87002Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"ccd150b26b19436bf630d3e55d886c56","sha1":"b1b0a07a69d04c4d3fd477f645bdf45520f62f80","sha256":"c24d2e1417d4808466ba562ca2a899798ce86afc46131750f60e27caee231f57","sha512":"10c397a1dfd5c74118cfe0e9e2ebd5eaff92efb8aa9790b59149d433b53ed52b58f56be0a4ba2700f418bf659071fe8e9a854c0b42ae798f805c1c77cb64f4c9","ssdeep":"","tlshash":"3dc08cc4b0c26e105a02651014bf3ae490244036b4481b128cd4e8482e230b08233ed8","size":139,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-12T17:54:12.271219Z","times_seen":3081,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"1d0663d39d873f0eb6f219b0801c983c","sha1":"2da20244f55d5a15a7a0695b8fd3dcedad9f3cd3","sha256":"67602cc36eb6e60ad520d10b21efd241ce5e573e9935a6901302dcca11f36ac5","sha512":"77e9b49e9a35d6d792ce3cb1b552b1c44ab4ae81a5ad37b9149421dfee57450e0346d0cfed0b1c131f2d050e3f69153fe1bc1da2848fd0351dfba6f15fd1e8c2","ssdeep":"","tlshash":"02c08cc8a0cb6e001a02665015bf25e4a034402a70489b038c94d8482e230b0a233ea8","size":143,"data":"","first_seen":"2023-05-08T20:49:32Z","last_seen":"2026-08-12T18:15:13.620979Z","times_seen":348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a03f6608759a627a755f01f1b4bc097e","sha1":"b0c8defac7ccd8b0cf4315d4f2b3476e8e0a3a18","sha256":"d27c81965cc0502abacb6127b83c271256c757fd388cf882b212cd3766ac8544","sha512":"927b009f62ba675e514304a83449c4ee4ebb7f35fbc4799a6e23acc085017e99068103f0ed6e81836d97f8f2ff7378ed8d8a8d405d025c839ae919d1b9340209","ssdeep":"","tlshash":"f0c08cc5e0d23e006a12641068af34e4a034406ab14c1b42ce94d8483e631f09233f98","size":150,"data":"","first_seen":"2026-04-21T18:03:00.918681Z","last_seen":"2026-04-21T18:04:17.868299Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"b5f33fe7cfed0a452edbb06c16e078ad","sha1":"c36f9c8f9b2de049ec5c1bb8ffa6649749854b52","sha256":"9fdb0bb00cc7ccc6f8d7d0615e96a0bb398af77e03eda64fb84e7325c5cfdeee","sha512":"7814bd7b35ae02096587203f38febcc10afdd8c603a84833fa21b096e5722acdfa9bc4bbde8f0e5263301f9051422076165ef31fa264a146f67820fb41992243","ssdeep":"","tlshash":"c2c08cc8a0c22d002642651155ef25e49034402770485b438ca8e8882e2a0b09237ed8","size":147,"data":"","first_seen":"2025-07-27T10:32:01.768148Z","last_seen":"2026-06-18T16:02:42.605945Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"f74ba1f697495b957a50377dfd92f1b6","sha1":"101f6cc6bef44cd4dd16f65fe26f8f93c751371f","sha256":"44e54da9be4cea4db527d7af553491bbf34e7f7a121dd147b29308afe3564444","sha512":"106f67a9aeb3c95da6cf60d1bb101ec1b621d2b9184d0a18ab496c9f80a8536f348f1ce30e1bf4d4701852990d0b3a6b82c58452c92409ba6f654224395d947a","ssdeep":"","tlshash":"16c08cc5b0c27e002e12a41120efa8f4a024402ab8982f039dd4d8482e630f48237e9c","size":154,"data":"","first_seen":"2026-04-21T18:03:00.92621Z","last_seen":"2026-04-21T18:04:17.870639Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/#/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"088a6aa95783926cdda35b9bd61df402","sha1":"6bcc7a91394c2ec7d95c5a259f70e51ffa50dc29","sha256":"5efd1243926a95339e0c10066db940873b88a24070c8c70285adfdad50e7cfa6","sha512":"ec608e74458bb6cb3e0aaa13c9b2b17d814407459c022a625fe862a385518d367444c170f2fa700db1196c2f7c94ca5b7197e27023ad87c03daa1008dc96b767","ssdeep":"","tlshash":"aec08cc4a0c22d005656641018af34e890244027b04c1b128de8d8482e620b09333ea8","size":142,"data":"","first_seen":"2024-07-07T15:46:54Z","last_seen":"2026-08-10T19:08:49.499677Z","times_seen":605,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/en-CeQsR7RZ.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d709bf8a9320005617bd45d09f747a7","sha1":"fef2fe04c344205f566a76103761bf5c077dfb2f","sha256":"4dd84eaa0aad4ad803ae25fcf311cc0a2549e39802a2b34e68a5a51b25b8be75","sha512":"f52dafe2f4936bea13deba4370e37b3ea46fe9ed8bdbf350ba12a254064c97a27309d4072de93e45b29ffcf8ff977a799eb9bda95f91ae396f4477bcdf24abf6","ssdeep":"1536:apo3KOOGI+rKNqpsuRH9IsAkeIo7hMo5DYtI7JzX/oIJ3:a4uQzBRHvKuo5GoJ33","tlshash":"c6531a4afe52187919e3037b74ce6a5065be04c18245c85a4eecc4bd43a2ffb6377978","size":66650,"data":"","first_seen":"2026-04-21T18:03:00.86204Z","last_seen":"2026-04-21T18:04:17.814845Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ku-coinbase.co/sti/api/notice/getAllNoticeList","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"POST /sti/api/notice/getAllNoticeList HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ku-coinbase.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ku-coinbase.co\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FX9VYvbpAlkhAbhQVmHcuP1iwcXfeWkd6INm6g7%2BPFjYS%2FC2hokYsosmktExTX6XMD%2FuQhR5hz0ecTrP1YxQIKaSilNnlUks%2FZMkXSW6wQ7UyhmVDLpv5b7fYZkjT6JEg%3D%3D\"}]}\r\ncf-ray: 9efe4cca5bb05697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2059,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5dbc421042fe68fb1ac9c819db6550cc","sha1":"38900c07442cc8657b2e52947530d0adc9a05d25","sha256":"d86d56017a40eb6541170f24cdf438cf84fa6088b08b71b11d4d10b930a2d0ef","sha512":"c6b6c2e9e361d2f0fba711fabe847de4fb33c9d87201aa530b006c4be350fd1691498468b2506e721ce490f193adce12a86622aae3c359ac6119869ea94375b2","ssdeep":"","tlshash":"72415a1e557c9eb9180599c728cdbccd965f1a87c660cc7086abcf2c82f55bb1f1b908","first_seen":"2025-08-11T15:58:33.815355Z","last_seen":"2026-04-21T18:04:17.849896Z","times_seen":4,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-Dk8E4Mk5.css","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-Dk8E4Mk5.css HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-230\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9iaD2fxH8KM0CKZjJxg18Kha%2BjCtIlD%2B9kPaeP3nNZjam%2F8ACi5IZnHiW%2FygEMvVF%2FJeenNB4l5SDqZO0fKWkQwK7q9MxHoHneb4Wd8uw5JyAB%2FcG5iN8qqfKdYg6jc0Xw%3D%3D\"}]}\r\ncf-ray: 9efe4cbebb3a5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (559)","md5":"310ec155989846eebb83511fb9b90452","sha1":"36c2e47704b5f60fc4c0714a72655c08bb9e6827","sha256":"bdf7ed478dd222b4673b3d5fde591804e7a492137d450802289118ac97d6ce2c","sha512":"953ae52fc8f4d3f3c7a26f33d83ec96ba19f7b6705f0ae30d2e9743f4e320fe1f409441ce64b4a6225d912d53227ec2e0ffa85b33dd03f03c2b3bf0b7235bc4d","ssdeep":"","tlshash":"23f0eb98e4981a3ebd36c4d1bd381795d040ac90e0dbfee5e94316b9c8cbaa3125032c","first_seen":"2025-07-27T10:32:01.614025Z","last_seen":"2026-04-21T18:04:17.814039Z","times_seen":12,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/svg/101/withdraw.svg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/svg/101/withdraw.svg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Feb 2026 03:01:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991370e-6d4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q61NbGtwR3lLzFHS6PzIaENGkKtEjYHdpJerqicO%2FUJHyOC1YehqB%2Fp1VTadS%2Fd3XWGzLMGHPIziqcShQ8U%2B5yqy%2BI7lamP0ofWURKlCh76ZvReK8KwcrLZ7jJlvdLpzCA%3D%3D\"}]}\r\ncf-ray: 9efe4cc7bb7f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1748,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"69a1bbecb6916e4769c68e7e9087f022","sha1":"800819d40c14d88c74d3528030452e30c40c45f0","sha256":"82655263ca5178ac07fabdf091635d12f37cb1648123e26f4621a78f0233c056","sha512":"4f18eb8532a11ae215a8cad7c4de2ad6706f7f90063d9c0947ce322c11c737c9c1684d5bd836cf5f8b86e18dc7d9611d704cae76cd860b4848f4cbb107c797e5","ssdeep":"","tlshash":"1c31487a236e4bf494c2646bdd1e61d322806dd74138f2c0fde767170b09076ab68b70","first_seen":"2026-04-21T18:03:00.703942Z","last_seen":"2026-04-21T18:04:17.841588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/platform/genesisglobalexchange/favicon.ico?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /platform/genesisglobalexchange/favicon.ico?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tveR2PocxqXi2FrN18GB%2FlIefo1zegm1F3SSTojJdMbayTJKKe9IktsgH5LdEoco8zRmUCDXlMtqpOMNRqqhlVlibb24qGVs6fFR6RqB3%2FWU%2BedX9ZqkF08IeUqzzIw24A%3D%3D\"}]}\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6991370d-86d\"\r\ncf-ray: 9efe4cc3cb575697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2157,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"851cd959bd7269f9c33ac8361faebf0d","sha1":"62bc2f489ea090e6827e8aa0589f7fc4451dfb46","sha256":"7bdaf80e5988b2f54754d6d53a840283e217af6fe2e3a0830527dca7e097f6b9","sha512":"e6da1e593a21fc63592f9e527a2ee6005f6cb7a548811a5d5498cac451f2ca7d741feaba8c7b2f20cf166dab4da615cc67059ae84ad653cbbb68c91fcadf3ed0","ssdeep":"","tlshash":"a4415e8e5649671d82c1d3afc86a624c653215f6c2e09cdb00f686de2ddb37f8dd4d81","first_seen":"2026-04-21T18:03:00.708017Z","last_seen":"2026-04-21T18:04:17.854283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/bitcoin.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /bitcoin.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2691\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65AWKMMaNgn1zMVVm5dd85No55JfV%2Fma3Gxg%2F4Gsk2%2FtebFe9X7r1sPmLJeSnwMZcJmtCPm1Pr5Q1bVyAD0RHmyEU2om6Qh23Arceqm%2FEG5uyYV3scEl5zJLCfJV1TuV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"2edf1ef8b333c40979976d1a49bc234c\"\r\nlast-modified: Mon, 31 Mar 2025 15:23:15 GMT\r\nvary: Accept-Encoding\r\nage: 5547\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc85bfb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2691,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"2edf1ef8b333c40979976d1a49bc234c","sha1":"d75ac12795b4a9575c874e1b190712cd62a87afc","sha256":"50a1901684f223bf26594dd3415b1e50f184820a16daa810cc5452911e9117a9","sha512":"f697a1fa0786316fc01003f72621920932e2657e4acf5a471e35d02717c42c9db5a12df311895a776a563dcae9b8fc0b6721833529a054b9dbfff4c52fc564d3","ssdeep":"","tlshash":"2b515ee60252267980d32438616db1e178beabb2c3021ded6c1444954acc4b62555cfa","first_seen":"2023-05-01T18:49:36Z","last_seen":"2026-08-12T18:00:36.97835Z","times_seen":25932,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":70,"dns":11,"connect":1,"send":0,"wait":340,"receive":2,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/fonts/NotoSans/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/fonts/NotoSans/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ku-coinbase.co/assets/index-DCygtVmD.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35840\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-8c00\"\r\naccept-ranges: bytes\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAHdBIaE1AFnZbGxyT17D0LUbH4iPVi4dGxrDdNWpKLFDSyQEYu%2Bjiibpyz%2F%2Bt7FJ3mTY4mZNvam1K5qSw6jr%2BgwpSx501w5UTrXKPEo85i%2FZ4KTO4qcUIQ1fRBHQIgKWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc8cb9d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35840,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35840, version 1.0","md5":"00427f129772e9f049050a50407952d1","sha1":"0f9e19ecc1d89758fd59d187f35b5a73e499eb45","sha256":"086bfcad0e112af1c9ac0cdea1744dfb11dfdda61906ceee1b32439437096add","sha512":"26478f6744d0875901f6c20b13f4303abe0d579ac2ffe02b74a5cee4a6af48b23a6d611116fc5f1f1b9aa6ef8b083a992e80aa1675e3a211b5332c480050e90c","ssdeep":"768:haAL1lUUxZ+mIxfVJ5tYBU+ma5q71y9SWeGt7UMaVJc2PtupNFtpXjN:NLEkxyJjUUza6ygxGWMaV67/LjN","tlshash":"c3f2f15f368e8e17f4d8691c5a667d523e022dfc9e30c622504f5efd3939320946ceaa","first_seen":"2024-12-04T23:04:18.137977Z","last_seen":"2026-08-12T23:15:47.246826Z","times_seen":2180,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":11,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/headerSimulate-DWJl-Rb8.css","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/headerSimulate-DWJl-Rb8.css HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-2de\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a7CSeoNvp6zR4lxcb%2BUlCPGnLN%2FANlxP%2BqzbOh3O06%2BcsOBlLtNOQjg%2FyWBkqrsWPFZLVOAVUxUbX2FZqwu8okm5jdhCKcceZcQEUox971bdPAiQkgCIPFi%2BK0OIae3WpA%3D%3D\"}]}\r\ncf-ray: 9efe4cbebb3c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":734,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (733)","md5":"92ef223d6032baae3d36f11525ec83ef","sha1":"3f135a6c83518bc4be79daf88c3e5c4c224fb076","sha256":"be4d0eafcf94e268d6a92ea0beed6d98994969aa9171ef3ed63bfeaf9ce6b560","sha512":"7f00887ed52e7042095c497552a9ce26086822c943da8aeb02d4661ec62a2b769cface0c8ea3063ad0ab164696fc21ccc6b36aa0f4c76ad22c1801fee465bea7","ssdeep":"","tlshash":"10019cb9ba78d0237cb745c6351899dc9a007da79092dfa4d2231971c5dbea71712a00","first_seen":"2025-07-27T10:32:01.660004Z","last_seen":"2026-04-21T18:04:17.853756Z","times_seen":14,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-BtnM4fgt.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-BtnM4fgt.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-1758f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpM8M74EpgUbSbT8D1GPOQNT%2BFDlshR6m%2B4wTvCJr5TvNIOPAbpOZf1FjZiGlxFXDQ5ybPUWsKdV5VVS14jDO5LgZ2ntKwQ7nezqRzm2XgcgZBkU7JjV%2FEGXnJ2rIEpSpg%3D%3D\"}]}\r\ncf-ray: 9efe4cbebb3d5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95631,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7f235152d5c2b465f18727fcb3a54de0","sha1":"10a30c7a2803bfac821fee1ccd930c6f55ad3c63","sha256":"e56c1ecf04923dae5e0a1ccb09b117496afb6f1348fd595abb88891ce7acafae","sha512":"0760599af3eef5a030f24ace4a339641dfbcb35a6f461438e1254a2cb979f06791501aefab55130599532692bda1d1f25fd413e4478e93ab27171a9f6647ab6b","ssdeep":"1536:VAN1Ai2jD4mwPBKiFu/oaFup5fwWTjuRHT+jbDP8fYzKyj:VAN14joagpFwWvupgofYzKyj","tlshash":"7193ae58f906d93af9b75824982d2420360d3fd9c1d84463b2fd7e421b9bdb87b4e728","first_seen":"2026-04-21T18:03:00.714312Z","last_seen":"2026-04-21T18:04:17.847505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/loopring.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /loopring.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 9119\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jmAmSx8bKW0hm5uICoGO5uNaRAb77JBGFPlcBsUIVLe4aKNQAvoJdM%2B4kz3NI6kN%2BcRPOt7TZuieQDsBUXMS6Aj7A1xZeqiRY6fC5AzygsOa1TW9kczT6oI71BV9tRJd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"f6be6b8cf09be4b3bc4b497d559e9dd5\"\r\nlast-modified: Mon, 31 Mar 2025 15:24:45 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc86c341525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9119,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"f6be6b8cf09be4b3bc4b497d559e9dd5","sha1":"6d1a3f231eb904cafc0a129385320dfd1290bbb9","sha256":"2cd8988b5c08e1cb9037741860a1648015428421d54eaaca918ec6275c0dbeea","sha512":"6a780ac8c212f16609224f7de298662affe57f56f20cd7b6420d91ae1ad933d95ba67c27580356e28dd18de221eab673ebab40b565c95a74360d0ca9303aa5f5","ssdeep":"192:CS8OuJdRjHeGDI9jHWklAq47TmXK4V4FLBN6iX:dBuJdRDeia2iAkLW6w","tlshash":"4c12aec5ddb8c15643b745be9c378d37dcd6c0369228dd904da878225ea05883fade54","first_seen":"2025-08-02T08:37:54.440601Z","last_seen":"2026-08-10T18:26:08.869024Z","times_seen":43,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":345,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/chainlink.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /chainlink.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 81070\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1rfMNJt5Vr%2F7NnvOs%2FuXvAafbkUXbk8zRyZaH%2FE7SWG1ntXT4LCzWMB5EyvOoHtcPnqIv5aR8Bk8jyjb1OxYhPIp7VOV4RulM6M0%2FUlSrQA%2BSGlOiujsneI7IRNQIcqG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"187cdcc72ee21aa64d50a8b83c53993c\"\r\nlast-modified: Fri, 18 Jul 2025 05:36:03 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc86c291525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81070,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2307 x 2307, 8-bit/color RGBA, non-interlaced","md5":"187cdcc72ee21aa64d50a8b83c53993c","sha1":"edcaa7bccf257f66b2287312f76d4abbeb32dcf0","sha256":"bb055c14cc2ca422e1c8f84952dbc94c1311752e74c8b7020959c7269067de52","sha512":"c53fc391530b5b78ead84a1dfc992c2229d0df03902c3a395f7289395df26c9d5d5eceb13b04f1face2598e40561e2ab2aeb52375553748ca1a855f00fee63eb","ssdeep":"1536:2aMdHTNMdTtc4Z5gfWI8JmsVzmOj0nXuyE3N+I4Tt6GKCXF8:2hJkTaYYWI8IspmEcXCTe6GK4K","tlshash":"6483f8a2b19fe9ded821ba39b17703ca7b777a3e35b482d084634df46f044706c59a48","first_seen":"2023-08-11T12:36:38Z","last_seen":"2026-08-10T19:13:12.463938Z","times_seen":143,"resource_available":false,"data":null}},"time_used":777,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":341,"receive":407,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/sti/api/common/getCoinList","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:26.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"POST /sti/api/common/getCoinList HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ku-coinbase.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ku-coinbase.co\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6sZOBGius1dbiBFdChYx2aFNMnBUhGpE2BjXVwGZkCika5cUl96co5%2BG9yBejjqvMomRqYSfo%2FknErAUCXAPodF72%2BL6Wm%2FgNV1hBh6ZjfNgEHaGM1%2B1Gmn%2BSZpRjxiGBg%3D%3D\"}]}\r\ncf-ray: 9efe4cbe8b385697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22718,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0cd2899214c5be9f4e41fabf677c03ed","sha1":"af9f17a8194d591c977bc9687e141b5d04df43c8","sha256":"41c452279a6776241ea95e9ab8fddc294d4a41df7b105ca534f1efdf34e4ac8d","sha512":"79fb1f443ac4f837d42ef605f351ae5ef0b09af9316c0beb11a22b5308d9d795ea7051916b1301f425ac08797892fd7a5b86b150753e47d4fb2f334e3f06577d","ssdeep":"192:GZZPoNlSIuwziOnnhBjFm7G6MCd7sR6MN/lSQbuISDXgFYsp7c6fAmgKKEejIBSG:/RhlcrVnrI21S","tlshash":"71a2f095113c55bdc47ad0d12fbf7d22529c366fe8c68d1a82dc9d8cced4ab06a0af06","first_seen":"2026-04-21T18:03:00.720102Z","last_seen":"2026-04-21T18:03:00.720102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/platform/genesisglobalexchange/logo.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /platform/genesisglobalexchange/logo.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 8719\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-220f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SUVEQS%2FoSlDNdydX2uSmfcVu80AVVjAa8Gq4KXiAPWKHjTiSPTLQ%2Fh0HKHSfa1iTO4bDGGbHhbbQoNvKZu1py2eEu9tLvAc4DtZi3Jib2UBnNv0FRlJkO7IBmrfh0HLqvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc7ab7c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"06609100d99738737033bd977785cde6","sha1":"585156328412f8c7ffdbb99c26cd4c09856b82c1","sha256":"964b459b9f1bfb83285f68456667769540b6a1f0b70fcb0f4dcdb1565183805c","sha512":"0e15a2c2d6c87e07a0b0f1d1dc9a78564fc80f7cb166c41eca9d29637dcb152398b833e367b5a71a9fd6ceccc3b9e5cbe7c9f767916d6f27f612713a731b51c6","ssdeep":"192:ZyRa6gSeTj1wvjUF+d7haM/j9OgFXxDZFab8PwnUGNspH0jgJq/a+0:ZDBLj1woF+5L/j9ZXxDXfIUJpmaZ","tlshash":"7502bf5b7cefabc36503c850742db102293c8a4c91b78e7ba4a47294252de4373353f1","first_seen":"2026-04-21T18:03:00.723534Z","last_seen":"2026-04-21T18:04:17.838957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/new/bannerB.jpg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/new/bannerB.jpg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50952\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-c708\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLSeaXlCZW622faVGSUdLExO3e8srY0i6ZNsu4GltKYNYGOTf3pfEqxkNCvNAy%2B30ID6jJcJrCw%2B7fqNo2JaIOGWNDHlKNBbYrAgA3Vh7pO0jkePN9WgGMfYaHOJzbyNmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc7cb865697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50952,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x400, components 3","md5":"6218047593829e9257483afc2f9b88fd","sha1":"04f8b1a27e10845ea2950a5195eb678dfb32895d","sha256":"e67c37df5617a42a6d5bccceae188b0ef1f0c8e7198b0702a4a87ba86e3c5974","sha512":"4e72d57a4162d4c29dbe14822253ca5aca07a7c4c5d860f33b547129f6a0bf60b5a1ced0c2a0c1c0c3bc609d4fce853ce14519b26789db50aa309cb0a507f0cf","ssdeep":"1536:N6UYxjdHPywI2YdXpfaNHkGCDn8sY1Iwob:0jxjdvWXxaN+zJYqw8","tlshash":"d5333c92e365db9a82ccb9ec40cd1abf343f58a460e1cd09df1acce71ab50761476a47","first_seen":"2026-04-21T18:03:00.729004Z","last_seen":"2026-04-21T18:04:17.839646Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1735,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1387,"receive":348,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/sti/api/common/getAllSetting","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:26.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"POST /sti/api/common/getAllSetting HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ku-coinbase.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ku-coinbase.co\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3n6JxGBO9HnUd1PVD9bRJYLpdgPblPHj%2Bplx4yE6ytOlN0bqLpYx8SR99JCJCOH5hvK5aeqlMCk8KrF9CkTGRqZiq93Ww1nzTDUf7DW%2FR%2F2XiR1Ho7odWuJ1bJmWMkac8Q%3D%3D\"}]}\r\ncf-ray: 9efe4cbe7b365697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13197,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (12650), with no line terminators","md5":"d6f25d3b48833189d5fd9b52e5ef7bdf","sha1":"8992e68395b504624c095bae70eb9074c3496086","sha256":"dda342a733fda1738a97f84a3e0ecaa0b3167dd1e8377365bacd79318e5978c8","sha512":"fbeddb9a71933bc929d66a69a0bbf5187c495e079d18715b2e2ac7417ed9d6e1faedfb759e83215b3c97694d9e40c81bc66e716c45a205f706e0d9bb082ada2f","ssdeep":"192:gNVerlLUYBMgSy9YfD/9eK206DOjLvf63RQBwJphBRAn19+cfZb2hEy5HytZFYTA:ViL6DOH06uDTiLP+Wc7D4MI1L1c181b","tlshash":"de42331830e8ccbdd98769c650e77a973b9c25b3e664ac0bd4eabf1c4ad6570480e10f","first_seen":"2026-04-21T18:03:00.731277Z","last_seen":"2026-04-21T18:03:00.731277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":617,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":617,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/svg/101/loan.svg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/svg/101/loan.svg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Feb 2026 03:01:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991370e-bc3\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8nutX66japgBgbvixoUE0T6D1sJcWZE5zuds5mIotiGiCJdqniz0lbjz4FLbLow6vtdY5bTOnxi3s%2B1QrbX%2Ftq8J9ncv0%2B%2FNDY6sqbA5OhYi5ADwczBFyt3sc3Ol8MDQA%3D%3D\"}]}\r\ncf-ray: 9efe4cc7bb805697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3011,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4593e9daac3cc42267b5fd66acaf0e36","sha1":"f066aaaa68adb1ce69e0b63eee3bb1c7e3ebfca8","sha256":"ab72107a860f97eab98b2be2a218738fc04e3e9cbc2c72d1d5a9144f3813510f","sha512":"b93615e818ae9791329277ecb79e842d7693ecca8ce071fb8752450301f8dcd0107f6b21b2b261714544ac7f522f7bff4bb3210eb6bd6a8320f02f88fe7d2a46","ssdeep":"","tlshash":"db510d5a6314db6cbd464909cc3820d27aa45087e1b4f0cdfff7aa91656e5f2e025e34","first_seen":"2026-04-21T18:03:00.734491Z","last_seen":"2026-04-21T18:04:17.821386Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/svg/101/zhibo.svg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/svg/101/zhibo.svg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Feb 2026 03:01:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991370e-44c\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7CmHUy3NzevJ2XXir3%2FxfTsCIcy2fZysUIJYytXLlGovUPJW94ZNixO3uShnsXsmfUN%2FoAXtfyDdlR3V5YatMNmSa%2BPdIPrH1Wx64DfM8AaL%2FyZPg8uQyDrzAe5VJQkzw%3D%3D\"}]}\r\ncf-ray: 9efe4cc7cb815697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b6bc583861bf3ca794202818331b2e80","sha1":"cf26e3fe6b95ec7c64208c697bb5d05fa7f2f4a5","sha256":"162dd32a092e5d85309b5e41d9cb96731c1f21bc9763702d567ce96930301cc3","sha512":"1227f104eacbcb92f4e645fb9a69d6d2d228deaaa54bc97a85644e9bc8538fd0ccf85755f5305a10492e92b1b1cb2e5fecb3ec6673c083fbdd61bd0c2bcc2dbd","ssdeep":"","tlshash":"1411128d9396dff9794a4521af38a092359454f6d2c4e4ccf8ef2743d7014b350d16a6","first_seen":"2026-04-21T18:03:00.740462Z","last_seen":"2026-04-21T18:04:17.842219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/digibyte.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /digibyte.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 25254\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aQxmeDe%2Bu%2BoHvga2RTu82AtG9nbbMMSdtdDFn9tzcdzYVsz%2BfkVy74VY89BH7kuKuNKB8cWBf5nXwzdNY%2FNMqJSx9toJUZvFeKEwthQ%2FpWgOo1t4AC60t4r8q25k7P%2BQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"55fb1877ccc3ea573dbedca64b7eedff\"\r\nlast-modified: Mon, 31 Mar 2025 15:23:50 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc85c141525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25254,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"55fb1877ccc3ea573dbedca64b7eedff","sha1":"86c42625c3d8038710130867ff8e12ed34fed70a","sha256":"1928f78d45ed70947bd95e890fd20f4d325b782db6de09f3c54277213bbdd1c9","sha512":"db8fb6ff1db92ff22df4ae77222392adf4397959a60f04931311cb1f2d490d0d0e976f890fc129e7257cca0332891b939c442fe8a4cf11609ce7f5be2e4df059","ssdeep":"384:Px2R3mpdWnFwYLYDnm4dVGd7z4ID0G/hywpB6+Y+F6mqrlOabg2eHTS6:UW+FJYDpGV0+lB6uF6mqbkHZ","tlshash":"8db2f2686d821e4895d5fe199f3580834ef4111653ecbb9332729eee9342bf207478c9","first_seen":"2025-09-15T16:45:42.801565Z","last_seen":"2026-04-21T18:04:17.822235Z","times_seen":4,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":347,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/financial.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/financial.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 784\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-310\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w11UQy9oXoY%2FQpWMnYvGzNSj0rp91hpQNFcqqS5si68lFphgWpNYphqDPoAi7CB0TGv3TVVNjpcC%2BwP7g%2FXr99HjXqqnv2t3DGEqkBf4pHIjkR8UkpDxMQhGH%2B20xD9YRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc89b975697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":784,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"19154533b233e7a8d836c55d57165033","sha1":"79e82f076eda4be14c1e56e3be6aa491607e5d54","sha256":"256f9e3bf6fc881ae8aeb6d248325db9052f1d4cff6f96eee406fc199eb50cc0","sha512":"9e65a255678d151171890a33653739f942ddeb6e4dce4be74dcf6b865e893ee752f5924c1f96fcbd625b43040afd93b152b988b0cb50d5a838390f8a84061c36","ssdeep":"","tlshash":"6c01c5b5eda3b778f206eab640e80b1bc13d8e944252ca0f1ab988808421036a861026","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-08T14:56:05.453688Z","times_seen":31,"resource_available":false,"data":null}},"time_used":1381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/charting_library/charting_library.min.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:25.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /charting_library/charting_library.min.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991370d-2a6a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3XilBjYqsI3F%2FFf%2F5lbzRjWsuZGa%2F7iFgguLNS40Z69C%2BVHHj6PHMsgEa33cGMTQrKv7UaPjF1XARK%2FsZdMcw%2FOi%2BQGWghzb1v8P0BMj1Xn0WdCDPlS481EIQTLqj5P8Sw%3D%3D\"}]}\r\ncf-ray: 9efe4cb29a295697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10858,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10857)","md5":"8573e89d9ec535663d75f21b1f08109c","sha1":"a8d9eea0b157ceeffc38d4254e6f6abc9d697d10","sha256":"cb0c6c9f1771d252eee7caa043bdd7cfffbd52c2cc4b18b7be7c4554ed069151","sha512":"55d728fa1e0682725f94b17387c6790792d3d34b43652a00097876118575bd6cefa20916d80674519005d72f20ecbb745e9645516c056e6f9bb6691d5efbcb33","ssdeep":"192:9fdWSo7ktFUnoBelr6lw2LfnzuIQPlaJ1i10K+Ei/ISJhvHIheu5Ph3Ffam:vWS2ktFUnoIlD2LfnqIJimK+5/ISJhvu","tlshash":"6e224f58ed2478720acb54f0427f180f8239e278d84944ed3cc4e6ec59fd44a6a6fbb8","first_seen":"2023-08-16T00:37:19Z","last_seen":"2026-08-10T19:13:12.487093Z","times_seen":1336,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"ku-coinbase.co/sti/ws/c67cbce3-cf2b-458a-91d7-4e963e3c2601","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:26.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /sti/ws/c67cbce3-cf2b-458a-91d7-4e963e3c2601 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ku-coinbase.co\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: FNMH5Ax7eG+umuOc/MZiBw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 \r\nDate: Tue, 21 Apr 2026 18:02:27 GMT\r\nConnection: upgrade\r\nVary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\nAccess-Control-Allow-Origin: https://ku-coinbase.co\r\nAccess-Control-Allow-Credentials: true\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: LlbEHUk1UvJ5AkVQA0kdSNoTadg=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mpXgIsxQqZiuwSxh1o65Dq1jQX5XG6Q0MuHuoZPg9%2FtNYKWWS9NutMoq4fQiVpE82y6VDq5L0KSFyhPsrbPnJUbfvvW0SyTE0Uub061m9%2FX9Vt3CZOhBlA8oaPJ2aZxyDA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9efe4cbe7af94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=455\u0026min_rtt=419\u0026rtt_var=185\u0026sent=4\u0026recv=7\u0026lost=0\u0026retrans=0\u0026sent_bytes=2355\u0026recv_bytes=1199\u0026delivery_rate=4618819\u0026cwnd=52\u0026unsent_bytes=0\u0026cid=fd76afc5cc29faeb\u0026ts=665\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T23:53:57.491187Z","times_seen":17862611,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":0,"dns":16,"connect":16,"send":0,"wait":654,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/sti/api/user/getCountryCode","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:26.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"POST /sti/api/user/getCountryCode HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ku-coinbase.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ku-coinbase.co\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCVL9pSpZQYbNK9gEXKjthpzG7LBbew%2F70bKZtWhbgiztwe0PyWOPT%2BSyjLYc5q9VocNAE9yhaeuPmP8SBvLlaE%2BSnhfSEsTBmg8mVh7j%2BEsIGOvTF6ZT0it%2FaETbPFEFA%3D%3D\"}]}\r\ncf-ray: 9efe4cbe8b375697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22039,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (20250), with no line terminators","md5":"eec83e55760ca6953daf26f9b2575158","sha1":"616127f205014fa0d9ab5c219c21be8674a9b558","sha256":"3d9fe61666e4211f1e3662fc5630ed7567a54f4a10cb7a70b1382a897efef32f","sha512":"d41c6b21521014e59d902ef46728dcac9533f97e040ebe00845fcc96f36a9edeb30e4625fa26753aa9ae3b510ce81c7099f457843a936d24fe05401904c34883","ssdeep":"192:/N412Kx/U7/cLVkL/GWJfQXvAYLB4lVDiZ6OU1L2cCDQHk3jnB8LWlAQnZU/6Eun:/NCuXcvAz2Z6UFSy2WQ2gn1C","tlshash":"1fa22e7e650cfd6dbf24a6e3a04b27390ab5b1bd06c85c1bd5cc9eb1f2d16a92431530","first_seen":"2025-07-27T10:32:01.651204Z","last_seen":"2026-07-28T19:34:47.896087Z","times_seen":56,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-Df3oKn0t.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-Df3oKn0t.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-119\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Djs3oeVUmaTils9L7RlXaqskIBRhvtUeNqsmmccDspxc2I%2BwNqgr%2Bl%2BbWOBmsOz1goEi5dmzhkUdICr7V6nyUhcIA0xgCzp3lpLo9b9oDrSeRmJFUiJae6QxTkyveL3VAw%3D%3D\"}]}\r\ncf-ray: 9efe4cc32b525697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"30fe7f0bd5cc2f4cda628822ffaac9ac","sha1":"d894c594848b8b727807b733e26b7be0f5c6fddd","sha256":"b2681ef85b01a75ea84b5f5faf0c2383179a4cb8216bdfd4dd182c2c683d9a9a","sha512":"66e3fcb3dc74e8a35f50063e9e5769cc005159177be9a89c503c25c4af9e615edb2ba73c0f7bcfad6f606a23face02b85758d52839ace5e4d3844fc3e6b4976e","ssdeep":"","tlshash":"2bd02b0b18400ff989885cd4980e5ee9f229355c1b2c9d793807aaed43fec85d31e4f1","first_seen":"2026-04-21T18:03:00.7601Z","last_seen":"2026-04-21T18:04:17.836871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/new/bannerA.jpg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/new/bannerA.jpg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 55764\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-d9d4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewa2ZvhXWbK2JUuOgEeH6PohczfMacL8w4t8tk4wm9JBEHXR3cFNFxN1c2jU7ZG2FHhejEhD9Rjmj6ZXWJuFHAvvTPREEFRMA2xfDvkxtlv26IKnO2fyjnGE2LHKvRnWHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc7cb835697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55764,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x400, components 3","md5":"8cccc0727a8e4a7c2a7f43ec5a6850ee","sha1":"b4c8d75b87f74204f43788658eb5bd344960841a","sha256":"3794a1c08631b0cceeed53c98b4962698759514d681141d6d861963bb9e5945e","sha512":"32aef9d7732836ddb3bc4c239cc161955beb302c8f3cba2d29e8de137c823a6b44580608f6599af0908bba8833693eef3fe48d3278eb71ae4ad784acbcd94f18","ssdeep":"1536:NTSuHW2jBVLDlkgSBpT7Mt9WvjuMi7b1sB/:LHVlFCXpM76jw1sp","tlshash":"ac433d66b2c6d235134b833cd83d1ddb9eb444908cd8cec6d6174d3ea94baaa9b03275","first_seen":"2026-04-21T18:03:00.763231Z","last_seen":"2026-04-21T18:04:17.851041Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1361,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/ripple.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /ripple.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2274\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RR6gK3ib6a631PTu7Ea0%2BMfutnoJIuJjiPTEEBN0tFQsDM4rlX%2Bb85gvS4qYEOmUUKX%2FW%2B2CFRsJbbbJ6ZSSXDG6mSjiBdG57J8IQyNl%2BxN89qM%2FOkGy1Hu5uQ%2BW3Hfe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"674b0999f6083084a2a4b1d8b20f3bc1\"\r\nlast-modified: Mon, 31 Mar 2025 15:25:33 GMT\r\nvary: Accept-Encoding\r\nage: 5545\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc86c371525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2274,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"674b0999f6083084a2a4b1d8b20f3bc1","sha1":"8d14a526e83604e323723b4d25f8f8066f1ede70","sha256":"632f9cacb6b3fbedece774a8d27c436f37dc359de3bb0872ea19603b70347708","sha512":"4c04d137c2448c0d52a4298c858f95c58116c1d77e75899f5acdf6bb61ed839dbdc99fd5556eb63793b81258de40e515540acaeab007da76664476c9be2e514f","ssdeep":"","tlshash":"cd414bd7c53300ed9128e735b8c3ee819c00628d183bb46b89f5ec60b2346d31a53a98","first_seen":"2024-01-05T03:21:29Z","last_seen":"2026-08-12T17:51:56.894159Z","times_seen":896,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":62,"dns":6,"connect":5,"send":0,"wait":346,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/binance-coin.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /binance-coin.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 12869\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8rXVYStLufY4M6G4rD8bD5XX1%2FYqONR3E6KmnaUsJP75zB%2By6393gf%2Bvak50HwfrTLb20KwFC%2F3L12PkqvEOKRfAc5JQ3UOm7jvxcwFffoEN8Slveu%2BTe7hV6FNlieI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"a533eecdee5a789e7d94f8f79f95d588\"\r\nlast-modified: Mon, 31 Mar 2025 15:23:13 GMT\r\nvary: Accept-Encoding\r\nage: 5545\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc86c4f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"a533eecdee5a789e7d94f8f79f95d588","sha1":"f1ae6df3a9baf6dbec969c6d1ab622850a282895","sha256":"ea257fac91d01858b7dfd0361f8b480caeb3d57b080570ef4b4f41d5d7e68c90","sha512":"e46ca5c2239c89c783805b1f4e17664118e57e95dff6513b8ff917aaaa763b922c6286b48d0e6daca644ae30c3e821674dade74a056837865353b451c50d074b","ssdeep":"192:3GSu8nGgOCcrSaheqQThcTrOcOAasSqXzcxfuZWfWOKJ6mVgCd7mOOwRB0IG:5/POzrSTThcTaPAaFqXzcqG6ekvP0IG","tlshash":"1442bfd83898c3e455233e69d56e4c138122251a66588517f22a2b7dbf03af27fcf1e6","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-12T17:51:56.947342Z","times_seen":937,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":58,"dns":4,"connect":18,"send":0,"wait":358,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/usd-coin.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /usd-coin.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 11982\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUGpMqztAJ7MHpMH59zGaUSMWFbZiAC6EYYkJ7gPxA51Q42pOWT%2FsppTwoo7JMxK29Ws8jG8FfWHHqqiyM4IoF9t36jI96sRPjf89ZbHPsVKkzRFTPx34FmaxLxJMzJK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"190b493fb7b46d34ffce08977c9440ad\"\r\nlast-modified: Mon, 31 Mar 2025 15:26:11 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc85c0b1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11982,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"190b493fb7b46d34ffce08977c9440ad","sha1":"cc39546ca0be2103d25ad0566c5b1a85dc868045","sha256":"f65ea1a4d3a2145003bdff208815186e307bfa28f607719cfe23619eb0947ab7","sha512":"a9711883bdbe3cdd869c7beb9bffa914d51125a7a723c4de256acd820d36eef3f54fc5e8af515c10cc7941c28e8ec3ee42943cb31914a1ca7166564970056e9c","ssdeep":"192:ayxQ0ZUzIx9hfTLf8iyKmXyI0R4I9gTkoa6bPrTxZqf09/9xX1EpqWhg+YUrrCXg:BBT9h7wi2OR4I9oagzTxZB9lxF4hgFUz","tlshash":"9e32bf7b1371c1e03965e36c995164b9358aac0fb4e0d5345ee172d83b2afab07a8387","first_seen":"2025-07-27T10:32:01.602974Z","last_seen":"2026-06-18T16:02:42.457345Z","times_seen":60,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":350,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-B9OOki9T.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-B9OOki9T.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-484\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BsS%2F5tADMRuGBXvwpjrkU2C5lRt2Es0uzbg2Kr0lbN%2FGhvUuxi%2F7SsW%2BzOu%2F%2BfOs5YPUqemu5R7d7A%2BXKkxX0L6MMO1quqimUdmHE9EOatvrU%2FMMwJ6eRBdJ4W8x159XA%3D%3D\"}]}\r\ncf-ray: 9efe4cbf0b405697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1156,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1155)","md5":"3b9a1f115f03c9658fd250823cb4ab96","sha1":"2245821e39870957c8718aa9cc8cdb54974ea5e9","sha256":"546d8ebc8abe5bf7b5915155584d70e72ea51b5480e9a762e6e7946646f2e3ed","sha512":"7bbb0806d1a0f17ab4609c6f0601d4a4723f193e9868e1c16d282ea17f538d296224a8fda852fef182597e2c47e5ea515f59fac4dddd6b96d8b15647432c23fe","ssdeep":"","tlshash":"1821636fe922cb3ccc6e4448e50ab01011483f84a164d0d4d2ae0d4493a96b0fbbc73d","first_seen":"2026-04-21T18:03:00.777368Z","last_seen":"2026-04-21T18:04:17.837652Z","times_seen":2,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/litecoin.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /litecoin.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 34858\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtgYwKdCVmDpWCJZavaPf%2FsfLJ7kXMfFK%2Fax%2BSu3Z17o8KU0Wi7jt%2F4pBlacmU7cgYGNNyWMga9No2thWeI18Y44gxGPfVpOFKt7oUuAjqGMdbJ5abJTH4WCbopF7bHH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"bb27c369a3aa54d9c1f8e59e1706da48\"\r\nlast-modified: Mon, 31 Mar 2025 15:24:43 GMT\r\nvary: Accept-Encoding\r\nage: 5545\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc86c3c1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34858,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"bb27c369a3aa54d9c1f8e59e1706da48","sha1":"7e1b9677305cad40b686a5a1077da57c4f6cf07f","sha256":"e691621963c6de60c05c0e91cf7c65cba4191df054a3b1bd5becbef3a426f9ee","sha512":"4ff3058897ecbcee5464eb954955cc40bad7f411ee86f21dcbebe3d02ee45410b42f68c8e3a22537ef530c65c9bc9960fb36134aeced2dd36688a21c0cb02415","ssdeep":"768:FAbT/SSUokJQD9Wvnwoo2hzabJIqRw/VH3+WFxL1nHLy:G/RU4yni2kKl53+WbBLy","tlshash":"3df2f155ed69527406b90571846e302ca4669a7ebdceb11bffbd67302b3246f008e06e","first_seen":"2023-11-19T03:02:17Z","last_seen":"2026-08-12T17:51:56.953618Z","times_seen":896,"resource_available":false,"data":null}},"time_used":679,"timings":{"blocked":60,"dns":4,"connect":1,"send":0,"wait":342,"receive":211,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/dewejfvvspdfj.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /dewejfvvspdfj.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 5776\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzsQnAxJhUY2TOvrmj6pGnMzziuFNksRZMMMZVFbbxkZ2YjCgxVgbArgLJpL12Kl0kytDsv2gjRbzGFVngReUYqq51Unm9IKcqUmN3wAa5DzKfA6Uj5aoDfBn5qiO8AV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"86483ee9938c0e7d0d73a08d1277d685\"\r\nlast-modified: Tue, 17 Jun 2025 18:34:51 GMT\r\nvary: Accept-Encoding\r\nage: 5545\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc86c3d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5776,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 225x225, components 3","md5":"86483ee9938c0e7d0d73a08d1277d685","sha1":"45c64f6045d70385c468d0cff0ac2145d2e1845d","sha256":"5a347c1540b5207e41e97af6661493bd63e2d8b565dbf13e07ef6ebfaa793507","sha512":"b982c6ae5f648280c423154bbf63b18ce1df486ae7a3de765c49cbfb4f82d863c7671efa62c78365556e4e6ebb95970ff9be8ba0f97d6ca62247a665e19d2a9d","ssdeep":"96:DVqAkcNw70/K4nm8PA3Lx/vVyb4+7VDmRD8rmaF+WRHK0SwJ/bye30gtIhqFxa9B:ecNw70jnD2xCxmR0AyHK6JGs0gahqXan","tlshash":"adc16da76910f91fccf0cb3fd60c269a92685503641b93a5ae1212f37b481eb8f5a356","first_seen":"2025-09-15T16:45:42.813548Z","last_seen":"2026-04-21T18:04:17.843403Z","times_seen":4,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":68,"dns":14,"connect":4,"send":0,"wait":346,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/common/customerService.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/common/customerService.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 11809\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-2e21\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SVeZQT68E2rTBC9FEbK4iJazK9Mn8vlQHIupV63vHxHcTnni%2BxYed%2BK6suyx4E6SwHm4mwCqjBDI9iWGIOHgRdC4Tv%2BKytjfKW%2BnZCxnNTyk%2BWIYZyAJxyoG%2Fg4aPyChow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc85b8f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"cbcf30e520bbc1505e86e918e93fc27f","sha1":"936ac48660872758dabbd6a6c619012fa3628548","sha256":"10282e2f4bd3a60153021fe954ad5ef7aff79302232c2bd37ae46b780be6a9d9","sha512":"c26d0cdce5dc131ec425440005962ee8ec3ceb49e200df314a504265be1c82bdea858edf7b05d051325bafb100ad8e0c4b3226bebd30259bff9af22758890a9e","ssdeep":"192:nS8LK1mcb9xjuLQDADGj3NiPhVDI9dwIFlZPQXfUGE9qM7+37l:Sx1d95sC+DI9ti8GE9cLl","tlshash":"1032bf19b09703a7cd5ccb2e42f38d765a94620ace5c44221b86f7af60060f1afda656","first_seen":"2025-04-05T11:30:41.048942Z","last_seen":"2026-07-24T20:44:12.011403Z","times_seen":309,"resource_available":false,"data":null}},"time_used":1425,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":1411,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/home.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/home.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 1321\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-529\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DI7k%2F7pUZC6lg7jTwuKc8REDqLM1niVmDF3ML4itmo4VuK776lIO3F07VbU5u2%2FsLQnkrUMosIuQb%2FKPJSTyDYLGM%2FiTZzHFtMRlejOwG91X5%2BdmQOZdvNqDFq3wXgI%2FQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc88b915697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b86773b6aa18c4a58d9c9879ebba8892","sha1":"cb93b7a65e61e1206a92c01b63e9484b09885a5c","sha256":"1265faf359314ea74da3377a409087910279422db110469598b5cd514c918b91","sha512":"b2141ef8ef08d94acf6e764614667adc6c5893f057d55035d9a76c66b3ece5760ae98a67f500d8af66351a3ac6b7e254a65f21ce8ae6565e222bc89f3af61bd2","ssdeep":"","tlshash":"d321fbc2b3414eb836baae955312dc525efa7b6003198d8d3d212a67cd82311f962289","first_seen":"2024-08-19T20:18:19.617789Z","last_seen":"2026-07-23T13:38:34.312033Z","times_seen":117,"resource_available":false,"data":null}},"time_used":2373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/tradeA.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/tradeA.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2870\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-b36\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8fTuoPQ6gIfF3ndCZeFWJyS4pE0vlLWw6Ex%2BBLRnmEPEoYGkhDi53dUuv9HuPxnXvMT3JQvcAf7%2BXIxbZaN%2F2rR%2FnD78HL%2BsehI9knoMfwOCOGj8K%2BmeGurq%2BctLgXSuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc88b945697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2870,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"c2aeb052e880e3b9816bdd5f88e94b2f","sha1":"d5af682e6ed74ca40b59f779e711a695bed3600b","sha256":"cc6ef1908d6f206c7e512bb3bb4acecdc4bb60b3ef5f35c4fb65df8bab5ea3bd","sha512":"e44d89a7dbfa4d6f91b80a8f17a9b7bc19a54cda38882c42756f75ce70508694457b9aeb241586d4427ad9f76203d0bb000b4791ab707855602fb85e8dc6d1a8","ssdeep":"","tlshash":"f051d88ce662ee00655ee605f8f956035633aac0d55698eefcdb891368500ffca0c2d3","first_seen":"2025-08-11T15:58:33.835771Z","last_seen":"2026-04-21T18:04:17.84452Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/sti/api/common/type/defi_activity_type","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"POST /sti/api/common/type/defi_activity_type HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nlanguage: en\r\nlang: en\r\nContent-Length: 2\r\nOrigin: https://ku-coinbase.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"{}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: application/json;charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ku-coinbase.co\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CiLbiJ019nE1mZhb4q6xubbomNmarvZqrkOiKLrG42z6Iu0xvbaIFbgM6EJH2%2FRXw2aiA0pCPfeRozguaABcFnoHRW8%2FHST9pb%2Bp1JIdh3UJupz%2Fxjleo%2F8Nvguk%2FkUUqA%3D%3D\"}]}\r\ncf-ray: 9efe4cca5bb25697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"377547c8f767a60f400a02dae63eb33a","sha1":"90cd91d3318010114e6daa8f9e160beb4b0ac382","sha256":"3236498fcb921e4ac10b93fef88ecfda5469b4e2a3be7512090865a46e87d800","sha512":"a0116018b798349f620642b15c673ebf74df3b2a7eac2c1e0afc994b91ac5333b2301804efeff7f64544fd95553001b4d4b19a17c8b8ce7eef63218a74ea14c8","ssdeep":"","tlshash":"01f02814393dcebf095f65d745ec78183adc152b94e0bc60a8ab4f3c6be4171188a21c","first_seen":"2025-07-27T10:32:01.636668Z","last_seen":"2026-08-12T17:51:56.964321Z","times_seen":183,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-RJMP26cC.css","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-RJMP26cC.css HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-8d85\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BK2JfKz6qH04cEvsZUHIk3IUCEBhlAKhxB4hLbytbEtN5%2BHZyVoSwIJkoKwS1d7CU4HxYJyZGCphE7fqiShKIdpsDsR1kHsZRFtu5EKAVArlQk%2BhhvQPeoCi0x5rf7uv3A%3D%3D\"}]}\r\ncf-ray: 9efe4cbebb3b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36228)","md5":"f3130ec0b7fba0d98a6dc4dd11d6cd5c","sha1":"e3c9b6193900e6fd8e08792c48f916ed8d343a6a","sha256":"16948ed42342a8b6005837619305539571c880a8d42fc79f5e7d5d3e3de3892a","sha512":"7a3c2e5810a7492500839d6dd80c788ba07ab8447a5430c7168fa3277a74b5d24a6720efae9f0a82657ba841891aa88ece1f3492c7c37475d2c04ee99098c447","ssdeep":"768:gI7kgpFXHvwsX5Ebn1Q5rsvVC/0ZqJKYNYnzH6Br4eO2KwHw2kst+wky9/QuC6ec:0gp5ib6Xh","tlshash":"fbf2c66db29c2135e837d2527ea8e68c6018bf72d1875ad5e2536f220ecf6e3273150d","first_seen":"2026-04-21T18:03:00.79066Z","last_seen":"2026-04-21T18:04:17.823882Z","times_seen":2,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/aavenew.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /aavenew.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 19535\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQgkbRwTkGdWUO%2Fq9hrZnyXb3q1nG6vUsKpkwNilqR7dC2MwMMpRA%2FEViyX13yyLHhKm1WGXzxJmQlNIp5C5Ddb82Ovey54%2Fp3LGnMqRcQUTLdDS5bviCuWoX6LBaffU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"45bfe11393973d84af465eb75a05b75f\"\r\nlast-modified: Mon, 31 Mar 2025 15:22:49 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc85c0f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"45bfe11393973d84af465eb75a05b75f","sha1":"acb1b81569873ed41a4778fa201b80fafda20d8f","sha256":"9327aafb1dea02e101183b82ad9aaac014853ac8f620bac8ba7f30b283cf3db1","sha512":"b1e622b23e511edb55c5be2720e2583b2b0c80cca0e79395ee35bf93a51d49f4253307bda0ee57d1e41fc9cacf5762052bd6a070337d8b1b11810fb7bb37d63d","ssdeep":"384:x2QhbwmqcE8Q/sz1ipkQupVkijuVXPJ4kenhXzcXyNKnV6gqYM:lhY8Q/sU7YS9PJhmAXdndM","tlshash":"8b92d087af3565078ac99a4b625d56d0f8931cc77b800d970ba264f3ef7230f879ea05","first_seen":"2024-08-20T03:51:25.282305Z","last_seen":"2026-08-10T18:53:05.171237Z","times_seen":34,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":341,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/homeA.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/homeA.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2212\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-8a4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45an0ng6vBf7%2BfP8drk3BbDWumDIl3y9IaGXV30D5YzPsTkJNAxIm2He1L%2FCtKwr8OKGZUjrlkpUI6qYPBWm0F0IHIlbTsWXz4%2FHXFHq%2FSKxWzQ%2BPzb17fV1c5Du8%2BfQgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc87b905697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2212,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"b36418515cd7db5164eca7d3958033f5","sha1":"14c66485b969623d99e3deef265498b6a99f195f","sha256":"7ed9c13b57dc9aa0501e381ff01c72314caefb310a8ddfed19a71f3e2ecf9af8","sha512":"9ea66ff1a447677412a916ed05509c9ba22288511508ac119f6cfefdab7d5f09d30fe487e3a57ebd319857d9f50db9ba954cf09097707f914266110c6e57727a","ssdeep":"","tlshash":"8741a746f530b810d61ef9556ce50167a6371ba0dac474e6bde59a2345302fac5091c7","first_seen":"2025-08-11T15:58:33.747829Z","last_seen":"2026-04-21T18:04:17.848127Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-Df3oKn0t.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-Df3oKn0t.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-119\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jFOldZm0veMMAUp0GGwtBFzT0yyRFO9HpkarMGvDUfSl7VeKyqJOyGOJh%2BgK6WbfUtfyoui1l6ldcE3rfjL7yW6OEaWaKJ3bKyr1waMLG%2F%2By3FTIw7Br0Vl7NXMbzMm%2Fuw%3D%3D\"}]}\r\ncf-ray: 9efe4cbf0b3f5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":281,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"30fe7f0bd5cc2f4cda628822ffaac9ac","sha1":"d894c594848b8b727807b733e26b7be0f5c6fddd","sha256":"b2681ef85b01a75ea84b5f5faf0c2383179a4cb8216bdfd4dd182c2c683d9a9a","sha512":"66e3fcb3dc74e8a35f50063e9e5769cc005159177be9a89c503c25c4af9e615edb2ba73c0f7bcfad6f606a23face02b85758d52839ace5e4d3844fc3e6b4976e","ssdeep":"","tlshash":"2bd02b0b18400ff989885cd4980e5ee9f229355c1b2c9d793807aaed43fec85d31e4f1","first_seen":"2026-04-21T18:03:00.7601Z","last_seen":"2026-04-21T18:04:17.836871Z","times_seen":2,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/tron.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /tron.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 28273\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8DmiOTRwFZqZayxlIBgMoBuNQQZx%2F8F56a2vtuFnhdaJGTPjavi88np%2F%2FAcv9xQfYdfew0IUkqvajOM%2F6YWrA9iMT6z37%2FdeO35Fd8ox2qTLEPBR25ADuWFqH4DSRF49\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"d5ca5f90c7a46cb88e5f57b2d3046ba8\"\r\nlast-modified: Mon, 31 Mar 2025 15:26:07 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc85c081525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28273,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"d5ca5f90c7a46cb88e5f57b2d3046ba8","sha1":"4a46fba9e1f7e0419539519e1936e6002f99b3a8","sha256":"a584af003890eeb5d527e91031218b66fc8d429ce7d8ddc5f5ceb9efaf627a40","sha512":"60e2cb71c7155b2f51159c37f53d85c567698b9baec7ffc34ec898df057fb64e2528909f68df9e901bf5243a4ee451f0ff432e210db1635ca0c448073e7811e2","ssdeep":"768:CXuoEFXvWj4CBn04bX73fOlLiRO2lFIVmfSD:9FXvWj4CueDGlLmOuIcqD","tlshash":"b2c2d005f8f592ca744cc6104925cd97f273a15b30a53eda3ddcca6f7f9c9e916a0282","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-12T17:50:52.145171Z","times_seen":720,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":352,"receive":197,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/trade.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/trade.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1874\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-752\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsz7RMneVzMDTyBv6aAEK245U3oPgHr0mB5EXf7xFo%2FWMs8RViOvsGZUVa0DfZUAU5yxXm5rLyjT87Mqpy27tTcGeX9l52MYikwaTOQ4W1Ce0J%2FVTvNaT1O43be%2BQqGEyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc89b955697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1874,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"fee16ce16a23a37ef3920798742fefbc","sha1":"f862e3e61b12495b9f683a71d3d06053bc407b0a","sha256":"dfca8887d489be448d10cbd211b271db5330d73d299fe9c76f3e3300a9045a82","sha512":"560e8d3bbee698aac3f311defb7031f289096c6101339fc642889b10e9887000240109dd3e25139f0f12b6b7583b0b185f96e86248bc98d3252e1bcc5ecec990","ssdeep":"","tlshash":"d731f7da97b3107f3e5d8374563429c5555b85d1ba050a2efcdebc4c9f066e70128071","first_seen":"2024-08-20T11:40:30.958723Z","last_seen":"2026-07-25T14:35:33.349066Z","times_seen":141,"resource_available":false,"data":null}},"time_used":1379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T18:02:24.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:24 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGrN8TOR1Y70sJlMrTGZIdtkVaQSapocl0XgaM1UUomGV5H50ciQnXEcKSVQ4dd%2Bl2XBGyxXGVwg0Afp6VfKLoAWkvByOKWKqzq8WID9B7hCOuE60kpjGQr8RvKmDLdUNQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9efe4caf4b66569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3198,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1575)","md5":"6e5c5d35d2bca9a7212357c80f67812c","sha1":"9456c7ff7cd84bcb7d77ef52769f9adb4da82c5d","sha256":"373fa656612c61fe45e316e17e161d49af029856dd7567170f6e51c1fba80292","sha512":"10d1b40abe5cb56476eb05cb9bb67878913bcf61531dd15831d7723006c2ec2555f42b01c2fd6c9fec7eeca67f6f7bdd3febfc1c0e94937074ba792717fbee81","ssdeep":"","tlshash":"f46153a36ca2791d6327c2389fe7f4045b20a19392191459f5dc61ed8fc6f88c9c77b8","first_seen":"2026-04-21T18:03:00.796803Z","last_seen":"2026-04-21T18:04:17.832529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":461,"timings":{"blocked":53,"dns":34,"connect":1,"send":0,"wait":354,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-MXlr2x9q.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:25.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-MXlr2x9q.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:25 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-2c5357\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BG%2FgfYqYcgWyGi0Xx2AOUOBxGNM3nTY%2FZWUNbyhTBbQ7PwpxBz3joFbS7seFjYJn1zt905BJlFLMeQ33wNNjrst8ng3PR7LlpgysA%2FoV3Y5iF6M2Pnr0htmnhS2zBU%2FiXg%3D%3D\"}]}\r\ncf-ray: 9efe4cb29a275697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2904919,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64630)","md5":"540736c067d636d1337fdd3707daedbe","sha1":"a72f91a9b470d2da17063c08d1de73235c36524e","sha256":"d89b29e6dc601e8d9d743ae6a869e0a1308e585d6dd7099f319fdcafe5882368","sha512":"a192834acb4f2e56dcf7b793ad38293e9ccbaa175ac5af22d1bdcf8fddb3bf0329e0f0cc1fdd3551fe33c8ef535752b5544eb397ff10da52e29bd8aef80ec840","ssdeep":"24576:C35U9mVBPbjB8JLtAITkKkLHiAcEXv4KllK2B2JxqlW3Qu3p+:C35U9mVBPbjB8JLtAITkrLHiAcEXv4KX","tlshash":"9a252ac5b685b43193b754e1407b0005f23c2f59b40d84a4f2fda9da3e6ad99a3b7f28","first_seen":"2026-04-21T18:03:00.798448Z","last_seen":"2026-04-21T18:04:17.840923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":1081,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/platform/genesisglobalexchange/logo_144.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /platform/genesisglobalexchange/logo_144.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: image/png\r\ncontent-length: 8719\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=6,i=?0\r\netag: \"6991370d-220f\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4K%2BXp7w0zWqe%2B2mIbNrgB9hmyxpCYkmzDkhv7UeJ6cYVMscZgu7Km2HBeCFYfmvNpxjm%2Fr%2BwDsZ0veY3%2BnlSkxTZFjj7YZLM%2Ff1BTGv7JZdlsyf7XhCVCgjHo1wZMTBdSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc3bb565697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 144 x 144, 8-bit/color RGBA, non-interlaced","md5":"06609100d99738737033bd977785cde6","sha1":"585156328412f8c7ffdbb99c26cd4c09856b82c1","sha256":"964b459b9f1bfb83285f68456667769540b6a1f0b70fcb0f4dcdb1565183805c","sha512":"0e15a2c2d6c87e07a0b0f1d1dc9a78564fc80f7cb166c41eca9d29637dcb152398b833e367b5a71a9fd6ceccc3b9e5cbe7c9f767916d6f27f612713a731b51c6","ssdeep":"192:ZyRa6gSeTj1wvjUF+d7haM/j9OgFXxDZFab8PwnUGNspH0jgJq/a+0:ZDBLj1woF+5L/j9ZXxDXfIUJpmaZ","tlshash":"7502bf5b7cefabc36503c850742db102293c8a4c91b78e7ba4a47294252de4373353f1","first_seen":"2026-04-21T18:03:00.723534Z","last_seen":"2026-04-21T18:04:17.838957Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/fonts/DINOT-Regular.ttf","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/fonts/DINOT-Regular.ttf HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ku-coinbase.co/assets/index-DCygtVmD.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:30 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 46828\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-b6ec\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fxKxFSMaTfk3ZalOHfKDUnOgQueRk%2BKBm49tf2231%2BKIPtMAEj6vovHNh6eig3EGxAy272kvXvmYlFeSg4G9snGxWQ4rUj%2B17dBH8zffJUa0JN4TuKp8eXb%2FPSLsurNrYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc8db9e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46828,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"3117fb8bc58475ec7dcf97fc721e5034","sha1":"db9717e9d42e4b84a2851447bfbae69d9e966455","sha256":"c87211b0403e88bfd50c1cd22fe930b294ecb35dca3c3e27bf62180244452d69","sha512":"38d3494e2a4178e9bf543a66d0b4caf5f975dbbf6719ca2b0854653299a80515d06a48a4c96ada4e5d89be0247723027347ba0e8a0a20362c545e1de3187b8bb","ssdeep":"768:SYCwdlARps23lxBus0JEg9vr5aZKSRSW9kzSJDr1LNu1E8c:y8mjxB90JEg9vr5eKEFLNEc","tlshash":"1b234a81b3154f8ec2a2ba3699171392e624be3977e647c7d8b981ff705c1c34d64a83","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-12T17:51:56.942257Z","times_seen":347,"resource_available":false,"data":null}},"time_used":2377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2011,"receive":366,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/dogecoin.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /dogecoin.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2808\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RhQZvrhXkp%2BrqJgdp8wjkHgJaEGcmENpyL2WS91dwce654nZtDSZDVACPanH5HGilvf8b3dn%2Ftxmj4CKpsi1kIhKR75ZII0sDNtySp4fZ7iEJCH6%2FrHp2HUHW2xByjW4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"d55dd75446d505958e5210985b246bed\"\r\nlast-modified: Mon, 31 Mar 2025 15:23:54 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc85c041525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2808,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"d55dd75446d505958e5210985b246bed","sha1":"df83b77aa8f8647f67f478e02c23f864a592f6d6","sha256":"8abf24f47bc3b4def59a6e6441a9f2dbb8d20c953c2c5373f219ab614a8f208d","sha512":"b65c5b9eca2ac0bef1dfdf742eb6ce365c3368650b37cd847ce12b955e683d3843cdeab9ec25beed31976e9b3ab571e59d4c66431e44345e7c57347a72bb758f","ssdeep":"","tlshash":"a6515c150736fcaac55846a3889f0970c8ee362be160571a7664cc17ff949494a17743","first_seen":"2023-05-07T19:16:41Z","last_seen":"2026-08-12T17:51:08.618975Z","times_seen":1003,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":353,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/fonts/DINOT-Medium.otf","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/fonts/DINOT-Medium.otf HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ku-coinbase.co/assets/index-DCygtVmD.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 73096\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-11d88\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OrX3QoRXClIooDHlXXYb7%2BeuQ5C4tS8mXbLnBfHq1yOc8H8lBKykUtLGdJTqmmAJ8qvlgcP4%2B7uLiZxiZvCZAf5SJpyowFGmzmkQyvd6OMuO42Y662E9rAG%2F%2BmlbZnU4Lg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc8eba05697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73096,"size_decoded":0,"mime_type":"application/octet-stream","magic":"OpenType font data","md5":"ab876400560626fbe045633dc44f0748","sha1":"85bbfb1729e86f40ddc9af7197b5f54ed6136226","sha256":"5888b24f6b65ff7c989b4a258dbeb5d997320d61417371210da0258be21d854d","sha512":"82e96ade51b0570c1f691ba45d1a3c0802015dad7598954675c4abe2fa8a9fc705adbe6eb5e677aa5cc03b6704e594cfe99279c678855ebbbcbade6d5028dbd6","ssdeep":"1536:TlK/cP2D2oV7otQjBG1+acfZZHHDEdom1hvd5JItkB7k3Z:TKQQtG1yZSdomrvpIqcZ","tlshash":"0b636f031d4fb9548de4513a52de4ea34bb39ecc1ca493c30ae12d938fece6657152ae","first_seen":"2023-08-16T00:37:20Z","last_seen":"2026-08-12T17:51:56.899269Z","times_seen":1758,"resource_available":false,"data":null}},"time_used":1773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1361,"receive":412,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-BtnM4fgt.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-BtnM4fgt.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-1758f\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B8B8abK9w66jhgihXswwBwDAbx42%2BxPK8JIgrFmlz8yHIYe4ZG%2BUGDp1mzVmcCPEW99%2B0Eg9CQyVH1hGzYAenyyk6WVIkUW%2BmDuk0WlrkfnYldfYFH%2BCldhMVFT0kJum9w%3D%3D\"}]}\r\ncf-ray: 9efe4cc11b475697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95631,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7f235152d5c2b465f18727fcb3a54de0","sha1":"10a30c7a2803bfac821fee1ccd930c6f55ad3c63","sha256":"e56c1ecf04923dae5e0a1ccb09b117496afb6f1348fd595abb88891ce7acafae","sha512":"0760599af3eef5a030f24ace4a339641dfbcb35a6f461438e1254a2cb979f06791501aefab55130599532692bda1d1f25fd413e4478e93ab27171a9f6647ab6b","ssdeep":"1536:VAN1Ai2jD4mwPBKiFu/oaFup5fwWTjuRHT+jbDP8fYzKyj:VAN14joagpFwWvupgofYzKyj","tlshash":"7193ae58f906d93af9b75824982d2420360d3fd9c1d84463b2fd7e421b9bdb87b4e728","first_seen":"2026-04-21T18:03:00.714312Z","last_seen":"2026-04-21T18:04:17.847505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":309,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/solana.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /solana.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 25649\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJPR2GKeZiIbi6VCWTqqXXBeuTRmpGet9pNHT%2BbJkYyu%2FMxZhfO1wkZ%2BHPNoNHw%2BBQQsca541eUlaQ7tvhn8PdoNUDzMHmETe9f%2Bi5msOOjKo8YQrBlE7AOczm8MfZC%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"670c723abc22056bc5368ca2a97dd6a2\"\r\nlast-modified: Mon, 31 Mar 2025 15:25:44 GMT\r\nvary: Accept-Encoding\r\nage: 5545\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc87c611525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 250 x 201, 8-bit/color RGBA, non-interlaced","md5":"670c723abc22056bc5368ca2a97dd6a2","sha1":"5ba69b915180c31e4d35a524a9de7b3409ef80a8","sha256":"11192935f626fdb37ddfd8418d754feee326fc6f0a3ce7aa6e61283a820d8b09","sha512":"546901ff0dd66b4768e7560c2ccdceedc3bdac577eea114e600613d98319bde07a84d4fd8a303f4c34c05b3a26c73f03602ba38aaa5436dfcdac6712e0868652","ssdeep":"768:9SDR4lelsfdJTM1JiB+mP9LsYKPlAgezlYWXu23fgiqs:9Alsfd9MqBZ1L5MGgQuW+2vLqs","tlshash":"feb2d076137254ea4442115b97364e812c39f4e3adea6e2c7507a40c7d4a33b30db6bf","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-12T17:51:56.924988Z","times_seen":942,"resource_available":false,"data":null}},"time_used":642,"timings":{"blocked":57,"dns":12,"connect":4,"send":0,"wait":343,"receive":187,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/fonts/NotoSans/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:26.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/fonts/NotoSans/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ku-coinbase.co/assets/index-DCygtVmD.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:26 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 35840\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-8c00\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3q3dsNfj%2BDU%2Bdl%2BiUm6eBzXizUZW4akbXj8KkxQW2VdK08mrWAhCniM2y17%2F6Q%2FsTcKXmSFCo4LWGPm%2BEACShqZALvPc7t76TdqfmwWyyUWjz2sbf59mQ9aTywJV310ZPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cb8cab65697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35840,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35840, version 1.0","md5":"00427f129772e9f049050a50407952d1","sha1":"0f9e19ecc1d89758fd59d187f35b5a73e499eb45","sha256":"086bfcad0e112af1c9ac0cdea1744dfb11dfdda61906ceee1b32439437096add","sha512":"26478f6744d0875901f6c20b13f4303abe0d579ac2ffe02b74a5cee4a6af48b23a6d611116fc5f1f1b9aa6ef8b083a992e80aa1675e3a211b5332c480050e90c","ssdeep":"768:haAL1lUUxZ+mIxfVJ5tYBU+ma5q71y9SWeGt7UMaVJc2PtupNFtpXjN:NLEkxyJjUUza6ygxGWMaV67/LjN","tlshash":"c3f2f15f368e8e17f4d8691c5a667d523e022dfc9e30c622504f5efd3939320946ceaa","first_seen":"2024-12-04T23:04:18.137977Z","last_seen":"2026-08-12T23:15:47.246826Z","times_seen":2180,"resource_available":false,"data":null}},"time_used":613,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":361,"receive":252,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/platform/genesisglobalexchange/config.js?1776794546936","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:26.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /platform/genesisglobalexchange/config.js?1776794546936 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991370d-1a5\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPMxCrbiw64rhjRr39yGo7dvdu52T%2BdJ7dqQ0v2vhDlTrvTs7v1yuBECncIaATRv09kMBrUnNIAYd80hajcso2rHVw4hP1%2FWQa1YFUDGyoje3vBUNASjV9YHAzlOwGC%2Fdg%3D%3D\"}]}\r\ncf-ray: 9efe4cbe6b325697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":421,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"0073ab4b20763d34d717d8fc4675202c","sha1":"b529d01a94649526cf54ae65f0d7434c36370e17","sha256":"ba81820cf57cae4b937f5d26205f940e8f81c33335abf4604410f7d51037467a","sha512":"3940ecf9ed1930ee399b96a57d3c0fb9078e36be50a4dcf5f882682df65c4fdad6576cbc470fd4cd368f69b9887c6657138fd49f40799cdc7a206996507bbb95","ssdeep":"","tlshash":"9ce0e549b6605d009180ad01a4d90523da428733891e391eb6a82d8cafee50f5d7567c","first_seen":"2026-04-21T18:03:00.818553Z","last_seen":"2026-04-21T18:04:17.835861Z","times_seen":2,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/quoteA.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/quoteA.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2003\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-7d3\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bAi9mPvbrZ%2F2q%2Bh9VQSfNyYHd6uwbZV6P0o5hnTfBso7rnhWYfyrOL8wZjb1cQtcv%2BrjuVrvOM%2F9CqbygKsPVBmpI5dwe36Byp620uM5IfbcYrJPcX307EnXwvx9Sxoluw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc88b925697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2003,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"039c9f30e82072b35e4d53e64f12d5a2","sha1":"bbbc5600657ffd028feaf1fef2c8eda1dfdc4fc9","sha256":"b028e47015ac17c363f76e72d920b2590e654991837b5fe5fc8635a74ac8f90c","sha512":"67c9b63d615a76e2f10e4e9bad5a54bd0f2e8f11f6d9ff6ca48ea28051c1d50a311858001da0f1152dababfecf884807be7d0081f226f99b34580e4b6c684b74","ssdeep":"","tlshash":"0c41968ff612ed44620ced5879e91157a6776b80d6d294e6dcc6cd0358313faca1c4cb","first_seen":"2025-08-11T15:58:33.756964Z","last_seen":"2026-04-21T18:04:17.844035Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/quote.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/quote.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 614\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-266\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pAv6OEiggvhukZk%2BY%2BuvyxA%2FTp2F6YCXjaNNnjP9A2jaudspyzya1nLdqlbDJwk6KMIza%2BMvPl%2BngSvEF1oIl2q3D94KRsPtzCRNaOPt8KwKPRFOGoxTQcqloz8nobHr6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc88b935697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":614,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"288529b0e33d3b66a2731d058a0edb26","sha1":"45e95e851bc5f5ecf47f60051a2f337c4618b343","sha256":"c0a8c66763227f10f381f4aa054b2a851693e6519fd8daa435c326c4831bb34b","sha512":"47bd6e3b05c428e8fd039220d02a9e5498a8027c1aab085a7d04024472b2c88644e7b5097ddac8d2593c4d1ab7681ea57891066e36f782cbb28f34fef388432b","ssdeep":"","tlshash":"cff04751dff9f27d6bc1b051a7cd1027f2397c51403428308a18541cf01849afc56202","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.329022Z","times_seen":162,"resource_available":false,"data":null}},"time_used":1401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/if-eYiABlr-eYiABlr_.png","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/if-eYiABlr-eYiABlr_.png HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ku-coinbase.co/assets/index-RJMP26cC.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 112358\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\npriority: u=4,i=?0\r\netag: \"6991372d-1b6e6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nQ886g2kQkSzVdcULCW0H4fLSVRx5TFPOWBy2WSBoKeqjpiobCg%2Biuz8bqq5JNWRSHegIPcZzlog%2Fsh1zEgsismyzpDnYqcEP6Step9PcKP2%2Fns8eTlhMLpkrk35VX4zSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc8bb9b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112358,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 720 x 137, 8-bit/color RGBA, non-interlaced","md5":"3108d4399a3f6afb9b442a8b15cf75b0","sha1":"31349b9054c45416749e33f4a5f9614601883817","sha256":"da172edd1e269d4f003fa15a902e0cb930a724b426e120ca41d8d5c1bd3e608c","sha512":"771f2dbf91773bcd796055a0acb88246a6f1892a55eabb90e62b486c19868e61282cf8b2081969c4d523bb93b17d483ad32ec6790defc20a5610a9f6a07af3c0","ssdeep":"1536:i0be6CHoU5oKPZTsQiUO+lROfX9c74VXNf1cOGcs82G2zJDSTxXGOHSDHQyxW:iIe6CHF5oKPlsQXmXJpp1cOstDS92nW","tlshash":"52b31238f0f4b92a7667d57dc91784bf144e37d24f24991cad34bfad239984a208a371","first_seen":"2026-04-21T18:03:00.828946Z","last_seen":"2026-06-11T20:20:57.750433Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1972,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1384,"receive":587,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-DCygtVmD.css","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:25.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-DCygtVmD.css HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-9d2b9\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Idld966jqDrfAvXopaV8074tqUd9XRDeTV3F%2BiZmMunK6TESNfFQNijx%2BghUrgYJL0X970oWVxWF%2FegSx41pk%2FRH16uUYOuEaYXi0tvAapnW7MI20EyZitXRtSJrXFnWeg%3D%3D\"}]}\r\ncf-ray: 9efe4cb29a285697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":643769,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65432), with no line terminators","md5":"ab47b3be75a8dd0d060856bdd7d09608","sha1":"4bc5e69d3281194f78f606df982ecbbfc7ce6c57","sha256":"0a5e8e7a9835b6021ec7a7ce75d9019663035a4a73e26f53733e472054d8d8be","sha512":"b7e4125ab238df3a59ec557394942101ac46a9739834a487ee2e824b3dcf761a160d4b344e1cab53bdda9c54f2534cd23d11b9adb25feb513621c9c9e5e1b67e","ssdeep":"12288:0NP10Z8w71ZACkFDS3vyf58rBeV05TVohtZ3V6EnoVX+dPhwvSCq0LL1CgIH/Q:0NP10Z8w71ZACkFDS3vyf58rBeV05TVb","tlshash":"56d4e869b59001396f37e5657bc9a6ccf12cfe62c8429ae5f203151a0ec7bf72362607","first_seen":"2026-04-21T18:03:00.830294Z","last_seen":"2026-04-21T18:04:17.823077Z","times_seen":2,"resource_available":false,"data":null}},"time_used":891,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":551,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/svg/101/recharge.svg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/svg/101/recharge.svg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Feb 2026 03:01:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991370e-6d4\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NVChoK2Pk5jfzoi10BY2nbK3X%2FA5N9fm24F31x%2Bj8suthXlcq52X0B8YtggiZQAPNBqoL8hQzzkMwJLrq6nR1HITqrfKzujNDfKkdw9qo3oapIYO07JKUCw3qfXZL2BZdQ%3D%3D\"}]}\r\ncf-ray: 9efe4cc7bb7e5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1748,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9350aa3c47f2a52683d7258f135dbd2","sha1":"12c1be4c929e59a28c50c5889fff9191821dd8d5","sha256":"0f813327a76345bf2b154cbe7f815230730f1fd481541bc5f394c9b424d0507d","sha512":"f73c838c8a550fb731467de912a90fddc641b3da8d8afccd5cb915f897535f290b394025f53c5179ba8ae17fac884476a386e62769f6175ed60f6d7ac7640b2f","ssdeep":"","tlshash":"0d31376a13eeebf454929067dd1d71d322945cd69028f284bde757060b0d07df754e30","first_seen":"2026-04-21T18:03:00.832707Z","last_seen":"2026-04-21T18:04:17.820543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/svg/101/hot.svg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/svg/101/hot.svg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 15 Feb 2026 03:01:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991370e-29f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ewASk6Hs7F4b8ip7qZ3%2FG%2BkF0%2Fkxbx9e0OZWjSKkuY5VXtPyVDT0Oz8d0WT21qDOzwlSxGD1uln4VJd%2FuNN19O9oOnoGrG9E0Bf1MB1SJFQZjdFPPMMQ68xM8q1crm0kkQ%3D%3D\"}]}\r\ncf-ray: 9efe4cc7eb8b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":671,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8829f87cdb7b405afb3110e94a3c5d00","sha1":"c758b23677bcfafea4682f0d6cb77f7fb00066ef","sha256":"1da3c9a68017a27728047d07afc668f58b3eac9e24592bb355b0166407fa6ed6","sha512":"5bc3bc4f0a814d0e99ea9734db490e70874f7dc8f33131528c6d959f672665ace75ad460c8fa7df8e6caf9752b9761ea6a0aa41a59dd6449cd578a52ab61507d","ssdeep":"","tlshash":"cd01fe2d93768b3ca50341016f74609176a4f0e7d19c308cf6bf22246b4a5b31841258","first_seen":"2026-04-21T18:03:00.835175Z","last_seen":"2026-04-21T18:04:17.812171Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1042,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1042,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"io.st223.com/ethereum-classic.png?1771124525192","fqdn":"io.st223.com","domain":"st223.com","tld":"com"},"ip":{"addr":"104.21.92.13","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"st223.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Feb 2026 22:03:36 GMT","end":"Fri, 29 May 2026 22:59:52 GMT"},"fingerprint":{"sha1":"3A:D6:0D:C0:4B:B1:8F:F3:BC:B7:79:F5:00:2F:07:B8:14:FD:01:22","sha256":"A3:AC:54:E3:B7:D6:7E:B7:CB:00:25:92:6C:41:04:A7:CE:87:CB:57:1B:38:DD:0E:6E:98:22:B4:8B:1B:2F:D6"}}},"request":{"raw":"GET /ethereum-classic.png?1771124525192 HTTP/1.1\r\nHost: io.st223.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 14153\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GaTnv1YdQX0e7l4GRforiiITnGwVU6M0em%2FZK%2BXseA%2BOMtJWzFA0SyrHDQ%2BDkvhAVQLMcFO8%2FkWhf%2F8d43WITJw2fVZE2PXFO6OJZMRZFWYcje4tVGkjx7iTwzneaOcQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccept-ranges: bytes\r\netag: \"166bcbd2c1d62de6531949d433fef1e2\"\r\nlast-modified: Mon, 31 Mar 2025 15:24:02 GMT\r\nvary: Accept-Encoding\r\nage: 5544\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-ray: 9efe4cc85c161525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14153,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"166bcbd2c1d62de6531949d433fef1e2","sha1":"410404c9b092b0b0e06e9a71ff4ee3c1b6558d93","sha256":"1528de6bb5bc93bdb368cd901193e5dafee879fa7e382277c44fcd884ca280ca","sha512":"4eb4c3a3834f16c13b920e20c40e511543011d0d4ac3dab9bc0b5bb956f5813490b3c492838f688efed48f8ed657f51ea84d88d824859c4c3f8c2c61aa3024ea","ssdeep":"384:EKxvi6XFf14eKuqFS/Oo4+/rZjQy/QFMJcpx6EyE:EKtFDKuqFS/Ob4rJuacpsZE","tlshash":"2552c0e7897303b49a4967ae66f40f8e4951430ceb2f7dab3c000937795796481f90db","first_seen":"2023-11-19T03:02:16Z","last_seen":"2026-08-10T18:53:05.107276Z","times_seen":68,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":347,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"io.st223.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/aa-DydRYuzh.mp4","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:29.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/aa-DydRYuzh.mp4 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 27471237\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\npriority: u=4,i=?0\r\netag: \"6991372d-1a32d85\"\r\ncontent-range: bytes 0-27471236/27471237\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQOdwwuUJ%2Buq3VMGNLCBMR2oTYSoOJ1ls27iM9ks%2BYDIX1o3Kjc9mVXsYIOhKo44hnaqbyhR4EnX131%2FJKAtC8EY0IGPYRqdDFk87q6RjhY3eK8k51NsisafGrf9pLCr2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cccdbdb5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1019152,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"0ca10e0370764bd509ee0feb7e28715a","sha1":"73b642a6ca5947fe589d61f6e247fb44577c2a99","sha256":"fa634d596bbc599d100edd79a7aff179265fbd4abae928ed20404d1cf763065e","sha512":"449ec70cdc9c491e0405a88dcac4f3a64fff920b9042072c545dc99d362c3558ff270645d93d9bb55a6d70f2bc15f4717086ce0e2cc6f17dcf12ba96347246ef","ssdeep":"24576:C4IABWu5mRkxIwwd4eFM3nKl7AjFZi2V+h4HyWSeHTun1jKkyaQevkG:C4PBl5mkGwg4eFg+7AZZJV+h4SyY1jRP","tlshash":"622533f88a98533be91a0d35749189f23c2bc490f85d17213ebf668c94b6dad35107eb","first_seen":"2026-04-21T18:03:00.847163Z","last_seen":"2026-04-21T18:03:00.847163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":722,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/index-B9OOki9T.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/index-B9OOki9T.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-484\"\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bscrk05cIU7K4dO32zznvZbVp9hWRBBjwbiT%2BmZZ2rgIlZ4Puhwt9lTQx2rurm5LvdWUBE7%2BfHQJd1sEbRXGXWR01LFe%2Fz48e13zOnRlmafmPp%2B%2BPLCBs7NQTqTUy5T87g%3D%3D\"}]}\r\ncf-ray: 9efe4cc33b535697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1156,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1155)","md5":"3b9a1f115f03c9658fd250823cb4ab96","sha1":"2245821e39870957c8718aa9cc8cdb54974ea5e9","sha256":"546d8ebc8abe5bf7b5915155584d70e72ea51b5480e9a762e6e7946646f2e3ed","sha512":"7bbb0806d1a0f17ab4609c6f0601d4a4723f193e9868e1c16d282ea17f538d296224a8fda852fef182597e2c47e5ea515f59fac4dddd6b96d8b15647432c23fe","ssdeep":"","tlshash":"1821636fe922cb3ccc6e4448e50ab01011483f84a164d0d4d2ae0d4493a96b0fbbc73d","first_seen":"2026-04-21T18:03:00.777368Z","last_seen":"2026-04-21T18:04:17.837652Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/new/bannerC.jpg?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/new/bannerC.jpg?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57681\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-e151\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v1PFW33NRVpjEfx8HmpZsaBOnoJPKEgn%2FmtShimA4%2BdzAmPRCJA5KB0akR09Iajexti75dxCWlVdXR%2BNmQgtI%2B7A9s0TDW8O4HlyvJb9eZqcfC7lL6rg7s%2FbjFD1Djq8Rw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc7db875697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57681,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 750x400, components 3","md5":"786469932c393466f94e8f3cb31fb0c2","sha1":"01ce8a71a364af9c2d04b51254e4cc04e708c9f5","sha256":"01914cb1b41eb4e029343abc100e8dc19c1526d6fc8d6b83fb632345aed8244b","sha512":"f9078c8bd675f3c4fccb5c72a54923df7601fa7d6a67e79240cc53821ad065416adcdb191e67a92ebb70f8f5690b112a135f1858232ceb1ccc7e739380e7f670","ssdeep":"768:NKTG3QF/yMQFQedWhcJ6mrTjTOjkWhtkWMIbGDFJxp9PfQbw8wLZracr8cSLfnez:NEKQ8zmedtJxT/81QpdfQU7Zj8cSrnan","tlshash":"17436e1a72c192314713d52c6ea95efb0ef40481edd8d2c1d0639e7dc812a2bfa13af9","first_seen":"2026-04-21T18:03:00.8535Z","last_seen":"2026-04-21T18:04:17.840306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":773,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":373,"receive":398,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/financialA.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/financialA.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 2219\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-8ab\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=65LeDwaikiBLHOrTapqxhJJO0JvwwWFkQEmEm5mdKtX7rg0SLJJWA%2FCRt%2B6XFVI6HcdjuolobF9XX70jK%2FMsZIdGHfoaXfb26qFIBGNhqIkfwKWoUob962j783%2FCwrAKKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc89b965697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2219,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"3c3486f4b7f62166e49d8aa1c0b2f34f","sha1":"edc338751c6f2e3e5c71e97c6ed95dc86ad4b2d4","sha256":"9a7475973a33fb3e3b9f0e6ebe7617674e318deaf65d642e9239a0585f6c8dcb","sha512":"a6e731e0b28fc58eda713e08599554c176de0b43b34181e3349bcfe898d75b07eaa79517f7d1d654a1d5fbe020ce8e9c6c536babaeb7247de1880a58f2e98716","ssdeep":"","tlshash":"b441c606fa11bc047b4cfa1168e63157a337ae91c7856896fcc59d93a8201facc061c6","first_seen":"2025-08-11T15:58:33.845676Z","last_seen":"2026-04-21T18:04:17.833793Z","times_seen":4,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/assetsA.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/assetsA.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 1996\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-7cc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wdSr%2BQ4b0yHXzJfFQYVeVtC%2FgbfvJ9pLmwZQR71slp%2BVqSDuPb2SxbCPx1BpfMCq8btC1xKvXXHmwkqrfwgn60xKvUt36B%2Bf7n6cel3atEu2M9AG4s8RLDpNiubG7ALu2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc8ab985697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1996,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"a4bfa8d277e360a60d68326cfee1d8a6","sha1":"39fb7003e7506b9b5b3fa5b81e0beb0f00b7dd10","sha256":"ebd6eda9fb6a2575a166d2f2a485e7decf4466d166e96f72a3cd0d0f13166b7d","sha512":"7e233dbff865d63bbf4d9fc7857375e7487d395c720c827f478f1e08cbd17b1493734d7d7ee96621fabcb1b5311d43dac05d2db263dadd464bb3dd5324572360","ssdeep":"","tlshash":"63419849f551d800714de8083cea811727e32ad0d74078a6fdeed42378202fbcd092c7","first_seen":"2025-08-11T15:58:33.779787Z","last_seen":"2026-04-21T18:04:17.855071Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/assets/en-CeQsR7RZ.js","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:27.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /assets/en-CeQsR7RZ.js HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:28 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 15 Feb 2026 03:02:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6991372d-1045a\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jk3bOHE0XYK89SgtM4rqnrwELt5PRZA0%2F1hVIWmSqLl656EWe4gpMt8JnEQ%2FpRzNiB1BrzF0pMDNq4DkBnlJXI5b8mV5gAsv7xNLRXbwO%2FIXvybyXyugXfm9DpvfnpJuaQ%3D%3D\"}]}\r\ncf-ray: 9efe4cc40b585697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66650,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1d709bf8a9320005617bd45d09f747a7","sha1":"fef2fe04c344205f566a76103761bf5c077dfb2f","sha256":"4dd84eaa0aad4ad803ae25fcf311cc0a2549e39802a2b34e68a5a51b25b8be75","sha512":"f52dafe2f4936bea13deba4370e37b3ea46fe9ed8bdbf350ba12a254064c97a27309d4072de93e45b29ffcf8ff977a799eb9bda95f91ae396f4477bcdf24abf6","ssdeep":"1536:apo3KOOGI+rKNqpsuRH9IsAkeIo7hMo5DYtI7JzX/oIJ3:a4uQzBRHvKuo5GoJ33","tlshash":"c6531a4afe52187919e3037b74ce6a5065be04c18245c85a4eecc4bd43a2ffb6377978","first_seen":"2026-04-21T18:03:00.86204Z","last_seen":"2026-04-21T18:04:17.814845Z","times_seen":2,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ku-coinbase.co/resource/images/101/tab/assets.png?1771124525192","fqdn":"ku-coinbase.co","domain":"ku-coinbase.co","tld":"co"},"ip":{"addr":"104.21.63.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ku-coinbase.co/","date":"2026-04-21T18:02:28.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ku-coinbase.co","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Apr 2026 04:25:47 GMT","end":"Fri, 17 Jul 2026 04:25:46 GMT"},"fingerprint":{"sha1":"B3:F6:C3:4E:D2:87:AC:7C:C9:F3:B2:D9:27:16:93:F3:36:5F:86:F4","sha256":"EC:2B:82:3C:CA:3B:26:1E:AA:57:7F:B2:15:5A:F2:AC:AE:59:6F:53:F0:C1:0E:CA:B0:4D:06:89:3D:61:B9:40"}}},"request":{"raw":"GET /resource/images/101/tab/assets.png?1771124525192 HTTP/1.1\r\nHost: ku-coinbase.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 21 Apr 2026 18:02:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 525\r\nlast-modified: Sun, 15 Feb 2026 03:01:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6991370d-20d\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BD2cos1EnLBIxxrMJn9ftwPcDXJBtKS%2BqZQTtx3rRc7AjtcYtTvE1pAE2yeEQbGlsnq54W%2FzdyWc6pnyrf9KZKMcUyUA6UraCCyR%2F8E2fIo%2BBzTkdaYM99MAUmMBfHhe3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9efe4cc8ab995697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 44 x 44, 8-bit/color RGBA, non-interlaced","md5":"39ef9d38fe0aab83585dd87672db2f9f","sha1":"73beb0a9847b3f98e5e96b384767896452dfaa33","sha256":"ab447108bbc8e802ba2d67626f51554cb9f1fab5db2bfeabfc8371eff71204cd","sha512":"5a1441bce9b88fbc5f0ecac5aee541406dd05eec641a6d2db62c6c38d7d59365d5568aeb95efdacacd125d808fd0d9e64c7954305b6da00dab35ec659b7a75c6","ssdeep":"","tlshash":"b7f00ce9f558cc65461855e6cf79742100fefc5cd57cf81c8d45f564f54d41259502c1","first_seen":"2024-01-21T00:00:17Z","last_seen":"2026-07-25T14:35:33.309706Z","times_seen":162,"resource_available":false,"data":null}},"time_used":1421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"ku-coinbase.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}