{"report_id":"a62361e3-923f-4241-a3f2-8d5d0d5145cb","version":6,"status":"done","tags":[],"date":"2025-12-20T07:03:12Z","url":{"schema":"http","addr":"coinflare.global","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinflare.global/","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"title":"CoinFlare - Trading Exchange","dom":{"size":206866,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64537)","md5":"5073357ee3de55fa9e1872beb65836cb","sha1":"3bd2cb38d86b7dee74ee7324df9c47143873854c","sha256":"c188cc492063b5618464ad57aef2a48f26e2bd9a37698153872ef8fad8d10272","sha512":"0c8dd3006f723ed7fd1ba6ade710e7dbdb9dd65dd6e953f182f724223a9ed1d314066bf8049e38dc715711f7897f5099f3680c26ad555a61def1918dbdb82c4e","ssdeep":"1536:VQQXohhvQxCwUnBQP3zdzcx0TfnUCjPjbfqDeJ9gKrB14QUBphsi:6QWQdzcxYftTjeDeTgKr4QUBUi","tlshash":"1814523093123137f15fc3ad6c6226af756ab353f59fc83527e87aa4cbc99801496836","dom_hash":"domhasha4e55334f5ffad364b7de5c0b359291f","first_seen":"2025-12-20T07:03:22.403047Z","last_seen":"2025-12-20T07:03:22.403047Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinflare.global","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T07:03:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinflare.global","ip":{"addr":"172.67.194.230","port":8443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-12","domain_rank":0,"first_seen":"2025-12-20T07:03:13.492359Z","last_seen":"2025-12-20T07:03:13.492359Z","alert_count":37,"request_count":37,"received_data":2814691,"sent_data":20258,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"videos.mocortech.com","ip":{"addr":"52.84.50.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-12-21","domain_rank":0,"first_seen":"2023-02-25T00:47:49Z","last_seen":"2025-12-13T08:03:02.841924Z","alert_count":0,"request_count":1,"received_data":1573464,"sent_data":540,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinflare.global/","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2dffaed54d9e91bef68f5301af1c4319","sha1":"43984ecc8cab8b971b68b847bfd5267883665285","sha256":"9d1d1a714d3301e9da0507f95357ea813e3b12fc5569e6688519498707e5e596","sha512":"59ba99ba3c3884c12aed9e1e3dbf5e8444d54f214cc4e9cecba04213bdb09187f7900e37b0a8577f432909fc943a8966626037cd4324e8dd4b93b52287da2e3f","ssdeep":"","tlshash":"abb022023b0e222002e0888a0b3232c83a2800220cca200300fc28000a08ac38cbafa0","size":120,"data":"","first_seen":"2025-12-20T07:03:22.436799Z","last_seen":"2025-12-20T07:03:22.436799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/app.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa59530956f0e535108443ba56d04ee7","sha1":"8799f6610e18b5ada1eabb88a5ae6a34fd755254","sha256":"feebaa2a888b6583cdd66da80d633fd4205be5d2ec2c6fdc596a85aac23ab3a4","sha512":"a0f78186b0759d607f9a3ab2b9637c694db7d15a24a74c7cf2b3ec42df2c753a8c0f7f0070196c0a08a58c0e7f036932b9621f335cd68758cb075513ced25f9d","ssdeep":"6144:OXIjsn3SS87WIqsWsC6yhAad8NAmKI8lv+q+SEmaGHkbAgNLeK2yyRdhDJl6:aIjSSS87WIzSAtK3DEUk5eK2yyRHJE","tlshash":"c0e45cd87591f0a417a305eb40bf050af33a2919681dc960f275ecda78b498ea237f7d","size":671510,"data":"","first_seen":"2025-12-20T07:03:22.423915Z","last_seen":"2026-04-04T16:35:31.804822Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/2821.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cf1d4b83c142290d922036ea07f9b66","sha1":"5621d3611bbd0feef7fd3edbabc2f8dceb5f0381","sha256":"f0c1456166bd9e392d2b166f13fddc1f9b79e81ad538b2693c73742c51f84605","sha512":"c466bc8fced200df46328439af56c108f51e36315f09940209906f865ec263ad7e3782c1ff58932dee2b7f305d9afba65597d597504250b48e99418223885c95","ssdeep":"96:0fa7WTG8YesfjzCpGc5tQfnBfC1iTNL9/KYTpLBaT:Eqf/bxRC1KTTpY","tlshash":"22916625510853ac8e9d16b4452354b3a2ae1baf34d7a6a9cb2ecde0d2424dcd3b7c4f","size":4508,"data":"","first_seen":"2025-07-07T12:33:56.230909Z","last_seen":"2026-04-04T16:35:31.796211Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/8870.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"921130ab026abef09ee6a1d86766c9b7","sha1":"03134495a7399a42b74b93505434d7da512efd15","sha256":"def607b480cfa3c092ae3c0d27649f788d2cec1b39d16e41ea038e340f742031","sha512":"1d7c2c0ef1e2d84e70415fd5c300d269dff7a494e8166e1c119229bba9484168a2ce94ba02d21b5d827074a9723350e7c87e1992f0cc608e50246335d26b0a68","ssdeep":"768:Vxwv0Hjz1lM2PxBvnT3qjOrB4EIrDoeNW5kiA5qVeYcBP:lhlM2PxBr3rB4EI3osW5A5qVeYe","tlshash":"6cc2d8e9f4c9b42595db22f240ef402df337ba58760d4c10a06699cc3dbaec6e16396d","size":26812,"data":"","first_seen":"2025-07-07T12:33:56.215946Z","last_seen":"2026-04-04T16:35:31.802644Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4142.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c368258bd3176c40af88573f87ef817","sha1":"06d710ccf0aad2587b85ae601919ed51863d4bc0","sha256":"d723248860e98a9e09d86bd4dcd1c6019443c5b54011ce39fbb947ed60650bc3","sha512":"154f50006699d49a15d00e97bfb6e0425bf6c4acad41c1bc495a65cfb2cd02e172e825a1310526d1b0900069c0c7b7210acc85482d89ee249840997c55cc41d3","ssdeep":"","tlshash":"e921a2be6138e70c754346797757a4b3231e20adb897d0a00def9d5414f7484f28f49a","size":1353,"data":"","first_seen":"2025-07-07T12:33:56.235758Z","last_seen":"2026-04-04T16:35:31.788225Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/6117.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cefc83dc077fc3d321bbfa6c611ffe8","sha1":"108e1368b62f3f9ccaff01d3c6754c534c78b71d","sha256":"a94f22166396fd9ebee54a5019d18255f043fa75435d58161fc90f5cd4b50bad","sha512":"495db85938cc0a460d131b80bf8558564faa7ea5e4885c974dbede0be4444896a15035b5f8c2a46092983a08c312f36c6e5fcae8843224a1cc93c6f6f5bca559","ssdeep":"192:qoOU8mxCDWop8KQI3pxupxN01k3tZvGCkAN+4kyx+9HRfZODKnhbNefpimshbVwj:DnxCDWRKQIH853tZvB+Lyx+lRxuSbeC4","tlshash":"fe32d778735075982433c5dda1fb4e06f6225471e526afe8f2f0985c27d620c7827aab","size":11500,"data":"","first_seen":"2025-07-07T12:33:56.222099Z","last_seen":"2026-04-04T16:35:31.801936Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/1354.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efd235994fbfe7b236bc0ed3d08df91f","sha1":"a1824bb1a34f654195c52d67ce9967d96f0539c7","sha256":"e2b26340948fe1aafe87873aeb96e0976b05013f24c67d31e217c68860a05419","sha512":"f111aac070ceb77fbc8f6cdd71805d816a42efb41723d9f86c9f09a8f36d43b24be4b3613d765b5a0156e3bc75409aedc2d87f3689f6cb6ee010d9f46f971808","ssdeep":"768:i/QCHkm07IJE4vZ1f1lpA5HWI1J2iEk4y9TjHRm+zV1/winFTvpFs:iJCt4h1KASMobFF6","tlshash":"89033a34b600f8f614b7c0dd91af5d29f6253706a92ac8e0f1f4da482796a4d7923f27","size":39588,"data":"","first_seen":"2025-07-07T12:33:56.228551Z","last_seen":"2026-04-04T16:35:31.798029Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/3072.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89bf415589b7fad4570a066de8905253","sha1":"64c2b2beaea0ce6659e963697675da1645e83761","sha256":"f325cf8e29eb82fb9a1c8c46b3e46bbc1a7125673f14f21598b8374d3270fe1b","sha512":"88765e15d5675376281ba5a0f6957c85b2a01663fcf941b1b0cb477f906cb9aed956ad8baf643a92fbeb0db3de19a7d9e30f78286cbc44b8fd30093a4714c690","ssdeep":"192:gx4KDHpSpwCCbhaIHNSSf6qrvkrVbJLrznglc36zgu+2HRjMxILLAoCnGmdOYJAT:gx4KDy/IHNSSf6qzkrVbJLrznglpq2Gu","tlshash":"b032c5ccdad4605000da68cda2ea0e26523feea131658cea332c54de57777ed91a1b0f","size":11136,"data":"","first_seen":"2025-07-07T12:33:56.234028Z","last_seen":"2026-04-04T16:35:31.785208Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/8700.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"046553a5f317b7ce5a209330153db353","sha1":"2688f19a9d567947c39e1e4c3f6fa7d5ae077966","sha256":"40009a5592e55c6c29ace09ab884fd7403ae6ee4c9daba60c563728ae2fa639a","sha512":"d761d85e78807528b1200dc3f3dc721f2b54d04db9b594314cba5435386e4e06b1384d8db8b08fc0103daaa4182e997c064b1d7fbdb375f1e2a3f0045f449ba0","ssdeep":"768:cX5JosMbYpeHJYSWfKuAOWgM6bSPFbzxQC4NHgQX9:cjBeHJYSR19UbYHo","tlshash":"66e23a997a8478e56237d1c953af482cb3327c04fe1a8cc0b271d45d3693b6a8667f1e","size":32903,"data":"","first_seen":"2025-07-07T12:33:56.233242Z","last_seen":"2026-04-04T16:35:31.798574Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4540.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6b4eaa974e662dd7fd2545c3d0f2105","sha1":"d68350071ba2a685b24cb1b27348d14697a04cf4","sha256":"164ee3105cc2fae66ae11a039adf5a8f9693e1a4870dc37b654b3f498200ee46","sha512":"975e4daa3b916dae73b291511715e44de1b9e1fc9d95b11fc31e333b45f4959b8f4e9520d9acc54683f82ae2afa8428cf7ac3a2649eac7e039b38809a9f832ef","ssdeep":"384:77MhFF4FsFLNhudV4OcD+DRaeq0+orGX/9ez:MhX4W3hsDIGgez","tlshash":"03a2980e7823c85c6156aeaa6bff0b1cb25a1f12e135c5109af4e48ff17c65812357bb","size":22346,"data":"","first_seen":"2025-07-07T12:33:56.212418Z","last_seen":"2026-04-04T16:35:31.788719Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4113.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3338ea64c2603138e7dff437e6da67f2","sha1":"7049c76e32eded819ee5d661786d83a80e4cbbf6","sha256":"f1a779a797875923505a890415b5c98a98e42a565f52e8583952a4d6900c7404","sha512":"a1b9cfab22bd6a7794d8bbf3b26df1b676b6e079b8d71b3860317a5dffa49cb295b9a5be8c13c35cdc725ec568e7bb4c722aceaecdde4211d9be374c2ae10366","ssdeep":"1536:4U17plnneU5S2c0E9HLIlrkgmmJpwwktDJ/v5mr3:3eqS2c0E2XloJmr3","tlshash":"5b631ba8b684b4b0a1e781e641bf551ab3377a04750dc950f13ad9cc3a65b4eb133f2e","size":67783,"data":"","first_seen":"2025-07-07T12:33:56.206196Z","last_seen":"2026-04-04T16:35:31.805429Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/3373.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a8e190c19b24e1a132539374fd10179","sha1":"1b8d7b34ee9f4d83650ecc75e583deaedd531a02","sha256":"65bb15ee98c8f5440905716f2fb232bc38ada2f01a5fa3c37adf839decc208e6","sha512":"85b0169ffc8ca5cf44879e6c579f2964af460f6db7d84f7599f8a489d8cdc7cb95cc270f03bf0f68cd36923918391c42972a7c5db4da6ab92014e753beed4a1d","ssdeep":"3072:PM7PedMLMBpXnB0pmW/IEIAfdhZafTQwQxod8gIkZQutY5H5TYuQZMn:1nBa9IEhZafTyhgIkbY5ZTYBw","tlshash":"17144a64b284746861ab81d950ff4908f2322918f9198af4f17dc8cd37e664ea537f2f","size":201331,"data":"","first_seen":"2025-07-07T12:33:56.234776Z","last_seen":"2026-04-04T16:35:31.793315Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinflare.global:8443/socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNVq","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":8443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNVq HTTP/1.1\r\nHost: coinflare.global:8443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://coinflare.global\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 07:02:50 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2rLd7CEnD9Ies71U%2BDbUBBVCjN6CzmmeA3eE%2BHaaZCvNOotFxQKJbh7K%2FWKq8HjAlWQK07s8vy87MMXvK%2ByH%2BXv%2BM%2FnzEOFAzjVcrQ3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0d46c67a485689-OSL\r\nalt-svc: h3=\":8443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"58879397959255281de16ce206ee8b79","sha1":"3f75c3fc2029f2601beee06b835fc93510de2ab2","sha256":"de66e3fb588b41f889f4847bb4ec330471dba7f50b07f52c743a60f836e93c49","sha512":"3b7a1c5a7f2bae406cf8f667dc89e8e955d109335ddccc85b63a9c03d1da092fdb7653e6ad46b4252e19c2d935d089e11daceb2a675f2c4c6c9d3c351bce40c0","ssdeep":"","tlshash":"9db02280802e82c0fa20b3c030e3ae082a8c38cfc8c8028c22a000c8888b8002002a2b","first_seen":"2025-12-20T07:03:22.404978Z","last_seen":"2025-12-20T07:03:22.404978Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":204,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global:8443/socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNZY\u0026sid=FqzKXgKLu1Jwa0ZQAC1l","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":8443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNZY\u0026sid=FqzKXgKLu1Jwa0ZQAC1l HTTP/1.1\r\nHost: coinflare.global:8443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://coinflare.global\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 30773\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=im6KuHw9dUnGibLZGgiPhvVAVfjhZlbSQl2XtXX8ZCFuT%2F0ONcpMojBH2nssdKR69exWglY8v06z6c1IqLHp4kH2x%2Brm0bweQkE4%2Fh0J\"}]}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9b0d46c7dad75689-OSL\r\nalt-svc: h3=\":8443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533010,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"data","md5":"3b1cf53c000f17be653e6dd97f3322bf","sha1":"310c6e44a96fb0a4be31e5eb372c418f2a2e3045","sha256":"0ce37b68043a00c7ab49d79a13aaa87ef8bad4255c50c6ae182e9a7d51e954af","sha512":"6a0680804b615d5272d11ce7b6b5fd8957e3f5a3037dc1207da7810bf4d677501ea27cf8a9c7944d99de5b7f9f4374dfe64c6a8c5b19080dedfbe489ca9d8f58","ssdeep":"1536:PfdyRyDZxESbH+M/DLPDPk0wk7igP5YnkusDTbFkaQmqc2IxnzAtPjj4TXoKhhZL:PJZxEgH+sDqHfeVR","tlshash":"1ab4aa356f447de0a59ed950ff97b8240d6d312410dc5a8ea8a8cce838263e572dc7eb","first_seen":"2025-12-20T07:03:22.40615Z","last_seen":"2025-12-20T07:03:22.40615Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global:8443/socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNck\u0026sid=FqzKXgKLu1Jwa0ZQAC1l","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":8443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNck\u0026sid=FqzKXgKLu1Jwa0ZQAC1l HTTP/1.1\r\nHost: coinflare.global:8443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://coinflare.global\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8vGWadCV4PxrJsME26EUbJzyN9bmPgG%2BrH8H63lOZbQaDm6HL6oMX28q0MY6w04PnQJlCRM9tx%2FDMGpbjzkkJxDeQUMSFVLSZud7%2F%2FO4\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0d46c92b785689-OSL\r\nalt-svc: h3=\":8443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-12T12:15:22.009751Z","times_seen":12072,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4142.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/4142.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"549-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ctCp5K3ucvMl0B3f5zOHG%2B%2F1%2BAKb5GA6PQ1GJBm8VARd0z23VKsqR5ad1%2BPy2BROAQK%2FTRhRJQWqr8hEO5WNdNXRVyVo5jkmi%2FWavbJYUgQ%3D\"}]}\r\ncf-ray: 9b0d46c9c87da0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1353,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1353), with no line terminators","md5":"6c368258bd3176c40af88573f87ef817","sha1":"06d710ccf0aad2587b85ae601919ed51863d4bc0","sha256":"d723248860e98a9e09d86bd4dcd1c6019443c5b54011ce39fbb947ed60650bc3","sha512":"154f50006699d49a15d00e97bfb6e0425bf6c4acad41c1bc495a65cfb2cd02e172e825a1310526d1b0900069c0c7b7210acc85482d89ee249840997c55cc41d3","ssdeep":"","tlshash":"e921a2be6138e70c754346797757a4b3231e20adb897d0a00def9d5414f7484f28f49a","first_seen":"2025-07-07T12:33:56.235758Z","last_seen":"2026-04-04T16:35:31.788225Z","times_seen":15,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/6117.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/6117.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"2cec-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K1KM1%2FXfQu6tuahPKiDdfWQePNcerRnJaEiIOwVCfZA2K9lQbKxbsDeZCGlNLpspJvyZCORrB37%2FNgZqms5nXRoiIuTah1c9I1D5Y2ilIv0%3D\"}]}\r\ncf-ray: 9b0d46c9b878a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11500,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11500), with no line terminators","md5":"5cefc83dc077fc3d321bbfa6c611ffe8","sha1":"108e1368b62f3f9ccaff01d3c6754c534c78b71d","sha256":"a94f22166396fd9ebee54a5019d18255f043fa75435d58161fc90f5cd4b50bad","sha512":"495db85938cc0a460d131b80bf8558564faa7ea5e4885c974dbede0be4444896a15035b5f8c2a46092983a08c312f36c6e5fcae8843224a1cc93c6f6f5bca559","ssdeep":"192:qoOU8mxCDWop8KQI3pxupxN01k3tZvGCkAN+4kyx+9HRfZODKnhbNefpimshbVwj:DnxCDWRKQIH853tZvB+Lyx+lRxuSbeC4","tlshash":"fe32d778735075982433c5dda1fb4e06f6225471e526afe8f2f0985c27d620c7827aab","first_seen":"2025-07-07T12:33:56.222099Z","last_seen":"2026-04-04T16:35:31.801936Z","times_seen":15,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img-url/favicon.ico","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img-url/favicon.ico HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 10 Feb 2024 08:13:46 GMT\r\netag: W/\"10be-18d92146290\"\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:50 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLLnDM5OhftPPPxCjwMIetaSStcosGJBpZIdO0mxtGPSfzWTw6rOEVUj3t1zTGmqVlZ9QsU6HotBEi3I2wEJGY1vb7pYEdGaNCjMXQWfqLo%3D\"}]}\r\ncf-ray: 9b0d46c7a844a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"9d79dc0062b9cde76f293e6791ad0aa4","sha1":"17c2b914afdf1fa8d3e5edcc4111b171a2d488e1","sha256":"ef614481cfed319bbc6bf0516a107c6f8e3b37e410916cdbbd8db1f90cb485b3","sha512":"d4c938d1dabd0963b6787e8305ab3b9463e89f787fbdf90e18f5638e9d2645117d5253568ca21b426a7cfe9d8460ba6ff66a2596b7c583dbb84e568399bca5a3","ssdeep":"24:suiDO23N3VGYWIb1Eivx2bbbbbbbyO5VZ4bIbnvVwVlj/NEIbbSS9CQNU8Exs0lJ:ADO4N3J72hvKDNUl3kQs42a0rvKaKNqo","tlshash":"ad9189325aa5c048fd35be31d2c9d16c1dcf5ca7ebb8835d29da3ea85e7132c14b20a1","first_seen":"2023-05-21T14:48:07Z","last_seen":"2026-04-04T16:35:31.797414Z","times_seen":45,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/8700.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/8700.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"8087-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSGOme%2FKe%2BDfsoKTJt%2BF8zruvErUMqcHU%2F3F4i5Cwd6qiKnfUvrnaKA%2F9fXSHpIG5%2F2hq0S%2FKFZZMrfjH%2BeVE6HBSu0p%2FuI%2BF8Go3IrtG%2BE%3D\"}]}\r\ncf-ray: 9b0d46c9a876a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32903,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32901), with no line terminators","md5":"046553a5f317b7ce5a209330153db353","sha1":"2688f19a9d567947c39e1e4c3f6fa7d5ae077966","sha256":"40009a5592e55c6c29ace09ab884fd7403ae6ee4c9daba60c563728ae2fa639a","sha512":"d761d85e78807528b1200dc3f3dc721f2b54d04db9b594314cba5435386e4e06b1384d8db8b08fc0103daaa4182e997c064b1d7fbdb375f1e2a3f0045f449ba0","ssdeep":"768:cX5JosMbYpeHJYSWfKuAOWgM6bSPFbzxQC4NHgQX9:cjBeHJYSR19UbYHo","tlshash":"66e23a997a8478e56237d1c953af482cb3327c04fe1a8cc0b271d45d3693b6a8667f1e","first_seen":"2025-07-07T12:33:56.233242Z","last_seen":"2026-04-04T16:35:31.798574Z","times_seen":15,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/contract_icon.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/contract_icon.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T16:53:52.226617Z","times_seen":17858133,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/etf_icon.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/etf_icon.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T16:53:52.226617Z","times_seen":17858133,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img-url/empty-light.svg","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img-url/empty-light.svg HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T16:53:52.226617Z","times_seen":17858133,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/etf_icon.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/etf_icon.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 10 Feb 2024 08:13:46 GMT\r\netag: W/\"dd47-18d92146290\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-length: 56647\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ky57lJeBtjOso%2Fb7hRpOO6jfsi%2FbsYmx7nLc2zxnNt6QvPur2VTZhaqEOAB0NFmvhwUrDSXUrEjvgEEerRQ6bw%2BjLajrGUQAgW6LGzABaMo%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b0d46cc58b9a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":56647,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 406 x 258, 8-bit/color RGBA, non-interlaced","md5":"61294fff2070230ddde57827a2cf4453","sha1":"6690ffd6988fd4b8c1d72c7756fe2d8fc58d4e85","sha256":"3e5921c96365d0abe0d02a219769e9395404ce5e08f9c7c968138a4bd1e85f37","sha512":"3e3bb63f49f5f28351db1d7aebb24317c51d330a5b644eb9f3e2a33cc42a74d31cfc8492adf3a9f465ea3bd94639c23cc43210700794b3dccfccb8848eed62f5","ssdeep":"1536:r6HDisYVe8leq80BnQ7zqzQXwqYgqTojn31LcQDj:2jEV6q8Tfg+zjnr3","tlshash":"414302261a45046dd36ce2ba93ea3921dc3b2284d81d81f3f5a882d8953d7716d6f9c3","first_seen":"2025-07-07T12:33:56.224657Z","last_seen":"2026-04-04T16:35:31.79976Z","times_seen":15,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/3072.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/3072.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"2b80-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ein6X4sSZrfR17a79reN4zpBWfeujxKzO9tYTEA%2Fp%2Bk1jhBhxiFx4qm0LJLz77db81cIKCfpcBiLsYFvSV9CouZfmCHPRfEG7MevSmLcJSc%3D\"}]}\r\ncf-ray: 9b0d46c9a877a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":11136,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11136), with no line terminators","md5":"89bf415589b7fad4570a066de8905253","sha1":"64c2b2beaea0ce6659e963697675da1645e83761","sha256":"f325cf8e29eb82fb9a1c8c46b3e46bbc1a7125673f14f21598b8374d3270fe1b","sha512":"88765e15d5675376281ba5a0f6957c85b2a01663fcf941b1b0cb477f906cb9aed956ad8baf643a92fbeb0db3de19a7d9e30f78286cbc44b8fd30093a4714c690","ssdeep":"192:gx4KDHpSpwCCbhaIHNSSf6qrvkrVbJLrznglc36zgu+2HRjMxILLAoCnGmdOYJAT:gx4KDy/IHNSSf6qzkrVbJLrznglpq2Gu","tlshash":"b032c5ccdad4605000da68cda2ea0e26523feea131658cea332c54de57777ed91a1b0f","first_seen":"2025-07-07T12:33:56.234028Z","last_seen":"2026-04-04T16:35:31.785208Z","times_seen":15,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/fonts/bankgothic.ttf","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/fonts/bankgothic.ttf HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-frame-options: Allowed\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 20 Dec 2025 07:02:50 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzzvJ%2BQ6EWrid2xVQrRRWFV9RnWPQ4bYu1yTS19mOG0v1DfOWu0cYt0J%2F%2BYSym2WNT3QWhytdJ95Zd5I2cgKlTm2CFg%2BKMesDrcykCXht0I%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b0d46c6c82aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2191,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0dde4acc74a7a197b07075acd5135066","sha1":"917322c73b5babb33deec5f1204b21becc442012","sha256":"469e3081e23c2e9cde29e77e8f18a67b866288cde549dc69a71397648b44c4b6","sha512":"c1880b0836d7417fa02a782a0fb5b1b40536b51a2da1c110765edb74e91b3d6e0e0483a8de560c0120e3e36767c40b68b0b98e576d4c740261b816cbfd9f0101","ssdeep":"","tlshash":"c141ff2361514c2d92b0d22569f6f088eda69103d2285d19b29d36df0ff2ec0c8f3675","first_seen":"2025-12-20T07:03:22.415829Z","last_seen":"2025-12-20T07:03:22.415829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4540.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/4540.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"574a-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqyJosgvrfbBjZXTG%2BtKJZK8iFM6ZL3Llwa6Aoq143uhgylq832oge26HLC14GzQODhFtYTk7S3VGbR77E180TYGtWT9qgwnwYB%2B23om%2BjI%3D\"}]}\r\ncf-ray: 9b0d46c9c87ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":22346,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22340), with no line terminators","md5":"a6b4eaa974e662dd7fd2545c3d0f2105","sha1":"d68350071ba2a685b24cb1b27348d14697a04cf4","sha256":"164ee3105cc2fae66ae11a039adf5a8f9693e1a4870dc37b654b3f498200ee46","sha512":"975e4daa3b916dae73b291511715e44de1b9e1fc9d95b11fc31e333b45f4959b8f4e9520d9acc54683f82ae2afa8428cf7ac3a2649eac7e039b38809a9f832ef","ssdeep":"384:77MhFF4FsFLNhudV4OcD+DRaeq0+orGX/9ez:MhX4W3hsDIGgez","tlshash":"03a2980e7823c85c6156aeaa6bff0b1cb25a1f12e135c5109af4e48ff17c65812357bb","first_seen":"2025-07-07T12:33:56.212418Z","last_seen":"2026-04-04T16:35:31.788719Z","times_seen":15,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img-url/empty-light.svg","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img-url/empty-light.svg HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 10 Feb 2024 08:13:46 GMT\r\netag: W/\"2157-18d92146290\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bmt0K3EqKmll7L4cbdsbXPUXuhmMwVtGYlsl1aDz%2BNdkJ9OUxd%2FRfC6j837PcxU0i6GBcNkXUVgqQCAodTyG09U8ZaNYrgstMbcthfgiFBw%3D\"}]}\r\ncf-ray: 9b0d46cc48b3a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa523aa02ea0695d12ba276410c23515","sha1":"c92f41da60ee90bcc4f47b5a41d1d88828830399","sha256":"8223fc3611bfe0931c38cfb87b3697c805469adcb58973edabd5714ec9329c25","sha512":"989a709ea461741da439d705648318bcb0f1b8acaa76a9c6a9ecf78f4f011947175f35a05f016a1c419f9bb02bf2e88fcacf5b1a20e9fef6bdf10b8267a36b99","ssdeep":"192:u85GAW/U53tlimE/7H7JZNqMqW/prk3QIOvHUYPcy42pnkt:x5GAWItlimE/7H7vNqjW/pg30UtX","tlshash":"fd02a6d4765c9fa5e408e2fdce0941b9352e24f6e6c049b4c3a27f06b4249daed1c9d4","first_seen":"2025-07-07T12:33:56.229319Z","last_seen":"2026-04-04T16:35:31.790444Z","times_seen":15,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/qr_code.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/qr_code.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 10 Feb 2024 08:13:46 GMT\r\netag: W/\"9fc2-18d92146290\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-length: 40898\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=On5yThdVZqT%2B5sC%2FIbhYrWIuS2%2FFMfo10rjLw53Xq9wKntKd8EXGCSFGp92Vk7sd02MVXWKGZz%2F%2FLQhonqLyABUFHeRBMUs12T2AyrqKCqc%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b0d46cc58b5a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40898,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 260 x 260, 8-bit gray+alpha, non-interlaced","md5":"82a2de76cd5746f6cfc5f7c703bd161b","sha1":"f21b5bf9b6fe6d36e804c3fed235936c9c96a76b","sha256":"e39e39d3918400ec89d053de0bfc698e2d5dca4d7b966e7cbe2d6ebf7741e198","sha512":"f4b6512b2467afc7f0d25a22909c4b91ba18e124339cdf95822d92c99630d639bb48f0fe9220d9fb9a40a697038114d6c375c1d3bfa10ad62665d5e0f3b28199","ssdeep":"384:MtyioPCiEsXK6oNt//HS7cm6AObbjukt1fuTaUNFMBqUMMpQ4RvUlUl5yAW2E13g:MtyNK2X7+o6rulTaUFDqvn/EOajOq/hW","tlshash":"f703e1b2dcb1f7e0926fc137bcc462ca56b94e2fc5525c04348d0935af68be24e6b562","first_seen":"2023-12-02T00:16:03Z","last_seen":"2026-04-04T16:35:31.796819Z","times_seen":19,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/banner-video-poster.jpg","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/banner-video-poster.jpg HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-frame-options: Allowed\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xRebYAutHJO3N%2Bga0X%2F7h6waMWesBBsrTps6S0a9cCrowVWNyuQ3NJPMQ55zf5N6VyG%2FApjJAd7d8vIB8lN5ZnS8XWUTrzKRRoc4SddRY1Y%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b0d46cc68bda0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2191,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"6e011961322a5f0bc0916a14c6ffb19b","sha1":"e226dcf3abe075d3a071316b5853005f62f76f95","sha256":"57a74c2d6aea45dd582be21ca330dbf66501789c3cd3e55cf8db6d9fa14d6487","sha512":"418802fc34ee90aafe8829b3e6663370a366f89dd0aed1816917ebb6a83654593970dd80fc81893d26394568d07b44c35b19efb196ef67970adf2f47c6a2d731","ssdeep":"","tlshash":"2841ff2362514c2d92b0d22569f6f088ed66a103e2285e5ab29d36df0ff2fd0c4f3675","first_seen":"2025-12-20T07:03:22.420032Z","last_seen":"2025-12-20T07:03:22.420032Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4a3f4ee8d25ffd9eb29b.ttf","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/4a3f4ee8d25ffd9eb29b.ttf HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"21cdc-19aa1289618\"\r\ncontent-type: font/ttf\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2F6EzPXKCRLT8OSONIQiUb%2BXaorpex2jzSSk%2FnSENerFW%2Bn7i0x5WW%2FIaZ5VJve2NoWmP3ykYOZrLWAfvo2ERPQGIm9ioIaCQvsTzeFndtc%3D\"}]}\r\ncf-ray: 9b0d46c9e887a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138460,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 32 names, Macintosh","md5":"d445c3bc3f43895eeb2b115f9df00d7d","sha1":"966e394f65a50b2a92d3856b9d11c30d3e8d7b80","sha256":"a732ff38404889a64490d6bd9fbecd3d439373128f115a0603f2d74f076b18fb","sha512":"964fa5e0bbc0bc9c62f0ce1fb8de30ec5313d9b31c17ab86da1898346d45d1712d471fe7d2d0475240c8641d1632d1512ec0d508bafe004c7369ee71cfca7713","ssdeep":"1536:obdGtq65AxC/cWl//C185Z5xzX2spJO+rF+69hBYfa0/nnnnnnnTIiEPKG3rua1F:oxDxCLlnSuPhBYfaWnnnnnnnDkDzH","tlshash":"64d36b85734b475fc21387398c60c26aa765f738eba3975abdb1887c745a2cb0c086c7","first_seen":"2023-08-01T14:43:37Z","last_seen":"2026-07-20T02:35:30.348965Z","times_seen":32,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global:8443/socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNez\u0026sid=FqzKXgKLu1Jwa0ZQAC1l","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":8443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNez\u0026sid=FqzKXgKLu1Jwa0ZQAC1l HTTP/1.1\r\nHost: coinflare.global:8443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 19\r\nOrigin: https://coinflare.global\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"420[\"loadMessages\"]"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-type: text/html\r\naccess-control-allow-origin: *\r\npriority: u=3,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BmoAqaZYxP2%2BXOeF%2Fm5czzr%2BFsYQgYADTsmQ8t9qr7GqMIc2VnyTQK97wy848kT%2FqFM9hxusJ2JhEoqHM37kwUR6t0aLj41gjJbh6pQoJWE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0d46ca0bdb0731-OSL\r\nalt-svc: h3=\":8443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-12T16:50:29.912041Z","times_seen":447968,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"videos.mocortech.com/%E9%A6%96%E9%A1%B5%E8%A7%86%E9%A2%911080_1.mp4","fqdn":"videos.mocortech.com","domain":"mocortech.com","tld":"com"},"ip":{"addr":"52.84.50.16","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.mocortech.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 18 Nov 2025 00:00:00 GMT","end":"Sun, 06 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"69:1B:01:11:21:CE:8E:3A:BF:3D:5D:7C:B0:78:40:14:40:B7:B6:82","sha256":"36:5C:89:13:A6:9B:9D:86:92:E5:70:C4:20:31:29:8F:72:EC:09:AC:FE:28:E2:3C:1A:F3:E8:27:43:93:11:E2"}}},"request":{"raw":"GET /%E9%A6%96%E9%A1%B5%E8%A7%86%E9%A2%911080_1.mp4 HTTP/1.1\r\nHost: videos.mocortech.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\ncontent-length: 36524114\r\ndate: Fri, 19 Dec 2025 08:28:46 GMT\r\nlast-modified: Tue, 21 Mar 2023 03:00:54 GMT\r\netag: \"fbf156939d873f643100d753dddaf3b5-7\"\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-36524113/36524114\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bb489e045ccdb24c55a720f2ea03e7f0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 7Vb7SJF7xV5OiR4wLTAkSxF5IfilcZC4bA_XTxIaoZtpEkdrUJ4Nag==\r\nage: 81246\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1572864,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"37304a701207440be8081b1d1d7af805","sha1":"f8bc7761d60a943dbe19cf682c16ee8696e63efd","sha256":"ff9057f26fed2e838c8918f93d64b758e852bfd00708141d362cf835578dd143","sha512":"28a5e557f01f34a26a44e9693cf43081abc6caa55e1313aed577e845dc8519ed01af461d6a12c9b1e84717f4315239e577cb10b315a0cefa8ce0f5e5bf1c26e6","ssdeep":"24576:BYJo6YvNZbj9R06Q5lW/3oPs3eKd+n7+0MHCbMJ4sw:CmvN5aWx3eK8nGibMJS","tlshash":"5e2501ee8f591519f20be43d61c0c630c3a6ec81d444c657baaea3a46f765914f0e8fe","first_seen":"2024-12-23T11:03:59.419745Z","last_seen":"2026-07-27T12:11:48.197916Z","times_seen":26,"resource_available":false,"data":null}},"time_used":576,"timings":{"blocked":242,"dns":112,"connect":1,"send":0,"wait":4,"receive":87,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/margin_icon.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/margin_icon.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T16:53:52.226617Z","times_seen":17858133,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T07:02:49.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 07:02:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: Allowed\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg; Path=/; HttpOnly\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JRFTvI%2BulEZuzIn%2BRqz0UNni3q6vi34K6FTdbc1ZApsg%2FkMT%2B2vGUEVFRqE88k7axE3L2ToOKgksCdQSav6mGKitirM6EycfKmx9tksR5f4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0d46c23b461525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2191,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4456701ad4a9c0f0b23f929b32109a2a","sha1":"d5f3c7e0e8c1d4806d47f07005da3ffde11a9c99","sha256":"a1db9bee0f579533651476c2edf344a916c9eb8f33eb4ca897dcd33e8c90b35f","sha512":"84b80a7a710b5b1147186f1656fbf0afd2346779eb3b58527a3a9c092e26a5e602d0146d47332d045a89c000e02bdc0c37c8c7b8ffc4796c80e3f0d4c3c6781d","ssdeep":"","tlshash":"c641dd2366554c2d9270d22569f6f088e9669103d2285e5ab29d36df0ff2fc0c8e3675","first_seen":"2025-12-20T07:03:22.422791Z","last_seen":"2025-12-20T07:03:22.422791Z","times_seen":1,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":57,"dns":39,"connect":1,"send":0,"wait":160,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/app.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/app.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"a3f16-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:50 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nET%2Feqybh2aLyZujUh%2FK9rI2YRUtlpHV7lLm%2FIsdfcIODiwgOvbRaTbRp6heSq3AflOD81FcxXswxFS9nKibF%2FvOi1AWHsuVXgYbDk9cAw0%3D\"}]}\r\ncf-ray: 9b0d46c41fffa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":671510,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65468)","md5":"aa59530956f0e535108443ba56d04ee7","sha1":"8799f6610e18b5ada1eabb88a5ae6a34fd755254","sha256":"feebaa2a888b6583cdd66da80d633fd4205be5d2ec2c6fdc596a85aac23ab3a4","sha512":"a0f78186b0759d607f9a3ab2b9637c694db7d15a24a74c7cf2b3ec42df2c753a8c0f7f0070196c0a08a58c0e7f036932b9621f335cd68758cb075513ced25f9d","ssdeep":"6144:OXIjsn3SS87WIqsWsC6yhAad8NAmKI8lv+q+SEmaGHkbAgNLeK2yyRdhDJl6:aIjSSS87WIzSAtK3DEUk5eK2yyRHJE","tlshash":"c0e45cd87591f0a417a305eb40bf050af33a2919681dc960f275ecda78b498ea237f7d","first_seen":"2025-12-20T07:03:22.423915Z","last_seen":"2026-04-04T16:35:31.804822Z","times_seen":11,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/fonts/dabb.ttf","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/fonts/dabb.ttf HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-frame-options: Allowed\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 20 Dec 2025 07:02:50 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxPQ%2FE69%2B3bMMGk7aSbwSoyu%2FHojh34KNhEE2U%2ByxXY2sLB0OWo8qz2uE2XLmOp8TeINwLgC1UZBsK4NEScYINonwOhi59FXtJXRJSLtr5s%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: 9b0d46c6c829a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2191,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"0dde4acc74a7a197b07075acd5135066","sha1":"917322c73b5babb33deec5f1204b21becc442012","sha256":"469e3081e23c2e9cde29e77e8f18a67b866288cde549dc69a71397648b44c4b6","sha512":"c1880b0836d7417fa02a782a0fb5b1b40536b51a2da1c110765edb74e91b3d6e0e0483a8de560c0120e3e36767c40b68b0b98e576d4c740261b816cbfd9f0101","ssdeep":"","tlshash":"c141ff2361514c2d92b0d22569f6f088eda69103d2285d19b29d36df0ff2ec0c8f3675","first_seen":"2025-12-20T07:03:22.415829Z","last_seen":"2025-12-20T07:03:22.415829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/3373.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/3373.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"31273-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YpvFXys0N%2BPPlSbFbOieB8tenWxDD9zp5ksbhlGFlKgLnCJvFc%2B6m7Tm3KAg9LDi9LyL7DHxG0IH3NrGAOfLyZ3L0t19R0Y%2BgeiqYyTXeBs%3D\"}]}\r\ncf-ray: 9b0d46c9b87ba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":201331,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"8a8e190c19b24e1a132539374fd10179","sha1":"1b8d7b34ee9f4d83650ecc75e583deaedd531a02","sha256":"65bb15ee98c8f5440905716f2fb232bc38ada2f01a5fa3c37adf839decc208e6","sha512":"85b0169ffc8ca5cf44879e6c579f2964af460f6db7d84f7599f8a489d8cdc7cb95cc270f03bf0f68cd36923918391c42972a7c5db4da6ab92014e753beed4a1d","ssdeep":"3072:PM7PedMLMBpXnB0pmW/IEIAfdhZafTQwQxod8gIkZQutY5H5TYuQZMn:1nBa9IEhZafTyhgIkbY5ZTYBw","tlshash":"17144a64b284746861ab81d950ff4908f2322918f9198af4f17dc8cd37e664ea537f2f","first_seen":"2025-07-07T12:33:56.234776Z","last_seen":"2026-04-04T16:35:31.793315Z","times_seen":15,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/margin_icon.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/margin_icon.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 10 Feb 2024 08:13:46 GMT\r\netag: W/\"ecc1-18d92146290\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-length: 60609\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m5ekiM3LLYQ6QAV%2FYKvQ%2BKuIOWQxq9QEROpYjd6lxz%2BSfyCT7xqp8YmBbZ7uE6MTS0%2FPT2edKTt3Sm1lN%2BQ6B5JM2l3Cz80gBPSyLWVUeNs%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b0d46cc58b6a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":60609,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 497 x 494, 8-bit/color RGBA, non-interlaced","md5":"17736ea3849b32c662afb0733e20f1db","sha1":"3297970d4940930b826fb18da2cb03f6c07de881","sha256":"73fef5c2d2cac71e20967b9dd6d193051d7cf6ae2cf0990ea5acd6a7a6a9c89d","sha512":"be4adca938bcd03aafab42b2943d96cd8fa02621f84f7b13c7d9a77ce52c23179ed71facf0a3e9c39f8f9ee80a7214ae5bd56f4bf63b71d5a67919dc5137fcb9","ssdeep":"1536:YB7TpFieoTuBkGhxlncVRZ5E4ebWve0F088N7nf95ee4hg:SfpoeoaBkGbOVRnxC8o7+XW","tlshash":"c4430247e545f26e46cfb45c7debebc3a527a7ec201164448c52bfad4b389276a183c0","first_seen":"2025-07-07T12:33:56.222925Z","last_seen":"2026-04-04T16:35:31.79391Z","times_seen":15,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/contract_icon.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/contract_icon.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Sat, 10 Feb 2024 08:13:46 GMT\r\netag: W/\"2ac68-18d92146290\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-length: 175208\r\nserver: cloudflare\r\nage: 0\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XkfiiBTg%2BX0ygZ8fMQJp2k4tGt%2BvDp5LpzGMJlRoNjtTYrVH3STWlxK54EjQIurLGLr%2FPeagOQJ2FzTyPHg1H5zJ8PaaAkDHQZDoFr5iqog%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b0d46cc58b7a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":175208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 647 x 404, 8-bit/color RGBA, non-interlaced","md5":"df620ab42a34f79a1a4a05e2d4b1c622","sha1":"d995e2f8a76c8c9af95d5b24330d562f949e1929","sha256":"c0a6c16f14c886d495c64f6605d19cf23749082b25f026e3e7e629f679840745","sha512":"6acd2da9fd80c7526c46020b4e12ca63045f7ae06560d1e81fed955a70a981ecf85c18a6e2e5a0913dd32e3ecaa7ce3bb6116158dacf048cfce6ff4b2c68be24","ssdeep":"3072:fHD+paduxYdz/YL9jOTgYI0wMYWrTY69Q/alwkD6tIoJQjlIw6UaJtimAwe4UG/Z:L+pV6ujOTgv7WPYPWRKJq6UCidwpRvPb","tlshash":"510412cf980a1f267721261c0d674d73796e8f5f84c5b16dbaaf05d32ee22f1a25086c","first_seen":"2025-07-07T12:33:56.230069Z","last_seen":"2026-04-04T16:35:31.794503Z","times_seen":15,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4af1c1b9f1fd9972ef55.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/4af1c1b9f1fd9972ef55.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"30720-19aa1289618\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-length: 198432\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JbYo1WfN9uz2QwcPMss9UDo4QDZ5uv38%2F8TLuB867HSOaXh9IHGdhEiUKJVkR62j9z5w64sKCFjMOJRkaEx3ge2va4XDYAYRqpz1rcrfs0%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b0d46cc68bba0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1516 x 918, 8-bit colormap, non-interlaced","md5":"812edaf51a6f3ccdbf122cbba96e29b8","sha1":"adfa0f86cc7dfbe00d1c3b3c368a826426c58189","sha256":"23ef936f370c878dcb355ddad98dca2dfe1bde369295f9bba3bda94bfb58b3fa","sha512":"85dada1e9f846844929e89eab1421c3d0d94d5986e5706e24429a566a4392ca083d70137b69a555eafecb9fdf0a80288cfe09cb0dd5f5e1a0017bfc19d7afaa2","ssdeep":"3072:LCPCVOyLZIjIBtn2kiynT0i95HiJjgOjt9S4d1M7Nj/hdqEErEADCiKme7x:yCVfyjENiyJ5HiBrtfdex7WFJCiPk","tlshash":"f71423633b384eec485ad2d0d4521df1efe819105f52ba28af4cb0ebb712569f5c55b0","first_seen":"2023-12-02T00:16:03Z","last_seen":"2026-04-04T16:35:31.791051Z","times_seen":19,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/ab097543a6d40ce15272.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/ab097543a6d40ce15272.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"6e527-19aa1289618\"\r\ncontent-type: image/png\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\ncontent-length: 451879\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zprsrRFAMbJRYIzHZZB7GIz4WNBc9e%2BPVl%2FenWyjXOs2u4mhIucBiN3rGzRxnxBjw4OYIxXtyRVFXYVdJbJs0ssopQlhPTku9GIl4Ucemjs%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b0d46cc68bca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":451879,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 1284, 8-bit/color RGB, non-interlaced","md5":"425353fecea79f84e25b335fe05cd378","sha1":"ebbb6b7e347ff702fc56021f727d58f22f3fc2c0","sha256":"6b5082e18702051920ccfb99c647409fb82e825dc630e5e4e3839d795bd97e66","sha512":"174c6d1d0916c169b90138eeb4b72ef68b08fc69d3b1c5f4584c8bb0902f98f9ec938089929f6af8b5c4305d2c75ff9dfbdfe96c9352138a352971ba4bd857bf","ssdeep":"12288:ozGh1DhHl/MxUWq5y35XK0pQZOdaYz7RK:vnv/Mjqcv4Yz7RK","tlshash":"e4a423828844ee25d004d33f9bbb97d6225f477ac1a6bfc24ca0518a07777087adb3d9","first_seen":"2025-07-07T12:33:56.225939Z","last_seen":"2026-04-04T16:35:31.804183Z","times_seen":15,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/1354.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/1354.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:22 GMT\r\netag: W/\"9aa4-19aa1289230\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5gcy16Lbp1%2B4Qp12i2vf8wJExqhfUzjKRkMC5CIJhzciBfZR39f4GJekIt%2Fgk1LSD87%2F%2F0iUQ8kyf6e%2FKQz%2FZyK9VLgWkWLpwYGFLD6pBgk%3D\"}]}\r\ncf-ray: 9b0d46c9a875a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39588,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (39586), with no line terminators","md5":"efd235994fbfe7b236bc0ed3d08df91f","sha1":"a1824bb1a34f654195c52d67ce9967d96f0539c7","sha256":"e2b26340948fe1aafe87873aeb96e0976b05013f24c67d31e217c68860a05419","sha512":"f111aac070ceb77fbc8f6cdd71805d816a42efb41723d9f86c9f09a8f36d43b24be4b3613d765b5a0156e3bc75409aedc2d87f3689f6cb6ee010d9f46f971808","ssdeep":"768:i/QCHkm07IJE4vZ1f1lpA5HWI1J2iEk4y9TjHRm+zV1/winFTvpFs:iJCt4h1KASMobFF6","tlshash":"89033a34b600f8f614b7c0dd91af5d29f6253706a92ac8e0f1f4da482796a4d7923f27","first_seen":"2025-07-07T12:33:56.228551Z","last_seen":"2026-04-04T16:35:31.798029Z","times_seen":15,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/8870.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/8870.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"68bc-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X4C1MJi3fJEqFQDYAhnKj48eAqYUbiJYKSeYTivxENzsrnRC8psIF0rEcUpbAtruQExi%2B%2F4vLT7Nv0wtanUCrop8Jf5LSsfzr2a7ifELNQ8%3D\"}]}\r\ncf-ray: 9b0d46c9b87aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":26812,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (26812), with no line terminators","md5":"921130ab026abef09ee6a1d86766c9b7","sha1":"03134495a7399a42b74b93505434d7da512efd15","sha256":"def607b480cfa3c092ae3c0d27649f788d2cec1b39d16e41ea038e340f742031","sha512":"1d7c2c0ef1e2d84e70415fd5c300d269dff7a494e8166e1c119229bba9484168a2ce94ba02d21b5d827074a9723350e7c87e1992f0cc608e50246335d26b0a68","ssdeep":"768:Vxwv0Hjz1lM2PxBvnT3qjOrB4EIrDoeNW5kiA5qVeYcBP:lhlM2PxBr3rB4EI3osW5A5qVeYe","tlshash":"6cc2d8e9f4c9b42595db22f240ef402df337ba58760d4c10a06699cc3dbaec6e16396d","first_seen":"2025-07-07T12:33:56.215946Z","last_seen":"2026-04-04T16:35:31.802644Z","times_seen":15,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/2821.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/2821.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"119c-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UfZDSGkm4bbpYDPyCxCzE%2B2Ee2bqao%2BnMB949lHBVnkxeUeA8%2FNtPNnNUgYLZ%2B3xcl63xShbCNSq%2BYsK%2FL0Tc0LdKAAmvfiDZfxxsMokuv0%3D\"}]}\r\ncf-ray: 9b0d46c9c87ca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4508,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4508), with no line terminators","md5":"9cf1d4b83c142290d922036ea07f9b66","sha1":"5621d3611bbd0feef7fd3edbabc2f8dceb5f0381","sha256":"f0c1456166bd9e392d2b166f13fddc1f9b79e81ad538b2693c73742c51f84605","sha512":"c466bc8fced200df46328439af56c108f51e36315f09940209906f865ec263ad7e3782c1ff58932dee2b7f305d9afba65597d597504250b48e99418223885c95","ssdeep":"96:0fa7WTG8YesfjzCpGc5tQfnBfC1iTNL9/KYTpLBaT:Eqf/bxRC1KTTpY","tlshash":"22916625510853ac8e9d16b4452354b3a2ae1baf34d7a6a9cb2ecde0d2424dcd3b7c4f","first_seen":"2025-07-07T12:33:56.230909Z","last_seen":"2026-04-04T16:35:31.796211Z","times_seen":15,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/img/qr_code.png","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/img/qr_code.png HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T16:53:52.226617Z","times_seen":17858133,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global:8443/socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNZW\u0026sid=FqzKXgKLu1Jwa0ZQAC1l","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":8443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=PiwaNZW\u0026sid=FqzKXgKLu1Jwa0ZQAC1l HTTP/1.1\r\nHost: coinflare.global:8443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 50\r\nOrigin: https://coinflare.global\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":50,"data":"40{\"sessionId\":\"F4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 07:02:50 GMT\r\ncontent-type: text/html\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NInNvyHU8ucKzS%2FjjXi1ZFDeTiwCRJjarXhBIqX6ffJdwVN%2B0DPY71eMqqcEIM5dGcuN8Zrd%2B80wAqpCS8h1wV3s7j5aC1NesXUhXGnS\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9b0d46c7dad35689-OSL\r\nalt-svc: h3=\":8443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-12T16:50:29.912041Z","times_seen":447968,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"coinflare.global:8443/socket.io/?EIO=4\u0026transport=websocket\u0026sid=FqzKXgKLu1Jwa0ZQAC1l","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"104.21.12.140","port":8443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:50.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket\u0026sid=FqzKXgKLu1Jwa0ZQAC1l HTTP/1.1\r\nHost: coinflare.global:8443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://coinflare.global\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 5750djuv94DU0HUYzNzNwA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 20 Dec 2025 07:02:51 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: jArxSOdr4ZADI3tvkdfSzSaONdM=\r\nAccess-Control-Allow-Origin: *\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Oj770EpPgQZl5sBRMWJrvDV7doQGM3Ky7H7sCFdqV%2BYETcgFAaVufFV7Bh3EN4brcrFLVvijHVhI%2FPs8jBWew07b6KaEv5xuz4xig5NiwxFWjBi%2BLXZojSlbir7qQruur7EjON8jCdw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9b0d46c81b3b568a-OSL\r\nalt-svc: h3=\":8443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=2258\u0026min_rtt=423\u0026rtt_var=2850\u0026sent=6\u0026recv=9\u0026lost=0\u0026retrans=1\u0026sent_bytes=3500\u0026recv_bytes=1448\u0026delivery_rate=724482\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=1f31d4d55ca437c6\u0026ts=171\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T16:53:52.226617Z","times_seen":17858133,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":147,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4113.bundle.js","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/4113.bundle.js HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"108c7-19aa1289618\"\r\ncontent-type: application/javascript; charset=UTF-8\r\npriority: u=3,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZnJ18wab5oBzfLJqjLWA5YEbgj%2FbZYD3mm%2Fm6%2B2gxjFxohpDkWkIuIRKdGSuUSu%2FZun64WgOP9g519T0cuLXe5wAyKNrZmreH8sNiqpY4fY%3D\"}]}\r\ncf-ray: 9b0d46c9b879a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":67783,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65531), with no line terminators","md5":"3338ea64c2603138e7dff437e6da67f2","sha1":"7049c76e32eded819ee5d661786d83a80e4cbbf6","sha256":"f1a779a797875923505a890415b5c98a98e42a565f52e8583952a4d6900c7404","sha512":"a1b9cfab22bd6a7794d8bbf3b26df1b676b6e079b8d71b3860317a5dffa49cb295b9a5be8c13c35cdc725ec568e7bb4c722aceaecdde4211d9be374c2ae10366","ssdeep":"1536:4U17plnneU5S2c0E9HLIlrkgmmJpwwktDJ/v5mr3:3eqS2c0E2XloJmr3","tlshash":"5b631ba8b684b4b0a1e781e641bf551ab3377a04750dc950f13ad9cc3a65b4eb133f2e","first_seen":"2025-07-07T12:33:56.206196Z","last_seen":"2026-04-04T16:35:31.805429Z","times_seen":15,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/a5f3ea88970c37f1a63e.svg","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/a5f3ea88970c37f1a63e.svg HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"5a8-19aa1289618\"\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vTnsKd3bY9vfjZwe1poJEhcD4IiE5py2Azqf2u7y27byVRO1pnfZ31u0Z9oFif2BQGPf%2BSwMfb%2FdHD%2BnVfcD82eJwG7pbMq%2BFA781LA0q%2BY%3D\"}]}\r\ncf-ray: 9b0d46c9e883a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1448,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0214408bc93fb079f6df1d6fd7ad77fe","sha1":"621f0067a7582106c6084c3e0bcf8e3e3284f697","sha256":"c94351523e32e1f72ac9748e54a25e46e428ceb1a7da5ca38116c56c2c84ed09","sha512":"c98b15ee7ff03614c01df392644c271ed02350252be65910f21d6b5cf11aa8f7b9e171de78da27d4dd739233b78164c91073bcf83aac7ac3182a7fa1bcd5cb1c","ssdeep":"","tlshash":"c3310194d2ac56e786498794581e40740d6730e35790c660f2cdffb56f2d88e8497ad8","first_seen":"2025-07-07T12:33:56.213883Z","last_seen":"2026-04-04T16:35:31.789263Z","times_seen":15,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinflare.global/assets/js/4108e236467bac47b375.ttf","fqdn":"coinflare.global","domain":"coinflare.global","tld":"global"},"ip":{"addr":"172.67.194.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinflare.global/","date":"2025-12-20T07:02:51.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinflare.global","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Dec 2025 13:19:31 GMT","end":"Fri, 06 Mar 2026 14:17:11 GMT"},"fingerprint":{"sha1":"7E:D6:98:C7:09:0A:6B:D5:51:9E:5B:C7:80:0E:27:14:F0:66:6E:18","sha256":"FC:CF:02:A8:0F:50:DF:E8:6F:C0:B8:44:A4:31:3B:72:66:5F:12:80:17:D5:AF:50:2F:4E:C7:B4:52:DD:AE:B6"}}},"request":{"raw":"GET /assets/js/4108e236467bac47b375.ttf HTTP/1.1\r\nHost: coinflare.global\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinflare.global/\r\nCookie: session=s%3AF4cf4zhZgzp58xvq0Kvn3nYmuLAkj9u3.aJyFq0Yhw0vrX5LJRIaWrEGkmmy3KYfuEKY6OImymtg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 20 Nov 2025 12:06:23 GMT\r\netag: W/\"5880-19aa1289618\"\r\ncontent-type: font/ttf\r\npriority: u=4,i=?0\r\ndate: Sat, 20 Dec 2025 07:02:51 GMT\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53Zcluyv8tAUeN8ujw3mhf7nO4EHkGajqLiMRnpsqBM4CsmlZBA19mNxuIQytiOy%2BTDMKBqRGuMVaAkZ3RdvC018gtOMcIIUNNWExnz2uFs%3D\"}]}\r\ncf-ray: 9b0d46c9e886a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22656,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"OS/2\", 28 names, Unicode, Copyright 1994 SoftMaker/ATF. All rights reserved.FontSite BankGothicRegularVersion 2.00oyih 94S","md5":"7ba4f092bf6a8ec596cfb3fd633aedbf","sha1":"925f9478ca23c9b0e049c8ca55515d991554a7c4","sha256":"45011fd962c235fab90f09f958e4a05c0da13815d4808621c8e7e08652f1fbee","sha512":"f01a0a4c88b96eb18465f358a3b4002b33bea3ead305c16891f110047594053ce9c497106bea878f7c0728216e7d1784a37a6cb12dfdeabd88f3a8d0758fa330","ssdeep":"384:XM2BU/KLnHMuVhMLKk2cDesm/pQ5jlK9MoDyus3jsaLv8K4ttrEY2z1ZiqX/LEgT:pBU/KrsuVhMek2cDexhUZWna94EDxTEq","tlshash":"e7a26d0bd394d73bd35687fd6f252bc2a271fa24f541531bbb81e779bc02a42885d601","first_seen":"2023-12-02T00:16:03Z","last_seen":"2026-07-29T22:38:43.189385Z","times_seen":21,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"coinflare.global","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}