{"report_id":"6c6ccd70-c94d-4d35-bd57-eba01d2e9f7c","version":6,"status":"done","tags":[],"date":"2026-02-18T12:34:39Z","url":{"schema":"http","addr":"cbbvx-coinbase.com","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"cbbvx-coinbase.com/","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"title":"Checking Connection - Please Wait","dom":{"size":5956,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"e7c817a8562dcdc9910600b4b32824e8","sha1":"21636c5d895c236a6c311251757b00a7d7022fe2","sha256":"b2cf7cbd3de412bdced07e51c5a7dbc8e3f9d048592c19dbbff41d4e01f6067e","sha512":"014fa9f84a733707f18522004c995f2a8a224006b5628b276726cb911b4f29eb5f40cc7494e9c0f1d21e6123bbe18dc55ef31c9c0063744f8b7a25cf6839447f","ssdeep":"96:KAV9+UHZx1a5MtVcGTvTYA1zvUhfeZsPG2CsLZ2pb8XgZyTwPUtMINb:148Zx45MtjwAxUEuPLZ2pIayEAM4","tlshash":"75c172a73673002a6b5750945757a3023135e84722cbc8287bac4358cfe579deab3bed","dom_hash":"domhashbb4c1be3855ed7068cd4082fb57f04fa","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cbbvx-coinbase.com","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T12:34:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-18T12:34:18Z","timestamp":1771418058,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50598,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-18T12:34:18.272546+0000\",\"flow_id\":83471377291455,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.25\",\"src_port\":50598,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-02-18T12:34:18.252095+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ipwho.is","ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-02-13T08:51:55.268519Z","alert_count":0,"request_count":1,"received_data":285,"sent_data":406,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cbbvx-coinbase.com","ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-02-17","domain_rank":0,"first_seen":"2026-02-18T12:29:15.866881Z","last_seen":"2026-02-18T12:29:19.482338Z","alert_count":18,"request_count":9,"received_data":13798,"sent_data":5118,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-16T08:54:54.873632Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cbbvx-coinbase.com/","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f606861c34f5495b9af5ea8f053dc5df","sha1":"b5f17589298fb2cad81401cf4d32726444e84526","sha256":"6e1663988c88d28ee6f62ffba7c1d34231db87d536c77846b330f00f5599c446","sha512":"d5caf6b8d17f7e2fbd34fc0e622de425ca97e64abd8dfb60718b210c46ea7b18cdc3ade1edb9ad39ea5f00cfff01e0dc44ab8a021e7a4d7b2f2f02d9d21244e3","ssdeep":"","tlshash":"6171446a3a771139476b20a54707a1053436a04b36c3d81c7b6c4210cfe6b6df673bee","size":3660,"data":"","first_seen":"2025-10-20T22:18:07.378583Z","last_seen":"2026-03-03T21:59:58.35226Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cbbvx-coinbase.com/","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T12:34:17.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:17 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6126,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"672abd55aaf3f09a4ae98f7d56876781","sha1":"4a283b0cc8c226f2e3210ec20fd95ef0814acf69","sha256":"ef406b54fe43327ec3ea136aa693a84c945019af021b2813102599a240c29181","sha512":"f4c2298e1add65d76285182a9f9201aeae1ea65fad693e5170ee54dc8c59f57eb418cbad0e611ea8b062801f72e8560101954ed934fe70147a77ab38421edc7f","ssdeep":"96:WM8CxB1f8MYjua5A1RkphdXMdIt2hsLATRf0Fnju5yu:WM8CxBJ8MaAvOyZGLATiJyIu","tlshash":"b0c181aa7625102a537792b497539301f835a45b23c381297bbc43448ff2749eba3fed","first_seen":"2025-11-21T21:37:23.594546Z","last_seen":"2026-02-18T12:34:39.716591Z","times_seen":14,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":142,"dns":1,"connect":68,"send":0,"wait":73,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:18.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cbbvx-coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 12:34:18 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cfd8ed04dcd9a3e-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":41,"dns":11,"connect":8,"send":0,"wait":115,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:21.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET /check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7 HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:21 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-06-08T20:32:07.109172Z","times_seen":2126,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:24.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET /check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7 HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:24 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-06-08T20:32:07.109172Z","times_seen":2126,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:27.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET /check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7 HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:27 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-06-08T20:32:07.109172Z","times_seen":2126,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:30.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET /check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7 HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:30 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-06-08T20:32:07.109172Z","times_seen":2126,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:33.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET /check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7 HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-06-08T20:32:07.109172Z","times_seen":2126,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:36.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET /check_status.php?connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7 HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:36 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-06-08T20:32:07.109172Z","times_seen":2126,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/favicon.ico","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:18.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 25 Feb 2026 12:34:18 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Tue, 17 Feb 2026 23:48:51 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4286\r\ndate: Wed, 18 Feb 2026 12:34:18 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"59fa7b2430edc250c1b0ea17abea16b6","sha1":"e25d35dc9a0a8c8540e6ad00896e509f73970918","sha256":"b590c8c8a13a839331c0d7f640d1c30266a96418f3458f1073f68a7887da77c3","sha512":"ccddbd84a828b35cbe63a280ce112fc2456ce3f3b434996ef5017e7a0e6eb2ba4885e5ddb054ce02c2b137d1ac1106d48c9ff8108049eff539adbbbcc87d2e2c","ssdeep":"48:VCd0O9+JOuaWP99Xed9snYBv+tX9lg3vrymxAaG:M0YuZ9ud94qCU/","tlshash":"999125d60f10847bf209bb7c1537c54e22af2f9468b4a2071a21b4e26ff2c9426f6c46","first_seen":"2025-08-03T10:28:53.204904Z","last_seen":"2026-03-03T21:59:58.350756Z","times_seen":37,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/91.90.42.154","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"104.20.44.133","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:18.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 02:54:08 GMT","end":"Sat, 09 May 2026 03:54:02 GMT"},"fingerprint":{"sha1":"8D:92:FC:3A:95:FA:D5:B9:07:80:8D:11:7D:02:D9:48:6E:31:E9:BD","sha256":"5E:6C:D7:C3:E3:38:C8:D3:F1:BC:74:0B:00:E0:3F:84:F6:19:53:45:CD:82:18:8C:91:90:73:53:8C:57:40:D6"}}},"request":{"raw":"GET /91.90.42.154 HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cbbvx-coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Wed, 18 Feb 2026 12:34:18 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cfd8ed1ba097dde-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c803446e75fb294408787c6c64ee800","sha1":"0962274e1fa925799e2d324dcaa1b173a2bbed98","sha256":"ae8d49b8344fca5c61af3aff17d9b1d3f272d198edf935f94b322463b15b57e2","sha512":"fcc0c8057e91b44bda5b3a4e976b202ee97a7127074e4a30026b291cbb5ebe9c0c8d1a626453b2fccccfa46eb67be4bd37dcd855671bdb064e1eeaf262a18276","ssdeep":"","tlshash":"0da0220f2300383a02022e8330080a8002e302f0e0c0230aa00c030e3200cc020e3008","first_seen":"2026-02-12T02:06:55.383473Z","last_seen":"2026-06-08T20:06:38.033902Z","times_seen":1235,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":42,"dns":7,"connect":8,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbbvx-coinbase.com/log_visitor.php","fqdn":"cbbvx-coinbase.com","domain":"cbbvx-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbbvx-coinbase.com/","date":"2026-02-18T12:34:18.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbbvx-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Feb 2026 22:56:04 GMT","end":"Mon, 18 May 2026 22:56:03 GMT"},"fingerprint":{"sha1":"D0:EF:4D:C6:57:A9:35:1A:57:1B:BA:7D:F5:C7:B8:D6:78:1A:92:81","sha256":"58:AC:08:AC:15:A8:0E:5F:08:B5:BD:0F:F4:2D:94:AF:75:9E:1C:8F:17:42:5C:C1:84:68:D3:5E:3A:1B:AD:63"}}},"request":{"raw":"POST /log_visitor.php HTTP/1.1\r\nHost: cbbvx-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbbvx-coinbase.com/\r\nContent-Type: application/json\r\nContent-Length: 228\r\nOrigin: https://cbbvx-coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=bbfb0e39c8440c505f31908f35f89467; connection_id=080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":228,"data":"{\"connection_id\":\"080E06C0-CF94-4FB1-8F3E-0504E98DF6B7\",\"ip\":\"91.90.42.154\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"city\":\"Unknown\",\"region\":\"Unknown\",\"country\":\"Unknown\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: Content-Type\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 12:34:18 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a518312fcd8e029960260cb425787c9d","sha1":"70243a61e561cead0e19dc59da47d66472c41676","sha256":"17863842e2b733b828e2ed24e51bf0300fa77cea0faa3d9cdafb97c8dc32f87a","sha512":"45687db0e83bf665f322226cd21488cdbe825095dd34cc2623b9da492815a1ace652043ec81343730bd6c1042924f182ba8530cbb7133739b349bb216045fc82","ssdeep":"","tlshash":"ea900227050468f69642171574353f4934d551d390c07015a01e901eab1a81332e722a","first_seen":"2025-05-05T15:41:10.547713Z","last_seen":"2026-03-03T21:59:58.350195Z","times_seen":34,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"cbbvx-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"cbbvx-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}