{"report_id":"913e1da3-7a44-44fe-bf9d-74661041f871","version":0,"status":"done","tags":[],"date":"2026-09-11T10:09:46Z","url":{"schema":"http","addr":"coinbasewalletop.com/","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/#/pages/base/home","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"title":"NC: Buy Crypto \u0026 Crypto Exchange","dom":{"size":258489,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (31088), with CRLF, LF line terminators","md5":"77b841c11fb690f0e890eef12544e3d0","sha1":"781279dd99003b97479be9b19d48f71624ad0f67","sha256":"e83fa8129ed925bbc03fd1b7c3725eaf7448b2ada7b9fe7340fc07b667960a3c","sha512":"0aca966b8f2819fe3d1af71d382ae63b36fb0d5d03bd784d6900d2f8e85c2994ec5eccead2e82da37ae7d03bbede38754cea480d432a4d3a712a078d2a40df06","ssdeep":"3072:52AWalApuK7hmVdX1Wu3i8qxnXPQtYvw+FRN:52AWalAp17hmVdX1Wu3i8qxnXoCvwQRN","tlshash":"7944d672a241382eb53bc651f580bf9c7c55e63bd2124ba8f77436298bcf8c51b22719","dom_hash":"domhash20cd3be308d1ebfa1a6324f8402d59ec","first_seen":"2026-09-11T10:09:56.867328Z","last_seen":"2026-09-11T10:09:56.867328Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinbasewalletop.com/","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T10:09:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-11","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"coinbasewalletop.com/Coinbase/static/image/home-banner.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewall.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinbasewalletop.com","ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-09","domain_rank":0,"first_seen":"2026-09-09T23:20:42.684895Z","last_seen":"2026-09-09T23:20:42.684895Z","alert_count":149,"request_count":82,"received_data":30061331,"sent_data":44392,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"coinbasewall.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-07-30","domain_rank":0,"first_seen":"2026-08-01T06:13:56.216269Z","last_seen":"2026-09-09T23:20:43.404484Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":586,"comment":"","tags":null,"fingerprints":null},{"fqdn":"tongji-collector.dcloud.net.cn","ip":{"addr":"124.174.83.100","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"domain_registered":"2013-07-17","domain_rank":0,"first_seen":"2026-07-04T00:29:43.644287Z","last_seen":"2026-09-05T18:53:45.159934Z","alert_count":0,"request_count":1,"received_data":333,"sent_data":1329,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/js/chunk-vendors.2897fd2f.js","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"edf42f8f7a0a12a1a42c7e044100d028","sha1":"74c84572a087365393cf73abe30ea853e05523d6","sha256":"fb0c23ea7dc0f68c89361afed4d69d7fc46f8317469f86c49b600ac1565f7475","sha512":"cbe4685dceda8f34fd88bb7c63290372fc54f916f41a7c42b07fff9c59222e6d55c39417102039dabb08d719f8b693975defa954a58bfc304314b5513e2091c6","ssdeep":"12288:DFSCxR+OgH0BUSlzFAp1Y3X1uuZc3nruMkqTquD:hRR+JH0BrzFDX1uuKrrkqeC","tlshash":"6f253badb282b07547e760b5503f120bb2366966b40a80d8f779e4e46d7c98e1237f3d","size":996443,"data":"","first_seen":"2026-09-09T23:20:51.74857Z","last_seen":"2026-09-11T10:12:08.866406Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/js/index.94d2fc52.js","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43f90963dcfc9a0c9bedfcfb8df9db72","sha1":"cec1040cf6076acbb908de02d1048d68ac691efd","sha256":"ac09bab7dea3e3bc70a3fef2c0a43a312ac9ac3304982bdd33b330e654318b8e","sha512":"38528ea1ec47b1bb49f352850808032b57ec6507bbd60774b4edb4811fde8d70b767d4ab23b7262eb7c57e09e97098fb2c75905ea0809213c6437cf5d3e80f79","ssdeep":"12288:QvNmJrjgsNKSblGAB3pBHOMiPAKVhyuuJM8C3jxNRWU95pHWzvE2AWampNPi6:RXgsYSblvBHOMiPsJ6d/TpHWzM2AWaC/","tlshash":"6ff49eae798e577f0aa54355b4cb7b0630e81dc1f609d0c5dbdc9c2b12dc88e9692b38","size":786685,"data":"","first_seen":"2026-09-11T10:09:57.024506Z","last_seen":"2026-09-11T10:12:08.813434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/js/pages-base-home.25907a9d.js","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eae3c860b1216cadaee5aedd436c544","sha1":"c028f41f905bbf8bec6e353a4d866d259677bf58","sha256":"90c82e16fdd19293b89627cd455a99fb1f88f2f512140067f6fbe774d3dfc5c9","sha512":"5500d8a63adaab4a32895ae89164006275c127269606ff8c2e92414a59ce3f1a8faa8ec6c09b721ab85da4f092cac6f768f4199cfd05db3d1c275dffb8a6328c","ssdeep":"768:sE6M1QtuDl3HDO6ypA0iwskRbmHjMhNmun9ajr+MxX8EfxrXsmIyc8o4/Sy8P0BL:QMyupTO6ypAgO3pzsmILmAE","tlshash":"18732951f18bb00e8d73c19160271f78d0b02f7ab215e49af772be9819d58862b76f9c","size":80489,"data":"","first_seen":"2026-09-11T10:09:57.063821Z","last_seen":"2026-09-11T10:12:08.881587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Method \"$emit\" conflicts with an existing Vue instance method","filename":"https://coinbasewalletop.com/Coinbase/static/js/chunk-vendors.2897fd2f.js","line_number":16,"column_number":187797}]},"http":[{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/safe.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.212Z","timestamp":1789121350212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/safe.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6v9KVpwyIIvbReNa5%2BQo3RK%2F9c%2BgGalMRf5N8YoRnm0zkSinGAWy7kwaudAU3yTEjiACK7w0D9jJBaGFKkwOWqg784rREpgyVTeJz1fzRdOsh%2BA0sX1j3b9HiWckUWLSXesjnRww\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-142\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ce230731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":322,"size_decoded":873,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25907d757b6696c3f2114d5b0e4ef743","sha1":"ffa9f29c9506e31be7ac579ee354aab474e2913a","sha256":"5458f79e6ef9aaca5d3fb235810e3c499f9dbd15ab8be026ce90c3e39caa9b95","sha512":"108e856390fe2433f5d6be6e48f1e4456d699a6b43328c7a4d8ba920926941a4cec080b66488473f8dca66b60fa0ce04ef5e2c438a524981fc0f59d050c4c2fc","ssdeep":"","tlshash":"fbe07dd5835c4c1c7a220721ebe8313812be00839b4c20a868b42134734437fbc3badc","first_seen":"2026-09-09T23:20:51.852367Z","last_seen":"2026-09-11T10:12:08.852092Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/home-banner.gif","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.228Z","timestamp":1789121350228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/home-banner.gif HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-a85322\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTw4m%2F1CuvpRTd1U2s3qVOCsJINfoyUp3gILf%2FX6Qp5G0dymUU5Do1vGx7q1RahluisldRDU1p7Ntv%2FG%2FaRx9jcvssy6Y3vsoRm9M%2Fh6Gejqt0LuDoH6Jou5K7jmzzNuSQiEwF6F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016ee930731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11031330,"size_decoded":10996942,"mime_type":"image/gif","magic":"GIF image data, version 89a, 900 x 358","md5":"d359ca1cc7f0adf7a372c9e9c0017f6c","sha1":"2e70ee4dc7f9df45ac6098e7128b184d19fa23f5","sha256":"ccc7f83bd14f03fe3bc852688a80d6d485808f07ab5964577b74a39bcd908a6e","sha512":"c372df9290dce7c398f5689ebf1723016fb12c511e89db676c91ab7419b89abd1539fae024809b7da3de47cef2750fb6ab8a703a434ea60d3c6ba5df4fe2ea05","ssdeep":"24576:qM7Q/JunvGpHNiI3TAVA89B/44jqO6CltGiGPfUW2NICMF:qMUIvGpNiI3iTBdjquIiGPsZ8F","tlshash":"ba25337e4acf1d40762550305ad74d28afe47f79650839f84e80cf7eb6266b3e628c98","first_seen":"2026-09-09T23:20:51.866104Z","last_seen":"2026-09-11T10:12:08.859328Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1297,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-09-11","alert":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","trigger":"coinbasewalletop.com/Coinbase/static/image/home-banner.gif","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Florian Roth (Nextron Systems)","date":"2020-07-02","description":"Detects files with GIF headers and format anomalies - which means that this image could be an obfuscated file of a different type","reference":"https://en.wikipedia.org/wiki/GIF","rule":"SUSP_GIF_Anomalies","score":"60"}},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/pc/1.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.229Z","timestamp":1789121350229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/pc/1.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-b4260\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQfwnT9m0YY4P12uTelrW3D9YBr22c9ZSBAJ%2Ff3vUKBWf96mgMj%2BBpL3xxVdDc0bFsvYRhSrHGm2uKJu9IqGMBC4ZwManK0OkOp7OXcVXxIev%2BKNt%2FAw8h7wpIBVXt5xQ%2BER5wDu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016ee980731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":737888,"size_decoded":737557,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"c8c0d5fe33582f3185ad99a8fc84739b","sha1":"6953ad52932eecc7ffa7e9ddb84ee81b3b200c22","sha256":"f9858c6811db99ece8f678e417dea2c1d07ca62ac83754486ae5f8c7d943f9d3","sha512":"2d46ba413811d243d8bf5914ac65945026e751774bd88fd8d4e787cbbec6ce558ecae0ea291e246863638fdd26ed6761ad1425352d77a467084b3a59cb59a722","ssdeep":"12288:130GQsfevfaQ+HCJWc+06yH7TZNfapXbOlUW+PqYCebdheIOePemQMa9j1WPSRt:130SeFQyh9f/TjlUvPRCgeINpy1AY","tlshash":"f1f423e77d1e28070729e7c81e3578ed05618e29bd598c60e661fc698db8f0c093eaf5","first_seen":"2026-09-09T23:20:51.78324Z","last_seen":"2026-09-11T10:12:08.870114Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/index/logo","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:08.954Z","timestamp":1789121348954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/index/logo HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rRkUR7N2gDzkz3%2F%2BK4fScO9ripiRlnQnIY4czvewHxA41v1Z%2Fcev63nEMxeuF8MY1fkKHZvzcfBlqYwQYeqhuTcoF6EmreLAnLZOjnjXYWuHxZ9v7fZSEi5ZWd%2BLow19%2FLESoKHp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e00efa8d0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":1036,"mime_type":"application/json","magic":"JSON text data","md5":"4edf4bfb17138ebedb6a9710678af7ff","sha1":"cd64d7f58e3b685b5e7cca400483f44be0b6e89c","sha256":"af477921008e5e857029e5b7f3fdec1e98a14f9dde28a2ed49ba0b751a6e3da2","sha512":"5a74bd43295217582308f44a1d3faad7781994d1726a89e285b1495ac3e7288e9c8c0744dfb7ef132b49e25e9e77a810d7c8a7a0aaf9699a309dc266585acb73","ssdeep":"","tlshash":"ca018e5d2f486062538633d478bbf914cc58320bb8ede35babcfd8e885e9358252b457","first_seen":"2026-09-09T23:20:51.815824Z","last_seen":"2026-09-11T10:12:08.845702Z","times_seen":5,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewall.com/storage/images/17abb31575f241c099d5e9564debe6c4.png","fqdn":"coinbasewall.com","domain":"coinbasewall.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.166Z","timestamp":1789121350166,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /storage/images/17abb31575f241c099d5e9564debe6c4.png HTTP/1.1\r\nHost: coinbasewall.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewall.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/metamask.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.198Z","timestamp":1789121350198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/metamask.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FRcSBo1drwmjfATq3vus%2BAhP8pBuDAv5mBMG3SmwZUEK4J0XwccaUWeZvNPd%2B2Yc2AxKT3i3kSnYUl9665%2F9Y66CsKBFv%2Fq%2BFYN4AvS44Z9ScQL85i%2FOQBjB8269Pwv3YgLsO2fI\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-10f\"\r\ncontent-encoding: br\r\ncf-ray: a395e016bdc70731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271,"size_decoded":868,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f237bdd7508e0b3c03f197ab03e1b324","sha1":"6954e8c11be1ca3a3014fc024484c9ffb407556f","sha256":"047d5f63f9a461e604b94e7cb79a0ccf4049416a66cbea75e6e08dc7457b8a8b","sha512":"b3a8c57dbddb8baefc00712b4067073d0b1c34b8ccfcf837b67467f045cb0380f1e39e5ef7aaf84518f64f93f742527846f87e2c6a762a040e88b81e824e8409","ssdeep":"","tlshash":"87d02bc5114c950cba275312d754353c2176218b8a48806cbcd41238171967fbd37fd8","first_seen":"2026-09-09T23:20:51.778797Z","last_seen":"2026-09-11T10:12:08.863852Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1028,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/blockchain.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.220Z","timestamp":1789121350220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/blockchain.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvXPgX0PMA9P0iIHFAyypuhUJqi0GBAZLCtGYL%2F90dpd%2F82BKarYzzyOgzZCf8C4%2FNDPULdQHfBTQ5h0hhZqufXg54j0gcDG9MFC7MU2R2NqyrJ%2Fj2Ste9TFc52DtYL%2FOs1f00VW\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-190\"\r\ncontent-encoding: br\r\ncf-ray: a395e016de530731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":400,"size_decoded":932,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"feb85b6304c7eb3c9b95eca93cd3e5e8","sha1":"bd8277bc4fe90dd0f974d9fbe287939c680f604b","sha256":"24770ba316e25e184fa4fa5841f0ca4641a309b2733c7e885ae08eb76778245e","sha512":"0044f345c70e95ab208afd44fd52fa27194e2400809cff5f7f69f7b50f73597bd24f86ccc03a5965fd1ceaaf9b81a62eaba5fde5a1bfc06ca796af199bb5dfc4","ssdeep":"","tlshash":"83e02be526f8e84c4a898e139f67f4402245305d7ab6c5ecfdd1ff1511e52b19f51c24","first_seen":"2026-09-09T23:20:51.841173Z","last_seen":"2026-09-11T10:12:08.815903Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1000,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:20.838Z","timestamp":1789121360838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: LGmekcPntoAgl+YgChB2/Q==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e0594e254e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/mobile/market/tickers","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:34.960Z","timestamp":1789121374960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/mobile/market/tickers HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:35 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T%2B41W%2BGFBKydBtVaHPEcVru9ZlCNk%2BveG%2F3IwN46fBy39Pht%2BKuyaUN4%2F8VbZmCMhpJ9r%2BsYwho8QhH64n5E62Zu53uqa7zDlaME8hSUI6uij8mWfpZ2QM4GvURZ4hBhj2aM07u5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0b17d380731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14824,"size_decoded":3178,"mime_type":"application/json","magic":"JSON text data","md5":"a0ab5c5a13c3cd0a48d31e0474ef891d","sha1":"3475580773e6361d771ec735d1dd0aece44344c4","sha256":"6f42c9f2334eab5fd8e6fd5df0629ade7b8b302ddc56e095e284cba5721fd5a3","sha512":"1d9ae3b30ca9f86d9214e21a43114584d367185095f5fd20cc22f85714d20a72d99784e355a53b902116a27fc89677a348dd9cceba592cac760c24244ddc4066","ssdeep":"384:EpzQL2cmc1+Hki9aFcfOD/YS2akKRq1YPkpSdQ4wL4:EpzQL2c51+Hki9aFc2DQS2akKRq1YPke","tlshash":"ab62cd5b331d9e56e0b98cc34eca33a8189e7d99ddd20f68c2edcd4e0596f2f511aa10","first_seen":"2026-09-11T10:09:56.890731Z","last_seen":"2026-09-11T10:09:56.890731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/mobile/market/tickers","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:39.960Z","timestamp":1789121379960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/mobile/market/tickers HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:40 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=plLSeW2OZbKXrKZP60jPgojTkNjLAMJI6tXsDlD7Cq1BuAAmEv%2F7Bqd4SY2enYUrXtrgIDiFWnRpZX6rBCjhoWgP9BtX%2F5qTAttKJtOlV%2FdIJ%2FfkND8X7ggz11cagHQ68W%2FJ9rar\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0d0c9d60731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14827,"size_decoded":3190,"mime_type":"application/json","magic":"JSON text data","md5":"4b5d9cfae8c8c52c0eb9d3cbca180b75","sha1":"eb14ee68461b7038ba80ce7fecf68f47f64f95a2","sha256":"95b41734347552cca689e0d8f59039f4a51654ab3d7a182a51918e89f09b2678","sha512":"2eb7807b734ef4248b66afa9b868cdb4e8eb50bb84de6b808a9cf23293fff67b17b9106428fcca8292b1c13c737ad9058d7d9b70d087e2e8c08701e8a83e8cc2","ssdeep":"384:spzQWgvrYOCgi9WJgfS3/sS2akKRqlISAZ2dM4sLI:spzQWgvrYOCgi9WJga3ES2akKRqlISA4","tlshash":"c262dc5b331d9a46e0b98cc34aca3358189f7d89ddd20f68c5edcd5e05d6f2f511aa20","first_seen":"2026-09-11T10:09:56.892659Z","last_seen":"2026-09-11T10:09:56.892659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/static/home/products-showcase-poster.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:06.190Z","timestamp":1789121346190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /static/home/products-showcase-poster.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mCo1hrbQn%2B82P3UUOjaOOy9ehCj2Aj5baQUj2HoBo8K5Xh%2BdnilHzQG8I6%2B3FOWL4%2BIrjUSJFnH9HyhEH8kJOKxXpQQPiy4tZ6UoV09Vtgnj5dH%2FYx1S3j2PEl%2FDTjORXArI34dW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395dffdbb480731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":741,"mime_type":"application/json","magic":"JSON text data","md5":"b2652793b3591b97ba13f9dc2a83b115","sha1":"85351cd3ab1a55a61157dafebb26c03a9ab9474e","sha256":"7ab737e619752ed7f78d6a449a6e46b23348b67df51790b5099f8645944ceea8","sha512":"8da4a3092ca9df3aefec2cbbd837e5bf62ef02ec0bb86cde05f784d8e7a901a5c9928ce0d46124cc6e6996af359df0952aa52f66934373056f7c3a86f48f30a6","ssdeep":"","tlshash":"5cb01283c7793d3407031c83201e25715574c57988b42065cc0cb3665b11911020bc60","first_seen":"2026-05-23T13:21:09.103712Z","last_seen":"2026-09-11T10:12:08.802308Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/getNewestVersion","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.085Z","timestamp":1789121350085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/getNewestVersion HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cd8x6jK9QXaHuENW2ApZHlBi2dIAXvYduJNBbgsqwOytPiwdJYa%2Bh59%2FP1KfUU0CcEJL8GXbVhCtgr9G8vgifu2mO9KLKGH8jjL7Uy3Nh5qhiXADsFXZzvmy8DRiA3g7ynXldKXj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0160b000731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":312,"size_decoded":843,"mime_type":"application/json","magic":"JSON text data","md5":"5043e9a6b5fbff6077a7e4d54a590ff9","sha1":"9306feceedcd3ce2df0878ff1073107773199995","sha256":"1cb99d1b3b10c2b8decc10d5e49c2049853afefae066ca6a64edb7d19f816497","sha512":"e35848ae056820c321e3490a1271e1e725c04eb1672f62efeae97201da566f4cbfaaa798c0e5e77d94de6a81fc1266cdf93b657a81a4116a60e632530b824124","ssdeep":"","tlshash":"d0e0c220926df85219599ec2211bb909f3ef228b9801eb75b508154c429553b6e0f26c","first_seen":"2026-09-09T23:20:51.773309Z","last_seen":"2026-09-11T10:12:08.803066Z","times_seen":5,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/getBanner?location=1\u0026limit=4","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.124Z","timestamp":1789121350124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/getBanner?location=1\u0026limit=4 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPWbXjWgoQyADgCFTf%2BLJ7cqbreNG31i%2B2E6bMhY0fzxaDwkobUyx3KD29OJ9q3FFAm9PiXRbN8n3KdJtJRe3jquzwPIbX2B2mKqvwgVEKrOvutpd6%2FRJJH7AZuWOt036p07Q8%2Bt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0164c200731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3268,"size_decoded":1704,"mime_type":"application/json","magic":"JSON text data","md5":"2d3f5c53fc590a8a5857e2f882c0dd0b","sha1":"a8269082990b62c2118faa5d0c64efd86ef26b93","sha256":"ffb1c8cc08727351b9b94511177405955cb1a24778c612c37873b9fe2c23798d","sha512":"8ce0df413778a94d96a70db4661c5a80ab0916dd89df303290282558dd8a3b7fd3c7dca5c7afbedd4602e4781e95acad41388880e8228221a5a37901d4ba29d8","ssdeep":"","tlshash":"226138819925aaff418a3fc15c67669606d0b408715adf8d47fef618104db4f4fbb232","first_seen":"2026-09-09T23:20:51.846171Z","last_seen":"2026-09-11T10:12:08.85699Z","times_seen":5,"resource_available":false,"data":null}},"time_used":429,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/trezor.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.203Z","timestamp":1789121350203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/trezor.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0096co8tOnj8%2F19SipdrWVp5Zn5GHatEuXLNa1RPcBdFLoTzt3mB0x7jSHSH3RvJXhhANxGkY2ouKnDKDgBo6CaTWQdspPf0g6Hky5Ege9%2BlwBLR1Ru5aOGCxiDL%2B%2Ft%2FLu%2F8wyo3\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-17e\"\r\ncontent-encoding: br\r\ncf-ray: a395e016cdee0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382,"size_decoded":943,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d07eb92617ccf56631ba3aa27c80d0c","sha1":"26002158267bfe3f66e49cebb67a60d03d36eaa3","sha256":"261bbef578b57b6a8c07b9c8f66e9f2da557ab4d065a01c9581cd68225775211","sha512":"0089f128352b033135feaa30d6d2b1384132f58f59b0c3c401dae5e4d403a3b0a540afde61252569e5ebab61f483ea4ab234977db4fc03ad334e7be4709981b8","ssdeep":"","tlshash":"1ae068deb798a24487a55dd4f6697852a457507d39c102fde4c2f8c995e00f0ec72130","first_seen":"2026-09-09T23:20:51.83229Z","last_seen":"2026-09-11T10:12:08.887627Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1082,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/phantom.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.205Z","timestamp":1789121350205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/phantom.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VhWFtKRAJ%2FyKELLScoMQn27tkNaqlTp9LfY8pZbo7tajebdQb1DHKdWvIWbD983c1o9DSvDRuei85VovBbYFTFUeezzDRRi8eBX%2FRHiaFqCkhC%2BnKO8Z3AExgoXEmi7CPPMPe4t\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-135\"\r\ncontent-encoding: br\r\ncf-ray: a395e016cdf80731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":865,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"424b06c4018f8b372caa1f9b7d54a3a4","sha1":"645243e1c1959d4f326ed6c0412cf720988a3d8a","sha256":"492f1f6a707bb89c3ea7ca70c3d9600c67c20d6df4dd7a71ae9f313675771a22","sha512":"0c5991f5134b9e1e14574a20612034ca5e2e6bf1079ed84721483c916f564676d473a3282c592c11b51d8104eb13901c2efa873f2c4750ce67bfd28eb500f40b","ssdeep":"","tlshash":"59e07dd4509cc41dd903901f156f384cb32a61c5c7a14b3e78b0686c3e072af7c04e58","first_seen":"2026-09-09T23:20:51.740561Z","last_seen":"2026-09-11T10:12:08.844698Z","times_seen":5,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/argent.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.213Z","timestamp":1789121350213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/argent.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXRycc%2FhMwUPU%2FyoUxKkzYb1wX7nVxgiK%2BXaZrnj%2BPIukPeZ6%2BwmBhy7l6x%2BWGFm9k6unWL%2B8MkT%2Bc8q%2F5BqFdNqysUGEoLkMnZVgvouTbG9SC1WW8hrnB3Y9ht9K%2BuAPaxg2fcd\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-115\"\r\ncontent-encoding: br\r\ncf-ray: a395e016de2d0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277,"size_decoded":875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0ff37d05a121b25e9c94d0f1e6bd957","sha1":"bd68876a118395e641428b8c6d6afdb615aeedc5","sha256":"6c3648c66b1ed6c34c7973cf416eacbc793f049a9dff03c48c84f8aca9b44377","sha512":"ca844b4f292c6bf636add3382fceb2ee90c68ff1704d4a4f9d47c7c46dd1dd84174a64cadbdf3adba74078c2d1394fd76ade4b34129dd1099168536c4c7e02dc","ssdeep":"","tlshash":"73d0ebe6024c54083b1a8352eb64342c003560a3c12c050c78f8213c1e0aa6f7c37f78","first_seen":"2026-09-09T23:20:51.822304Z","last_seen":"2026-09-11T10:12:08.853305Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/pc/2.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.230Z","timestamp":1789121350230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/pc/2.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-a5ca3\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jDvHhaVA5bQhNvEpD2M%2BoxYjwrztsxDsxZiJ0VDTBzoVfEGaqUTtfh42TnT0%2BNjgyuXbyiNkCuJcHnjYdoJvTO7HBkx%2F47sLw2nGaWYwN5aTWalDouAVMnDvVYeZgOrVPqvTAQ%2Fm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016eea00731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":679075,"size_decoded":679111,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"ce9121910544515019016ccea34a8bc4","sha1":"6f53db0f4a3e6fb690dceb5c96fb760f5a8dfe87","sha256":"d6cdd7d5bdd10f417d498c57e708a69de866326b2c9b22adfea663b99a880cd2","sha512":"4c5b1e77bf2033cd354d97a1bdb543ddb4f164f1076c9c71cecdfa123ab705bc1a4413bc6b248b3a8ceb843b6275f454837a2e9497695a3b2b7d0084ef18afa3","ssdeep":"12288:RSX9Gob4vY5EniBQsx24FNQ3iviJJ4o/Cxf1zsJoZm:RSX9Tb4vHHsxvD0avsek","tlshash":"4fe423424e9b1e8b09e3e043396916bbdc665f4313d7e8c91ba2c3e7ac74877c509476","first_seen":"2026-09-09T23:20:51.842745Z","last_seen":"2026-09-11T10:12:08.880989Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/img/base_home_1.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.148Z","timestamp":1789121350148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/img/base_home_1.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-7b9\"\r\nexpires: Sun, 11 Oct 2026 10:09:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxdYvFMoD1DiA1ZxglkPiHa78EJ3z1RNZmd8XG3550L4Lm7A5tdQxQc5C5UalRJzRGDeXKjSd3Ckts9yr1buGpIoHZvoJxP1Qe3xIBsfbbT3KOBsZkLK76GlqQ5hvVtHueAsQWB0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0166cc20731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1977,"size_decoded":2644,"mime_type":"image/png","magic":"PNG image data, 133 x 133, 8-bit/color RGBA, non-interlaced","md5":"c7bb249c1f31c084e1ae586e003b7dcb","sha1":"cfa94c8e8a294313b082000c4fef27c5fc61e9f1","sha256":"126bb48264a81668aa1b490ee6b346d3cab787c75c0a5bc5772c91abdc153ecb","sha512":"01f105c0bc6e8b052aabe0769a64c508f4b793ef02db0e49ed9c0794f45c8b53d93b97b60aa8d4320fe7cda02fa0cf6676fd4e3ef2c0949713ea211c3a95ae3b","ssdeep":"","tlshash":"e6410a4958074f13a5145998ec27bb38b8b797e26f8921984894e1df215062e5e9f026","first_seen":"2026-09-09T23:20:51.839579Z","last_seen":"2026-09-11T10:12:08.860405Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1027,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1027,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/icon_3.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.225Z","timestamp":1789121350225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/icon_3.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-11e4\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jufGz9REIPkMz60VEyvCGKluFWzp6Clz6Yr0YtrEqr2bgyQGOVkzSIrFx1jzwAfC759Ec6ulHNwKo1Vxef9GVMKPkysX51nicxPgGYHLdMEXyWuZ9DkZyOtEpWvdoRdYF99zctVt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016ee680731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4580,"size_decoded":5332,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"51dfefcd20b9e27ba53449c17e4c6c93","sha1":"b303641fa3a64e356a3a746448d6eb95524709cb","sha256":"5c80006ba18e57e7b4e6506e834489397fc9e2157a2c5b6976176f471362116d","sha512":"f47115e688608ff1fe9815963db2a6426bdee9c1e201ee51697c9a117708a86be65a35cc828de48d35131caf6259b11f02093b691543db87ba7b0d1373e8c8c2","ssdeep":"96:MzyOEYJjikPpETOvU63Ls046pl+BnLFaPdNRm4jvP0fRP5DXcFui6C4S1lBJ:M+a+kBgOvU67sH6+FpaFNrjva95IFui1","tlshash":"9f9190b32e5af19f0864fcfd9052a0e8fc1cecb540132f366414dcd94652d1b246b0e6","first_seen":"2026-09-09T23:20:51.836233Z","last_seen":"2026-09-11T10:12:08.851099Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1048,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1048,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:24.874Z","timestamp":1789121364874,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: iq82C12JRQTYKMgcYDnHwQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:25 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e0728efc1525-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/mobile/market/tickers","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:29.960Z","timestamp":1789121369960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/mobile/market/tickers HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3BIib2aYLbrWkP40kSL%2BQayzAxEiIOZhWX4MSvzj5rA7JDAKhRBevqKMJG4FhBoI8bwWMQ2aAevbV95TgHsTfX1UI5nSfQJxeZWpDRZ5aekwkDBQq0QEQlhjfIYZd95aDKvkrOZC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0923e640731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14824,"size_decoded":3173,"mime_type":"application/json","magic":"JSON text data","md5":"090afcd3e828b9b6b24af472847a8a9c","sha1":"6fb5dc8f494f30b48e8e300beb8e75f007c92e84","sha256":"be731a3b7a78a113082e6448fae68f47cfce97f4c1c212f2b387b164456b23ce","sha512":"a414c1562243e80726f57f94500f70faa722562044c269304d5248125983f5d4b1b0c7d3d6a184c94eab406cebda869f553ad2b997e5de73cb434257448e6373","ssdeep":"384:mpFBpamw+3wiiY/A5fPq/572akKgq8ZrtobEM45y3:mpFBpaR+3wiiY/A5XqR72akKgq8Zrto1","tlshash":"3f62dc5b331d9a5ae0b9ccc34aca3394189e7d89ddd20f68c6edcd4e05d6f2f511aa20","first_seen":"2026-09-11T10:09:56.92537Z","last_seen":"2026-09-11T10:09:56.92537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":839,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:38.049Z","timestamp":1789121378049,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: c6uKGY2GDNK1j+uhFI4SFw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e0c4d99f8deb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/more.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.177Z","timestamp":1789121350177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/more.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 309\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\netag: \"6aa31840-135\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YqNpKshhjqzr2ki4B700GGxr%2BlJk58f2BQk6JQZdw76rlUmY%2BVFDVxniA%2BrvA27XFA%2BfGyEJ1G3XGb6Cy%2BQGk4WTpBnc4nMxAZTMFan%2Bvw8w5pg7Mq8yL4YhefCUy5SeFzy2fmrF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0169d580731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":1038,"mime_type":"image/png","magic":"PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced","md5":"e4a5edfc21c2d7828db13de396a8d44b","sha1":"d8707779f34c799b4d86a192045d0cf971980851","sha256":"a55318317b4e6b6a7e38b31afc193ad2e79f09d1ad068b4e20ec529b98b094eb","sha512":"3f43ae74ce4ca0f9e62c61fb3bef8fa28cddf05e40ca48040f0b86a81288d96b02c8baf4bd8930431fbfe39a33a7649c59d9e8295f41c94efedc43e89edd4fe2","ssdeep":"","tlshash":"9be07dc1eb62941cc923e337857592e0c3b97db986449b8ccea5ed14a61b53215c43ab","first_seen":"2026-09-09T23:20:51.751183Z","last_seen":"2026-09-11T10:12:08.888889Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1038,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1038,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/ledger.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.202Z","timestamp":1789121350202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/ledger.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8exq2Pr4wdoBNx2dIt8jHresIhluF4tQ5TTAsEdgl%2BtlKaHGRD50RN5LZ7ucx64ygsVaH%2ByZ1VFM6%2Fm1hQNSRpzdyBccjg01zuA70KJVhbPLwAOgGkSA6njE5yLeH1EMRCN%2Fcs4Q\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-ed\"\r\ncontent-encoding: br\r\ncf-ray: a395e016cde70731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237,"size_decoded":851,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"789ae624cf0c64bf5bc1dc4c2ecf8541","sha1":"42cde40312fb1f2525c63a9dbf1e5176caafd232","sha256":"c9b520fa4f8cf721a897f340fb0093a51bfe9b94085ff46047dc06453783ee8d","sha512":"1c0a7ba22fb638e531d89758704e0417ffca692cccf75d59ce30dbf3429d78ddb322348423b12d81ed987dae3b8596fb5a38966eb5cd0953137747d1a930c681","ssdeep":"","tlshash":"ded097ee600cc2048924e32e4458ac2d19b733e1ba50021eb48039003b066ebfc26d88","first_seen":"2026-09-09T23:20:51.853871Z","last_seen":"2026-09-11T10:12:08.804442Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/mobile/market/tickers","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:14.960Z","timestamp":1789121354960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/mobile/market/tickers HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:15 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MXXAXnLsGqXaOiSpeD7nUiFwborPaIj6zoRKicz983bUqV%2BnsDQHBUcYBbb17GM7anmcMfGCcov7Esc3WSrNWStb91vcDsRUjD1%2FJc31KwSs3I4rLtQDSweh9a9fNkOwszh0Hxtk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0347c140731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14821,"size_decoded":3152,"mime_type":"application/json","magic":"JSON text data","md5":"8fa4160f3885823b492f5d96e2176aa3","sha1":"25ce4ff609952c2b8e77a4e2bbf949ac89cb73db","sha256":"ccc283d51235c977d1493d5be557c8e03a872d9ab78ff1bd46f780cffb7db031","sha512":"d826a903ed1fabc526cf96a0a84c898a17aa20fcd5639c046bcb7bca86ef990552b121d56b83619b6af06714fa4cd4ef0323fd985df18fc75bc3767b530fe8df","ssdeep":"384:2pVKP7daWAsXY8baf8Z/aM2akK/qDuwiv0zR4yBi:2pVKPxaWAsXY8bakZSM2akK/qDuwiv0q","tlshash":"bb62dc5b331d9e4ae0b98cc34eca33a4189e7d99ddd21f68c2edcd4e0596f2f511aa10","first_seen":"2026-09-11T10:09:56.936163Z","last_seen":"2026-09-11T10:09:56.936163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":889,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":889,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/exodus.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.206Z","timestamp":1789121350206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/exodus.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lF1jjlM4QAiCd9A6dgOVZoeaLrQt2K%2FZpjmd3FaVjQJeSossVLUR2Z7%2B6TIWCqg9cDmLLA1YlFMNAJEnoncgL8M5mNa8KaEZjtMUc6czdF7l9%2FJmhVwU%2Bqo0PTKp6iMN2JP6rP2d\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-140\"\r\ncontent-encoding: br\r\ncf-ray: a395e016cdfb0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":320,"size_decoded":871,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"840e7b4c661b8ff041fa6d94e82e1f71","sha1":"9d28e3cb3076dbe5caad642fd39a99ff3fad7646","sha256":"ebc5fe9204dcd96cd07b919b84c12e96812740507881f5b6a70dfba01cd11bef","sha512":"de8f4c694a5df8bd802572a4040366368be6b4ed2254b8c7dcf11096f0bfd8cce72510de449fb41216a85bc805822854a66568003afe9e74937d06ab5c674d2e","ssdeep":"","tlshash":"2ee0cd97130ce82cb6714725dbf47539107711d3568d9129a9a03134671c36fbc3b6dc","first_seen":"2026-09-09T23:20:51.863773Z","last_seen":"2026-09-11T10:12:08.806027Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/pc/3.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.231Z","timestamp":1789121350231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/pc/3.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-b76fa\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6WU6Vl5YsRNc6jnU3JS1l1jf81JGeeevPS%2Bm83OyOg2ZsSt4KAe%2FZg9g%2Bs4cLrYG5nmRRarc15yVKYv1XS%2Fjjnvzu8UoGlxf2WtWEB7I7AZ7qCJ%2BOH3VvLs4E1A%2FEny%2FmZzcwqG0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016eea40731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":751354,"size_decoded":751781,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced","md5":"d01c6e648a1efef9fc9eaf26003e9d95","sha1":"ef222b1d672665176b6eb7b7f0e996375ba21400","sha256":"3ec2277f83d4e620666dbc29627cf073f337c8a4af6aa1fb1395f863922b5af4","sha512":"2cad5d4b056cb552cff81fa906cdffef444718767ddb64f06b69ddb7233b3f64b067f1146f08181830d9b3efb7751211a1b1258afa9649072566f33b978e996a","ssdeep":"12288:LJ5M6byT3bCjRCsXEXSFN/av4joL3SmDaSHiZ3a+gkNJl9Tpk8q5OaQlbv4:t5bb23eCwEXWCvm7O+xn1Nv9TG8I5Q5Q","tlshash":"49f4234c68caa77748d468ea01e607bb17878e8caec678c012f2fd795ef6c9513603d5","first_seen":"2026-09-09T23:20:51.759123Z","last_seen":"2026-09-11T10:12:08.839865Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/static/home/pool-dynamic-poster.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:06.195Z","timestamp":1789121346195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /static/home/pool-dynamic-poster.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdYcUNVfbwHgq%2Fd4nqTZSHjBv9Xz%2BmGt2EXQK0EGDhwg5ggruvEeV5FkI569sLPKug46dpiSjE5jol9WNqBXmAPs3s25ArDnizP8DqiCEjfc0qPNa5Q6rlM7VhSbzwQ7h8MLP4IK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395dffdbb660731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":733,"mime_type":"application/json","magic":"JSON text data","md5":"b2652793b3591b97ba13f9dc2a83b115","sha1":"85351cd3ab1a55a61157dafebb26c03a9ab9474e","sha256":"7ab737e619752ed7f78d6a449a6e46b23348b67df51790b5099f8645944ceea8","sha512":"8da4a3092ca9df3aefec2cbbd837e5bf62ef02ec0bb86cde05f784d8e7a901a5c9928ce0d46124cc6e6996af359df0952aa52f66934373056f7c3a86f48f30a6","ssdeep":"","tlshash":"5cb01283c7793d3407031c83201e25715574c57988b42065cc0cb3665b11911020bc60","first_seen":"2026-05-23T13:21:09.103712Z","last_seen":"2026-09-11T10:12:08.802308Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/favicon.ico","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:09.255Z","timestamp":1789121349255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 0\r\nserver: cloudflare\r\nlast-modified: Mon, 06 Jul 2026 21:54:29 GMT\r\netag: \"6a4c2415-0\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s12WJNZdXRTsuDX9LQ2BG6fxzA%2FN64LUDMuBy0bsQ3LtgFmM2%2B5K%2BH74Z06jQdI4IfvaFMxy%2FMDuonXAE2XG3%2BYjZcEyzS4eFyf7AbsUNG1At2EXa9MItJm0y63xlOpbL1z3BEDm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e010d8610731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":684,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":994,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":994,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/label_1.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.181Z","timestamp":1789121350181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/label_1.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 284\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\netag: \"6aa31840-11c\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMML5uWUPRDAitRnfIhp7TWFBoARS%2BHxZNDbGJ7NgEI3qRF8PeA33yZdn8ARJJa8haCUZ9LGZ2sxC9KFOw98qZSFpisuqfCBcy4OeYVAy3DVlvnKd51XyjUaBLgVFw6IeyP5%2Bh5v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0169d780731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":284,"size_decoded":1005,"mime_type":"image/png","magic":"PNG image data, 25 x 25, 8-bit/color RGB, non-interlaced","md5":"236fdc88bf8789055241d940fc3f5f45","sha1":"9e2af7e0841cd205c6df4c2c596efc9960296b90","sha256":"7c09478ef706b334613485caab91b9b0c69b16655bd5151397941324cf2edd09","sha512":"73100a8e526cc501bd8436e3c5bf3655682b42f1bc906533c211b017a7b0ec61c47b8030478f8512ae4206afbd7a9154aab11d989265ba87e3ef594494c6fffb","ssdeep":"","tlshash":"bed07de14d0bfe5ad68c137955a112157c320c6355522144081ee35208512505460239","first_seen":"2026-09-09T23:20:51.804991Z","last_seen":"2026-09-11T10:12:08.885123Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1077,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:12.660Z","timestamp":1789121352660,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ntbNQ5yUQkLrVhAjzDuPXQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:13 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e026386349c5-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/mobile/market/tickers","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:19.960Z","timestamp":1789121359960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/mobile/market/tickers HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:20 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nAKFsLLch2fJh76eSYpZuumhiB2FBP4zO4w1AWqTE9LQFgpqFlEn8NXJ6ITEiN3mCg0K00sdG4AlEm8TvkJGJFPbguvglFfK68iIMe4%2BneB512e0gbostpvtc3sF8sOVAa70Fn7S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e053bdf20731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14822,"size_decoded":3167,"mime_type":"application/json","magic":"JSON text data","md5":"4c43aeef0812d27fcd0e804b8b7236ab","sha1":"c763155aa9490a2fb8f55fe9397ce1677b4c71ff","sha256":"6cd77d3e6b97a4348d80ddc5560dbb8f6b6ed6dfb7dc5d04a8a8172ba9086005","sha512":"1bb55944552856955044c966b0f8b0c27445ab84a3fd81ad9b013cad4523227b11ada308da5cf4cd1ad4415ad5a4a1ae1c3b6dd19f9510b0d71ea9489d454e2f","ssdeep":"384:5Gphmz7xwCMgKEInOfol/ek2akKPqzeZGfwDN4m5y:5GphmzdwCMgKEInOQl2k2akKPqzeZGf3","tlshash":"c162eb5b331d9e4ae0b98cc34eca3354189e7d89ddd21f68c2edcd4e0496f2f511aa20","first_seen":"2026-09-11T10:09:56.949532Z","last_seen":"2026-09-11T10:09:56.949532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":813,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/bnb.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.186Z","timestamp":1789121350186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/bnb.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7%2B2E%2Bc7b9I1ChFS%2FIZ2UtiIbl%2F9WNGzE%2Bt%2BA1wvcDLpL6fCmi841iE0PpZrANb5Qj6RKxA1rCYPPUCse1wDtEpOr0%2FBOR0dFsr%2BzDPeyNZ%2B6n3vGdQrFVTtmcifnJD%2F3Qic%2B%2Fu5\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-11b\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ad8f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":283,"size_decoded":882,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63db3c1f52315d5078c49966d7331eab","sha1":"71f725ae08da916e663a6cc25ade3e4bd5ee66ab","sha256":"592b110b8f5e74c452bb46fde60e7f3fcf9373dee9eb440e6bb0eff370ad1a8c","sha512":"bac1fad96fa9913e1671cb0a279d97f7cded93fe6485ce30de31ab8f8ee047a17ef02fb2f695cd50bde2d52d6ff1bb076542f11fcc5f943b161537ae6b486a34","ssdeep":"","tlshash":"66d05b57f07815119ed950c4b93b7506235d63d65e41015fa2b50bf022c5edb1d09a55","first_seen":"2026-09-09T23:20:51.737758Z","last_seen":"2026-09-11T10:12:08.886349Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1052,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/brave.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.210Z","timestamp":1789121350210,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/brave.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-851\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ok2l1WAsCNu1TcCAIEmpJXkicHw7O1696lcCQOkth61iJ1xs8gT%2B0XuOgm44BF5jCSreep92NGWwuHYz2ZJIQsr1IZ5uoXMXfNRxr%2FXUPxbrmp7ETLotZYoLgGiyYmRKklFUXHKE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016ce170731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2129,"size_decoded":1772,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d749b9c07f098d206e4c6cc91d3064ad","sha1":"1d5fc5b5247f22f0959f247ed4f1565d5a73dd8c","sha256":"b2af87ce430874cd63310c07243196b94441b2cefc135d931158e543032f72eb","sha512":"1c129d459f533cdb1b2f27bb0fa29206353ad760d398645a85ea581110a490adb3478f1df7398c15436ad6512e11f0ed67b782c403a9f01e49b1dcacaf4153bb","ssdeep":"","tlshash":"ac413fc7a370d390bec8f09edf3199989417e4e9daa2818281d7c708b5dbdc2f619c94","first_seen":"2026-09-09T23:20:51.7464Z","last_seen":"2026-09-11T10:12:08.888297Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/cryptocom.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.219Z","timestamp":1789121350219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/cryptocom.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2Buj4c%2F%2BqaEOT8%2FpzcUImnxu6pxaRBOs7b4CGmuVEqxbStEKdbBBA4gMyVPrWIcz6azIgtJmeXl7ye38vuN5pcsb1aVzDcqYqfoT42vAgnrDAtOdqomGWcFZBZEitvOEy%2FHpKtJo\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-e9\"\r\ncontent-encoding: br\r\ncf-ray: a395e016de4c0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233,"size_decoded":842,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3eca66a12b5fc107062c214913eafa39","sha1":"06df2b6608e585b6ccde0a5260789615a19bf8bd","sha256":"017a935cae566f96edc90f9fc5f111d63bc0e120c1412b74d7ebadd20adb191a","sha512":"db9307c28007e608030e0b52b38adc409a81c77c8e254e9db325227cdad394632ea6047db45efed96ec8a8b3115df7324619b3fd910889c9766f4e41886a242c","ssdeep":"","tlshash":"51d097c7204ce1088a0613128ff8342e113c21c4da98018df4e00220278d2bfbc1aa28","first_seen":"2026-09-09T23:20:51.781291Z","last_seen":"2026-09-11T10:12:08.869419Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/keplr.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.223Z","timestamp":1789121350223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/keplr.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7LQtcQONTjHQCk%2FFHLtaVhacJtNV050Xp4jynC8%2B48sfRruSckdq1nxFhPuiH%2B7VzLR%2F1jPMvMvdYkkIucH3iepCg8tGfw8nRM8NYXm%2BdJDXXxB9lG186B7VbwnaP%2FcJrbnaeJJv\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-fc\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ee5f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":846,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a79e1a1de7275536ddba1fae0d165fd0","sha1":"dbd02d54235ada6f102eef762dd3bff9a289183e","sha256":"c5fb60332a2eec29e1bafdbc56801ef2a4e79870cece43451b609f40f6ac19ca","sha512":"40a2666b854d89d00f8087f64feadcb72d715f27ce3155f1cfc3418a75f5cf593d1443d61156ca67e7baa7ac717f0dde070e2a90fc47a00add6554d3109b35f1","ssdeep":"","tlshash":"a4d095c5120c8c1c74120511d778353911750193498c5114e4b11034631559fbc37a5c","first_seen":"2026-09-09T23:20:51.83499Z","last_seen":"2026-09-11T10:12:08.880395Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1036,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1036,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/static/home/staking-dynamic-poster.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:06.196Z","timestamp":1789121346196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /static/home/staking-dynamic-poster.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v%2BlScEQV2uQNOUnTbxbEjQRjtN%2F9cESNfCWOaum1mJej4Orkn%2FdgacQ83%2FBN1hXdYnrLLF44pvzbUOa14aNOSyRzDs%2Bg9aJLd9YcAgh4MoNcE%2Bgc%2FM3%2FXcOvshXRZn%2BaZ%2BztTN15\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395dffdbb6f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":749,"mime_type":"application/json","magic":"JSON text data","md5":"b2652793b3591b97ba13f9dc2a83b115","sha1":"85351cd3ab1a55a61157dafebb26c03a9ab9474e","sha256":"7ab737e619752ed7f78d6a449a6e46b23348b67df51790b5099f8645944ceea8","sha512":"8da4a3092ca9df3aefec2cbbd837e5bf62ef02ec0bb86cde05f784d8e7a901a5c9928ce0d46124cc6e6996af359df0952aa52f66934373056f7c3a86f48f30a6","ssdeep":"","tlshash":"5cb01283c7793d3407031c83201e25715574c57988b42065cc0cb3665b11911020bc60","first_seen":"2026-05-23T13:21:09.103712Z","last_seen":"2026-09-11T10:12:08.802308Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/img/base_caidan_0.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.152Z","timestamp":1789121350152,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/img/base_caidan_0.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-70f\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbkCphU4Kx5Y7bbxagTCeTZCUrJtIHSNEU7XuiI2yRI8t9qcAmAYdHg%2FrkOFmy2KgyWYrn7vWC0SfyOPVpVgtRynSyWpS5fTJ2flFcGW%2B0tYhBs7t8rFcZ1ZHQyEoVLocK2TBrH8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0167cdc0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1807,"size_decoded":2557,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"168d072ebbd4ab4a158911f8e7175670","sha1":"50f27cfec34f0d99c499e85eebf7016ee68862aa","sha256":"933c9baa9f728097b500b75fc18fcdaae296e47364a08138643ab5ddce8aa6dd","sha512":"cbc683a8a76ec6004f7385d27a3cb7806915a709a6ff1f7fe40108f0deddc5c4dfbad2aa7e9b66f4976cdd9ee761775a50428d33856b2c6e4c6a02098fad4458","ssdeep":"","tlshash":"f4312d080b92a189deadc6e200c64e7a59739121c7f9c75e2946c71f8d3d49c0dac6d9","first_seen":"2026-09-09T23:20:51.819412Z","last_seen":"2026-09-11T10:12:08.797984Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/user.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.170Z","timestamp":1789121350170,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/user.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-67c\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8%2FNzp0nND3Pa7jp6SjvabrYFm%2Bv5Bm7Yr6xBtNQq%2FY5aGZhLW%2FXS%2BjTiLH2tyHY6ZJ3TfQg9SDJIDbfTp713DsemPgpJkLfMj7k%2F1XE4jhXnxhxUdat%2FKv1PC3MvrXVnQjMq2PI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0168d2a0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1660,"size_decoded":2425,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"37aeb24005b40b6b7091ec92efc638bb","sha1":"2414282cbbbbcb96f27617835d7dee8658add8a0","sha256":"9fa3330e3c005d40675e0a44c50e9603f2ebfd924caf9c48c59ce5fc32456b6c","sha512":"46ff938c6f34aeac338edd3d828632b1c0c27c2b263d7f516f07f6a60f21cf7bacb5b1a6f3c95a2239364e2cd96ca4d7edf3a3dd378da85e9a73ff2218f06e66","ssdeep":"","tlshash":"2a313cd3c712f849c9cefe7350c565d221a8a1c68ebb01080c655134ed756483a87f73","first_seen":"2026-09-09T23:20:51.860787Z","last_seen":"2026-09-11T10:12:08.87354Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/btc.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.183Z","timestamp":1789121350183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/btc.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tpqn4s%2FsdJlT7xeJBYI%2B4oqW9Dt3nFi0Hh6%2BPONxQC%2B%2Bq%2Fp%2Fxjs2uW5lFuUHI3OOT72rkSfUFHkMXS51a%2FlmXoLKZHIr6vf4TGPDOXqCYeHt7aq4gRbCmXlxPSDlINbyER5dXGOv\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-133\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ad840731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":893,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6418a6e6c6249e9d7f15343aa125d35c","sha1":"f68036ea2697cd247bcef8dff517a402a840a7cc","sha256":"42e12a526f05f2ca1e950ca6381f3177d2df50ec84ba9a3dd07a40401e23b4f5","sha512":"01669e2135d717c70263b4997c61e81fb394bbb5df1ba535a571faa64edff31eb6a3efd359ef5bd6e9ad3db85c39a8c63ed733d6981b47ca7b71bef0f27389e4","ssdeep":"","tlshash":"dce0c249c6ac5d1cfba64700eb2f3078522532a32e4c4596567e1931a10196eb52b5e9","first_seen":"2026-09-09T23:20:51.753329Z","last_seen":"2026-09-11T10:12:08.861547Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/products-showcase.gif","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.197Z","timestamp":1789121350197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/products-showcase.gif HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-6b73df\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWu%2FfowX9KBPWAbtz0OmVbORA7E%2F5fmYs4QAeVcZfP1JVU8nMvf1bfD81c3GqYNkkzjc%2FZzGNcsrHbS%2Bq9WaZJ90rl4fwTvASAJQVM5z8piFrXK81uoH3P2gNtUSHIgONAAjCvc0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016bdc00731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7042015,"size_decoded":7012543,"mime_type":"image/gif","magic":"GIF image data, version 89a, 720 x 540","md5":"b697edb779caca02231e46c1a51372a1","sha1":"ffda743a416510bd6f7b04484d7cdcca5ed6d3b5","sha256":"66dd4aa7020ec5364283f1d8523a9423a51044e756246d8f07be4dae65a9d2e4","sha512":"4b5afbfc4b8de5d27aa29f9067ead3810f4ac7e1b402e2c0a6fb59601bbc0e230db4814292301e6d7967d14d6c662e6e435ba67966711e3a30d6fc9b85192df3","ssdeep":"24576:WA7GUaJYlnww92ixFEzJXVX4bwMfvmieLpV5uGDstgVrn:4JYlnZwixC4bwMn6tJ","tlshash":"6c2523d31ddeda579eb614d38dc7efb82f21aa1c8914fc2666fe91bc788f0021085895","first_seen":"2026-09-09T23:20:51.84922Z","last_seen":"2026-09-11T10:12:08.862689Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1566,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1566,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/walletconnect.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.201Z","timestamp":1789121350201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/walletconnect.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EEoZEBMIvcNqivRiRgu%2FjjYvtKxkOpMcmUCiPXSmEfb3%2Fj1NaB9Vv%2FBeik7yNJmWXXKZYexBxAGT2%2B8hr3xRbFKG3quOM%2FWmdKdwnOEfNDPleUGOzYRL26%2FSE2NFMhCRGsVKAi1\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-2ce\"\r\ncontent-encoding: br\r\ncf-ray: a395e016bdd20731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":718,"size_decoded":1035,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a866a3abad1b47096f3d3aac53fb46da","sha1":"1bc7315912146e8a61fb6586c4c26d8cbe1b7877","sha256":"c2321e305a6bc6d2d049be98c09f3d198c5c577e6c1164753a6c3d63c02c8768","sha512":"f2a129d5f92a23050b4eb582b79f51fceb10142561d8c6f7ddab292cf1b98adbc1ae29e9c1051a648f1e5dcef9fe85d95ba2fee06f6a9f940d38f790baa81bfa","ssdeep":"","tlshash":"3b019cec2f3e0a0c94d2fb2a6f10c526975c18aeb0a180a1505f4f28d0e75edf3935c0","first_seen":"2026-09-09T23:20:51.796621Z","last_seen":"2026-09-11T10:12:08.870748Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/coinbase.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.202Z","timestamp":1789121350202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/coinbase.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-85b\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVyFiGFKqvZCnmlqz9U5rJ%2BLKSa7940nS%2FEWDPzajeG7Kod5%2F4yyULR%2BpWVeQDD8rj4%2FBSy4YvSLBUfR4WwTCeyCrYfEdK61%2BSZ3orEUY7nnetgr1LKnDI8cl9GzUICEmfZveeUO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016bdd90731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2139,"size_decoded":1751,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc54f99c1b605d65390f934adc45382e","sha1":"151ef93aec3ff58361275118ac48342877bd8ba5","sha256":"56b8783f97f2d978e45d2a1f08ff6a79759f7a7488251e1ae7879cec180ce949","sha512":"07ae8e0d7b90a508722448a58ba9a819daef5e36b0b9091b2ae57400dfd0c707e3aa2714e8d8d7150c4ed0edbd002f1c34ff648250a057f1b86183ba1b6d4192","ssdeep":"","tlshash":"1a41f0d14350d76ddddae45def30bcb4e12bd08ea4f3d58846dfdb1492ab888ba48814","first_seen":"2026-09-09T23:20:51.787503Z","last_seen":"2026-09-11T10:12:08.843858Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:32.918Z","timestamp":1789121372918,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: TXQsj39Ts8x8RjdU6y1Jcg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e0a4cf49120a-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/img/base_qukuai_0.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.158Z","timestamp":1789121350158,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/img/base_qukuai_0.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-48b\"\r\nexpires: Sun, 11 Oct 2026 10:09:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DfBdaMBb%2BtIEg88w7CSKd8nVD3TWU8HDH7Si0taZOohrnqPIgTEz4OQTM6Vudm4c7asKdWcC9loAxVUpVDlHcbNCv8%2FRg70vzu7WxOaSbE79zBPbJy10stUQ7YhE6MeV%2BtP0M%2F9n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0167cf50731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1163,"size_decoded":1922,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"2395fa04d15a64e072213bd093f37552","sha1":"867994f8f7d8383ef6b40cb15cfb8d8de72e1fdf","sha256":"2107f06b0508721cc5d406f46f220875e058a819bac4a2af3480ec598e5200a8","sha512":"72bf9d9fb1e2aada0a2ab3eb4c7e46dd020189af66f20b58d485652961262b594a3ffddd7150c0bd4373a8e2f29d0c2d886f9970a9353d9b39d24dae4a067620","ssdeep":"","tlshash":"4421a78e3f40a85ff2ca94799a3ea3196833bed7806b7300f313951016ca20755756a6","first_seen":"2026-09-09T23:20:51.830872Z","last_seen":"2026-09-11T10:12:08.883822Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1017,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/reason-security.jpg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.194Z","timestamp":1789121350194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/reason-security.jpg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-2dff7\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDv07ZR540%2Fw08%2FcAXNApfYi7ubstxvAlQnZkuqaSrXQnwONBSChrDGuz3IagfvUg7WIGvnrJMOwEjCvGULu5oOTpBP%2BL6KZUSDp7KCfirrFE04Nqcolnl7Xts67v6Who2T%2FZhTb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016bdad0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":188407,"size_decoded":184507,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1055x1196, components 3","md5":"937206df22eb681f5e24a6c657fc4fa8","sha1":"1d59a925e7eae7c502cc59bfb6ce320ea26014b2","sha256":"9edd6408b01daeef46e842401d059f51c80c7c086e9485caf8d77378d1182807","sha512":"343f794e60738e8a08b7337384d1a9d89e2264d28b86d6dd96c182022a6d86ab0cd4db821fda100c974d2127d25f6b3226943c22410105f208faac71261724b9","ssdeep":"3072:oqnNjua5vd638xMVI/Og79FM0d7/2yYuK1LyDahKBEheOspJ5qs23qSUctHxGLk/:fKv3NVdu9xOrhy+XeO42aS56OZ","tlshash":"3604f1036d288bc7a06487f8bd034edd2f661b5ee9c478ef85674e877b646200c9d94e","first_seen":"2026-09-09T23:20:51.743482Z","last_seen":"2026-09-11T10:12:08.879759Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1359,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/img/base_link_0.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.150Z","timestamp":1789121350150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/img/base_link_0.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 791\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\netag: \"6aa31840-317\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCWsy5FQkdb%2F8h7EcQQuBlfaRGftFEcBLImv32Wdq1q3ddZsne8HJUS3ATNzDAdsRBES7ZKTJ23t5JtsY6EdwPgJX7FuT8JR5hhvIGVBnvIDukx%2FoI01GcjhWj9JvNG6R3T5ad1B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0166ccc0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":791,"size_decoded":1512,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"e01e58ebb9d68aa3ca91c95f3bee099c","sha1":"67d0515883bde9e181b110c2e62b789e32ba1408","sha256":"4d3333a1616ed4ca561d18a286aef6b0a997f85e84691958613ba1ce6c837741","sha512":"fed8eaaefd1f77f5030fc69bcfd05a69894be251c29ddd7732365ec47010c9d1440a8a628c5cdbbaee0e31d7f43ca392be0aef7c015326b159f54dfddffe0efa","ssdeep":"","tlshash":"a00175e394959cf2584d9374d1ba34bba53ba1fc756222080c85f7f05e4a9e0873c10f","first_seen":"2026-09-09T23:20:51.801576Z","last_seen":"2026-09-11T10:12:08.854721Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1082,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/img/base_assets_0.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.161Z","timestamp":1789121350161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/img/base_assets_0.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-4e9\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cx%2F5GsRwGe8iF1OyxanppZbevZoBET5vSk0bJxxzmJHqZc2S7t9QFJVhu4oBDVaBazKgRseHqSNc1gc3xfRRqWFddSto4PZV9gwiNjkF79Q7Je7cdIfMG%2BlMJK74uE5cCBAwt%2BC4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0167d090731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1257,"size_decoded":2014,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"b61f8cf9139905c4b838cfcbea4af797","sha1":"28f953665fb3b5d4208d699dab0856638ac45c9a","sha256":"9578b10dad4b2a341d73f72315b3de8633e63dd732c020373abbf696fe7e8a08","sha512":"78f30e35c980240ca429fa9498924fb596326a3f8be9f549546dbce6a1a12b403c42dfdc9f1241be97e731f3ea48eeb0e03ba06fb0a839d4151f13670bcb29f9","ssdeep":"","tlshash":"6b21b7bbf6b4887c79d3cb42ed2023285830117c624ef1ea2d44d4613bee38846965e0","first_seen":"2026-09-09T23:20:51.768929Z","last_seen":"2026-09-11T10:12:08.80376Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1040,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1040,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/eth.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.184Z","timestamp":1789121350184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/eth.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O5J94VRb3eGAqHnHclDhDM%2BZ40N%2BJp3keM8vqufXisFEvAojLXj%2Bg6sTqhjCLROBDw06luVqV0vyWDOHZux0DuXLviG%2BvXjsO5xl83ueLVI0Oben5oL5LrLoheMr83YyvSud5W8%2F\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-f7\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ad880731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":247,"size_decoded":855,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b8c5aef86d8d6770fb52bb3136aae0a","sha1":"c1a67dc6275898321f24b5e41f9382430f62def5","sha256":"cc44886645894ad90aafd43656847536238829e5427f7bc6a55ecf7cc8ebbe27","sha512":"056e29de9fa2290cbcfeadf5a5d4a7a02639006d18278b9b945f95707a0239c156f5925b679fcbf89be18c12ccbd7782440226b81280cfe2ca61e409896329ed","ssdeep":"","tlshash":"88d0a799b02c4805c69cc305dfbd795021b9b0d55244099ef0e61e967392bb77e439a5","first_seen":"2026-09-09T23:20:51.806787Z","last_seen":"2026-09-11T10:12:08.885703Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1013,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:09:04.504Z","timestamp":1789121344504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncontent-type: text/html\r\nlocation: https://coinbasewalletop.com/Coinbase/#/pages/base/home\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YggNIgmRKFwRtnZHIPSUR090RqsNCeMEWlYWTt1vqC7vBj2E9Pfgoy75ysYzxe8vy%2FFoRCXlJLnfaVR618HPt5voI7xgMv%2BZC4Ge%2FqepU%2BRDJMIw0YPK%2FZkfd5l8XkjCjXYc4hb5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395dff3597d0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":1123,"timings":{"blocked":-1,"dns":11,"connect":2,"send":0,"wait":1097,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/#/pages/base/home","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:09:05.635Z","timestamp":1789121345635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/ HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ukVxymD9Tx1M0fEkQmMRGV3RfceicmKrAbKpZM09YW2f5SYDk46SS4dxL8a0nGCYfsHqBMx%2FX0PNjYe1CRRFZ%2FldUj%2Fmlms0NFmTuaeAyC%2Fhztir%2FZ1sczAHx7IMiKpi%2BYgEERkX\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a395dffa3ca60731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999,"size_decoded":1005,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (726)","md5":"a48207fe30d143cdf6b1633a8c81485a","sha1":"bfb54e1204789d7b0acc7647e9d890a24eb0667e","sha256":"a8f2d5cecdf2d38c2f0caf30105007ec414072d5634622aa3f40709236342cb4","sha512":"2ce4d8f6c90c7eddc7937455c0fa066e5c038bc866a6142acb00088ffb9ecffd02499de65cc641fec5b8b08b99ab9e85a5cb38923be1b22095edef44fbc539d3","ssdeep":"","tlshash":"b311d461f815c0af7e21577d66fa301ccfc6b55a6a70cc34b06c1d944f58788823b903","first_seen":"2026-09-11T10:09:57.003403Z","last_seen":"2026-09-11T10:12:08.877282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/static/image/home-banner-poster.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:06.198Z","timestamp":1789121346198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /static/image/home-banner-poster.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:07 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvZardgUR0%2FV2jR2kRCOiwOYZy22VARK0fRB9jyPLcl%2FekaMUJWnvkhwQd1gBkpsNK71aaFK6%2FHZyreNMI6qZV9gDzyMEeBe8%2Fgg1%2BzM4%2FyE54Mcz1h7DIpycLORBTWPVtltZydM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395dffdbb7a0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93,"size_decoded":743,"mime_type":"application/json","magic":"JSON text data","md5":"b2652793b3591b97ba13f9dc2a83b115","sha1":"85351cd3ab1a55a61157dafebb26c03a9ab9474e","sha256":"7ab737e619752ed7f78d6a449a6e46b23348b67df51790b5099f8645944ceea8","sha512":"8da4a3092ca9df3aefec2cbbd837e5bf62ef02ec0bb86cde05f784d8e7a901a5c9928ce0d46124cc6e6996af359df0952aa52f66934373056f7c3a86f48f30a6","ssdeep":"","tlshash":"5cb01283c7793d3407031c83201e25715574c57988b42065cc0cb3665b11911020bc60","first_seen":"2026-05-23T13:21:09.103712Z","last_seen":"2026-09-11T10:12:08.802308Z","times_seen":14,"resource_available":false,"data":null}},"time_used":1220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/bell.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.175Z","timestamp":1789121350175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/bell.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 666\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\netag: \"6aa31840-29a\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PiXY3DTpjGh3sAuGhqJl3%2B7vfF2tZDtNUjE6yvRDz%2BEBXaWyS7KHVY3rWMPHkyeLsE1%2Fd%2B5VSxs0cgLUuyUBTiG1CadnP%2F9IbgsKnd3wwBg0MpB0Iw7mc9Dp1obAuj4sg8g4p85\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0169d490731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":666,"size_decoded":1393,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"9fb130c439aaa301ba5b6394e33c846d","sha1":"6cd01b22b22e80c6cddaff0091acbc97d79f5da1","sha256":"020c9e7fa7f13df26e6d08418e5eb4f691508bceb1791cba1660fddeb12e910b","sha512":"1d40808330385fbb9e74cfdf1a08d209197bc2460d572ab206e109b788cde7097f3cda7d472f2ee4de972e12214d7fc7266089394a87bbcb87c3cff12800e4a0","ssdeep":"","tlshash":"280188a15f155c35d4e2c2760071384d58335a061e03a35c5821c87cad3516f35e9365","first_seen":"2026-09-09T23:20:51.73463Z","last_seen":"2026-09-11T10:12:08.884484Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1021,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/ada.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.191Z","timestamp":1789121350191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/ada.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzr8Syl5FGC0U3LOe5o%2B8Abms6TkSggjZASCdKA7i%2F0Fm3mSLZVgcItTvNkezxGFevhLhP75ucSGs%2FRvUxuQoYFJFsZsB06TbNKELA5CPcvtvuMSGb%2B2aY%2BQQyNUjLavntsxGcql\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-1c3\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ad9f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":451,"size_decoded":839,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f40711f5ca1dfaa9ba82d78329a802dc","sha1":"6e11aee21850f963ca00ae3c56ac731b8e5f74e7","sha256":"5532cdd26f15e7be1259fabcc152c2d3239494446c783e054085df01ccd66733","sha512":"eb3297572b1af9fe3390c89d13262908082f5cae6d0437a6ba1a5c909b3856d4d4c311fc04804c7b1833de8df4ee1e7dc4a271748649beee72988a06dd3bd9ba","ssdeep":"","tlshash":"b2f0a5a8516efd399768d0ac866b70d0b03e30492b96974e34684e36a9024733d05278","first_seen":"2026-09-09T23:20:51.794801Z","last_seen":"2026-09-11T10:12:08.816999Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1031,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1031,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/reason-yield.jpg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.196Z","timestamp":1789121350196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/reason-yield.jpg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-2e02f\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ibM0EtVXHBEUyKcDOZXN%2FQvBnEzDlGEKdMDm3BGBhhgSdoSFio%2BK%2Fg5WBsu8YTNyOQoVD96dcdqm%2FuDp7ihcfFyyLQjZYJ4wuzcZa2p5xwicMXRUNUJ01iU4ULFuBkTy6z8VFJGb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016bdba0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188463,"size_decoded":186997,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 980x1047, components 3","md5":"1d77160aa706549efcdf608a9938363d","sha1":"361c2bc659df547d239368154626505451c13775","sha256":"63d6947e4204267dacb13e0c226d00a2888fc4335e0d80edc3ba32cbb16b77fa","sha512":"50b715f095f886c7cb17ba234f7375e71b3d00764c51e2103d446479f8ec07b8915f8a0e915e67d329bc65114d173c7791537e76dcede888861b1a2d64649ef3","ssdeep":"3072:i3hfV3Z7nrMRckcFmK/k2yLC6ACSabHFSIts5mknicK+13mSLUaVwK6zolCqd1:e5V3XkcFmwV6ddbI1ckicK0WS4Bxohf","tlshash":"50041217181a8b439170d6f47e0b1f862f645e6cbfb06e6d49732cc7b5a5a910cee02e","first_seen":"2026-09-09T23:20:51.785336Z","last_seen":"2026-09-11T10:12:08.833974Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/download.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.226Z","timestamp":1789121350226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/download.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 463\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\netag: \"6aa31840-1cf\"\r\nexpires: Sun, 11 Oct 2026 10:09:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Bi8k63wizHOm0IErtleV9LGA%2BiKmkHBzHmoOp2bXuCE9D8ZgsgmjsdcwcwWi8B4j9dOu1Ab%2BGTYwY%2BzYujau3ECWgZvhb5gBzWHGFI4s9cJSjBmEEF81QvfXHRnwawNu276et6M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016ee8a0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":463,"size_decoded":1186,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a3198414cfa024b2e0dcc257111c1499","sha1":"28fe2e6d008ae98deb5902166db4d2b2a37cd4cd","sha256":"c2c885e7fe1303c0de03518e205f2706450f42c3e1bf4a80fbdf8b4c8dfdec57","sha512":"b71d32691ad4d9fe4d2362a5d0c727a62109ab4c1f0796b1dd0c19cd4324937313dcac380aaf9b1072092c3cc313a86a234606dac9647a0cb58dd396cc7dff02","ssdeep":"","tlshash":"f2f054b392b059d48a8cc32b1df3848143c57827933398144c1e41a115d00144d43b46","first_seen":"2026-09-09T23:20:51.789752Z","last_seen":"2026-09-11T10:12:08.858127Z","times_seen":5,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":281,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/pc/bell.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.232Z","timestamp":1789121350232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/pc/bell.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 924\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\netag: \"6aa31840-39c\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eaq%2FB6eUvBjZa%2Bvvn8ZAz8q%2BHlTwAkRV69ALUrGPnLoKPbxvc15FkVPBBT2NGRu4yKcsxgGqLI7eJUG50%2F6LWlY97iW0jq2GRwPEQtXFUM%2B9Ftc3cXr50hpQBxp1b2E6TT7DD3Yn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016feae0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":924,"size_decoded":1651,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit/color RGBA, non-interlaced","md5":"a5786746168531dfe27ab8fce85503e3","sha1":"46b51d4e0bfdec4f601c8633c6855831332cb9a5","sha256":"6ed9000b06dd2d0ca2e73efd83c99e1b862f6e655512cd4b0ad369e99ef24c23","sha512":"15fa54fc52bf1d53288f4f53624d54239c2bb188a8ed606611a526d9dd5efaaa5d6e541c49a7902e8c354268bad4cfe0bd6003b71da5f3004259b60883617466","ssdeep":"","tlshash":"7a11881b4a44d7e3df7a01bd21fd569dde711284213526191e6cf9375177b4a5403402","first_seen":"2026-09-09T23:20:51.867621Z","last_seen":"2026-09-11T10:12:08.875061Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1026,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1026,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/banner.gif","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.103Z","timestamp":1789121350103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/banner.gif HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3183f-6dd2b6\"\r\nexpires: Sun, 11 Oct 2026 10:09:10 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnbDtaKfsJt24nG00LGBowTVRonnxtTBJrlruj%2Fsqd587VMw5GJu49fH1sgq9epF2kj8Kz%2FpM5kgSEOFvjI4seHhUEp8zmynAVafdEu6nzhD%2B%2B22MPzXHLc1pj0ZPvre62xRDnk8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0162b740731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7197366,"size_decoded":7123092,"mime_type":"image/gif","magic":"GIF image data, version 89a, 457 x 476","md5":"5a320849dd7422b37fc8046a29248b20","sha1":"1aa1c0d2efdfff545e0c142c55c3dc66c2f5ebd4","sha256":"81d197d525d9420afa54254662d577d2858f9dfa22b7f9af982545987952c234","sha512":"bf88111926755366f084a6ef3498ae984b2b07bb1707b064a5a58c5e45be78cc42a6c9ce4cd7af9f4fa955d8e62494b8e70edbd74dc7d47a5493661daa5ede6b","ssdeep":"24576:0VovLdnU171OuNb2u11/y7b/8314E1rBVwM:0V4ibJLKHS14EZBVwM","tlshash":"8b2533d44434ecdeb9960bc16f79f8541368cd2a039c9723b726540f37bab69a4f06e8","first_seen":"2026-09-09T23:20:51.799368Z","last_seen":"2026-09-11T10:12:08.878373Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1271,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/doge.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.190Z","timestamp":1789121350190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/doge.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lB%2BhZMDww8bfN4N36dmXoqi%2FsAYjBZtOhkVkRYsnAeJYG4UWIG%2FrUrIfCFxbzF6zurPIpk4gSBeSyrHqQw4IutCOVs%2FwuDlAxKOdnhILGS5qWufyFWoxPQCfgPoxqnZXsux%2FQ3gC\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-112\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ad9a0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":274,"size_decoded":875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a66733dfb6721e747105897bb3dd8dcc","sha1":"ecf4780983a3a6267b734f4e34fad8a82bd0ff5d","sha256":"e4a553703963bff6bbec41bec503ebdd17317af47c932b98966b80d49715108b","sha512":"4d52336fe3b8d9b4364b9a08865c9dec86d66df88471d32dfd1e691b218464cc6e63addaa6de52f648cfecfd760a263219f95bb9b01a332b2609bbca6e1871dd","ssdeep":"","tlshash":"ecd02b06523c5c1eea188114eb39313401a5609a294c016e90304470730929f77fb6d4","first_seen":"2026-09-09T23:20:51.775159Z","last_seen":"2026-09-11T10:12:08.8052Z","times_seen":5,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/trx.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.192Z","timestamp":1789121350192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/trx.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFiAnHv5GLJ6s2mYyAHL9GPZCW%2BtqnQX3V2P8VWrWF8KGKYlxPmhZBL9kgENjncEQVYzmshrMmFRFS2G67hyYEQtUaAkvNn1Z9dNF19EYEKcU6d0WNELu8nK7j9DCYT74ZrtzqO6\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-d3\"\r\ncontent-encoding: br\r\ncf-ray: a395e016bda40731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211,"size_decoded":822,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1d03b07507504a8b7447f743c1b951a","sha1":"03ff127be85bf7e6d989a7c892b8d5f9cba89338","sha256":"a0e328d947c43e24d5542e078e2365a1905c8006a9a6bfa4a2f7eb0e74970fa5","sha512":"708fce19b262b0b7e1684ff8b6f0c290cbe6ce9f01bf1b061326a565fd144a3c015dc100bb3a5747f624b57caa846c9669a7b582e176b39222e0e99d946512f3","ssdeep":"","tlshash":"15d022a9e53e8814d524900029bd7455a1ba20ed29438686b0fa2d64221afa32e02c98","first_seen":"2026-09-09T23:20:51.820828Z","last_seen":"2026-09-11T10:12:08.889585Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1060,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/trust-wallet.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.200Z","timestamp":1789121350200,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/trust-wallet.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v9wkSj%2BVMsY2Ab5BRPKWaX9ZZBQp9BzpnxkevYNGpo4dGFcqCYDgxKL54DdCfG9PoAzVqY4LVX4y7ahOcvAta7EzB%2BbVivkToniRa0kyAtZcyckmIaCPaGLr9ND3w7Z6WhO83TWs\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-141\"\r\ncontent-encoding: br\r\ncf-ray: a395e016bdcd0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321,"size_decoded":886,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93f5fea52e84a38b2fb0114a688ce956","sha1":"71ad78335150593d059f6730c8e5820f106fdafc","sha256":"ac689dcba542891f39a6cb5cd59dafea93a59cabb950686a4e9f0ab1d793c49f","sha512":"a96c77264245f00b104fc728c52034974a70d23026a31562d19b17605ab9a461bdc6c8e716b7ff2b92e2e8c0e34db10f54a64839cc6790ca3d4f61c2db496828","ssdeep":"","tlshash":"cbe086aa2218991caa194626eba87539103e11c7a68c0559e8f1357462193afbc2fa98","first_seen":"2026-09-09T23:20:51.812448Z","last_seen":"2026-09-11T10:12:08.850082Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1073,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/binance.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.209Z","timestamp":1789121350209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/binance.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nvEsLVgpT7%2FewqcpChmbdrpA%2FSY0SG504TozCZf0LM6IjOzwPbBZDHJif2NryFSXE0IaguNYtyiQ7lsZSEYLi1IiXA8GQXYXczNO50z6V51nSJ7JhPDu%2FO7%2F8vOwdwTQ%2FD5W3sne\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-1f9\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ce120731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":505,"size_decoded":970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2801e20b00cc1c8bb972affdedc632f2","sha1":"24db417199ebace57ef73bb7bb08fb870d1ca956","sha256":"90eeb50d404f0e23dc6f1731b5a799709687e9223ae3ccf8dde7b7bcf46b63db","sha512":"5b0b9657cc9b5dd7479cba0d401d45541b653c0dbf30d34fedb6207dd132dfd54501876a448f3c0e2f3c900f792584e3bbf25f7ba61123c3d2c5477b58657618","ssdeep":"","tlshash":"a5f0279693be5cc04bdf8760ed38eb236aaa607ef3e8153e59c0801452e37823c4a904","first_seen":"2026-09-09T23:20:51.850703Z","last_seen":"2026-09-11T10:12:08.808306Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1065,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1065,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/zerion.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.214Z","timestamp":1789121350214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/zerion.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HxvMmSY1PiMbDLb1nLzC7y8aVWGDzExpS4Of97Pq7IHyWvj7rwVLvprTLSo0j5W%2BxI%2BJRz0giVZPrRjDTWlhhwdboPht0BqFD1uCbYuxNQxKrcC4tYDzxmLzCxpd2AhZES7NPZVN\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-121\"\r\ncontent-encoding: br\r\ncf-ray: a395e016de350731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":865,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0b2d4a2e2fde13ddf39f4a5cbd5a847c","sha1":"998933b497689c00ad0f4057a1cf758630a73976","sha256":"a8005f338b5bd975e314090fa12a7e872f3ce6b45b27efbc123ee99ab7851d3a","sha512":"d191d55d41356ac68a81c48a2954600496a65abe9c145b3c8fbf110f0a2892008171e204c671ed06dd3fb27d63f366dc3ad4cb83c8359076db75f2b61b4dd591","ssdeep":"","tlshash":"f5d02bd6621cac1cb9328529d7ad353921bb12d35b4d933db8a0253869052af7c3fa68","first_seen":"2026-09-09T23:20:51.86498Z","last_seen":"2026-09-11T10:12:08.836731Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1067,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1067,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/bybit.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.218Z","timestamp":1789121350218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/bybit.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyuJC7RAsxMm%2BFMvuOeDTNJ%2Fv32aw5XCj6lsaKU74LSGNIzYOt7KTXz8Tp%2Be1USwAUwmjQbqeyQgtd7l5EqV4pJxDzT714lDRyJlgVAR%2BIHy2gH%2BBLQTZYHJgXVL9IkgOJBxcOV7\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-133\"\r\ncontent-encoding: br\r\ncf-ray: a395e016de440731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":307,"size_decoded":875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb214059fedf31d3314535c412a3950a","sha1":"8eb17b659b9eb40d6e96450aef4c75a6ba1286be","sha256":"60c9f49749438af62c395d345da5052970e798b42a59677045cb1d7ac937c3c8","sha512":"2a51b6bd1a9971d506adb549474939146a35894bee4e871b630f6481bcc3aa4bde093b5df0aeb41dcd10a1f6b4044006ba8807b9736ec9adacb8f86d2490b9f7","ssdeep":"","tlshash":"25e07dc699882c0cb6134b14d71c3138433923b34d5c8549a2ee0330e2009ae753759c","first_seen":"2026-09-09T23:20:51.833676Z","last_seen":"2026-09-11T10:12:08.865055Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1098,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1098,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/js/index.94d2fc52.js","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:06.185Z","timestamp":1789121346185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/js/index.94d2fc52.js HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3183f-c00fd\"\r\nexpires: Fri, 11 Sep 2026 22:09:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TxLAzKeGyuX2ekkmhs8WEm6QGKi2JlelnI%2FtreFRabenWsaub6pzE1IbacXSJK70X5dGpiePGTEkFdrni8gdSSDzYKJvERQR5rDVwg2htHGA0sVAoVIa1kDBCIdenIBTT8N2zceW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395dffdab200731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":786685,"size_decoded":249861,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (57180), with no line terminators","md5":"43f90963dcfc9a0c9bedfcfb8df9db72","sha1":"cec1040cf6076acbb908de02d1048d68ac691efd","sha256":"ac09bab7dea3e3bc70a3fef2c0a43a312ac9ac3304982bdd33b330e654318b8e","sha512":"38528ea1ec47b1bb49f352850808032b57ec6507bbd60774b4edb4811fde8d70b767d4ab23b7262eb7c57e09e97098fb2c75905ea0809213c6437cf5d3e80f79","ssdeep":"12288:QvNmJrjgsNKSblGAB3pBHOMiPAKVhyuuJM8C3jxNRWU95pHWzvE2AWampNPi6:RXgsYSblvBHOMiPsJ6d/TpHWzM2AWaC/","tlshash":"6ff49eae798e577f0aa54355b4cb7b0630e81dc1f609d0c5dbdc9c2b12dc88e9692b38","first_seen":"2026-09-11T10:09:57.024506Z","last_seen":"2026-09-11T10:12:08.813434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:08.642Z","timestamp":1789121348642,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Tb8u+VN85PdW9ExxP2rmwQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:09 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e00d1fc0723c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tongji-collector.dcloud.net.cn/WebTrack.gif?ProjectId=964f0397-af5d-45bf-99d6-8fb3500d7849\u0026TopicId=8563e231-f4cd-4ab0-8870-917e4b04e810\u0026Logs=%5B%7B%22lt%22%3A%221%22%2C%22t%22%3A1789121348%2C%22ak%22%3A%22__UNI__0A8F5E9%22%2C%22usv%22%3A%225.14%22%2C%22v%22%3A%221.0.0%22%2C%22ut%22%3A%22h5%22%2C%22p%22%3A%22windows%22%2C%22on%22%3A%22windows%22%2C%22did%22%3A%2217891213484821719256%22%2C%22md%22%3A%22PC%22%2C%22sv%22%3A%2210%20x64%22%2C%22mpv%22%3A%22134.0%22%2C%22pr%22%3A1%2C%22ww%22%3A1280%2C%22wh%22%3A1024%2C%22sw%22%3A1280%2C%22sh%22%3A1024%2C%22lang%22%3A%22en-US%22%2C%22net%22%3A%22unknown%22%2C%22an%22%3A%22NCEX%22%2C%22domain%22%3A%22https%3A%2F%2Fcoinbasewalletop.com%22%2C%22sid%22%3A%2217891213484821719256-gtv7x37c-bu8c%22%2C%22cst%22%3A1%2C%22url%22%3A%22pages%2Fbase%2Fhome%22%2C%22fvts%22%3A1789121348%2C%22lvts%22%3A0%2C%22tvc%22%3A1%2C%22sc%22%3A%221001%22%7D%5D\u0026Source=webImg\u0026Time=1789121348707","fqdn":"tongji-collector.dcloud.net.cn","domain":"dcloud.net.cn","tld":"net.cn"},"ip":{"addr":"124.174.83.100","port":443,"asn":0,"as":"","country":"China","country_code":"CN"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:08.951Z","timestamp":1789121348951,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.dcloud.net.cn","organization":""},"issuer":{"commonName":"Certum Domain Validation CA SHA2","organization":"Unizeto Technologies S.A."},"validity":{"start":"Tue, 26 Aug 2025 11:47:17 GMT","end":"Fri, 25 Sep 2026 11:47:16 GMT"},"fingerprint":{"sha1":"47:A7:6C:09:6B:1D:CA:2D:7D:39:2E:C1:7F:15:DE:5D:F2:C4:0F:77","sha256":"EA:73:37:83:D0:38:44:D9:3C:0B:26:F0:DD:D1:22:2F:36:F7:F2:86:A1:B0:58:52:DE:4E:0A:21:D6:89:E7:3E"}}},"request":{"raw":"GET /WebTrack.gif?ProjectId=964f0397-af5d-45bf-99d6-8fb3500d7849\u0026TopicId=8563e231-f4cd-4ab0-8870-917e4b04e810\u0026Logs=%5B%7B%22lt%22%3A%221%22%2C%22t%22%3A1789121348%2C%22ak%22%3A%22__UNI__0A8F5E9%22%2C%22usv%22%3A%225.14%22%2C%22v%22%3A%221.0.0%22%2C%22ut%22%3A%22h5%22%2C%22p%22%3A%22windows%22%2C%22on%22%3A%22windows%22%2C%22did%22%3A%2217891213484821719256%22%2C%22md%22%3A%22PC%22%2C%22sv%22%3A%2210%20x64%22%2C%22mpv%22%3A%22134.0%22%2C%22pr%22%3A1%2C%22ww%22%3A1280%2C%22wh%22%3A1024%2C%22sw%22%3A1280%2C%22sh%22%3A1024%2C%22lang%22%3A%22en-US%22%2C%22net%22%3A%22unknown%22%2C%22an%22%3A%22NCEX%22%2C%22domain%22%3A%22https%3A%2F%2Fcoinbasewalletop.com%22%2C%22sid%22%3A%2217891213484821719256-gtv7x37c-bu8c%22%2C%22cst%22%3A1%2C%22url%22%3A%22pages%2Fbase%2Fhome%22%2C%22fvts%22%3A1789121348%2C%22lvts%22%3A0%2C%22tvc%22%3A1%2C%22sc%22%3A%221001%22%7D%5D\u0026Source=webImg\u0026Time=1789121348707 HTTP/1.1\r\nHost: tongji-collector.dcloud.net.cn\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinbasewalletop.com/\r\nOrigin: https://coinbasewalletop.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.22.1\r\nDate: Fri, 11 Sep 2026 10:09:09 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: *\r\nX-Tls-Requestid: 89aa43b3f8eb49179c13bc7bf121a473-b42827c\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.22.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":333,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":-1,"dns":51,"connect":166,"send":0,"wait":180,"receive":0,"ssl":385},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/mobile/market/tickers","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.121Z","timestamp":1789121350121,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/mobile/market/tickers HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TppWFAyLv6rBqCkCB2TfWBRJWc7gxeZXav0lCL7Yss1RGrH0ajS7rsbzjdNmgUDpfCnGo5ujfDFADu%2FntcJdGfAF3Hyl2FUIkN0SbSJulKyMn%2Br4hAxU6u44GthpWJaMQkIo88fk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0164c0b0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14828,"size_decoded":3173,"mime_type":"application/json","magic":"JSON text data","md5":"56d8b571d67dd47077ce2e404be8a10a","sha1":"21c3a4686a77acd5f3cbd549d6a76d6e87fe8fb0","sha256":"4bded38e2ef85d742ed9535d99b90de716746df094958730c9f3f03c17bac1b4","sha512":"0347e1a0797455d12b9515add2abe894b59e4ed94d355cf7e3e80f93cb5889b82bba585a49d03d7a46bc26e461410d606aaa69ef2ccd4025af864a28e13c5607","ssdeep":"384:PpBl67qOmDDX9JuPflI/Dl2akKmqafh71NSz4rIh:PpBl6mOmDDX9JuPtIbl2akKmqafh71NK","tlshash":"4562ed5b331d9e46e0b98cc34eca3394189e7d99ddd20f68c6edcd4e0596f2f611aa20","first_seen":"2026-09-11T10:09:57.025938Z","last_seen":"2026-09-11T10:09:57.025938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":863,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/image/usdc.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.171Z","timestamp":1789121350171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/image/usdc.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-cd8\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xg8cI9Rt2G0L34kDsGacxbfxvD0vY26lJX%2B9tiT2LbPNp97t10mAndrKEZ51whz0YTPCsaosmeFf00H3uWHsQx7bPoD%2FtaRD5nYbtO9be83HjrS%2BrvdZyOQxRzm7jv0lTt6DpSK%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0168d330731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3288,"size_decoded":4047,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"4c191ca0daacc149ce936508cfcafa1b","sha1":"22ea020c938fcd4e5f8ae4be491a63068dfb3769","sha256":"8a7f283d0791f983557d40ee2b033b6d54a9349643c19396761a19d6c0b07cd6","sha512":"46f2a728121a90d101723d683e44cff12f36740a2b4fec029297e0ff228d8966a5965e93f8afa7b85daaf0de2dbed3ffe68e0584437975a2ca1a117e138f5787","ssdeep":"","tlshash":"45616ce700ac7fba5cb66ce1163dba133a5f110086be8d684148be75c4288e7fd097d5","first_seen":"2026-09-09T23:20:51.803007Z","last_seen":"2026-09-11T10:12:08.867636Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1052,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1052,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/sol.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.188Z","timestamp":1789121350188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/sol.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6OtDBKdDYnI4bnOTc9bryfFGX1r2kauEHvoPYi2SalEdybpVRZXjMiAL7bHt1B0djfNPTn9cNYpfdlBlnUA%2FV4wG4ZD5T2c%2BrnC6VQE6RsW9N0VSDjVs96dQLBHpfROBXlpb2vDU\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-198\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ad920731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408,"size_decoded":929,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b09bd863f7b2153e24a9292c41775bd6","sha1":"a59143c7d5b5fa5c347c5bd2d0b5e4737f77fc03","sha256":"150d691d4d9725017839ef4c8de95dc03858d98f1ed32c7544eb8ab5685684e2","sha512":"a4d71a8fa97baec8443cd81258f6380b0812127ac674e442b3154924864205ff8739b5200190976bf73a74e70541ff45a0c04d0d0fe080375150716e2421f7ba","ssdeep":"","tlshash":"05e02bdac66c4816c558c118ac29f0a1223a31926ac5836df0787f1aa0411831d0abd4","first_seen":"2026-09-09T23:20:51.756123Z","last_seen":"2026-09-11T10:12:08.855939Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/xrp.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.189Z","timestamp":1789121350189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/xrp.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYXuOjLsBlzeLoSWeeUvm014Scy5lqMdfhQCBygUaada%2B1uVxY0YMBtWBBs21J12EOeM16JxtDETj0AHzdqRT%2BG3xLpHybMYksLFz5HUnDMtJG0tjNShxWsskoKbwHV39Pxsy%2FCT\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-101\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ad940731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":257,"size_decoded":862,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46439e1ec194da8e122cc2fe22d12216","sha1":"fa4eda8a383c40fb0a123808fa9741496e747e4f","sha256":"810dc75c1053a3f4bad1dadf9d10ccf435650819f6124ec35f5e3d3ed3d79cee","sha512":"117785dd13fb0075b3fac68c41f554e033d996997308998859c52adbe36ab3a71bfbf850ebbe8fef9cb70f52520a83f55ca8b29fa1d403cd1b4dcedf8e1123a5","ssdeep":"","tlshash":"14d05e6956581d18e71e8614ea3a7d6412fb20d3168c5b99a4613830a24aa9f28275a8","first_seen":"2026-09-09T23:20:51.793265Z","last_seen":"2026-09-11T10:12:08.841629Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/index/logo","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:08.955Z","timestamp":1789121348955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/index/logo HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:09 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SjdxejcQKWEa8muo3JFjnXM6%2BQcEl5bvf97QSRvjT2A6fuiCcJCfPb9A2hr%2Bmdg1fZS6gJwmw6qmKhmszO67HPfWdK3r280XS7w9%2FgrnMousDgXuVrce7sEXOEb6HS2i9wBEPpNm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e00efa930731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":849,"size_decoded":1032,"mime_type":"application/json","magic":"JSON text data","md5":"4edf4bfb17138ebedb6a9710678af7ff","sha1":"cd64d7f58e3b685b5e7cca400483f44be0b6e89c","sha256":"af477921008e5e857029e5b7f3fdec1e98a14f9dde28a2ed49ba0b751a6e3da2","sha512":"5a74bd43295217582308f44a1d3faad7781994d1726a89e285b1495ac3e7288e9c8c0744dfb7ef132b49e25e9e77a810d7c8a7a0aaf9699a309dc266585acb73","ssdeep":"","tlshash":"ca018e5d2f486062538633d478bbf914cc58320bb8ede35babcfd8e885e9358252b457","first_seen":"2026-09-09T23:20:51.815824Z","last_seen":"2026-09-11T10:12:08.845702Z","times_seen":5,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:16.706Z","timestamp":1789121356706,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: uyFBBQn+3G5mpZYOPMrS/Q==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:17 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e03f79bab4eb-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/mobile/market/tickers","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:24.960Z","timestamp":1789121364960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/mobile/market/tickers HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:25 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6lfvk4mjNJHhtqWY6JYLnsJEGPK07bqdCLQz7SmWZTOroya%2BB0UCjAKiGmD8fwrc8vT7h8AmcWXYNrLojG8nWj30U%2FwbzHtnAFF08Uet5LqvhQVWVIBkELxR9L1FcMb3e0qTWPig\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e072ff230731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14826,"size_decoded":3176,"mime_type":"application/json","magic":"JSON text data","md5":"bf19dae4bdd45c5429aedf78b1d343ae","sha1":"3647e5f4703917490b6f3f9419f0e40f95122dd7","sha256":"e888506f084b9c80f25b74d2ac268c7e422359bb527cb7cbfbe8433d29b79091","sha512":"78b8eaf5e13b37b4ed53be9247db32ab589296af5c2d5e8ead29e16552ada7873e34ca79b2495b1fb8ed5b7fc58bd52f091885b7d1630eeeb6004eafb974ac47","ssdeep":"384:lqpRRIhGMCrAi2dSrfZc/Pd2akK2qKPxnuxiX4Hgx:wpRRIhGMCrAi2dSrBcHd2akK2qKPxnuM","tlshash":"fa62db5b331d9a46e0b9ccc34eca33a8189e7d99ddd21f68c2edcd4e0596f2f511aa10","first_seen":"2026-09-11T10:09:57.034242Z","last_seen":"2026-09-11T10:09:57.034242Z","times_seen":1,"resource_available":false,"data":null}},"time_used":723,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":723,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://coinbasewalletop.com/ws1","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:28.893Z","timestamp":1789121368893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /ws1 HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinbasewalletop.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sdRuN0cwf38amAoEZ44FLw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 502 Bad Gateway\r\nDate: Fri, 11 Sep 2026 10:09:29 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 6438\r\nConnection: keep-alive\r\nRetry-After: 60\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReferrer-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nServer: cloudflare\r\nCF-RAY: a395e08bad1376ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/js/chunk-vendors.2897fd2f.js","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:06.183Z","timestamp":1789121346183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/js/chunk-vendors.2897fd2f.js HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:07 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa3183f-f345b\"\r\nexpires: Fri, 11 Sep 2026 22:09:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVMsQAUKdG23M%2BQw5NsNIIYW7gbAEAG13%2BYPwoQGCYqpBD%2Br%2F%2BTtabuUEw9jiFNie5Bg%2BeUB7%2B0nKek07POUQa0GGRJoiyK23dstPByow2z%2B1upzkj2xwEd1bOAgNIdq8m53y1X8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395dffdab1c0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":996443,"size_decoded":303269,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65192), with no line terminators","md5":"edf42f8f7a0a12a1a42c7e044100d028","sha1":"74c84572a087365393cf73abe30ea853e05523d6","sha256":"fb0c23ea7dc0f68c89361afed4d69d7fc46f8317469f86c49b600ac1565f7475","sha512":"cbe4685dceda8f34fd88bb7c63290372fc54f916f41a7c42b07fff9c59222e6d55c39417102039dabb08d719f8b693975defa954a58bfc304314b5513e2091c6","ssdeep":"12288:DFSCxR+OgH0BUSlzFAp1Y3X1uuZc3nruMkqTquD:hRR+JH0BrzFDX1uuKrrkqeC","tlshash":"6f253badb282b07547e760b5503f120bb2366966b40a80d8f779e4e46d7c98e1237f3d","first_seen":"2026-09-09T23:20:51.74857Z","last_seen":"2026-09-11T10:12:08.866406Z","times_seen":5,"resource_available":true,"data":null}},"time_used":1328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/api/app/notice","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.126Z","timestamp":1789121350126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /api/app/notice HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nlang: en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:10 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding, Origin\r\ncache-control: no-cache, private\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nnb5oWXGJzyQnEI%2FsDXmeq4z2lrXoBqEPi%2F%2B%2BvAMIMENcjHDkj1pFi9qHNxzFiGo0y0dlUtokRIEcVDKsI7tNleIrhuJ%2FLC9VmvXP%2FMNttwtUhREOcViOMyI9ta9MRTGk5riAIBl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e0164c2d0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42,"size_decoded":704,"mime_type":"application/json","magic":"JSON text data","md5":"fcbac133817d51d3f86a5eb50129c1d6","sha1":"1ae6444e39a7fa0bce6ed462c5dbbfac95a3167c","sha256":"17d23d0db7da15eb43d6534270daf62f55b786837fac25daec2b5d8c9638840b","sha512":"304290335d2842dc89a205c2a1c83e8d103943229243dc2545408f3c0d6a24d1712a796d490a526ebc87fb255c0ea07c7afa85ef06a40a5ed399686078507458","ssdeep":"","tlshash":"6a9004011d047c543f0334c5750f554410d43040c1501131cc5c513ccf00534f443d34","first_seen":"2023-08-06T17:52:17Z","last_seen":"2026-09-11T10:12:08.883183Z","times_seen":307,"resource_available":false,"data":null}},"time_used":410,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/coins/ltc.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.193Z","timestamp":1789121350193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/coins/ltc.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4A0yUVlzD5NxgZXyJf8%2BO2lmLCeVakVZEhtExljxvN7dcR%2B4BkCeYXMnEWTNKUEFuy9ckcrivwcEuoISZjntyoJDsB094cEhguJ7bpis3n5pus%2FJBLovv3p3HlP5pJQ8zhfLEOGM\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-f9\"\r\ncontent-encoding: br\r\ncf-ray: a395e016bda80731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68df481bec402e10dc46133147881997","sha1":"f99d30fa6f7ba972374d194c5b53bfa01d51d7d0","sha256":"55c13b199100254e03fe22ad29df990ada5c5e1ea2e0e7d5525578d0288f9eb4","sha512":"91db23270fa45dbc85c423e00e62940cd5da8276755652fd19ca8e682f06bc8be38f664dca49636dcd3d6ecfe7695166e4515a9500fdafc31b38cc1a74e30295","ssdeep":"","tlshash":"8cd0a74b936c0c2dfb284914ebbd3525107660c73989516ad8711d3162022df753b5e8","first_seen":"2026-09-09T23:20:51.862448Z","last_seen":"2026-09-11T10:12:08.879076Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1029,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/reason-liquidity.jpg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.195Z","timestamp":1789121350195,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/reason-liquidity.jpg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/jpeg\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-29a32\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bo2W8Dgk1b%2Fm0CxwjCiPvffH80ePITULymyOBU2AE%2FBjYIhxLZWHK7OvMRVjQ6Iiwlfs0%2Fno1nRh%2FlMa1iOFlvecbUZ2f9P8oQtfjxfwVvA5N3%2FW2a5is9H7JzEuUYG1oLedIkxw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016bdb40731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170546,"size_decoded":168581,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1009x1076, components 3","md5":"b8906806bf62aa613f77b382509c69df","sha1":"aac4428684ba82f018ee837fc2fb9bc14f2c183b","sha256":"f19f8747afddb35ac6e82f390dc888485df9ad65eb2b63425b62454de5e34a2f","sha512":"8e911d1ef490d6ec20b43a75613d3a87f5233b24ddf55082cdec2fc40ca43b8ceaf372df22c5cab62a0749f379242e1808d28fc075dee676e30d7a5cbe30fca4","ssdeep":"3072:ehYRcTpZ8CKilHVQfMLuhwaniz9+0RIFEM9NjRB02YtVBzUG2cg:ehYuVZPV20LuhVA96EM9lRB02YaGe","tlshash":"70f31213d8dccbeac16045e43d630eb06f8f3a4c558092e781574adab959b376bee90c","first_seen":"2026-09-09T23:20:51.80879Z","last_seen":"2026-09-11T10:12:08.874315Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/okx.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.207Z","timestamp":1789121350207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/okx.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-bda\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwP6YRfNf%2FZrYfu4uq2YOmAhODt3YNd%2BfJLtffJV1dEmiqyI5ECQ5aA9y5ti24ZUcXEFOpbZbZp8BHynt%2FM9%2FN75dt%2F5fQ9P3vOG%2FxLgEQkkH%2FEB%2BfjTBwEYAJSbRk2rq3u9AYpC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016ce090731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3034,"size_decoded":1714,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13938bebf09426674bb4fcf224c9ac54","sha1":"279d21fc725f5d1e3ac68ac7944d0c0ee0ad4225","sha256":"5e8058f832ccddc11f47cfc50923f31b1bb3587bb366085fff2b04af4c22ec52","sha512":"f5e019799349e17f4939ee07ba600121c3b6e0d1e50e5596bfdc64861456167d9c2e6a4734771436d8fba273c9f54c4d707d730294d366d071157626568f9c54","ssdeep":"","tlshash":"e151b7ae97f8f1ec7159c390f0e31135bddfb42a1268c9e0dd488da5ab0a81d62e4c94","first_seen":"2026-09-09T23:20:51.771211Z","last_seen":"2026-09-11T10:12:08.868735Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/bitget.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.216Z","timestamp":1789121350216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/bitget.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b33%2BwTmBFmd0oTZEtUqu2WGNM9WO%2FrceHlVG9ds0ZUhSfogqWbwXEKMKRjn0Y5IYgBtRR4PeaFdazxZ6EnbPRLIN35k7Tx0PDG4y%2F3lHVmm1dtAT6RLvNVE7rYpODuIYv9ZW6tKT\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-f4\"\r\ncontent-encoding: br\r\ncf-ray: a395e016de3f0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244,"size_decoded":845,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d773fb78333db9edb8c4722f65ac2e2","sha1":"700b12063b3b177371db545a6be2da6777b603ca","sha256":"bfdc77e679df11daf1c1285fbf67e54e055f4b767e421cb5833e6810dd673aec","sha512":"935114341ff186865048bdf8e0679429fbea43b5d8e84a18c1100cda1101b9b69da76115adf1e375ff79613d76cdfb2df3f711e8560cf078c9fe2d75dedb5cfb","ssdeep":"","tlshash":"08d095c5124c480c5f210735f7647918055510c35f490058e4b011707a156dffc3fa4c","first_seen":"2026-09-09T23:20:51.82815Z","last_seen":"2026-09-11T10:12:08.887044Z","times_seen":5,"resource_available":false,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":998,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/home/wallets/safepal.svg","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.221Z","timestamp":1789121350221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/home/wallets/safepal.svg HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FbugPF2ldazpqU95zc7uqD8s0nyS%2FqQfDOzzcBxZn%2Brs48MGsCgYrvozDAgu5CkJ2zecv1mrVvg6fTmW4ZLxd6%2BTuv8f5CcRCwbpRRhXdTn4sN3WgeP5n6htA3Wzu%2B0GYGumQ%2Bgp\"}]}\r\nstrict-transport-security: max-age=31536000\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6aa31840-bd\"\r\ncontent-encoding: br\r\ncf-ray: a395e016ee590731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189,"size_decoded":826,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a00a9abd021a626607a2340ec16f3c03","sha1":"f0ac035212f7d4f40a5e1dd7d96e848256ef7684","sha256":"b1765a22a7fe485cac7479b9804357d6b2b4ea33fc85f27891bcba787f94d887","sha512":"b640835b206ab92b699e4e42377cae57884d529cd040a27f040a793ef02e8f119c8e3073c24f3a8ff8426a2d3906bf6ad1ba05a67a9f5186aa81239350fb74e9","ssdeep":"","tlshash":"6ac022e660cc9c088a13621fa6a8281f016a2088eb8801dbb3c0221c27081b3782da18","first_seen":"2026-09-09T23:20:51.77698Z","last_seen":"2026-09-11T10:12:08.810001Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1021,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/pc/code.png","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:10.227Z","timestamp":1789121350227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/pc/code.png HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:11 GMT\r\ncontent-type: image/png\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-2f08\"\r\nexpires: Sun, 11 Oct 2026 10:09:11 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VG85DQvSDTbRBaUKT7Mvr%2BXfibwujPjtV2k9rbIx8gcFjHif8pmZ4DLGHr7BQMeg4fnAHM3luWPNNe9GsdglrUL%2BRZTN6lTSNpNWVFjyqYiSiusXM7c9m59URap0oGIrkiVwsDTM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e016ee8e0731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12040,"size_decoded":9384,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"3ec19831f27f883b03fe7d58b3bab596","sha1":"a0282300025351410d20e376dbbea489c60b5b9c","sha256":"6eb8ba8ca241d358403946158cafeb0c827d8c0830bdb5b77c37382e461c1d63","sha512":"3370563734e20ff08e0cd2a51cacbee9c8c705f59ff4039da884fdb7f4ef890bc7e294bc82e3afda37d9d5dd6c443750012c1a4fb5476e6c3c7fc3aa006057d4","ssdeep":"192:HefBIHc770rUSPooiDe22fkxVzwcqqV8TYi3O3k5jUdLYhSM6uT8LdqJYB6qq7ZR:HKq87IruoiqhkooVoPjKLY0M6bAJYeVB","tlshash":"9f42e5e3c7458673b2111518b51581af58e09e73b821ccaa12cbf91fb7a7fb84db4c29","first_seen":"2026-09-09T23:20:51.837697Z","last_seen":"2026-09-11T10:12:08.84265Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletop.com/Coinbase/static/js/pages-base-home.25907a9d.js","fqdn":"coinbasewalletop.com","domain":"coinbasewalletop.com","tld":"com"},"ip":{"addr":"104.26.7.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasewalletop.com/Coinbase/#/pages/base/home","date":"2026-09-11T10:09:08.683Z","timestamp":1789121348683,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbasewalletop.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 13:36:17 GMT","end":"Tue, 08 Dec 2026 14:33:53 GMT"},"fingerprint":{"sha1":"4D:CF:1C:12:C0:17:B9:3A:5B:0B:BD:72:27:E4:E2:B4:77:CC:3C:4E","sha256":"1A:65:70:C1:D2:6A:5B:E2:6D:46:CE:6B:C7:98:E4:03:56:A9:F0:E7:33:53:47:AD:C7:D9:05:6A:FF:BD:F0:3A"}}},"request":{"raw":"GET /Coinbase/static/js/pages-base-home.25907a9d.js HTTP/1.1\r\nHost: coinbasewalletop.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletop.com/Coinbase/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:09 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 10 Sep 2026 20:51:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6aa31840-13a93\"\r\nexpires: Fri, 11 Sep 2026 22:09:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7oUNAaWw%2FdM3%2Frr65diHH%2FqjfcK2QOdn9B%2FITQSWJoUVUcoUbQThfy2pJFzoIMVD5harijvEmbrmUVi4BQh85PfQdkkJvOmaVHJAlDdp3%2BmixGK%2FV3kbXfjKcCPAI%2FQErWP3Msn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a395e00d4cd20731-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80531,"size_decoded":20453,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64682), with no line terminators","md5":"3eae3c860b1216cadaee5aedd436c544","sha1":"c028f41f905bbf8bec6e353a4d866d259677bf58","sha256":"90c82e16fdd19293b89627cd455a99fb1f88f2f512140067f6fbe774d3dfc5c9","sha512":"5500d8a63adaab4a32895ae89164006275c127269606ff8c2e92414a59ce3f1a8faa8ec6c09b721ab85da4f092cac6f768f4199cfd05db3d1c275dffb8a6328c","ssdeep":"768:sE6M1QtuDl3HDO6ypA0iwskRbmHjMhNmun9ajr+MxX8EfxrXsmIyc8o4/Sy8P0BL:QMyupTO6ypAgO3pzsmILmAE","tlshash":"18732951f18bb00e8d73c19160271f78d0b02f7ab215e49af772be9819d58862b76f9c","first_seen":"2026-09-11T10:09:57.063821Z","last_seen":"2026-09-11T10:12:08.881587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1244,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"coinbasewalletop.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}