{"report_id":"a64fdfe0-ea59-4960-a413-ce0940b815d5","version":6,"status":"done","tags":["coinbase","crypto","phishing"],"date":"2026-04-21T10:17:09Z","url":{"schema":"https","addr":"www.cowfuoe.top/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.cowfuoe.top/#/sysPasswordSet","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"title":"coinbase","dom":{"size":23516,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (17344)","md5":"a17badaaed748fc0389361763d2f8387","sha1":"b3e4554eb7f273b8eda3730998b68301c534307d","sha256":"a2e5d1be38817123bdc3931b149bbcc976cd7cd730b427ce4f9438b77edcb5d3","sha512":"c571567b7d997a8c66dc5ecb8ea033c1af9c9bdc3a01b3cf6a4d74b019f68f33498f1da22c1bb28cd7fe8e4b6258d0f72a486d11a8decb481190e1229b4df9af","ssdeep":"384:piVP+N1tG/oF5/5Degv25HpmMMxfw8DrK:pGovxbAJ0Pq","tlshash":"4eb2ac319c00eb9f7872cd52b364a766a1d786be44708593fa2d0e3dda64bc1b32e143","dom_hash":"domhash98e7b6ed89de4e8d18b29c3aefd8341e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.cowfuoe.top/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T10:17:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"www.cowfuoe.top","ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2025-08-15","domain_rank":0,"first_seen":"2026-04-21T10:17:17.308645Z","last_seen":"2026-04-21T10:17:17.308645Z","alert_count":895,"request_count":179,"received_data":12368358,"sent_data":85282,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/runtime.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaed8575d62a6dd6a4b40c674ff09a0b","sha1":"840196d560ea56a8ac526c98278ef5ba75b208f9","sha256":"5c7c677a7fb6b45c52e7214e1aaf9733dbdf714d7724929aafc873b8d4f083a5","sha512":"22a4a70bbf143e1f9823e3ae1ae68c1de4cfce33888e10f6ebb916476b15ebf3c9b1ab99b7d2aaafc77760c29d06bd3d2f8df99e3c402d2af2f8d87c29f39fc0","ssdeep":"96:Et0XJlL32mirpO8kDLX0PWkRUGCwzjX6F:VJlLG1iDLX0PWkRUC6F","tlshash":"60911eba3394b56917012ca7443ff713b1b359b20e39a790970ca9b5bb308f95317e52","size":4328,"data":"","first_seen":"2026-04-21T10:17:27.271172Z","last_seen":"2026-04-21T10:17:27.271172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~b5906859.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eec9f93975be004060d1ad5b111b7f1d","sha1":"8fcdc5e5a99f14b11f51032565382e59b1139ce9","sha256":"c982e2d28d1c3f9602982515343f9052f4580fdbf933c0725d01537c22cefdbc","sha512":"0e9079175164b09a1278c8d9cd773f0d7bc195ed97e0bcdcb60c9acbfd7c796f13a5aecb1e73f26127d5f789332ad30aee8f33da3aac22de26dde324b0e2a7d5","ssdeep":"3072:bilu6EyLGxWkUigOl8azckgsyb4ohvBCvFRd2CXJh:bil1LGxWkUigOTK4Tth","tlshash":"2144f8987654b01283a736e4042f500f9236a90da90f953cba59d4eabcfd486373ff79","size":265535,"data":"","first_seen":"2025-10-28T19:02:37.313346Z","last_seen":"2026-04-21T10:17:27.341504Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-21T13:33:23.552293Z","times_seen":622166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/#/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-21T13:30:53.118014Z","times_seen":66981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"970a7d342fb21afd2861fe681d123cdc","sha1":"7d2d21c5cf2f8dba75da73e2111561cb4de922d0","sha256":"ca2f1268f3f6da54aa8dc07d3d63e5b22050ea866f6a2d81b55a17e48b38c4c8","sha512":"621e8075eaa3899e006d5e1bbd86750739f88dedcecdefadb015ffc793ef6f04a5a85a324d9929bd72ec4114a6889849523bcf850f1a24819c8ffa99055f7716","ssdeep":"","tlshash":"97e02c1c4943beb0823a04bd49ee925864fa009fb008d5903d3f02982fc8b2c01bbcb9","size":316,"data":"","first_seen":"2024-06-20T16:56:54Z","last_seen":"2026-04-21T10:17:27.348817Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~253ae210.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"62756d0c8d68bfaa90dc9165075b22c3","sha1":"a2ebec5c8439339ce1a5349242a934cfb4deccd1","sha256":"e94070860c563dacedbb866fa8b4b80d9a7f8fb7cd9203caf7b556693e14865a","sha512":"04724a69eab356e6bf92b8ad28815d581693f7453000129be5653b773456d11d4a60cc69649fa9730d258729fa0c060d33003daec4a0613f202b848b13ca9bc9","ssdeep":"3072:fgq+rez/GywwbKR7DlfTyno+QyjeYhnL6z:BzOypbSxYhnL6z","tlshash":"3be3d888f6a0b066479a7aa0042f500ff27bbb2d740b44e8f655d0e67c7898d553bf39","size":150570,"data":"","first_seen":"2025-10-28T19:02:37.135825Z","last_seen":"2026-04-21T10:17:26.990137Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~bd3a21fe.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d20489ab9f8e5bc299af5b26aca4911f","sha1":"0257a49f224d77b2b9455c4a7704a3b2dc15e3f7","sha256":"7ff63bd7bc15d78062a2a22ea42b3d709f84f368d9d568b07a02d586d0ed3acc","sha512":"b58bf9ac437f3633eaf424e6d8d9f81de168def7b0655403009867aa802a53928d4bc9bb0566fc21d8fed0b3973761a7f47d90760eeed5c25aa0d7048963786c","ssdeep":"3072:D2yIf3V/62ZrD9V2l+vulePs0xL+Y/71oCl+cNerGNVzKTvlisi3Tbri5lvT0Cp6:63V/62ZrD9V2l+vuk0yCrGNgT2briPvs","tlshash":"6b040941bba4b06243db35d40077504ef2b6f969744e44a8f22898f37db4ec98a7af35","size":187174,"data":"","first_seen":"2025-10-28T19:02:37.24903Z","last_seen":"2026-04-21T10:17:27.06443Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/#/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-21T13:30:53.118014Z","times_seen":66981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~41ff223c.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb4737dadf31541033a95a04eb1c836a","sha1":"1d391fd9ede900a5dd06d9ecced9f9a2a4b2f87c","sha256":"c3687bc507eed0dac0123dc8bea0a0800eebbe61a2ed9ffd7ca1244399cdd5d9","sha512":"5044e8f9e9de30225beae868d99055e682db53ed54bf8f9e7e804ef6e4e6aff254981737cea02fd4d37cd19898e01adab45e8918572dccb1415b257d3b73c132","ssdeep":"3072:HLq7HQMaLHUoMsf+oNJ024Bu/TS35ryXD7lGcsKhozbyPu7B:HawMaLZJpNJ02q35WXDAcnh6biu7B","tlshash":"a0442aa97244b06243e332f851af180f9336144ce94ad528ba55d5e96cbe45f333bf3a","size":270722,"data":"","first_seen":"2025-10-28T19:02:37.305747Z","last_seen":"2026-04-21T10:17:27.324849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~db300d2f.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea36a8dba8ead3150e33bf07a3fbdf5c","sha1":"1bd080a321c09289b53e71a99bd79e87fcce8d7c","sha256":"0dfa811b81a3ec12e562d4b7b2f4ac5453faf8b5cf489de8fb309e6763531bf4","sha512":"d3b9cfa551981ec7cd8ab8f662d53f69a719bca3a32e480cb26b7a971b7fdab23169226ff1e78effbea45455968344a06370de7f0bcf685a3ee217c67ceb401f","ssdeep":"1536:kjrs592ozX/ZbB8adKi19hDQD6yP7SA6FCRws96rHzD:eGko7xbB8ad51TU6ZOwtP","tlshash":"e9a3c780b3b57052839a3a94056b604ef27afa6d644b016cf614c8f6bcb8dc9953af35","size":103416,"data":"","first_seen":"2025-10-28T19:02:37.296702Z","last_seen":"2026-04-21T10:17:27.056354Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~9187ef67.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcf170cc15773df734080a5d9342e388","sha1":"9afe9662aaad4851581203658359dfb8f88691e3","sha256":"3b09ae1208a640c756e77c6d0fb418d1d56d4d7f1b6f73c8b20240e06e23b311","sha512":"483ba51b3e424a895512bcaf219b15ee9bd676e12c033e80f4df43cf0a317553a48f59350bd7c1d6c20130e62297b2d90c5a7eecb08b1817942ff569c4149772","ssdeep":"1536:A6jzm99a6hcOqJooRbYMrCrrbs944N6FReFedkic3rR:A6jy/V7qJjVYMrCH4Xc8R","tlshash":"d8d3c49cf2c5f06502a731f940af050fd23a698a790ad9a0e651e4c17c7c55eb23bf7a","size":135083,"data":"","first_seen":"2025-10-28T19:02:37.138144Z","last_seen":"2026-04-21T10:17:27.10157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~d71bf088.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb61b0a612db886a22da71d3c38886c1","sha1":"fbf0185fdd5e51566c05725a447ad5a862205dfe","sha256":"a368a5ba359027c4e69f6e164c5c4a3829ff43fa5b7cd09c426a52eb14c6ad43","sha512":"61792f6561c5894a1ef4add151ef76f49a8a697e5cd338db5f610f55f720edff2fdc3d7344939ee00a6be8c8744e0660c04950734291e81b287cf3b7fb356078","ssdeep":"768:7Q6td3oPIlyM3rbh1y8CwxCyDWinkd33SYKCVD9zOauPdlJv/zEtJVHTLUR85CRP:57bdfnQdkKej2uzn","tlshash":"9f63196c7604f11292a3327945af140e9236281eb50f99347e25c8da68fd49b372ffbd","size":68743,"data":"","first_seen":"2025-10-28T19:02:37.22669Z","last_seen":"2026-04-21T10:17:27.188807Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~4939e289.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1e57217881ef0ebf2677e4140d21f63","sha1":"c52c7efadca1bd6f7392d81626abb98543990eac","sha256":"7b528140f624e33ee92746351d4a2e528a7c4f4346a08cb8c5e29d5b5649651d","sha512":"874fb53f43c8e51dff87dc7b9839c0d5ac6f0ea9081ccab519c56f92952482f6ea3f1646207524669bf058bfa3b1776e8d7be802e58e711e3c93be43f5bb9836","ssdeep":"3072:pM6DbACJa+X4lA2Tvwu7xVWTrbsXwyZoP7Q6Igg:pM8bAca82TYu7xVWvqNZoPdIgg","tlshash":"4724d598f695f065439731b0857f050fd33a685db80a85a8faa4d4ca6cbc44e323bf39","size":218807,"data":"","first_seen":"2025-10-28T19:02:37.244605Z","last_seen":"2026-04-21T10:17:27.103197Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-2cdd1bb7.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e0802636c44958ee1677c510b7d2410","sha1":"0bcc701a726e6929df0783cb0276e33690fc108a","sha256":"a8da3ab29620b7409a049c889020c82ca458e1dd99b424439e2293df882fea00","sha512":"d2c70cb1e85195549816e3b418d18617002cca9f55ee9f573b6a57dc7091281ccfe25c0aaa852a394e2ecb2dac8874aabfc9c252e30cff706a575990698d5e14","ssdeep":"384:W7rLDuFhIKpRUk6ZuqwciW7jSxdx4q5bN:cPDMKKfD6Zu7ciW7jHqNN","tlshash":"8462f90d71cda47c9957b23d2a2f261a72266c456019c6cdb3b4d6e0f8dcc98612dfac","size":15824,"data":"","first_seen":"2025-10-28T19:02:37.209703Z","last_seen":"2026-04-21T10:17:27.131412Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~60b88c48.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"49364f62345c86681ca6db1de175977f","sha1":"4db0c3ce7cddf53fd622e22ef41f3feef9c1a25e","sha256":"c95f94d5ab46d1a22d7a711a76911a57470c7ab6ad02bbab61b120c9da30493e","sha512":"3f27980d23bc7adb5530350271795f493649c064e70c95e2fb96331bdd77f06c8dc033179b9d6f546e40e1155c2424dbcf8ca0d4eedbd0df8deaae853860ee2a","ssdeep":"3072:3WB7pes3F9hGYPuwM6EFiyf8KbWiISWB7pes3F9VYR/KV:gGYPSiyZItV","tlshash":"5114c850b2b0b01387992ae4092b504fe27af96d784b007cf558e8f77cb9984697ef35","size":199127,"data":"","first_seen":"2025-10-28T19:02:37.219627Z","last_seen":"2026-04-21T10:17:27.053988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~d939e436.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b87fe4829c72163eacc60baffde36ea2","sha1":"18a8b020040bde0e23cd493f5559b9b9898cb80f","sha256":"e610f9816acdaecd37fcf33bd603f729c17f24e5064c59f68005113e31a48558","sha512":"5621558cc06000c268933fd06cd99340458ba3f80030f4bdb646e37716b22b8b41bcea5ce8471d340aeff32018595a51e20918cdcdacb94c5aa0947894d4da25","ssdeep":"1536:su2NBjvkBgJg3i0aSptoBlZ6TGHDWis/fMYQs/fMY2W9DqGaZQfJsJ:snAntoLVHDW75R52NufSJ","tlshash":"94a31780b1d8b05b12a72ca040bff407f0b63916571986e4f268d5edbcbd5ca427be38","size":102414,"data":"","first_seen":"2025-10-28T19:02:37.160106Z","last_seen":"2026-04-21T10:17:27.098114Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/#/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-21T13:30:53.118014Z","times_seen":66981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~0f485567.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8924aa257178a4a347d40ee5b04bd8a","sha1":"bd7983058ea759791facfe6e1144b74ad7fade60","sha256":"c66993fc8b3b4926279425ba499520023d9fb909a4a62b5f414d315d1b1f5524","sha512":"42d9545c66954b0990afff0cd50c18597b565842629c4996a2ac85d2b9336b611d4d097d872d40db2fd7d846efccf2e7f03a97e2fbb1d9e5156e88510d0740af","ssdeep":"24576:SYvEaiLV0pjAi0JA7OXoag568l/7+qsYm:T17+qTm","tlshash":"9a0527a42644a4a1e2f38aa1f70ef5e4c32fb716ddc99ddbd0d3b19110e9e34da65b00","size":858487,"data":"","first_seen":"2025-10-28T19:02:37.239769Z","last_seen":"2026-04-21T10:17:27.157909Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/#/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f0ffd3b7c2574ac324603ed00488c850","sha1":"623e76c36aa2a886542011e28412cc761d7ceb01","sha256":"c4d0cf241a1bfa1c8bf4cf24e8f89d2ab786a284a39adb2fc8df7ea14e73c154","sha512":"436f9fb4816f6975fec0d965dfc0db4c3c38c53632dd4dc99a6c1a2dd9562fbd67176d0118549ff573c97e3394bad4d601c425cf670acab249ebc8d260591fa2","ssdeep":"","tlshash":"1540000003c00000300000c0000000000003c00000000000c000000000c00000300030","size":7,"data":"","first_seen":"2023-03-07T01:03:35Z","last_seen":"2026-04-21T13:30:53.118014Z","times_seen":66981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~7274e1de.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebdccabb206d072fbc06d1e1fc7bb8d2","sha1":"8e55bc0842d673ce652d36e2b67edc6c841ba739","sha256":"f77de8976e72ce0617d4ddd301032016d04e89a1e1928c9c5951f5043a6086ee","sha512":"0f9765b8a459d009e17ff0a66cd93ab274a4ee661bc0626935b9bb56789a00efc04daa726cd4a0ba5b6819d0299b392de0bdec9d264198df00c708a24f2b2df2","ssdeep":"3072:RmKRZXAVWvoy+LKkR1DHO39RxlW5foK4L63Ppi:U1ZMXM9xi","tlshash":"5e34d888ffa1b0a543a776a0046f500bf2bb6a1cb84e44e8f555d4e1bc7898d553bf38","size":245361,"data":"","first_seen":"2025-10-28T19:02:37.31767Z","last_seen":"2026-04-21T10:17:27.142036Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.cowfuoe.top/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T10:16:44.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:42 GMT\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"69e32dd4-412b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16683,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10514)","md5":"65a686f69f61962e55b78510dc8a0e09","sha1":"7bf38ab37b1b68b484bf57af7bccfa4737d02f7e","sha256":"815eabf5d5b4bb893fe0610f6f9b3985ccfecda2fc39b227092e0eebcfd70638","sha512":"996036899d671060abf604125f9ce8bd8632130a2f84c54c6cd6d384897879721d1ecf6ad33761ba80435c3878473107e8bf699ed7dd5b8f49cc9b286e61df71","ssdeep":"192:npXcatMPadYhO1dAZDO4SX7Tt/DR3jRC3f6odITpODroxRRR6ZcJPu0KlDUY7lPB:p5VP+N1tGDHgmMMxfw8DrK","tlshash":"7e72a2349c40ebafa872cd63b764a76691d786be04708593fa2d0e3dd9247c5b32e143","first_seen":"2026-04-21T10:17:26.974246Z","last_seen":"2026-04-21T10:17:26.974246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1312,"timings":{"blocked":206,"dns":80,"connect":27,"send":0,"wait":892,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/app~5a11b65b.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/app~5a11b65b.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/app~5a11b65b.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-15205\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:51 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 22314\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65431), with no line terminators","md5":"53c9972205149c01d6f880ecc6f78b0e","sha1":"58151528227fdb2e9e4c17e4ca5de8f86bb123cf","sha256":"4b07796ca9979195d7dd2cf116c599a4544a865602117d69bed0eda6f3ee3168","sha512":"d61a19900adf7391be72174a99eb1d2993fb0615c730377bb6b5bdd9de95f144447fcf3ddd8d06c9655b6a8c65c2d4cba465152de3ac971a1708eb31b5772ae9","ssdeep":"1536:R51wp6Ce4Br6n1qBf7PVFHF1mxDnVRvbhN2aqil6hnec2h:R51woCWkB5RF1mxDnhN2Buh","tlshash":"9d83086cb6cbf05c1aa32075162f315672775ec2a44e8042e232d9c27d68b9e6337f6d","first_seen":"2026-04-21T10:17:26.97702Z","last_seen":"2026-04-21T10:17:26.97702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/api/identify?domain=cowfuoe.top","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /api/identify?domain=cowfuoe.top HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Version: 1.0.0\r\nPlatform: Win32\r\nLang: en-US\r\nAgent-Identify: undefined\r\nDevice-Id: h5\r\nRequest-Salt: \r\nRequest-Date: 1776766607\r\nsignature-before: undefinedMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.01776766607%2Fidentifyundefined\r\nSignature: 3166847ebbde8375f1b6d413b95e3d71\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7972cab6fb7f916d7425b62fac11cc79","sha1":"ba314d64c9048c3d85c9d3344afd45a5c86bd151","sha256":"6c8a856a5c8b6abb28914b564b86f8c12c8ec762f9696f078d3e5100787d4124","sha512":"06e6605b03769964dd9d4f8b9df9d6efefd434cff045eac6a461fed908a5ad9b5d8dc077c15c2fa85dabbbf204110754adac98328fc933912fd4eaf076bc58b2","ssdeep":"","tlshash":"ced023ac4e9cc6034ccb42fd3034836cd12e3000a344053330fb8a38c01021c4dd0901","first_seen":"2026-04-21T10:17:26.979461Z","last_seen":"2026-04-21T10:17:26.979461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-464a2a93.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-464a2a93.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-464a2a93.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:24 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-28e81\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 47670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":167553,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"5d6654dcd0b787420aacb6473b8ca59c","sha1":"dde3bbb08eb0e209016b00364d62d4c30da8894f","sha256":"58b83acd38f42bab1c831337f8e17e0a5e20c2c6bfc2ca69941b948c535fba43","sha512":"8916a793e56f68afb3c08e99142c428963418ab78c948224361fac2d2d146dc19c703e3bb40f67e5a8542a8d67a1ace60ec6b7dd7ab0b7b380815117578fe485","ssdeep":"3072:B6Os9aSi8sakC+RZ+FdI1uR7QbEH4tp73TU6PPVt:B6Os9Y8sap8+PI1uR7wEH4tp73TZP3","tlshash":"f6f37249f662b42103a3e1f5552f000ae33ba95ce58a417d71a9d8e22cfd84c766ff78","first_seen":"2026-04-21T10:17:26.981782Z","last_seen":"2026-04-21T10:17:26.981782Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-47b66731.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-47b66731.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-47b66731.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:26 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-d5ae\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 10758\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54702,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (54702), with no line terminators","md5":"03f134a25af7ebdf1f60b7003846bd52","sha1":"2348b708cbfd81a2081a1a0f61e01dcae0aeaa01","sha256":"84666639403a744876ab23f54fa32c4e3ce0b0ecf227c7d2e9c3f50fcbc11d5f","sha512":"ca66e6768f9c360f91c5033e93851b8a6d1f4ad8dc5e2beb975f2c77a29eb0dc8d036c94afeca1998ec9565ba8df6a45b9a1389ff4ca9b9f2db06c3e954c49d1","ssdeep":"768:wBv3yTkm75qaw6MaTpCD7dFw35k7rkxU2LDpkPMnVnpLgTilk6Id:wBv3s7DJ7k7rkx/vp8MHLQiq7d","tlshash":"87337446f0d3e139d91a9031156f1a78a2362fe89415c4def778c9e09ad8c68133eb7e","first_seen":"2025-10-28T19:02:37.231458Z","last_seen":"2026-04-21T10:17:26.984605Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-76e0324c.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-76e0324c.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-76e0324c.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:28 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-6488\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 8120\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25736,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25736), with no line terminators","md5":"e4a688ea2c7028d5c7a0ed488b3b55ad","sha1":"96990ff3368d4266644fd26207b8fccfad773f10","sha256":"8d91adfad67bfe778e0dc8456f537f58eb4f044d99852d12f53109343c089f5b","sha512":"8d320742a1c404f852e34da29060fce55d0f46e8838a76da41084fca71b3bc8e7940d84f29f85833d44079f8aa8e140be4eb20a2c8581478e08c34be7d9d123e","ssdeep":"384:XBTJXmOT4o1gaXGPULDnpJW/6ZuqwciW7jSxV34lY6rGCDBh+/30e696ptCyv:R9XH0s+PCy6Zu7ciW7jhlbmfFpQ0","tlshash":"7dc20959f1c6b4bc9aeb3169151f1631b0226d88a02580c8f77ce6d4cad8d9c623ef7d","first_seen":"2025-10-28T19:02:37.164321Z","last_seen":"2026-04-21T10:17:26.987624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~253ae210.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~253ae210.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~253ae210.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-24c2a\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:42 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 45117\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":150570,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"62756d0c8d68bfaa90dc9165075b22c3","sha1":"a2ebec5c8439339ce1a5349242a934cfb4deccd1","sha256":"e94070860c563dacedbb866fa8b4b80d9a7f8fb7cd9203caf7b556693e14865a","sha512":"04724a69eab356e6bf92b8ad28815d581693f7453000129be5653b773456d11d4a60cc69649fa9730d258729fa0c060d33003daec4a0613f202b848b13ca9bc9","ssdeep":"3072:fgq+rez/GywwbKR7DlfTyno+QyjeYhnL6z:BzOypbSxYhnL6z","tlshash":"3be3d888f6a0b066479a7aa0042f500ff27bbb2d740b44e8f655d0e67c7898d553bf39","first_seen":"2025-10-28T19:02:37.135825Z","last_seen":"2026-04-21T10:17:26.990137Z","times_seen":2,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~ec8c427e.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~ec8c427e.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~ec8c427e.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-14ec2\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:49 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 26800\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":85698,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fdd93003bc110b32af3f86a76bfb735e","sha1":"de6947c0678f379616202d00939498405c115b6e","sha256":"191527fddb8b15fe50262d3183113cd73194934e88b86218be2344754b224fc2","sha512":"6896b1d15c2edccdb19e13c57cf5ebb6c135061b9b055774dc74396638ccadb08a154080d5e69a723de2b2795556b4aa6a45268778f37abc7dc070fde1610ed2","ssdeep":"1536:Grq69iabVJv1WVDueDCQX6l8KGtHlPNGf:T6VqDuTlgY","tlshash":"5983d58cb6d2f066839364b0413f550bf33a6944780e4898f222e8d66c7ca5e9677f7d","first_seen":"2025-10-28T19:02:37.306902Z","last_seen":"2026-04-21T10:17:26.992371Z","times_seen":2,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-0bf37891.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-0bf37891.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-0bf37891.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1811\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:52 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 2526\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6161,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6161), with no line terminators","md5":"390c5bd637b1fb9ea823eaebd68f34f5","sha1":"ac683118fd450dea67807b951b29ef6d1ccc7f8c","sha256":"eaaaf4a6f1f06d3095198f220a220e07c9345ebc8c7362c6e27902f08b60fd54","sha512":"160bb4786afdc3c7bc9118dac1d6cd7a9fae59781568771ef1478895c880ff3b3d8eb8062913afe1ffb7619ad884ed487785d31acb122912af359a5497e0eb7e","ssdeep":"192:EJ79y9i0J2jYaJXLVacsMiNMhvmvNvLv0vC:E/2iSrP","tlshash":"a0d1b6351b1a1028d877d77eb1d8b958a40cd913f50d58e9b3aba41d8ae36c336f034d","first_seen":"2026-04-21T10:17:26.995236Z","last_seen":"2026-04-21T10:17:26.995236Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-0d12fb6d.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-0d12fb6d.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-0d12fb6d.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-28bf\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:57 GMT\r\ncontent-length: 2181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10431,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10431), with no line terminators","md5":"a51075d7fbf9810e77219942564c3b26","sha1":"aaf4b206e72354fcf3aa9608e55b8008a79cb474","sha256":"9b2f92167f0f1bdd02c2022dcfeeff215e19ece4f70d4846e2d10afc2b895ef7","sha512":"b4be96b03f8ff9566f0f05e8f076f581311a43472a0967f7ae68e1d3296ba379289746e81b4f55cea1fef47d4b19d16c7204c01188d6ceacda5e7d1fbed6d9ba","ssdeep":"96:1SGgjCp6Ik/kCzDnktTdeeHhoFCYEtdgDT0tAqLXhGtLQlwSN33vcjPghf8:1kxGWKmSJk","tlshash":"02223523635e2228e07bde6179d066cc8228d653d1528bfad1627a25cfc76c3367634f","first_seen":"2026-04-21T10:17:26.997208Z","last_seen":"2026-04-21T10:17:26.997208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-13a7fab0.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-13a7fab0.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-13a7fab0.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-12c7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:56 GMT\r\ncontent-length: 2282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4807), with no line terminators","md5":"b0f384764ace4050862d8f6042d766a9","sha1":"58973c3d77be4988934e5b3ffeb4ec50c2fd7477","sha256":"36e4886a57bc71b998f18daba9c610cf87a7a0c75786d698438ac9d9748caa92","sha512":"b64e4d85e372b937ea0af80814c797a3b9212dafed6d2fa85bc609a0576717a457a62c2039e2983b7d57bef0a55b8deb29734e3796cb3caeea06420f8724589c","ssdeep":"96:gxJ775y17i0dNNOaReW5yqOYaUMXLVe3OR5oMh85WtS6:EJ79y9i0J2jYaJXLVe3OjoMh85WtD","tlshash":"80a1d971130e2118d57be63df6f8aa84990fd913d25dac87a343a41d4ae379239b025e","first_seen":"2025-10-28T19:02:37.223289Z","last_seen":"2026-04-21T10:17:26.99913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-4e3d403e.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-4e3d403e.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-4e3d403e.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-125d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:02 GMT\r\ncontent-length: 1905\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4701), with no line terminators","md5":"4688ca92daf5f09f150ecab87b69c465","sha1":"9ea2b78aceb3831d14f35eb153344be02a89ecac","sha256":"254c67044adcc4f80f074f8d364de3f10825c7d422bd208b2e901904ad1ac115","sha512":"71d03a3565de343c3ce2d81a1d5f8f9c3286efe048b2cbd8126aff64a59aa58a5a89ab7bb78c7c496098d5ca671eae3a33ff9fdb2d30273449d4a6d2e1beea9b","ssdeep":"96:uSRKVvMQMbSRkN3AfAdr4fXutdnEXN96xwryDWujRTByhREJ12ZSrL3zDw9B8Axh:uSRKVvLMbukmYefmBeD6mryDBTB4m2Zn","tlshash":"0da16433529ae013852fb92171a2766c115ef56ee81f8d71d2f3a00a86d3ad392a174f","first_seen":"2024-10-06T07:43:45Z","last_seen":"2026-04-21T10:17:27.001291Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-584f9130.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-584f9130.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-584f9130.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-785\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:03 GMT\r\ncontent-length: 584\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1925,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1925), with no line terminators","md5":"325ada207ec7e9673b0883d45a725281","sha1":"ed8119ccf5d511f5bd80422c400fb08b5e5e7c75","sha256":"98122b96cdbee7b60b3c8ebc7aae7946e93142cd5939f7c5ee902c80e0f7fff6","sha512":"2f9a06f45cefc1302c7d7d771dfd3f7487378dc4158adc2e4f824dd1bef425890f4279c3aa9c91de05b974c86abc326320c4d8c96de501ee5dfce523195697ee","ssdeep":"","tlshash":"fc41d060973d0538e07be859349cf40ca90c7e32d1461aa61212bcb7eaf7ee33eb1185","first_seen":"2025-10-28T19:02:37.319245Z","last_seen":"2026-04-21T10:17:27.005525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-484c5b1c.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-484c5b1c.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-484c5b1c.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:26 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-bb1\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2993,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2993), with no line terminators","md5":"e738bf466c87a74aa7bae1a7701ab01b","sha1":"e5aae16c8a8d5fbbc6491ace220b44b22218e7fe","sha256":"71c6c524f8bac164fc63db6d76790d33a1fe7077cb0870c42908c66c6e725b4b","sha512":"f31954341f255d8afe08ab22548045de815a6c66d1c0bce88603a8d8f09ed5e9f0983638a430dedcec588b9ebde4e63b11b106a3e2b879fe4cf0e902991503b7","ssdeep":"","tlshash":"5f51b974b4d2b4bc6b2e1095122f323ab53a3d9869109cc3dab4d0ddedf1608462d65e","first_seen":"2025-10-28T19:02:37.329452Z","last_seen":"2026-04-21T10:17:27.008471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-c3a6a376.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-c3a6a376.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-c3a6a376.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-19a7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:07 GMT\r\ncontent-length: 2573\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6567,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6567), with no line terminators","md5":"834aeef2947d35f9417150f08bdc581a","sha1":"ba783a93af659c0470da9c3ce28180a5249c2c31","sha256":"25ff2d700b10569db23ed8e553e4d32dfbf4f7b5124a419d2ca9294f396d5ae3","sha512":"8e58851efa8ad1825e16848218c3d4f4913986e5687a9b29e554eb11c9ffd694f59b66710ded33320bcad768950e67cce1a66c1b858f15723a753bdee52de9ae","ssdeep":"192:EJ79y9i0J2jYaJXLVwFT6M7qUm5oYorYWYrt8YrNYrpYrw:E/2ibbrvrSrmrw","tlshash":"2bd185f1520d110cd0bbe95c7ad6be489e0ed923e50f5edba74266598ec27c331a030e","first_seen":"2025-10-28T19:02:37.208344Z","last_seen":"2026-04-21T10:17:27.010216Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-defb642c.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.698Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-defb642c.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-defb642c.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2e94\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:09 GMT\r\ncontent-length: 3624\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11924,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11924), with no line terminators","md5":"499b1dda811ca1862d33d75fecea4347","sha1":"7e710d63e779ff3880c1e60894aa437a09cf9ade","sha256":"4a210cf032e4aebe6d8c6caf3120b1c4fef03ac43a5ee8377f54aa963da56f4f","sha512":"87783e763107d47db24e0a5e8b9baabce1b7fd24ce2d33f025c3bab2be37fa02ee7727e8f548d82c133d512a2d025507870ac0b9ec96d36919676f517a8a3c8d","ssdeep":"192:OG9J79y9i0J2jYaJXLVvlbaxwxbxExNxrxRxXxoZ82MRfgi3GN:R9/2ifbZ82afgi3s","tlshash":"ee32c633126e1b2cd477de647ae4b688c628d513d10b4adca6557929cfc36c336b234e","first_seen":"2025-10-28T19:02:37.320093Z","last_seen":"2026-04-21T10:17:27.011987Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-08e808ce.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-08e808ce.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-08e808ce.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-8f1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:11 GMT\r\ncontent-length: 837\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2289,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2289), with no line terminators","md5":"24ab6bc58fc242c776821af158d930b4","sha1":"77f3195d11ef917401f7bf69f9867c748d8bfd4d","sha256":"81aee48b6e43d527170cd5c20b044654b2a17336661b3f29736c1a3a893a3e4f","sha512":"aea05b6d546c89f4376482c9fa394ece5982f2080f0b563c2e6ecdecddd5286649cd0fd7564e507bd89407d5e58597348482a82ee4798708eef7be0abcdf7da1","ssdeep":"","tlshash":"b841e051b083f2bad92e1042526e2631f0753f949964a4c1ebb1c9d5dae0e64431ef6d","first_seen":"2025-10-28T19:02:37.289946Z","last_seen":"2026-04-21T10:17:27.013778Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~3daa2673.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~3daa2673.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~3daa2673.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-33033\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:47 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 45403\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":208947,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ad557ebe44fdc070c19d47578f8d41b3","sha1":"fbf4e017b5e5283a93a2f20c839bebaccf6d2327","sha256":"8488c39ce1d91ca78595d849e64be9782758319b1ba8bcceeaabc9973d86d405","sha512":"2881a4dfd7e0e993dd4971df5ecde09a48a57a032ba809dca3984cefbe1580fbb1600bdd6b527a0083369b621aa477b43bcde1e38c6d0c5a2d2308b467cb3757","ssdeep":"3072:9annTOIyf2KQ+i4o9WUyw4xD5HnNEWL0s:oyf2KQ3VIUyjlnF0s","tlshash":"97142f99b2caf0510a5730a5a0bf184bf27bb9d6381c9050da5580da7cb498db337f7e","first_seen":"2025-10-28T19:02:37.235137Z","last_seen":"2026-04-21T10:17:27.027083Z","times_seen":2,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-65af394a.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-65af394a.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-65af394a.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2e2e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:03 GMT\r\ncontent-length: 1913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11822,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11822), with no line terminators","md5":"6a296ce56e55a50f184750a1a9dbef1b","sha1":"2f1a95c6dfb6e672b37333b56c8f995204f85529","sha256":"28cca14bd132a376aa96ea6807e245724a788b949382d1f4f867400b966829ca","sha512":"a682d7c6315959fcc2c19af78490781cdace0f6db662027060e52893c006c249d7ca3bc286a9c62f1834d0da8505b1946d7af3fce1882f0bbbbc07a0c42f1b7e","ssdeep":"96:0i1KkrD6EDyYg4NlcQaf4y2H2hsBmYRDU4zcawgVwPUwrwnw0zLQjB8kickkzJE8:029qUYduZf3I56s","tlshash":"d3323631a23a580ae577f4963955f268a849d036ea4e4bcfa5073017cdcb6d733b130d","first_seen":"2025-10-28T19:02:37.27246Z","last_seen":"2026-04-21T10:17:27.032436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-2eee1020.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-2eee1020.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-2eee1020.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-27f5\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:13 GMT\r\ncontent-length: 3387\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10229,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10229), with no line terminators","md5":"f2154b0a57cd2dd461af602689a86982","sha1":"92a1ee5a82e0493bc0941c8adea8220b4a8b2e62","sha256":"75a9058c5250ab8bfabb745abc4d1e12ba0e64fce91db2f95eec19c30ab62920","sha512":"b352b4d96e7da2c97a281551a6e949bfd250ca7ed741c09ed6c97a398342672804e048eb0a6c9720c9522b004aa894854a83845317cb2c2828a09f6c810b2aae","ssdeep":"96:Zxja3AVK0+8cNJdFpVtrAQ8FliaKomPTij+DQsufAGhqUjAONTbiElqbCqJkJxLZ:ZxjLVK0yNxGziEe4pjztwnWV9LG8rj","tlshash":"6d22a58ab0c7f45d9bcb6052542f362661372d84a01584cef7b889d9de28b4c632fb7c","first_seen":"2025-10-28T19:02:37.147197Z","last_seen":"2026-04-21T10:17:27.03959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-7da1a077.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-7da1a077.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-7da1a077.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:28 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-4cc13\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 76990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":314387,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"0ed70c3d3d30673415aa02d134327478","sha1":"e792702d4b666f634697ff8ee9c25e81a0508ec8","sha256":"76a2cfbbf83a95e186e1d9fc23928c8958f16014b4620ea4f1c7eea819373f7f","sha512":"d02d255f5c91c8fc285e2d5e6f4473c6b3344b4232c262d7a3cbfeba85a90e04fc9cc6db341513f578cfe37bc2b9c0fc81234f0b88b128b8873e62940e25aea3","ssdeep":"3072:kf5n9AqTJqaL4HT4BHoWz25w0rUaNZFKj52sd:kf5n/QTUHoWqw0rbNKj52g","tlshash":"85642c99b68570624783a175e03f210ba3366866340e887cb63cdcde7fa958d513bf39","first_seen":"2025-10-28T19:02:37.252112Z","last_seen":"2026-04-21T10:17:27.043162Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-defb642c.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-defb642c.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-defb642c.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:31 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-802c\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 10229\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32812,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32812), with no line terminators","md5":"8d286793de667b34410c52ad88051182","sha1":"3bdc8e77b348a23f76690a6de06b996ea0c5ed30","sha256":"cf611a90a2a0e53d60bc79c047889b28089ac0dbb860e92d39e88d80c91620b3","sha512":"5cabe0d9bdbe1b294810315ff4b779cf7e2ca31bbbe69924ab4649dd205f3242a3d4b68a36a5dc643398e5878000db44188bd5ceea179130f44f20efeb036d12","ssdeep":"768:BPSYhJfeh6Zu7ciW7jeF7A7fG59z+hO9soRK:JScJ2EZ5d7jAALW59PRK","tlshash":"8ee2d94bb086f15ecdcb5029591f2531a0272e84b424e4d9f7b8dae4d9acd98231fb7c","first_seen":"2025-10-28T19:02:37.330412Z","last_seen":"2026-04-21T10:17:27.046262Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-13a7fab0.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-13a7fab0.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-13a7fab0.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2c43\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:11 GMT\r\ncontent-length: 3819\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11331,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11331), with no line terminators","md5":"07b6bbb702832a822a81e414e86858c7","sha1":"53176205ec1809d03ca4fa4130ca490ee85c78b4","sha256":"bae529520c3de07bae7fe06eaa21e23918186d221215edcdc9f4ff230d776f9f","sha512":"0e8dc46fd098afef8e529e9a450fcf5f05961bc98932558929ba5a8f7506a6b918c9c668090fb84348b17cdbddec3e7d9a12d1a7ec8407d16e268a2899a5a53c","ssdeep":"192:ixjN2t0fNxGiKfItspjzi5E8GvQ26cJS2uOO:AjNm01xGqspOuNJ9u","tlshash":"b532c68eb0d6f8589bc67052502f3a2551272e84a429948df7b8d9d9ce34b4d632ff3c","first_seen":"2025-10-28T19:02:37.173818Z","last_seen":"2026-04-21T10:17:27.048789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/app~21833f8f.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/app~21833f8f.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/app~21833f8f.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-19f76\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:41 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 32410\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5588d0d3ea750f7b943d42232a3c84fc","sha1":"845bf280baffd64343480588eddf8b0abc6de950","sha256":"a2799c9689278227b6c465600227a1e2cf71d291a978e799d7c89481a382a71b","sha512":"8f133a3ad952f6f0ab1525319b682250c8b3cf8aa68c4c568f321eed000c63e8ad7e5377d07418a9267f41eabd3b7ae0c3586126e18799c1ab2d5ab2fb8d8e50","ssdeep":"1536:/we+nvVrq8DHcLUJ6q8DwVdhiniSL3V4cBSL/Wi:/UQY8LUzYwXhiiSA","tlshash":"a7a3186b6b49bc14f07be45730a57588413aaf13f2d78e75c71a68bae8934c7326070b","first_seen":"2026-04-21T10:17:27.051229Z","last_seen":"2026-04-21T10:17:27.051229Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~60b88c48.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~60b88c48.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~60b88c48.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-309d7\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:43 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 43937\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":199127,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"49364f62345c86681ca6db1de175977f","sha1":"4db0c3ce7cddf53fd622e22ef41f3feef9c1a25e","sha256":"c95f94d5ab46d1a22d7a711a76911a57470c7ab6ad02bbab61b120c9da30493e","sha512":"3f27980d23bc7adb5530350271795f493649c064e70c95e2fb96331bdd77f06c8dc033179b9d6f546e40e1155c2424dbcf8ca0d4eedbd0df8deaae853860ee2a","ssdeep":"3072:3WB7pes3F9hGYPuwM6EFiyf8KbWiISWB7pes3F9VYR/KV:gGYPSiyZItV","tlshash":"5114c850b2b0b01387992ae4092b504fe27af96d784b007cf558e8f77cb9984697ef35","first_seen":"2025-10-28T19:02:37.219627Z","last_seen":"2026-04-21T10:17:27.053988Z","times_seen":2,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~db300d2f.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~db300d2f.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~db300d2f.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-193f8\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:43 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 27461\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103416,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"ea36a8dba8ead3150e33bf07a3fbdf5c","sha1":"1bd080a321c09289b53e71a99bd79e87fcce8d7c","sha256":"0dfa811b81a3ec12e562d4b7b2f4ac5453faf8b5cf489de8fb309e6763531bf4","sha512":"d3b9cfa551981ec7cd8ab8f662d53f69a719bca3a32e480cb26b7a971b7fdab23169226ff1e78effbea45455968344a06370de7f0bcf685a3ee217c67ceb401f","ssdeep":"1536:kjrs592ozX/ZbB8adKi19hDQD6yP7SA6FCRws96rHzD:eGko7xbB8ad51TU6ZOwtP","tlshash":"e9a3c780b3b57052839a3a94056b604ef27afa6d644b016cf614c8f6bcb8dc9953af35","first_seen":"2025-10-28T19:02:37.296702Z","last_seen":"2026-04-21T10:17:27.056354Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-5b4468cf.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-5b4468cf.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-5b4468cf.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-327\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:03 GMT\r\ncontent-length: 277\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":807,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (807), with no line terminators","md5":"aad2e2ab366300e5a9115d0f65c5c76d","sha1":"6c6e7952209980d311b937369d2124c9c5216696","sha256":"86252afdb7e3873e133e4f415f2a05e84f97a2267c26020fe3bfa06ab3173a0d","sha512":"cf94a04e34bc7f220ace0c0da7d2c59835aad5987c8e296727b44a230380980cc374cf120c053fe134ac8c4b84e997bc15ddd23b868432b3ef1600e76487c819","ssdeep":"","tlshash":"db016fb56e0c603cc45ed628f1b165ac71681312e3521aeac21155908e634f26b5bc8f","first_seen":"2025-10-28T19:02:37.339609Z","last_seen":"2026-04-21T10:17:27.058578Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-717b22dc.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-717b22dc.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-717b22dc.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-12c9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:04 GMT\r\ncontent-length: 1949\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4809,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4809), with no line terminators","md5":"050d06ce386d57677417025ff498a7c3","sha1":"d12229c3088115c97f56a33f0a6ad3015c536d4f","sha256":"64e4e246f98595e32fc46f333a61753fc0ed16385d94799d7c4aba5dabeb61fa","sha512":"1bbee0faaa09a4d281a87fcc1721de3603fb196676cf72ea6c865fdcb98b4d9a76473ddd88f5cb81e13110276ddb305b9e16ad64851a6686ebb2cf7f8c0b49e6","ssdeep":"96:n0K3IYrJ2XuBnEv2xwryDWujRTByhRW12ar8q3zE82Z:X20DmryDBTB4haL3Q1","tlshash":"4ba175335a9ae013856bf661318777ec033fd56fe00f8945db92612a8bd3bd352b0a49","first_seen":"2024-10-06T07:43:44Z","last_seen":"2026-04-21T10:17:27.059917Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-429402cb.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-429402cb.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-429402cb.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:25 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-1a77\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 2204\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6775,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6775), with no line terminators","md5":"e1976e4726e1259538c5196b1c6023d8","sha1":"960f1a45854e0e155ebc1c865584ad25f3a570ab","sha256":"2ef6384381459b0dfdd76bb8c0b5877d1a0f31f89fca7bcfa28a8d26cdad9784","sha512":"00975e18cee8836146ce9160f48cb7eec4d810cc5b6dcf32baec263ff6089a4f9cea943c41fbb0a22a1711c362560237d6333c1dab25ab2390289e0bd89032bf","ssdeep":"96:r3xj0yWuPCDK6pMHCFndYi55/+1PSd1RXZ9KKKFKh+KO8udJct2+XyE:Dxj5fPN62HAJu8Mct2+V","tlshash":"e7e151b0f0c3e16adeae9012890e3775a0317fe4c9069483f77486c86ee1d34132dba9","first_seen":"2025-10-28T19:02:37.243452Z","last_seen":"2026-04-21T10:17:27.06156Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-5b4468cf.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-5b4468cf.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-5b4468cf.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:28 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-87e\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 958\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2174), with no line terminators","md5":"87a3705213d7860d0241466eeb488920","sha1":"c7284bd6084b4ae3a2430c4ac0216db5ed386eec","sha256":"52fb64ae5d6565ba0850c6c8b80c7b2168680da225dfaf7a108a3a37ee53f2c9","sha512":"5654a5cfeb5bbc2ccbd3acc0aaf70d4e9a20bf06e332c4dbb6daa3abb66698ee02c72b298a7720e0a48b0b68e9910d95998f80cbbcac3843a110daf21f600165","ssdeep":"","tlshash":"464143a9f4c3f4bc0b6a1091522f3536f13e2a9569105882f3b0d0dbb9f0b59422ef5d","first_seen":"2025-10-28T19:02:37.232645Z","last_seen":"2026-04-21T10:17:27.062956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~bd3a21fe.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~bd3a21fe.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~bd3a21fe.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2db26\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:44 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 45670\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187174,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"d20489ab9f8e5bc299af5b26aca4911f","sha1":"0257a49f224d77b2b9455c4a7704a3b2dc15e3f7","sha256":"7ff63bd7bc15d78062a2a22ea42b3d709f84f368d9d568b07a02d586d0ed3acc","sha512":"b58bf9ac437f3633eaf424e6d8d9f81de168def7b0655403009867aa802a53928d4bc9bb0566fc21d8fed0b3973761a7f47d90760eeed5c25aa0d7048963786c","ssdeep":"3072:D2yIf3V/62ZrD9V2l+vulePs0xL+Y/71oCl+cNerGNVzKTvlisi3Tbri5lvT0Cp6:63V/62ZrD9V2l+vuk0yCrGNgT2briPvs","tlshash":"6b040941bba4b06243db35d40077504ef2b6f969744e44a8f22898f37db4ec98a7af35","first_seen":"2025-10-28T19:02:37.24903Z","last_seen":"2026-04-21T10:17:27.06443Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-09dda026.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-09dda026.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-09dda026.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-e84\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:52 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 885\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3716,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3716), with no line terminators","md5":"94dd6c7ae9c7729d7c5c3a2cbd6e896a","sha1":"8e85c94994df7687f5f0a1d3e39785529c067873","sha256":"d4f0fb45bcc6ddbe67e3cbb40df2bc2c3fe7670f6232f06ddf0d0c60d725b96e","sha512":"b2edd4de8e5db77b456bab5211f9a1cd6daf59839e5973d97df86374e2df52ec534036ecf74a9a37068db5e81a93dfa94d0bdc9122198e46b6ee470b728cdefc","ssdeep":"","tlshash":"6f71121b12af271ce423df511ba4a2a9c324c022d58257edd4a5792acfc3d8325e7b8d","first_seen":"2025-10-28T19:02:37.182617Z","last_seen":"2026-04-21T10:17:27.066167Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-b9d642d2.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-b9d642d2.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-b9d642d2.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1ea2\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:08 GMT\r\ncontent-length: 1662\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7842,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7842), with no line terminators","md5":"bd1ed34fd887c91edd6865b85727e13d","sha1":"f4ae90766ab659688778e298a291756fa8001d56","sha256":"e344958c00c1a3fdcc07b256746d8063121781c198be63ecf233533d2972ff87","sha512":"108b9abf550eb548a4c8d1a01e1ccfb60755ad9bdf021714be06218716d448b9c4358721a94852548d940a9b54ae6de4db835b8497e954fd3a0fb76945006fd9","ssdeep":"96:eIk/kCzDnktTGUYEtCHZG0XLvAt8xegjwrkZkZOdedwqYfND/zq3zPOYB4:OpJTjwrycieh37fy","tlshash":"27f18113671f9619d473fda8f1ac6988ce54e923c14207aeb1017a34cfd3e9a297368d","first_seen":"2025-10-28T19:02:37.154983Z","last_seen":"2026-04-21T10:17:27.06803Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-e7a1aac4.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-e7a1aac4.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-e7a1aac4.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:33 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-1c22\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 3480\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7202,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7202), with no line terminators","md5":"cabc8961e3db971722029d2db2aecf6d","sha1":"dd97ec6dfd259565a2885352c11a6b137b014c2d","sha256":"e31bdb67f0f60ca39c2c825eed9ab2c4b3a5d2412077e74775bbd2c8c07e9348","sha512":"3866324a89362f231ecf94c9eb9dca05a85b0f49698ac5280c5cb4a6b7c48baf3fd9d993a0b439d069e5df71acaf9c2ab7ad11aee7ee93ef03d544816ad8dd7b","ssdeep":"192:tx4oq2qZSjK1rRIuw7G8rIqTLdSVYrzXcoZj:n4o4+KxRQ8iZrcs","tlshash":"72e1d926b093f9aadd1d6052921e1631ac362fe8c020d4d6e7b4d895c6e4d78173ff4d","first_seen":"2025-10-28T19:02:37.310437Z","last_seen":"2026-04-21T10:17:27.069634Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/api/wallets/19/templates/0","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /api/wallets/19/templates/0 HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Version: 1.0.0\r\nPlatform: Win32\r\nLang: en-US\r\nAgent-Identify: 02edea11-b276-4402-83b5-630259d51b26\r\nDevice-Id: h5\r\nRequest-Salt: \r\nRequest-Date: 1776766609\r\nsignature-before: undefinedMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.01776766609%2Fwallets%2F19%2Ftemplates%2F0undefined\r\nSignature: 782d1d86644c7d060f54a4ccc6cead0d\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:44 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":574,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"65a7f3ef0e243347d5742f3459a0c16f","sha1":"d5cf2b1ce03f293a5ee31eb20f9cd15806a7ba37","sha256":"9b4d605150e51d54651e3072a7bded28c578bcf72702a431dcda99dee61e5d27","sha512":"98c60daecedd485f8c30011ea5c00f952c2b2f3e4e93a34ce23a0ec8b67782ab1ae1ebd2e8fcc113b3e2523d462e299566272645be58f9161b7ca799f130a841","ssdeep":"","tlshash":"43f0e1f2191860054a5183cd30bceef9dc9d358e81e10bf754389772805cbd034479a0","first_seen":"2026-04-21T10:17:27.071269Z","last_seen":"2026-04-21T10:17:27.071269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/img/icon_googlePlay.c4282a5f.png","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/img/icon_googlePlay.c4282a5f.png HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/img/icon_googlePlay.c4282a5f.png~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Tue, 22 Aug 2023 07:53:38 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache-status: HIT\r\netag: \"64e46982-4394\"\r\naccept-ranges: bytes\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:17:01 GMT\r\ncontent-length: 17300\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced","md5":"c4282a5f16443fd4493ced29810ef78d","sha1":"350cb5059ba98aa2305ba0d959fec205c30d0f86","sha256":"7036016f1b71023def76c780104605b32a3f61bcf0bbc4e851b58ddef0582f01","sha512":"e28c604dd911462fbf0ac9af63308a814d7b91e6c08a6f87007543202c41659a2a22aec0506a1d6d8e2fdc0b761d661451d3852d2c0ffad1268435476bc4e849","ssdeep":"384:z2Kq8TbzyoamF27o1/nvB763ZjoDrI2Ppv4vvIARoWx/O1pd3Z:zgG+oamM01/yZSxPpv4vwARXx/+dJ","tlshash":"4a72cf1b7758a4d276234b742ce941224e478cf784e34a3ee7ba01a31f497d75e8a8c8","first_seen":"2023-04-08T20:47:40Z","last_seen":"2026-04-21T10:17:27.072795Z","times_seen":324,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-484c5b1c.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-484c5b1c.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-484c5b1c.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-36e\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:59 GMT\r\ncontent-length: 312\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":878,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (878), with no line terminators","md5":"916e38885e2eaa0d77e5d4cedd58dafb","sha1":"52de78303637c627ef9934b4fce9c422f0449485","sha256":"ffb56e4d6ce88ea39cd39e75b94082fbf0483059f65df19f09c0caa4e4bdf35d","sha512":"d9b5da183f811e3f4872515cf746356363ed944e7912be4a398a388f37cce909f82f52f2cae8409951a1b615b99aebd58820b18f8eac8fbc36b74d6210bffdf7","ssdeep":"","tlshash":"dd11afb25619202dc66ee739b0f672bc74792703d3435569c2105a64cf33ae37047a8d","first_seen":"2025-10-28T19:02:37.236374Z","last_seen":"2026-04-21T10:17:27.082474Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-bdfe8b10.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-bdfe8b10.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-bdfe8b10.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1c9c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:06 GMT\r\ncontent-length: 1546\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7324,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7324), with no line terminators","md5":"8182c37e43246d66b63a318afc01bc92","sha1":"21cec639ec245973c1375ed8acfcc9e1eca34348","sha256":"3199997a80937325c619ca35fc2c71ba0129d3de20beb06be3917d7579d34911","sha512":"e2532890a3def06a803b031f242c6df97dd023ef4e08b43c8f34c668d32e25b78ef85e29f623137a91b99ae85dd2098fdc6cf99c4467ad2e9a849c8b338279a1","ssdeep":"48:DqIwWl6/kCMnOltLPX3kMOhTdLKeV/lgZ9EW15Sun3YtS64UT1Ksqs2OI0jsc:eIk/kCzDnktTdeetPtP1KzspI0jsc","tlshash":"f9e145231a5e161cd13bdd3976d1b198821ce013d3939af5d671ba29cbc3ac221e678e","first_seen":"2025-10-28T19:02:37.229115Z","last_seen":"2026-04-21T10:17:27.085146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/img/icon_appStore.89f0eb05.png","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/img/icon_appStore.89f0eb05.png HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/img/icon_appStore.89f0eb05.png~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Tue, 22 Aug 2023 07:53:38 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache-status: HIT\r\netag: \"64e46982-36b6\"\r\naccept-ranges: bytes\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:17:03 GMT\r\ncontent-length: 14006\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14006,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 464 x 138, 8-bit/color RGBA, non-interlaced","md5":"89f0eb0533a76fcf8a2714e6945cb344","sha1":"faf2cd0dc10a9f06388f51998f399732e901f61b","sha256":"8dc4749e2ea6917da79d553571aadc8ab4dff908a1b48bb2582be80247aa2213","sha512":"c01e2980fafe9dfa311c7b9f1eeeca0ca6c088b403e64a77c9dd52d055d9917e36d59637031b361e600f390cf5bc8619a74c1f1dfa0ac8e03903e6431a23fba5","ssdeep":"384:8JnCVmzZDKfQ56yFVHuhMrBRPWt+4NNaNarrGlHXvUJycNELDC4xM:8FCVmz9KI56yzo4Pydywriuyc+LDpxM","tlshash":"5e52c066f705b28253384d7086a7c32cbc3ec2548a11b9f998df90d52f6172e7ac586d","first_seen":"2023-04-08T20:47:40Z","last_seen":"2026-04-21T10:17:27.087466Z","times_seen":323,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-2e9cd6c6.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-2e9cd6c6.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-2e9cd6c6.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-12ec\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:12 GMT\r\ncontent-length: 1642\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4844,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4844), with no line terminators","md5":"089957c0af9a70e05b04d05f62992b8b","sha1":"c3658d0b47dd4017f20f7df89103a7548845836e","sha256":"c04ec0d1d1d5dc8fea8dd88fa7b213450cb29abf6c5d41b74377909fb24e52a8","sha512":"dd1daa87109ee7c5ad3c5518282bbc139203a8ce544e2a6aee00490e952485978acb3399596f3cc459815814815cb51958f23120adbed08e0dc31b40565ee771","ssdeep":"48:lD583q6ixLNokLeqrPjTcSxaMFggk16SHbjcUjMeJM/zBIEzwFAeAkyYgNcJRE6w:yixL/zcyO16YwNpyRcYrXIFxYG31UCR","tlshash":"94a1440e35d7611e495dd002511b1826e9363ed89400c0c3a6b4ddf4f998ebebb3efa9","first_seen":"2025-10-28T19:02:37.262484Z","last_seen":"2026-04-21T10:17:27.088276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-3a6f3200.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-3a6f3200.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-3a6f3200.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-6095\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:12 GMT\r\ncontent-length: 9896\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24725,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24725), with no line terminators","md5":"2e5fcf85ec5b4f47219fe8ef3d16045b","sha1":"c1364db3c84523c6e4b39ebcef5881ddba3ce2cf","sha256":"a840abc07d87ce03ecc0248694be01de62ada6b475c23e2906d5873f60384861","sha512":"acd1b8d0958645523ea23b9e05b9cab00f8f139ef99db995f768bcddd5976084784b421d0d2c13514d5e1015158162691bb3a39b69ee06ab3573ee1392578b99","ssdeep":"384:ujNAe/6ZuqwciW7jSxW4H5beaVmULRpInAnRG9cYzgLB:8NAW6Zu7ciW7j4HNeaVmy3IAc9cYMLB","tlshash":"9ab20a1ab193f07dcd6b602d562e2975a0252fd4b034d0caf778c6e4d99cc24672eeac","first_seen":"2025-10-28T19:02:37.175621Z","last_seen":"2026-04-21T10:17:27.090325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-3ddfc3c8.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-3ddfc3c8.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-3ddfc3c8.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:25 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-98bb\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 27521\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39099,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39099), with no line terminators","md5":"a0a30575c1b285dcd11b3162a4a694fd","sha1":"44fbc4dd52ec75e2ab0d71c9ac2d4d8cecab1cc4","sha256":"8177868678b2b35e8989e2fe4b30782862b199ba4a39087492d08954d838efed","sha512":"650ea6a36694c39bed4c2e71841cbd91d3b1f70bc83dff6942185f9220e9f27f6ffe3955e1775cdf29686eb568260afb4fc4b8a7afe27be56f507d010700ed89","ssdeep":"768:j9zYoi0wCoMwzxQWoaZm45xZB72q/cz7p+30+:xzYv0wbMweWoym45p6pz9cH","tlshash":"e103c07a329cb88fedf564e0520a6606eca25ccac018e81177fcad4ee5fd50d272f594","first_seen":"2025-10-28T19:02:37.247997Z","last_seen":"2026-04-21T10:17:27.092598Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-4b169498.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-4b169498.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-4b169498.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:25 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-800a\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 10222\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32778,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32778), with no line terminators","md5":"70183dfe9e12c380969e1cd4b79de396","sha1":"f93a2e517ba29c282c16f272ce802adfb729451a","sha256":"579fede709a84b5c4f38e7380ee7924124e7292f9a269401b8cc031664dc6487","sha512":"14b92569ed676685c70a92757fb7251bd37dff5fae11aa1647443a37b15976d9ceabf2fd17593a4336eade48d83268f094072e4799a88af8f33170893d877aa0","ssdeep":"768:4PSYhJf4Fi/59z+hG6Zu7ciW7jeF7i9soR2:wScJwFiXqZ5d7jAi9PR2","tlshash":"65e2c94bb086f15ecdcb5029591f2531a0232e84b424e5d9f7b8dae4d9acd58232fb7c","first_seen":"2025-10-28T19:02:37.302513Z","last_seen":"2026-04-21T10:17:27.094345Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/api/configs","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /api/configs HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Version: 1.0.0\r\nPlatform: Win32\r\nLang: en-US\r\nAgent-Identify: 02edea11-b276-4402-83b5-630259d51b26\r\nDevice-Id: h5\r\nRequest-Salt: \r\nRequest-Date: 1776766608\r\nsignature-before: undefinedMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.01776766608%2Fconfigsundefined\r\nSignature: fa9ec9702dcd5d44b1c18e8f97395f9a\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:43 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4534,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4baa9961e45e15455e5d706efe743549","sha1":"f1ac5e7e119004e3cf1551f7c001cc89ccf51052","sha256":"4879f2916a72aa9c82c96dc09a0808ea61f329607efdd86a5a0b5900b864140c","sha512":"bb3b9bc17686f4abc516ee13a7ac521d4451ab01fde57be329a4481dac6504cb7616f1254b2a08ab97a2b862e42a499f1966934f78ac45c6e2d504dbc3ea9ffb","ssdeep":"96:suY20mY9uNJNg9/Ke0yCddeEF6l71RtxdgGkOnjX5IWPo+dl2JAQ:p0z9oUz0HFi17xKGkOnjX5pQw2JAQ","tlshash":"dd911162578bdc508a4795e9b5fd5d28365e0f7ac2d4cd8fee8cea3002c8a3a7e46000","first_seen":"2026-04-21T10:17:27.096283Z","last_seen":"2026-04-21T10:17:27.096283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~d939e436.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~d939e436.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~d939e436.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1900e\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:42 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 32580\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102414,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b87fe4829c72163eacc60baffde36ea2","sha1":"18a8b020040bde0e23cd493f5559b9b9898cb80f","sha256":"e610f9816acdaecd37fcf33bd603f729c17f24e5064c59f68005113e31a48558","sha512":"5621558cc06000c268933fd06cd99340458ba3f80030f4bdb646e37716b22b8b41bcea5ce8471d340aeff32018595a51e20918cdcdacb94c5aa0947894d4da25","ssdeep":"1536:su2NBjvkBgJg3i0aSptoBlZ6TGHDWis/fMYQs/fMY2W9DqGaZQfJsJ:snAntoLVHDW75R52NufSJ","tlshash":"94a31780b1d8b05b12a72ca040bff407f0b63916571986e4f268d5edbcbd5ca427be38","first_seen":"2025-10-28T19:02:37.160106Z","last_seen":"2026-04-21T10:17:27.098114Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-57f28834.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-57f28834.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-57f28834.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1be\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:04 GMT\r\ncontent-length: 195\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":446,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (446), with no line terminators","md5":"f4d5d9012458682860fb67740d448aaf","sha1":"6a156b43371d882397284162d5fafb7efe8184f9","sha256":"db8a500ff5fd433e695094bc95e01fda2b6ac35e044f49cae4245d8bb9492ec0","sha512":"5e33b0bf3888f04a1f107501e3292345afb759c02b4d07f2d1426e1595389e4bbb4fa01ba847882095021c978e91878a381bcd665f41c1662665dce4aa6e2a6a","ssdeep":"","tlshash":"60f027329b49512d815be338f0d0619d700c5a11f75a6d994b33e57889a3ad163b198b","first_seen":"2026-04-21T10:17:27.100016Z","last_seen":"2026-04-21T10:17:27.100016Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~9187ef67.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~9187ef67.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~9187ef67.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-20fab\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:45 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 40052\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":135083,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fcf170cc15773df734080a5d9342e388","sha1":"9afe9662aaad4851581203658359dfb8f88691e3","sha256":"3b09ae1208a640c756e77c6d0fb418d1d56d4d7f1b6f73c8b20240e06e23b311","sha512":"483ba51b3e424a895512bcaf219b15ee9bd676e12c033e80f4df43cf0a317553a48f59350bd7c1d6c20130e62297b2d90c5a7eecb08b1817942ff569c4149772","ssdeep":"1536:A6jzm99a6hcOqJooRbYMrCrrbs944N6FReFedkic3rR:A6jy/V7qJjVYMrCH4Xc8R","tlshash":"d8d3c49cf2c5f06502a731f940af050fd23a698a790ad9a0e651e4c17c7c55eb23bf7a","first_seen":"2025-10-28T19:02:37.138144Z","last_seen":"2026-04-21T10:17:27.10157Z","times_seen":2,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~4939e289.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~4939e289.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~4939e289.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-356b7\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:44 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 64343\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":218807,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1e57217881ef0ebf2677e4140d21f63","sha1":"c52c7efadca1bd6f7392d81626abb98543990eac","sha256":"7b528140f624e33ee92746351d4a2e528a7c4f4346a08cb8c5e29d5b5649651d","sha512":"874fb53f43c8e51dff87dc7b9839c0d5ac6f0ea9081ccab519c56f92952482f6ea3f1646207524669bf058bfa3b1776e8d7be802e58e711e3c93be43f5bb9836","ssdeep":"3072:pM6DbACJa+X4lA2Tvwu7xVWTrbsXwyZoP7Q6Igg:pM8bAca82TYu7xVWvqNZoPdIgg","tlshash":"4724d598f695f065439731b0857f050fd33a685db80a85a8faa4d4ca6cbc44e323bf39","first_seen":"2025-10-28T19:02:37.244605Z","last_seen":"2026-04-21T10:17:27.103197Z","times_seen":2,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-0d599713.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-0d599713.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-0d599713.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-4910\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:12 GMT\r\ncontent-length: 4248\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18704,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18704), with no line terminators","md5":"8a01826e9aa0763df60c1372a03713c8","sha1":"011fae4f69a27195d162604afec614ea2b6badcc","sha256":"c3f002fff305c0261780e5409dcca3d009dcca75030d9828dfaf5097a5e7ba40","sha512":"c47dfed81ee641579f38e4a88f540aa0c6057e12d3aa0a21e740da2961050c91e0608630cb5c34cff83a4626b7969033dc0789f8bcd86aae086363a2c8a0e54d","ssdeep":"384:m47cRSVIjDtfuZoO0aYPO0VYQO0aY+YhrhYPY0YcYuY5:3QRSOfuZc6EfYwNFv5","tlshash":"8a821d077093e27acdce5012522d2930e1622f94f415e08df6b9dae4daf8ea4570f6bc","first_seen":"2026-04-21T10:17:27.104831Z","last_seen":"2026-04-21T10:17:27.104831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~205977d4.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~205977d4.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~205977d4.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-21538\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:50 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 43197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":136504,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"01629af71c309f4bc7ceaa37eba853fe","sha1":"5004b9c91fa4573052daf02ef2e1edf8a0233d0d","sha256":"52a2a95ecf5f6b34df9a4103ff68981e1bf0c375f95c76f15a67d3ed985c3ed5","sha512":"21b495c488f067a3c23376788ea187e2ad0eee610951f04b6e090e20949b8798332b9567fb954a6d05c628f6038d7fd78196ddfb75975215d7850f203c0bcdff","ssdeep":"1536:mP1QUVXefo2dipkg6PRNxN5+bHuec2pgw0/8qtBJu0MPzc:m9NXFV2xzKH1c2pgwuvu0MPY","tlshash":"55d3d6dcb296b031079720b5417f110bf33b3859680e81a4f256e4d93db998ea16bf7e","first_seen":"2025-10-28T19:02:37.121028Z","last_seen":"2026-04-21T10:17:27.106337Z","times_seen":2,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-43dccf1f.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-43dccf1f.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-43dccf1f.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:23 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-7fd\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 900\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2045,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2045), with no line terminators","md5":"da9b0a2d3f45962bd100af4eab0b32d7","sha1":"0edbf04ebd0416a33a56f2221a75e49300778a9d","sha256":"5469b40f2118134b37ef2936410ab00b092d4cbdff3c817fdaa86d47df892ae3","sha512":"98483e85bd0ab65333538acbc8dbf50c14405220ea06311c1d5a5cae409d8a1e6bbce0c87ea066742d64410a6ee07763cbf76eecf08f5fa0855ab9cd3bd92da8","ssdeep":"","tlshash":"bc416264f0c7f0bc5b2e1081106f3532f23a7ad4ab10a892e6b4e0dcddf0609022eb9d","first_seen":"2025-10-28T19:02:37.194099Z","last_seen":"2026-04-21T10:17:27.107823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-844845b0.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-844845b0.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-844845b0.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:29 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-b58\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1226\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2904,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2904), with no line terminators","md5":"471b94ef13974eee97e66f7c44d2bc7f","sha1":"7f83ea654cabda6a93196615dc75670db53e2b32","sha256":"96b077f4cd456138ba416ff8c048ff43687fc705460ed5abea8db04530588a4c","sha512":"8d2dd50fdf4c1c8743042e62a3ec3ff55ce6e147ad155240b4ff857cea61114e3cd23cc7cd4b6de28582408aabe78da401ae33efedb9031b819ba8e1f8a98b33","ssdeep":"","tlshash":"62516208f0c3f0a94e761092542f3a35f1773d8515159482ea78c9d5aea0e9da33efbc","first_seen":"2025-10-28T19:02:37.215814Z","last_seen":"2026-04-21T10:17:27.109387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-aadd4758.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-aadd4758.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-aadd4758.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:31 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-344d\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 3677\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13389,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13389), with no line terminators","md5":"cec0fbb93ac91752b1e3b791ec5200a1","sha1":"c0a74f1b6f6d2ff7e1ba488fe42901c2b08d1dd2","sha256":"bddb5c202e9e4c902aad30e4169ad80b62272c790c5af1205fa94ba5b6c9b491","sha512":"93711edecb4cc2b486143c5959c6939cd988ee28047d46b670287c69e11ea8ac31ab537067dfe4ea77f895a214b802eb9e2daf6e17d35b778d30647a8f56e4b2","ssdeep":"96:tv67rLIfDjGQKW+q3Urnp78SpmjkIPWjF16MN3mzif6WSyUES69EOs3wXAdVNX94:ImRcnHBJN1mzZpyAdvXMEHGYQif/i","tlshash":"47523002b4a3f479ed2a8125611f1674b2b23fe86415809fbb74cae09ed5e24170fe7d","first_seen":"2025-10-28T19:02:37.256979Z","last_seen":"2026-04-21T10:17:27.110793Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-b95eae42.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-b95eae42.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-b95eae42.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:32 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-e70f\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 19489\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (59151), with no line terminators","md5":"5c4755ba09f8b043f7f14350be9e13d3","sha1":"e7217aae2526a46aaea886708fcdfd33796b0e03","sha256":"5e3f0dc03d3a2b9f34f9efdc222023a4abfc9107783e91f43e3f33ad00d92860","sha512":"40593f49e82451adce20631c4ef5e6e8e0ea6d56a1de96aec634304a076eeed7be60b78cd126f3bf634662549d33607ab5eb52a238e7c85a46b3aa679807d09c","ssdeep":"768:YmKgLZS3kKixktPpjn3pK6fpUJlja+2IdMh24SC0qodFDbVskKU:BK+ZckKiqt3zfpUJljbLaZSCodFtFX","tlshash":"dc433b8eb1c7b46483eb20a1515f020962373d986449908cf678ddd69eb9e6d623ff3c","first_seen":"2025-10-28T19:02:37.316842Z","last_seen":"2026-04-21T10:17:27.113045Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/api/configs","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /api/configs HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Version: 1.0.0\r\nPlatform: Win32\r\nLang: en-US\r\nAgent-Identify: 02edea11-b276-4402-83b5-630259d51b26\r\nDevice-Id: h5\r\nRequest-Salt: \r\nRequest-Date: 1776766609\r\nsignature-before: undefinedMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.01776766609%2Fconfigsundefined\r\nSignature: 1521eb2123f38db3005e3d4e1958b71d\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:46 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4534,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4baa9961e45e15455e5d706efe743549","sha1":"f1ac5e7e119004e3cf1551f7c001cc89ccf51052","sha256":"4879f2916a72aa9c82c96dc09a0808ea61f329607efdd86a5a0b5900b864140c","sha512":"bb3b9bc17686f4abc516ee13a7ac521d4451ab01fde57be329a4481dac6504cb7616f1254b2a08ab97a2b862e42a499f1966934f78ac45c6e2d504dbc3ea9ffb","ssdeep":"96:suY20mY9uNJNg9/Ke0yCddeEF6l71RtxdgGkOnjX5IWPo+dl2JAQ:p0z9oUz0HFi17xKGkOnjX5pQw2JAQ","tlshash":"dd911162578bdc508a4795e9b5fd5d28365e0f7ac2d4cd8fee8cea3002c8a3a7e46000","first_seen":"2026-04-21T10:17:27.096283Z","last_seen":"2026-04-21T10:17:27.096283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-2e9cd6c6.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-2e9cd6c6.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-2e9cd6c6.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-16d9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:59 GMT\r\ncontent-length: 2311\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5849,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5849), with no line terminators","md5":"de1fc11e9647761ba12ca89e762b92ec","sha1":"befbfa4844cf7757363d825322cf4ad30f896f7e","sha256":"eb038889b7c21864317932f1a8e464c8009b699f49232918e015a23160e232fc","sha512":"5db7b6f8b0c462fbc42f7bb183786659a9716d1b27f5424d6dd10c9f86cbb49144cfa7ec823f0ae18476b6118f43d841f110452cdd7972ea3c6a8112ad9e6d7b","ssdeep":"96:eAiGwGVGYGn1UGn0GnzGYTGYrCYGYrU3GYrdGYr39yXiS3ZHZmJkddjFBUlZkmJr:eAiGwGVGYG1UG0GzGYTGYrCYGYr4GYrD","tlshash":"e1c1fc38210d135883fae74474e8f8881e18bbb3da0d57e946c2278c5dcf7c26a68b4c","first_seen":"2025-10-28T19:02:37.200997Z","last_seen":"2026-04-21T10:17:27.114528Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-0d599713.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-0d599713.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-0d599713.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-15b7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:55 GMT\r\ncontent-length: 2380\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5559,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5559), with no line terminators","md5":"b3a416dde9a6d4f1c7fb24cb38bf1c34","sha1":"ee27207746d8938a570cefb84ed35488a1db2350","sha256":"151d9141e7b6ab7b7d6af567a6e20f520e7868d170c12821a3c272012a19b6a5","sha512":"f0f0a9124ee16d2b4426420bbce786f3142de0c028894e43f909a1e98533cda3d6c3cf8b5270edf0ff02aaaf193317eb05e4c460e2aa56512e1fd4e37db69b46","ssdeep":"96:gxJ775y17i0dNNOaReW5yqOYaUMXLV9fWxOsxo3xXxVIxRxFxOpxvfCbLMFL/d:EJ79y9i0J2jYaJXLV9fWx/xSxXxaxRxk","tlshash":"8fb1943117292208f427e9acb988b9445a0c9a23e34d5ddda743790d8ed77da7b7030e","first_seen":"2026-04-21T10:17:27.116036Z","last_seen":"2026-04-21T10:17:27.116036Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-43dccf1f.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-43dccf1f.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-43dccf1f.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3a1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:00 GMT\r\ncontent-length: 321\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":929,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (929), with no line terminators","md5":"51774e172e0c22af1644485309949335","sha1":"519c9ae19bf4cc8dc17cdb8800de757fd777b025","sha256":"7a37ec2a59357bf4a80560cf2be9a451e713a411119aec440942204265c56f03","sha512":"ffaf263542dbf36b84f0c96dabc7e8c239089e581e1645306220ecc1af2a9762311ed7bedd48953f3512ab69ce622effc45c95f48ceebf1ed434c8d679454a12","ssdeep":"","tlshash":"99113db19a49113cc46e9639b0e179bd71693723d3422659c1109b70ce17ce2a6d388d","first_seen":"2025-10-28T19:02:37.240946Z","last_seen":"2026-04-21T10:17:27.117797Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-7f9c699e.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-7f9c699e.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-7f9c699e.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-5bd\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:07 GMT\r\ncontent-length: 474\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1469,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1469), with no line terminators","md5":"627d45859cc2366b214673f659105b2c","sha1":"97de708ba1078f818257a123de07d00fce57360e","sha256":"bf5e4debf2fcdfb6d5c3fa9f353418b980be7e69e28fa4f2ca73e2fd9d933c07","sha512":"a086c6a7f120c6172f5fb18258a34e19b051e7b673edf75aba53804bf68ba40e5827b9a0eb08ec6f0fc6b5f56b6a8637d4cd8148740d9ca4797bc52baaefd2ac","ssdeep":"","tlshash":"ef31237a1b152155c0abe82e95d17864922fd602b8638ddfb303a51f4fc35aa334124f","first_seen":"2025-10-28T19:02:37.280079Z","last_seen":"2026-04-21T10:17:27.119136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-aadd4758.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-aadd4758.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-aadd4758.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3a81\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:06 GMT\r\ncontent-length: 2094\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14977,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14977), with no line terminators","md5":"7b9eacc63afc8a0b3daafd607ac7907e","sha1":"abc375edffbac8487f3e27f9217ce72bf4adec08","sha256":"960258e987e6cbba8907f04308c5dadc79823ca66cb990387ca6ad785dd8b042","sha512":"5e052ca97850d1e55682bfa0a0c1887c22ddb39f02a55d8f00d36c69770bb865723d35cabddedc4a950e09b6e5b7d39fbcfa98a9afe6c8f7f7e8e33ac887c236","ssdeep":"96:O1cS+UOzfPGHBzcjkwvl0SaSi6SXvl+5vlBvluBsaFsbreS36Sfi52g8D6P3oi9p:PhGhD5ZmdFi52f/iB5","tlshash":"096244206b3d1c34e17fca5bb9e0bec96608a607d5894dcbea00252b8dd7dd2329254f","first_seen":"2025-10-28T19:02:37.273477Z","last_seen":"2026-04-21T10:17:27.120792Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-66e237a8.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-66e237a8.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-66e237a8.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:27 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-14bc1\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 22531\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84929,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"b6351603a57b2333d096625687151097","sha1":"d14ada5382ff6d62ce544aee9f5e41e7728de0ae","sha256":"d52aba8e957e2ab1ea6b6d53fbfd25b7d4161fe803bfa82acee028edf7d94b19","sha512":"02be3efebba4db265eec6a69ab577a3527c833b9cb22ffcec12b023ffae8c0a6752557ee54e0e4717a69ceb0ddc6cf19a6b40f954c64371861c5d7fc6311ec07","ssdeep":"1536:k85eYnWwGse+bJa++UqvrYXUR/4mGoryJ8Ze+0Qy3nQ+td+rKWe5L8mJWTyVUa3B:r5eYnWwk+bJa+SrYkRL/Uqs8mJWTyVUQ","tlshash":"1883fa8ab2e3b039c2a76024001f1605f23a7a54b065d4d9f779d8e5adbcd4d622bf7c","first_seen":"2025-10-28T19:02:37.32086Z","last_seen":"2026-04-21T10:17:27.122402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-be88b160.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-be88b160.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-be88b160.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:31 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-1f64\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 4033\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8036,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8036), with no line terminators","md5":"ca380407e8f393ca4e9550067c01459c","sha1":"6a3b2868385adf94e5000ed7a1d3bb7841b4542d","sha256":"0e357ab855f6c7cdec5f962e891e78ac1f296cc5050fca26a613a787eb3fa86b","sha512":"821de5ccb7d5ea956bdca8d627b9cac026bd0ea0e1bf71617ac84d54da492ad62892150f6a60bfebd66188f18595181e970dfd384fec6946c0823d9042ac6918","ssdeep":"192:8xDHN9szXe98QV7i/jwow7UDGQTZycP8r/p/I:CDHXasGXG9cPr","tlshash":"23f109b5f081fcae6e593095011f3234ec262fe4d014d8d3ebb4c495daf5859632eaac","first_seen":"2025-10-28T19:02:37.165334Z","last_seen":"2026-04-21T10:17:27.12393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-ef84c340.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-ef84c340.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-ef84c340.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:33 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-5b2d\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 6201\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23341,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23341), with no line terminators","md5":"5063ac7ec3ea3ff7de8b18472621c8b5","sha1":"71ae5615e34dd1d159410088102044c4826a712d","sha256":"79b8dfe56bb52fda2f24d3eba7a1ee7bd5bddab573b33a799b499faeb3c67a89","sha512":"b8fdd628d93d6c0a77c8dd1e7a9896e61e00fe792f4320077d7945eb8dc544b708df4c146113b2990d903a40911fdc1be65741bc3b59aacbd4bffa394e0cfa44","ssdeep":"384:CjLVK0zxnBNbpn99/xkfyAmAWVLiGISVIFIcmIXIFItIzxIrIJI+IxIH7vIMIs02:YpK0ztp9txk/mD2GrVKNmMUucxUa7K01","tlshash":"47a2b655f086f52aca8b5065412f3935a1733ed4b404d09eb678c9e4caa9eac231ff7c","first_seen":"2025-10-28T19:02:37.269772Z","last_seen":"2026-04-21T10:17:27.125398Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-208820f9.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-208820f9.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-208820f9.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-39aa\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:11 GMT\r\ncontent-length: 5159\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14761), with no line terminators","md5":"58d5fe042ce4c976271d722c76c94340","sha1":"c7baeddd6f235d82e9178f8750ea7f8b86ee4182","sha256":"95fdaff9bc3f54f52fd572fa382d539bc3f9dd489a6ba83664944a0165faa01a","sha512":"e78d210a3c26998648149c6d47c34669c5b3417d5d94d789e1f30b03ca62c072a6b9643d51427ab283093fa6084ad472de1922080fb7a744df68863ad2b3576c","ssdeep":"192:Mxjq7VUa4OFOhyyMEGNXD7SBZljonHFrSu9a5XtidkfaQy1DGQTZycF:Sjq7VUjhgxKpjonltaVtE+a/G9cF","tlshash":"e562d566b093e45ece8a7051901f3531a5322fd49021d48abb7cc9d5dea4e6d232fb3c","first_seen":"2025-10-28T19:02:37.163317Z","last_seen":"2026-04-21T10:17:27.126889Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-717b22dc.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-717b22dc.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-717b22dc.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:29 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-97b\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1070\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2427,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2427), with no line terminators","md5":"17157fd3990cc24b2c2c4bc9560179ee","sha1":"511db7eb5202a95ccc514385a94c85e92ec32ed3","sha256":"3ded2750ca3d1e7de0130d55c77f2d517b93f95c840bb1d2420d43433ed53ba1","sha512":"2b423d7ea7b28bf213804ae2bda04540bdba85897bb1bf7342e7173a37ffd1ccb578ceb2bb10286ecd7bae665a1b3b50984d52f347285418c7408fd5a4246f85","ssdeep":"","tlshash":"34414357f4c3f0a88ebd20d0523e1576f1351d94a591e892f3b5d0f99ab0914473eeac","first_seen":"2025-10-28T19:02:37.333549Z","last_seen":"2026-04-21T10:17:27.128283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-eda35bb6.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-eda35bb6.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-eda35bb6.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:32 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-c29\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1332\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3113,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3113), with no line terminators","md5":"2793b9fa137d4b50f1ecbfd6cb857061","sha1":"82805499c4324ae1c7e0eaf8e1f6b2a47ab1c273","sha256":"7c94ce9a14ed77238721585a68323bcc6ebbd5dfcb82183fee72cc5a33914d48","sha512":"d3514068270bc9631432017e94cc4bcc2a2f5e1e71c77d0b9c922fdb8cc262d98cc47e858a4b24957e700fbc73daab15b069fbf380d37f8c31cce35484d77b64","ssdeep":"","tlshash":"79516564b1d2f4f9dd3a1041412f3a31e1353fe04214d0c6e774c8e9d9b4e69571ea6c","first_seen":"2025-10-28T19:02:37.303544Z","last_seen":"2026-04-21T10:17:27.130227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-2cdd1bb7.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-2cdd1bb7.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-2cdd1bb7.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3dd0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:00 GMT\r\ncontent-length: 4803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15824,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15824), with no line terminators","md5":"5e0802636c44958ee1677c510b7d2410","sha1":"0bcc701a726e6929df0783cb0276e33690fc108a","sha256":"a8da3ab29620b7409a049c889020c82ca458e1dd99b424439e2293df882fea00","sha512":"d2c70cb1e85195549816e3b418d18617002cca9f55ee9f573b6a57dc7091281ccfe25c0aaa852a394e2ecb2dac8874aabfc9c252e30cff706a575990698d5e14","ssdeep":"384:W7rLDuFhIKpRUk6ZuqwciW7jSxdx4q5bN:cPDMKKfD6Zu7ciW7jHqNN","tlshash":"8462f90d71cda47c9957b23d2a2f261a72266c456019c6cdb3b4d6e0f8dcc98612dfac","first_seen":"2025-10-28T19:02:37.209703Z","last_seen":"2026-04-21T10:17:27.131412Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-2f91f326.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-2f91f326.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-2f91f326.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2b3\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:59 GMT\r\ncontent-length: 281\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":691,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (691), with no line terminators","md5":"9d2a872d2ef8266e64d97e9a15236095","sha1":"4ea115aeea4f78065b90a8281b67a1536e0a7bf9","sha256":"2a629ece725a105b4a72af32a3489d57c69b0c9736c1deb94dd0f83268db7e77","sha512":"11864c2f910ed1c7911172dd10c328bddd664481b3e4ad969555d60fd62e12052a61dd19628e30fb4ae0c3ddcc5fc9bb3b37617c10fd34620c54db3dbf5bcf47","ssdeep":"","tlshash":"8301d435750d512c426fe3f8a0a0a348200c7252e37eb47902f2e44ecbe25c1a1b0a8d","first_seen":"2025-10-28T19:02:37.285758Z","last_seen":"2026-04-21T10:17:27.133068Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/api/wallets/19/templates/0","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /api/wallets/19/templates/0 HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Version: 1.0.0\r\nPlatform: Win32\r\nLang: en-US\r\nAgent-Identify: 02edea11-b276-4402-83b5-630259d51b26\r\nDevice-Id: h5\r\nRequest-Salt: \r\nRequest-Date: 1776766607\r\nsignature-before: undefinedMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.01776766607%2Fwallets%2F19%2Ftemplates%2F0undefined\r\nSignature: c5ce4ee47bc9196cce92192ed5b3f9de\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:43 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":574,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"65a7f3ef0e243347d5742f3459a0c16f","sha1":"d5cf2b1ce03f293a5ee31eb20f9cd15806a7ba37","sha256":"9b4d605150e51d54651e3072a7bded28c578bcf72702a431dcda99dee61e5d27","sha512":"98c60daecedd485f8c30011ea5c00f952c2b2f3e4e93a34ce23a0ec8b67782ab1ae1ebd2e8fcc113b3e2523d462e299566272645be58f9161b7ca799f130a841","ssdeep":"","tlshash":"43f0e1f2191860054a5183cd30bceef9dc9d358e81e10bf754389772805cbd034479a0","first_seen":"2026-04-21T10:17:27.071269Z","last_seen":"2026-04-21T10:17:27.071269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":695,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":695,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-7b144d54.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-7b144d54.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-7b144d54.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-169d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:04 GMT\r\ncontent-length: 1195\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5789,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5789), with no line terminators","md5":"c2b5e5f6f4cbbd745f7d409f3f792984","sha1":"e0b3f8d2420c44eaaec5a89a6619db1b198d63ea","sha256":"de899252d71acfcb281a675b33dac24d0116275dbb96bbc83476a7295074738d","sha512":"7f92a7755f71121799f93662a57def81269cf2fc920d337a2e309df208094260e46d2baf172f3c580ff550a80fd321d41becf7ea8bd8482b5303d35c342e3984","ssdeep":"96:eIk/kCzDnktTtskP0nL5f6u2pWhA/1pF1UKbCHyqC:Orm0UpBb","tlshash":"ffc14412626e1f2cc023ce201d90a1aa5374e613d4535bf9d664e669cfc7ec236b27de","first_seen":"2025-10-28T19:02:37.162345Z","last_seen":"2026-04-21T10:17:27.134409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-31b5bcfa.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-31b5bcfa.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-31b5bcfa.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-892\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:14 GMT\r\ncontent-length: 965\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2194,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2194), with no line terminators","md5":"d7f4f705bd933b92f1c55d9aba6b2114","sha1":"c3316630ac0fd1f47a7bd52f0282a5c9c5cd3f13","sha256":"22f0e1cd5ba81be55160770008a0bfcdbae58fac8c7ecbd471d0e678a5291b7a","sha512":"ec908727e65cb1e8dca703b5c1b2d8f7dafb3e79a2a28e6198eb609204e4ba72af9636aac64f65b64d8e3b0c93b97aa8ea3acc1eae6ed0fa4c233ab67666a444","ssdeep":"","tlshash":"d3414378f4c7f4bd4b2f2091412f3626b57679a86a109582e2b0d4ded9f0b18422ff5d","first_seen":"2025-10-28T19:02:37.156395Z","last_seen":"2026-04-21T10:17:27.135642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-47dd763a.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-47dd763a.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-47dd763a.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:24 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-519b\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 6979\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20891,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20891), with no line terminators","md5":"33c9ec7df1762c9c0692552e11168180","sha1":"dbbee8c7bf50add4ab5c6319d82f355c330ff75e","sha256":"452fc9b8dd81e112fe3aafde2d29c2bd37c79a24642c8a6ea7368ffa20507c6c","sha512":"31363e64244c1d167a64691da38a75c9f7f4b79b0409dbf91cc659c3eb0be0c2b137c5444f817144866cdfed0d157e899a3853be52dc3863680eb3bf08f5e87e","ssdeep":"384:3V78A6ZuqwciW7jSxe4+XldmAfGFieXno5btCfCL:F7P6Zu7ciW7j0+1Iiw6bQaL","tlshash":"8e92d949b1c6f07c89ab3069551f1925b0373ac86124d0c9f76cead5c94ceac722eebd","first_seen":"2025-10-28T19:02:37.340554Z","last_seen":"2026-04-21T10:17:27.136946Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-65af394a.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-65af394a.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-65af394a.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:29 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-3983\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 4492\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14723,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14721), with no line terminators","md5":"f5ec42f0b58b29df2c257b4afe93ad53","sha1":"6508a8d12ee7945cac794204a0dc8dfd6b6aa4ff","sha256":"55bfabde3a72c107442fc0cdd8983412031ecdc087d42c1a0b2f2cfe8f42d342","sha512":"94ce2d4c5d96b9096c4af8566b990721f90c42c33de8b526d1245d2c6c6431aac2b04eabfc65e0e10fe0e94d4e0dc75b6cc4cfe1982bdb7a133458d51a1b639e","ssdeep":"384:x4w/3JXaSMmKnNghsqYFW0H0yayF1yH3qac:Kq3JqSoghzwW0H9","tlshash":"5b62b41af143e57dcd6a5010661f1235e2323fd4a491c89af6b5c8e2ade4c26232fa7d","first_seen":"2025-10-28T19:02:37.268807Z","last_seen":"2026-04-21T10:17:27.138419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-24181dff.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-24181dff.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-24181dff.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-405c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:58 GMT\r\ncontent-length: 2408\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16476,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16476), with no line terminators","md5":"c14ae546e40233ec30a185b971ea7839","sha1":"272546893d799579e6618939da59167cd345697f","sha256":"21034b4d9f8ec7cef1f6924f77a0240cf3c6a9a87084bed24ede336bb653d2fd","sha512":"7213fd17b4e7051468d31a1771d2fe6c116a3dab46dcd4d1ddf8e21f840bcb925322f333db9679142678dfed6af656569aef78ec4805c618bcb1d68d79a13c2f","ssdeep":"96:ECUcS9UvHmDEzdmLsX0zSy6SvzFgUhWG5pWSxcB6SZUGHluDtwbYVV52C8Z6FPn8:nYA4PcBPUgluab852r68","tlshash":"d3724221673e0c39d2fec46e7c61bade9609f607e2894cf4e2057d266cd3992316294e","first_seen":"2026-04-21T10:17:27.139621Z","last_seen":"2026-04-21T10:17:27.139621Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-4b169498.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-4b169498.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-4b169498.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2e94\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:01 GMT\r\ncontent-length: 3625\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11924,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11924), with no line terminators","md5":"0aa1c781792e11719fc00ce380b0cd93","sha1":"88b54d182f0c39e91048720f1e0e4cc2ef883fba","sha256":"a67169efa59c17fc01acfca9f8105be605c2891118474a417ae60a69f5c8652f","sha512":"5919ddd2a6490e83c6d54b1b72dfdc1fac69432c5a95b41dbe4fcabb06091794a76318a69c22ccfec64843c6c84e906c76279696c42df80ff8325f505ec55077","ssdeep":"192:OG9J79y9i0J2jYaJXLVvAYdxHx4xrxGxOxOxSxVuBvjR6pl3Da:R9/2ifouBvF6pl3e","tlshash":"3e32c633126e1a18d03bdd653ee0b6c88218d113d54a4adda656792acfd3bc336b234f","first_seen":"2025-10-28T19:02:37.271396Z","last_seen":"2026-04-21T10:17:27.140794Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~7274e1de.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~7274e1de.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~7274e1de.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3be71\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:41 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 70201\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ebdccabb206d072fbc06d1e1fc7bb8d2","sha1":"8e55bc0842d673ce652d36e2b67edc6c841ba739","sha256":"f77de8976e72ce0617d4ddd301032016d04e89a1e1928c9c5951f5043a6086ee","sha512":"0f9765b8a459d009e17ff0a66cd93ab274a4ee661bc0626935b9bb56789a00efc04daa726cd4a0ba5b6819d0299b392de0bdec9d264198df00c708a24f2b2df2","ssdeep":"3072:RmKRZXAVWvoy+LKkR1DHO39RxlW5foK4L63Ppi:U1ZMXM9xi","tlshash":"5e34d888ffa1b0a543a776a0046f500bf2bb6a1cb84e44e8f555d4e1bc7898d553bf38","first_seen":"2025-10-28T19:02:37.31767Z","last_seen":"2026-04-21T10:17:27.142036Z","times_seen":2,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~cfbf0a2e.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~cfbf0a2e.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~cfbf0a2e.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-24205\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:47 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 40669\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63344), with no line terminators, with escape sequences","md5":"f412a07cf0d7babf4db75865e4eb6367","sha1":"27cde91d09e7c97f94bcb37fa6e919282b294d58","sha256":"905475090d86aecb1aa5ae21db48d8ee78160380408d8c2ecae88b49d3db65cf","sha512":"9ffef1292db68bfe3c204733b599f11a8d2a417f59a0fa35f689d31617c0e3787af3f7af1fad1ceca9af42889b38755c1046a3169d26f5eca50932a283369e0d","ssdeep":"3072:zfXJUlipnr108CbZ79FdJga7iv5zvcusVr1CUl+cs2nYKSewDmEBJ:aQVR0xZCLZsVVJXM","tlshash":"9de31a8ef1c1f46616d360a4402f310ab1372a88b40a94ddf979e4d5aebca5d613bf3d","first_seen":"2026-04-21T10:17:27.143389Z","last_seen":"2026-04-21T10:17:27.143389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:42 GMT\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"69e32dd4-412b\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16683,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (10514)","md5":"65a686f69f61962e55b78510dc8a0e09","sha1":"7bf38ab37b1b68b484bf57af7bccfa4737d02f7e","sha256":"815eabf5d5b4bb893fe0610f6f9b3985ccfecda2fc39b227092e0eebcfd70638","sha512":"996036899d671060abf604125f9ce8bd8632130a2f84c54c6cd6d384897879721d1ecf6ad33761ba80435c3878473107e8bf699ed7dd5b8f49cc9b286e61df71","ssdeep":"192:npXcatMPadYhO1dAZDO4SX7Tt/DR3jRC3f6odITpODroxRRR6ZcJPu0KlDUY7lPB:p5VP+N1tGDHgmMMxfw8DrK","tlshash":"7e72a2349c40ebafa872cd63b764a76691d786be04708593fa2d0e3dd9247c5b32e143","first_seen":"2026-04-21T10:17:26.974246Z","last_seen":"2026-04-21T10:17:26.974246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":634,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":634,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-66e237a8.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-66e237a8.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-66e237a8.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-4f35\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:05 GMT\r\ncontent-length: 3467\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20277,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20277), with no line terminators","md5":"6fa2a5a7e79079ac7e08b7fc809ddab0","sha1":"3ca60637268000d55703f5bce134a94c78a1aa56","sha256":"090da6ddd75f04d18f82b3600efd7e7578483e023e7720848f64fd06bb356663","sha512":"78b2261ed0f9cd84ed99c2cae907bb88cc2a48bc1163e73927881f7369ea3684a992cb5766f752e4ac87bc0396b980bed63a99c7a9c0750d008649745874d6cc","ssdeep":"384:jq0wgiQqwsOaqVqYugGYS651lSAs6JqRFO:m651l86JqRFO","tlshash":"b5926532a63e111c9127c56a3590fc8c963eb611d6835be9f693b4258fcb6c1327178e","first_seen":"2025-10-28T19:02:37.170434Z","last_seen":"2026-04-21T10:17:27.145124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-ef84c340.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-ef84c340.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-ef84c340.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1e76\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:08 GMT\r\ncontent-length: 2804\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7798,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7798), with no line terminators","md5":"8457438ecd4dd665507acb42dc6b41e3","sha1":"0a15a1adbb4a6db8d1c99d5c33634856249fc8d8","sha256":"7cb998ce2db863092bbf2364d21f7cbf6cfb6850c227bb2117fc7353a0370660","sha512":"83c23525556239488e3da47b8e47e63f0737ea8dbacc22c4da7a947cac69066732f150fb24eebe7e9968e64410c2901f523e2891e07b5870d79f5c51b493cc00","ssdeep":"192:1AYJ79y9i0J2jYaJXLV2h4x/xuxCx3x4xZ:+Y/2i+","tlshash":"2ff1837197493018e467c279bdd4a5c8d51d9a22f4884f56e3e36a3f4ed3bc230e168a","first_seen":"2025-10-28T19:02:37.261545Z","last_seen":"2026-04-21T10:17:27.146457Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-eda35bb6.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-eda35bb6.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-eda35bb6.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-63c\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:09 GMT\r\ncontent-length: 515\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1596,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1596), with no line terminators","md5":"4c463931e11005a04c8be6dc6a7b512d","sha1":"df411a9e708c3e4c3172d47366a61412a3817e7f","sha256":"65bdf1f258cfda7d8798db1f9bda0968e5217e10fd7c16b2bb6300f63e3c5ebf","sha512":"e508eb7d09f59eb1c35dfe91c28e67d8b2fe202ac12580a32ab11779e3f6a2a6d8b52dd0ce9b9c6f5798366799d999f6ab47d781843f3b0d909ba8a5224abd10","ssdeep":"","tlshash":"2431af312f1a1428a2bbe8adb150b1ac716eb503f26ead79531224354ccb5d271b024d","first_seen":"2025-10-28T19:02:37.27461Z","last_seen":"2026-04-21T10:17:27.148008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-1c17d1e8.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-1c17d1e8.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-1c17d1e8.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-5a89\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:12 GMT\r\ncontent-length: 7178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23177,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23176), with no line terminators","md5":"a82ace6a67a3a5f04e7f42010b519690","sha1":"c5d0300559a24c770f640801e481ae1496bc89fb","sha256":"e79008cb3f77432d5a93fc268723ac0789eac3536801dae7019cd94218b78d3a","sha512":"06401fba5b10140446129e94b95c8b5ac13a32c307e14657714e5200a42742a46d333798ea0ec6f9905730fbb2a62f4eb394e7e8de69514f25453aa2f431fbc0","ssdeep":"384:VlqpetZz4S57y6hrWjmYwjwhtvVR0NWRu/8KRUE:zqpecSnrcmYwa3gouE4","tlshash":"5ea2b68eb0d6f4699b9630a4002f152a623b3d98b409949cfa78d5c1dd7ca0e523ff7d","first_seen":"2025-10-28T19:02:37.225611Z","last_seen":"2026-04-21T10:17:27.149636Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-93174c82.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-93174c82.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-93174c82.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:31 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-55b5\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 8172\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21941,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21941), with no line terminators","md5":"b6ff62a085a4dc951559c3b5ee23f824","sha1":"f184d6c91620e0ff87a69d6771790157cab3e2f2","sha256":"336fdaf36eaedf9bf4fa29a09bb26a367326a6f7da57ac515afc24aedc84b1b1","sha512":"2e163762bba1a72abf6023b3c8946148c6e0c4bc8c7586a82a107e4b40e42f6d3cd7d224afa41539e12943202414edd49b63681fa6d4ce186b53e505533f5f1e","ssdeep":"384:g7sVHDSGd/6ZuqwciW7jSxg4gGkeU7ZUTwHfRm/xGGHA:6sZDX56Zu7ciW7jugfnFUTwHfRGdA","tlshash":"69a20a5ab183f16ec96b6029551f2532b0256f88a034d1cef778d6e4d89cd64333deac","first_seen":"2025-10-28T19:02:37.127327Z","last_seen":"2026-04-21T10:17:27.15109Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-31b5bcfa.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-31b5bcfa.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-31b5bcfa.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-396\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:59 GMT\r\ncontent-length: 319\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":918,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (918), with no line terminators","md5":"0229db609a4a229bddd8faefad36d46b","sha1":"1a41cd11797012a22c57668ad5309eb6bb3a0aee","sha256":"f5d075c61686d14a865f49d047a3829d37397be03dceca1d04f8c0129ea43426","sha512":"32c0ad1ae6ffca77694bb5bf52ee7e9925932ba85272f4b336b1c0ccca4e2a42635c1789494eef27e0247182916147d415bf0c570a7e68f6bbdcae883b938063","ssdeep":"","tlshash":"421127b66a09102cc46eea39b1e275bc716a1323e252666ade105d71cf134f2624388d","first_seen":"2025-10-28T19:02:37.278883Z","last_seen":"2026-04-21T10:17:27.152387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-b0e882ba.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-b0e882ba.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-b0e882ba.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-5232\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:08 GMT\r\ncontent-length: 3602\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21042,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21042), with no line terminators","md5":"dd1fc762c66e311cc99017d8ed0daf8f","sha1":"918a7f1aab8afdce180ce974470c9851781fd44a","sha256":"a7f0bc771f9008bffbd10be62d6408bbc457f8bc89559573c2d24d542de8e5eb","sha512":"3edc9906bbb0e064a51225b23b5acc3ec48304baa05e1778537ecfb0405a017e80d5fcf9ea6dc173c962b761f4715ea339995da0b5d01090d4f9bb226ee23c80","ssdeep":"384:jq0wgiQqwsOaqVqYugGYS651gA8AHU3n31:m651gVAHU3n31","tlshash":"e7922332923e521c912bc56925a0fc8c9629f211d2924eddf6a370358edb7d633e178e","first_seen":"2026-04-21T10:17:27.15373Z","last_seen":"2026-04-21T10:17:27.15373Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-2d0c8c14.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-2d0c8c14.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-2d0c8c14.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-b686a\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:13 GMT\r\ncontent-length: 195721\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":747626,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65533), with no line terminators","md5":"e9b79be694a54be673b3600e5d7b448f","sha1":"e1b9bd3ee2defc8cf7904a47fe8d012aca029582","sha256":"d1cdb3ee7ec0d534e16fe403312a9ad320ab83779b3ef8cf6eec3490eba1309a","sha512":"3626dbd5c2df1ede562f3482c7005cce03dc042660e26b3ed5f48c8497e37ff2de8309c9c3b861797988ad726421ec71c17b7592a8ea38058c36206fa2a0c1e3","ssdeep":"6144:oGfedJFy9HhmiPCtINObsCkJ0XWtUmGN2sFxqZDXtYbvES8L42Opkpp8/7QW6kZ9:QAHh2mCM2qZztsES8T8kPWl53","tlshash":"baf46cd5b38d7666038351e5502f110be27fa826a84d84a8fa32ded66c78dcb1137f39","first_seen":"2025-10-28T19:02:37.187488Z","last_seen":"2026-04-21T10:17:27.155037Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-2cdd1bb7.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-2cdd1bb7.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-2cdd1bb7.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-169d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:57 GMT\r\ncontent-length: 1195\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5789,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5789), with no line terminators","md5":"035833bfb06a313b71fbb35a9e788c84","sha1":"af30e286ed5420805a3038555d6650e18efb52a1","sha256":"72c7100ac94d78ca4ae3232509cb196f82b713f1ad8c13ae7b7a4ceea0066fad","sha512":"530fa40ba50ec425e22ad712815a2086c86479f88fa9f47ae31f8ee5a63950831edb7aad1e6577740b4158c06aad8b25d479bfaac5118c6352fa63b859d9c247","ssdeep":"96:eIk/kCzDnktTtEognL57WuOO9AL1Zx1EICHz2:Ojvq","tlshash":"7ac1521252aa1f2cc1b3ce111990a18a4228f413d5935bfbc675e629cfc7c8235f3b9d","first_seen":"2025-10-28T19:02:37.311418Z","last_seen":"2026-04-21T10:17:27.156648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~0f485567.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~0f485567.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~0f485567.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-d1977\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:40 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 311887\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":858487,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d8924aa257178a4a347d40ee5b04bd8a","sha1":"bd7983058ea759791facfe6e1144b74ad7fade60","sha256":"c66993fc8b3b4926279425ba499520023d9fb909a4a62b5f414d315d1b1f5524","sha512":"42d9545c66954b0990afff0cd50c18597b565842629c4996a2ac85d2b9336b611d4d097d872d40db2fd7d846efccf2e7f03a97e2fbb1d9e5156e88510d0740af","ssdeep":"24576:SYvEaiLV0pjAi0JA7OXoag568l/7+qsYm:T17+qTm","tlshash":"9a0527a42644a4a1e2f38aa1f70ef5e4c32fb716ddc99ddbd0d3b19110e9e34da65b00","first_seen":"2025-10-28T19:02:37.239769Z","last_seen":"2026-04-21T10:17:27.157909Z","times_seen":2,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-456ec76b.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-456ec76b.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-456ec76b.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:25 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-a29\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2601,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2601), with no line terminators","md5":"3205415dace4c101f07de2bc6c6bf558","sha1":"4d1bf9d4e9834b7f665307ab91628cba5ec9c90f","sha256":"050c5b950873ad3445949ffbf59d75444a5b88736254fe06af4d105c3d1790b6","sha512":"50980a9ae0cd4d6a4c3e99426f43629470185e781476d9c99529e8b81b4212bc945da4a91e422dd6150a6abd90069d120b6f62c0e4ab14e21b54fd7bb9a6704c","ssdeep":"","tlshash":"2451986cb487f07c9aa990d0451f213bd1b2adc09218d855f738c8ed6ed5a54472eb8c","first_seen":"2025-10-28T19:02:37.294012Z","last_seen":"2026-04-21T10:17:27.159307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-57f28834.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-57f28834.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-57f28834.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:26 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-ac7\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1273\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2759,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2759), with no line terminators","md5":"8d5e21fc2f7795b8a034b92b640e04a2","sha1":"cc56afc8a72add960c1cd30aae4a38e30d44bfaf","sha256":"8be186209c33a9dfa5f9c3d0b34a2afa1d2cda0839d823720c800e2437f19c9f","sha512":"6d8259fd1e298ff95273d4bb937b4afaa5fb827200cc9f22e7e1ef872ef43639bc00d6ef685670b3f5136a4ad26b387e670ff6b986e2d006ebe577003cc40f78","ssdeep":"","tlshash":"045185a870d7f8bd4d291082502f1631b2263b984a1494c5e370d8deaaa0e68732ff5d","first_seen":"2026-04-21T10:17:27.160715Z","last_seen":"2026-04-21T10:17:27.160715Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-b9d642d2.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-b9d642d2.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-b9d642d2.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:30 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-64ed\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 8855\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25837,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (25833), with no line terminators","md5":"6969d6b5f6c07dce36ecf5aa6c4f6d23","sha1":"45867eb1fbfbc474ce8c2f8c0276a63579581aa7","sha256":"8dbdd4937ba3267187b1c164fff49ae00987fc7ae9bdb6babe6e15fa890527fb","sha512":"bdffdc4a1a0d7c7a4941c7592ac5f13e49dc4099b4d13c46a8d5df04371bc5afe205902ad2a216962df10f2802a5c1e163e3c9b06c1a02bd8d28c3a0eb336772","ssdeep":"768:09Zd6Zu7ciW7j3mXmGKq9erqrWirkUe3N0sKvrEEAsE9Q7sxO7LQfp:SuZ5d7jWmpYQx","tlshash":"0ac20a8ab1dbb45e45af216e685f112271256dc85024c0cefbf4e9f5d88cd84222ef7c","first_seen":"2025-10-28T19:02:37.309236Z","last_seen":"2026-04-21T10:17:27.161956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-fa8c7b80.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-fa8c7b80.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-fa8c7b80.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:32 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-1585\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1910\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5509,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5509), with no line terminators","md5":"9bf8132da6800fd7d962d086b57ecfb1","sha1":"c72e0ea91e56781bc4a87cb44a5ecedc26a369c2","sha256":"0166100ea4cfad07eae8f36eea7932379eb222d0728c93edf9a6b0e4c7010377","sha512":"8c44ab453427596667fa29f19dc9dfc8b49083549ef00e5bc11f5d14bb988fd3bdd2b8695f913897dfc79745c063f8648be519188f49e92af9932a5b58696de3","ssdeep":"96:vx4C9PLUWL+dCdjuFa4Cm3OZ+Oj2nPLcJFrIYsrMkcRYmqZe:vx4CpLUWL+dMca4DOkOj2DcvrIYsrMky","tlshash":"8ab1c645f8a6f4aecc176006512f0635a2223fd67421d054b2f8cce8ade4d596b2fb6d","first_seen":"2025-10-28T19:02:37.341633Z","last_seen":"2026-04-21T10:17:27.163402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/app~748942c6.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.053Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/app~748942c6.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/app~748942c6.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-310c1\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:39 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 49218\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200897,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"25819fb67d77203217612689882ad0be","sha1":"a5cea34a2b84144a39e9acc44be86daf40848f1f","sha256":"af5426bddf4f6121347dd7cf8879d47fd1eba5f555e26e3c536f0d5c2cc272ef","sha512":"0b8b163bed6d8f90c1c1117a295c62f9ff8438a130b667a46de3d88c28ea4441e85402e2facdc5bf2968cb2a92ddd2ba25f32156c1f4eeb46bc00124b4f1e7bd","ssdeep":"1536:lYi+DN5J+jOkiHcFS/yoNiCRN0zv6TmKEsMBZ4QrqIik1Z0IV9A:QV/yoNiCRNgd9IgA","tlshash":"5414a5a9eb90917c7f1bb529a7c7a5dcf13ce960ed01cab4f20191584ec3bf1162361a","first_seen":"2026-04-21T10:17:27.164703Z","last_seen":"2026-04-21T10:17:27.164703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-0a77157e.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-0a77157e.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-0a77157e.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-73b3\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:54 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 8187\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29619,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29619), with no line terminators","md5":"f418b3373cb0516adf09c5878a86684f","sha1":"201ddd3338f11300596f24fd1b70a3442e69a663","sha256":"22dad9613293ad69a5f41c7242beb95225e4b13c3e3c815d81b25011b9999bdf","sha512":"85e4975ae4c6e4e9313e502994fc23ef9811554bc45be14f86ec1463ad36ff77f06127d56f99e23f8b576d06cce5a624c4dc387aa4db1cdb8a2e70939aa9b34b","ssdeep":"384:ciUtF651xt2q29zKLDnpJ+G4DLDnpJUWwPO:e651xtn2yNwgzPO","tlshash":"c9d2b831b37b1429f02bca5d2194f94d82bee613e1434ee9e681761acbcb7c1325179e","first_seen":"2026-04-21T10:17:27.166058Z","last_seen":"2026-04-21T10:17:27.166058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-208820f9.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-208820f9.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-208820f9.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-15d1\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:58 GMT\r\ncontent-length: 1189\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5585), with no line terminators","md5":"5efd197f0310b330ae8d09e69ddce3e8","sha1":"7d74d87297db8cb26b1ec4b9326af0638588ac4b","sha256":"e097cea6042678bc76b6ad03b25a984036456d28b68e9c8be2954cb4bd101856","sha512":"ee4a70b1e3d0f5cfa445d33391bdfb3ac63b1a1030c3fca3b3aa4da109f91bcd1051a2c09bfa159bd26e0e5106e5a0d5a8f8c6fe03771b84f3f0b0f1ecd75797","ssdeep":"48:NyQiNUUMX6ijJhSnopZ5ALaV4K0pY5bpQBhnOYM2byOM8lAnSrAfJA9ANkARgAu5:TUMXLV4o5jV4lY5VIwI2wm6IkIgV","tlshash":"dbb103311fae5018e0b7e42dbb90b99d516e9e23f0479d69b6466012cdc3aa3326230f","first_seen":"2025-10-28T19:02:37.315034Z","last_seen":"2026-04-21T10:17:27.167631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-e7a1aac4.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-e7a1aac4.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-e7a1aac4.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-13b3\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:07 GMT\r\ncontent-length: 896\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5043,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5043), with no line terminators","md5":"193a23ca1d6f969f96d8d0488bc17fc4","sha1":"5b068293428a62f5eaef31c4c5d63feaee34cb05","sha256":"2ec251719d3e0a53016601dfd8b5c88ae36d2af6bda024ea80c68b31e0c1a129","sha512":"0f2d702fca12785fdd5182b7332379e1da74d224b18f8f2d97ef1224b04c4b1ab4242233d9baabb0767b0c476015adb5af9c21a999ce45a7f2687de493c561c5","ssdeep":"96:UIDTYXHJTQNahASa3m6rMqhVALnTN/VezcTXqxVm7cxap3zq8Ax:LQtBei32P","tlshash":"54a1e136677ba803d577e5ea3645759c111bb08ee00b8c91ed02201b9adfe9377f034a","first_seen":"2025-10-28T19:02:37.312513Z","last_seen":"2026-04-21T10:17:27.169092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-264413b8.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-264413b8.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-264413b8.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-f26\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:11 GMT\r\ncontent-length: 1509\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3878,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3878), with no line terminators","md5":"739f50aba72594ae7770b161fc09a148","sha1":"be474df81895cfc06589007a2282043d4e138cc6","sha256":"b095336fec67dae6a635a3b1016f33b7e938eed30d18483f319c6aaa5989f9f4","sha512":"7eb60fe9d132493b693e5c4cbd3f135bd2306705b52123915348a9374ddb8dd0edb916bb21ca1ff774ab298155a9c88c1d5d0e97fc37eb57908e7cfea9f2b23c","ssdeep":"","tlshash":"87817254b0c2f8ae9eaa2050411f3631f0352ed55620b4d3e378d4e4eaf1e59572dbad","first_seen":"2025-10-28T19:02:37.290998Z","last_seen":"2026-04-21T10:17:27.170538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-6d8e419e.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-6d8e419e.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-6d8e419e.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:29 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-2638\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 3412\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9784,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9782), with no line terminators","md5":"5197e4443f141db21c6620bc48d876a5","sha1":"2f6cea382af2bac5c5a369ec5920d03cfc2e93ac","sha256":"6ee04e381f750954842ec885d3f6db2a16a9fa69d7655cdaa75cafd6ab6ed6e5","sha512":"598414b3699ce35355c9066f542fc7f36fc6283ad3d0a558a2afeb4be1ad2b609c54c59a558ee198bd4977b3567bbeecfbb95fcde82eebf9e4f5afe328fdbf87","ssdeep":"192:ux4b/JNnBqn47qEFS1yZ3NBR3bcw729wr/p/PJ:c4bRlBqneqo3N29u","tlshash":"6b125232f452f6beec6e5012551e3130a4322ff4c450d887bab9c9919ae5cb6271fb9c","first_seen":"2025-10-28T19:02:37.315965Z","last_seen":"2026-04-21T10:17:27.172192Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-b95eae42.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-b95eae42.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-b95eae42.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2836\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:06 GMT\r\ncontent-length: 3153\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10294,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10294), with no line terminators","md5":"728dcf5e98fd9b7cfab37c51c65e4bf6","sha1":"085ba16ea40c54390d7147f701c59ed95ca07f44","sha256":"bf2faa83e9669bb16a119853e3b95ef034594be43cfde44449335919f03b0b5b","sha512":"16d50c0a0472f517ca3f8ed28a2896c521b574b598d6c5f9e807953c7af32f1ed30b3953de22f3c258c9581eae83f33fa2532dbe221a01f20516ed97413c9e38","ssdeep":"192:EJ79y9i0J2jYaJXLVeP/Kzjw7lWpt/aeAM1bFpzfJnGq/T7fP1CS2:E/2iJazU5PflCZ","tlshash":"85224132276e6418e07bc46d75e17a1c261dc603f24acddaa702a62acec75d733b934d","first_seen":"2025-10-28T19:02:37.3003Z","last_seen":"2026-04-21T10:17:27.173595Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-264413b8.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-264413b8.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-264413b8.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-6d4\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:56 GMT\r\ncontent-length: 526\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1748,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1748), with no line terminators","md5":"91ab96bfd7506c51e6e6046af609357a","sha1":"2e8c6547a8c1110189dc791d2359a140103306ed","sha256":"867f241a0569fec94aa8f8c5eb06b18ef39b80b68e2e1dcc499dd8a72344e0df","sha512":"0329843823fda0742d08722de92970ba512f9b6377d04fcea4a1b925fa43b8a7a198a92f95e1aff2523b2df72462f76f811f52513c6d06def8b2f26c7580795f","ssdeep":"","tlshash":"a4318261672de814e37b98ba7044b9b8112c6603f1c99eb5e1927425c9c35fbb3e0f4d","first_seen":"2025-10-28T19:02:37.140175Z","last_seen":"2026-04-21T10:17:27.175178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-2cdd1bb7.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-2cdd1bb7.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-2cdd1bb7.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-169d\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:57 GMT\r\ncontent-length: 1195\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5789,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5789), with no line terminators","md5":"035833bfb06a313b71fbb35a9e788c84","sha1":"af30e286ed5420805a3038555d6650e18efb52a1","sha256":"72c7100ac94d78ca4ae3232509cb196f82b713f1ad8c13ae7b7a4ceea0066fad","sha512":"530fa40ba50ec425e22ad712815a2086c86479f88fa9f47ae31f8ee5a63950831edb7aad1e6577740b4158c06aad8b25d479bfaac5118c6352fa63b859d9c247","ssdeep":"96:eIk/kCzDnktTtEognL57WuOO9AL1Zx1EICHz2:Ojvq","tlshash":"7ac1521252aa1f2cc1b3ce111990a18a4228f413d5935bfbc675e629cfc7c8235f3b9d","first_seen":"2025-10-28T19:02:37.311418Z","last_seen":"2026-04-21T10:17:27.156648Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-55ebe7b2.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-55ebe7b2.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-55ebe7b2.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-9b03\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:02 GMT\r\ncontent-length: 5951\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39683,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (39683), with no line terminators","md5":"50987ecf570713c089682aaaa57b1fb8","sha1":"88cab16da2eaf3bf6d87856b939dfee19b50f1d7","sha256":"8c94c5f0aa4b3d7261d1bf9f8b9e672bce59b03c446d6243aaf3180e4f100a22","sha512":"ae0fda63e84e429b25d4afa7c3b3593a31002393d699077c941a6a507f50cd56f34a49393e866866a59193e8f3dfb86c002b18db09180a1cebba5de2fa30bf25","ssdeep":"384:E/2iXBA7bG4YfPZSYSeSpuYYYREYXaPH8n8O8pKPen8H828RxG+3MnKfgzY:eqtbzY","tlshash":"56038531677e1424e17fcd5f79d0bf84822cb543e2994de6fa032a178dc7682366268e","first_seen":"2025-10-28T19:02:37.206971Z","last_seen":"2026-04-21T10:17:27.177682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-76e0324c.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-76e0324c.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-76e0324c.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2ea0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:06 GMT\r\ncontent-length: 2998\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11936,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11936), with no line terminators","md5":"da9fc4085ae412b76d40156da14bcbe6","sha1":"32afce9900dd1d2a5eadbdb9144cbc6e41adc584","sha256":"65ed3ac9564cb301756e83b77ab07bb8fe4f520f809d18ecb57f9dfeb48bced4","sha512":"fa54f54007080a5cc575c5e9c921c2ef61e6e105c18d0eb370d7f9d3d356f49561c40bb5803636f76fbd2db40ebbe1fe09cbc3a656d5270060e4e7c315296213","ssdeep":"96:1SGgjCp6Ik/kCzDnktTdeeB1gNjHcHVN1wpDZf/HFNmeXWgLbxEDL3oDfXh9sVxx:1kxGbUKJmPNLXWFvHeob","tlshash":"47326223235e161cd43bcd647ad5b2c98218e423e5534ae6d5717a27cbc39c222fa74e","first_seen":"2025-10-28T19:02:37.224453Z","last_seen":"2026-04-21T10:17:27.179822Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-24181dff.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-24181dff.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-24181dff.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-5f44\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:13 GMT\r\ncontent-length: 7871\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24388,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24388), with no line terminators","md5":"497cdaed2e1699c43420cf2944616867","sha1":"ae6f11434c60952b1678346c44615b45539df2b0","sha256":"4bbfe699683ad8539531a623e788bf840023677c5924756c0f55ccf4e9dca944","sha512":"e1c0ba3a9461aa938cd6f05d2bcb2fed2bbbc983be84383806d11ce70282675ee131575b25e5c526e250c7a90551f0ab097a96ad1f5ae791ab59b5fa56f99222","ssdeep":"384:2H+VJokgTyvNTZzXYpYTBKQotUIgSB0pAFvurgEi5XL9ca:OMJoknv/zXYpY1VpA5urgEiR9Z","tlshash":"02b2c506b093f579cda6a031112e2738b2723fe96405d09bb778cae19de8d60131fe6d","first_seen":"2026-04-21T10:17:27.182181Z","last_seen":"2026-04-21T10:17:27.182181Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-40657cc8.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-40657cc8.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-40657cc8.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:22 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-4731\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 5664\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18225,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18225), with no line terminators","md5":"35622da2f10d9bd4eff94bd96cfe8bb3","sha1":"853c104b4915a8ec839d5c463b55f5349f146047","sha256":"6a32a7f1d7a61a933d6aaf38e3159bc801bc64fffe1fd0cfe364120b124953ff","sha512":"a35b0acafa71b95973e8718ea3dd1737ce167e6927b1b0e6c96f490ebd83fd135bb36b862a48590b436ac50d287ceb4175f3b2918bf22c5155e384dfdf6fe6d7","ssdeep":"384:a4rFM6ZuqwciW7jSxLU4/Y6SP5C1bEJgWnsqw:7rO6Zu7ciW7j6/bSHvnsB","tlshash":"2f82d84eb196b46cc96b607c762f2531b0216d84a424d4cdfb78e7e4c998e58332dbbc","first_seen":"2025-10-28T19:02:37.28227Z","last_seen":"2026-04-21T10:17:27.18472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/img/coinbase-4-bg.b65aed71.png","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/img/coinbase-4-bg.b65aed71.png HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/static/css/app~21833f8f.1776481941933.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/img/coinbase-4-bg.b65aed71.png~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Tue, 18 Jun 2024 11:01:31 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache-status: HIT\r\netag: \"6671690b-50ab8\"\r\naccept-ranges: bytes\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:17:02 GMT\r\ncontent-length: 330424\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":330424,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 1624, 8-bit colormap, non-interlaced","md5":"b65aed71ae3b37290c796fd2429d6bb1","sha1":"01ad07f1266950810e93cf24201300015279188e","sha256":"5bf1acb69a4c0e63aafd86edfc8504e8e96bbdbd9f190dfc147a740a0d2a79bb","sha512":"3ed4ee48bf89ddf0d1784957820c6e5cddfa0af4098a2a2912d05bc1040610fa5f9b21b89d903bcf1f8a4a77ab464685288e00bd0e9c149cddc5cc5fe95d209e","ssdeep":"6144:zpdHfoeauTz6LKu8QrMPgyIUWmisYaVadnc+3HyqWx/23mr/onjr:vhHTzIAeMPO8N8Bc+3SV2WrG","tlshash":"e364232f867c1ee7fe5eb1b6d2949a5190b07d134480cad7bacf2258c175f80c49e93a","first_seen":"2026-04-21T10:17:27.186981Z","last_seen":"2026-04-21T10:17:27.186981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~d71bf088.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~d71bf088.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~d71bf088.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-10c87\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:46 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 21605\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68743,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"eb61b0a612db886a22da71d3c38886c1","sha1":"fbf0185fdd5e51566c05725a447ad5a862205dfe","sha256":"a368a5ba359027c4e69f6e164c5c4a3829ff43fa5b7cd09c426a52eb14c6ad43","sha512":"61792f6561c5894a1ef4add151ef76f49a8a697e5cd338db5f610f55f720edff2fdc3d7344939ee00a6be8c8744e0660c04950734291e81b287cf3b7fb356078","ssdeep":"768:7Q6td3oPIlyM3rbh1y8CwxCyDWinkd33SYKCVD9zOauPdlJv/zEtJVHTLUR85CRP:57bdfnQdkKej2uzn","tlshash":"9f63196c7604f11292a3327945af140e9236281eb50f99347e25c8da68fd49b372ffbd","first_seen":"2025-10-28T19:02:37.22669Z","last_seen":"2026-04-21T10:17:27.188807Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~aeb57120.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~aeb57120.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~aeb57120.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1c023\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:46 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 38270\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114723,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"772f085a4dd062fffea02db7828ca74f","sha1":"03dff301ea0252f67b8c10990af24778d002d5a0","sha256":"d1417d294013447fa589841320439031fc0eb1b48887928b9d2c5502b862067c","sha512":"0fa893810f1db9f58251a3b29bf704fe602e0abd7445ae433d9ade60048eb7caff450cee627741b7c8725ef53d57b3d4abcff4cc5b1e71ad1b02ca7513577f3f","ssdeep":"1536:C+PXg1ORELNbLgDpTX/EeDnb6IfehZKGyZvQR/bDeAdHQmgzNY5lZnF:Jw1O6NbGpLsev6ns4DhQmxnF","tlshash":"6fb3da446274b023975a3990191ba04ef67efa2d0d8b407cb958f8f67ce69c06b2df35","first_seen":"2025-10-28T19:02:37.284744Z","last_seen":"2026-04-21T10:17:27.190558Z","times_seen":2,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-80cc98a2.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-80cc98a2.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-80cc98a2.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-a22\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:05 GMT\r\ncontent-length: 568\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2594), with no line terminators","md5":"5b3615f11446721a8e67dca067688937","sha1":"fa07acfe84bbe82f8d31fba664a701b5c1ad3661","sha256":"ee646d551e080a0353a10225ecad3ecc559fac5f8191f7cab0cf7a54c7d0e214","sha512":"346ec4d1aa39815e2ccb1f3ff9e3dd2b13709f8b0c451f0b1912e9dc69ced86e58c32f99e0ba36f14ecb8200d9d38afd1f8dc6b7e8083f5229f687b42a631ef8","ssdeep":"","tlshash":"3f519d33ab9ee033c63be4213146766c13384519e10fd495d952990edbd3bd72be075a","first_seen":"2024-10-06T07:43:43Z","last_seen":"2026-04-21T10:17:27.192919Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-7f9c699e.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-7f9c699e.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-7f9c699e.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:29 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-23b3\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 3111\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9139,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9139), with no line terminators","md5":"e6a3b3bf93096933b8ceeee91affe62a","sha1":"b34765cc18d0476ee6e07c22d8faab7e9930c62d","sha256":"199d82669733b2426f15a44be9d964987925f733a75d754ee041c4f83a5e47c1","sha512":"8b0cb8cd22c4f94c7af6e9bd849a07703e3d2599bddb99f533f164d0f5613e63724063f0660f6f5a66b0572fd70c013b7dab9fb7b08d6543240f62e0c25d7079","ssdeep":"96:3xja3AVK0X8cNJdFpVtrAQ8F0OaKommTiOZn6QsufNGfqUjAONTYvYcCg3hLGyiy:3xjLVK0zNxGiOfITepjzwbFxb","tlshash":"1a12958ab0d6f8495bc76052542f3626612b2d84e019948df7b8c9dade2474d332ff3c","first_seen":"2025-10-28T19:02:37.197681Z","last_seen":"2026-04-21T10:17:27.19696Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/files/ljxdd70esz0dbkt74yyanh51403ckkls.png","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /files/ljxdd70esz0dbkt74yyanh51403ckkls.png HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/files/ljxdd70esz0dbkt74yyanh51403ckkls.png~GETd41d8cd98f00b204e9800998ecf8427e~D\r\naccess-control-allow-origin: *\r\nx-amz-id-2: 2i1Z/SYYpsm3f35toGeRfTsGiDjYM2GkNcYMR9M64nKfzYaTlJQ5CE6e7xfngHL17MC6Q7uOV9FbP8FdvJo32FwMVLQxd4gx\r\ndate: Tue, 21 Apr 2026 09:17:00 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-disposition: dfvcc3/files\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: HIT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nlast-modified: Fri, 25 Jul 2025 03:17:44 GMT\r\nx-amz-request-id: DPK4BPN8ECYAWWDA\r\netag: \"3d6a5a62331fd9a5bde17154962dbf95\"\r\ncontent-length: 47269\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":47269,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 552 x 676, 8-bit colormap, non-interlaced","md5":"3d6a5a62331fd9a5bde17154962dbf95","sha1":"e11b78ec810fbe5b3cc58f4da9213f64cf21f997","sha256":"cefdac212a239506f973f04ca925e2005b6bb43bbc2d7adae4d6a45fbe5d5f11","sha512":"566b31e91eac7625d6e3fe9e5f27785e728017019c6672f115c9620edeac51672f31ddd6d901a591c2152b3cbcf4288ed7914ba95270ce7261cbeb278bd0afbb","ssdeep":"768:yklO9zR5b3K1P6GlYscQ1OU7n7k/+KeJ/yRxjTLNwVhU2bzoslPQJ77GkmEzTFZ:yLL5jGKC1577S+d/yR92tvoOoJ2IZ","tlshash":"5323021a824cb9acf02ab6d2cf8e57ed82571c29d1b112761c5b14796dd73ccc4b90b7","first_seen":"2026-04-21T10:17:27.200574Z","last_seen":"2026-04-21T10:17:27.200574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-0d12fb6d.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-0d12fb6d.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-0d12fb6d.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-8688\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:10 GMT\r\ncontent-length: 10970\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34440,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34440), with no line terminators","md5":"a5be3596d0b210361ca2523eff4619c2","sha1":"3f5ccc1246c566309800cf1a2404c4f193371354","sha256":"2a8c472709ceb489be828be1ce41b22431f72f2d8d5a15b8aa8c4e0679c409c6","sha512":"122fb2b98c0da3f8d1409e241fe11e596ed251e93e4c12a0c5c6e4e3683d0f29fabedbf4ecd0338fcb6537599e3e6fd9b683adc027b829f6f14d765d3d44b7b2","ssdeep":"768:oX2JPj4OwJR+Xbrj6Zu7ciW7jYYbu/cG/fFNfw:4oPjMJRQ2Z5d7jnu/3/fv4","tlshash":"d6f20b1ef1d6f57caeab7164106f2031b12669887011c4cefab9d9e0d998d58223ef7c","first_seen":"2026-04-21T10:17:27.204269Z","last_seen":"2026-04-21T10:17:27.204269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~069b5b89.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~069b5b89.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~069b5b89.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-44df1\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:48 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 70073\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":282097,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"d70c4824006b010a339d5bcedbc8dcfb","sha1":"e3877aa35f35ac3dc0fa695fb1394cf4fcc47132","sha256":"0ae5edf032794d88bd838f5c767c93b20bb82c1c2a04223dd6c81ed34739936c","sha512":"062f29e909c7226f9617ae4983be35270f5f0cfc403f217a47028acd03f40b8ead9f16e336917a9ac97b467e8e2d2755db96f83e219444ee64a4ed83be0920d8","ssdeep":"3072:PDPGcWXsFhv1ffXhoTZY3+uBDwgl/TY7C27mm:bVWXEhv1dBVdb27H","tlshash":"cb54f9ccb2c2706552a374f4516f240ef37bad44780b8098b63ad8d26d7ca4e61a7f6d","first_seen":"2025-10-28T19:02:37.321733Z","last_seen":"2026-04-21T10:17:27.206017Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/app~c54d9ced.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/app~c54d9ced.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/app~c54d9ced.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-e9df3\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:52 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 244620\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":957939,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64748), with no line terminators","md5":"4df5d34b2c5e4d663ec10e10b63fb993","sha1":"2f265c0bdb3a5265694fb2091aad9f7f2c67e479","sha256":"1a3e150b88d396c220c1fd4b87804a8771b2bcaf972b9ceb9fb67da7f9e75fea","sha512":"22f837dcedf7de52af0a6e8caba21158b48bbe98d6d0da540b34f9107afb666e5aac2ad948a1b72d5e4fd4befdbab1801eb00b3d3de9398de58285c904266b57","ssdeep":"12288:2O3PXI1m5DVZhTBC3oLtZP+4QP2tP7ShvI/ma80HPdqahZldC6k86J1PCPQNqX1B:JIo/jCMN+4QIS1I/m6d3DhHg9G","tlshash":"b435091242ead3251dc4a5e92d0ff785bdfe84ea7b45a2c20754dcec35f8e289121fa1","first_seen":"2026-04-21T10:17:27.207684Z","last_seen":"2026-04-21T10:17:27.207684Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-fa8c7b80.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-fa8c7b80.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-fa8c7b80.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-319\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:09 GMT\r\ncontent-length: 320\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":793,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (793), with no line terminators","md5":"3569f6a7f240cfde2f03f1d1d17c55c5","sha1":"23c46dca0ffba6a7a6bfaadcbc00babf587372da","sha256":"10b6bfce8b696cd168724992263408552f8c095ffb4d511371d3140c299ee875","sha512":"e33980f7864feed1b6d9ec8363a8d35f1d570ddbe9b99750c0afaa89003357fd7e1a509a2d5d7e9dfc40bd401c6c90bfff5ddf7dae3576b504389db62aca4307","ssdeep":"","tlshash":"0d01ab716a7e4038647bf10978f5305c4109027bf28219b982666cb98ab30f32338c4f","first_seen":"2025-10-28T19:02:37.275779Z","last_seen":"2026-04-21T10:17:27.209788Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-00160a1a.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-00160a1a.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-00160a1a.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-d80\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:08 GMT\r\ncontent-length: 1629\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3456,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3456), with no line terminators","md5":"17826353634e757342ca83bca5d065b1","sha1":"812ebef1062117d8bf56ed47ec4c43c1ddd9c8d1","sha256":"98b2513627abb25e6fa311dfd2da59c4a50c80debb3fc48e947a0769ddafa76a","sha512":"046ded437789d6e9009d7ce1c226172601fa2498dc526bace10e15b266d2289e70011d9b072c84c46b70e42c52c2321c549fb13b6e2e46383fb8c4d2e17dd4e1","ssdeep":"","tlshash":"e9617468b083f979c91b2052852f3236b0723fd54560a4d6f7f0c2c6eee1a68971fa5d","first_seen":"2025-10-28T19:02:37.12422Z","last_seen":"2026-04-21T10:17:27.211396Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-3ddfc3c8.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-3ddfc3c8.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-3ddfc3c8.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-5ec\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:59 GMT\r\ncontent-length: 428\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1516,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1516), with no line terminators","md5":"085f194434805eaaca1a751c4bf14cc4","sha1":"9bd52111dff0a6f360c295029914a9509ae92731","sha256":"61c628c89215f46127441d4b5fd2f83e96d0bd33b1e8b76320228d5ce5acdfe6","sha512":"08243947bc3dffd0d5c4c46a6d06a3b34f1c5368183b6238f63c6bd2a0fc219558401c9589637907dfc6231306260f4b53c2331146c580e7702feae319073fde","ssdeep":"","tlshash":"3c31c320625e511dd56ba43b6eed1a0ec09fd801e717fdd50767612f88e78c22db018b","first_seen":"2023-09-23T01:29:01Z","last_seen":"2026-04-21T10:17:27.213007Z","times_seen":43,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-47dd763a.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-47dd763a.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-47dd763a.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2c27\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:01 GMT\r\ncontent-length: 1945\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11303), with no line terminators","md5":"ac69b6cc1a43ccd30e05242db1cce42d","sha1":"c2a9b72ba39b1d62395b6f2f52d16536528f44da","sha256":"f895dfc879f6189bddfc871c26c2aff2b2cd72de2e8af2f5fde030df6cbfe9af","sha512":"91dc87048b90af8a2b63c2660529df6ba00eaaadf38267ab076d78a589ae64c6c4010478203600e2a82c3b8919cd9678dfd15b118d6fdc6157d1d0c2a40ca7ee","ssdeep":"96:1SGgjCp6Ik/kCzDnktTdeehCZGqr95lbcgC5UupuhXzFTxG7dT6KT4TXTjZJRlFp:1kxGqlr7l","tlshash":"34323421326d131cd12bcd136d9076cc412ced1ad652aaecc2e7a5168bd7bd27be42ce","first_seen":"2024-10-06T07:43:44Z","last_seen":"2026-04-21T10:17:27.214455Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-6e12bc6d.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-6e12bc6d.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-6e12bc6d.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-ab8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:06 GMT\r\ncontent-length: 691\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2744,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2744), with no line terminators","md5":"014b2c2e124a59a38383f4694bc4e5fd","sha1":"dbffe8ce30e68c57ac40657ebf739636b8a6c585","sha256":"e202e922988dd83b2b85599b1fc6f5bb10658749448f628d25ad0f47bd7f8986","sha512":"08ed31b4c0531cf18c6d67e98880e44f8b83877dbca41d066f360e719828854ab79348ee24cc7dd6411b0d1940bf674f02ac6a14f7174edfdb2e72fab9798819","ssdeep":"","tlshash":"d5511f32673d50089077d95ab48a7d445a28a622f55e5deeab02251a8ecbadf333130d","first_seen":"2025-10-28T19:02:37.325304Z","last_seen":"2026-04-21T10:17:27.217119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-09dda026.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-09dda026.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-09dda026.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2d35\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:09 GMT\r\ncontent-length: 4090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11573,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11573), with no line terminators","md5":"9d5104ea5d67d3d8db4d05d18a25ded2","sha1":"e0fc598d8341808ffc50d2ab10b5d0fcc7ab9fbf","sha256":"aeed3ff142468fbd08fb76fa346334b514274d4981cdacab2c5da6d5d06502c1","sha512":"7060d0b74104649276222902c5db27a64891da139471236769108468e3f1266ca8a904063f14fd6097fa896233edb94a8d7556ad47a50771fc433cd65d2d0765","ssdeep":"192:VxjhJ1tUS6T9j6qwciWTFtXaUjOxE1UC4Cwhk46RoxsHLzDT:/jhP/6ZuqwciW7jSxKv4CT46RoW3","tlshash":"1f32c54af29ab05c89eb206c2a2f1512b025ac8da434d4cdf3a8ebe5d95cc54717df7c","first_seen":"2025-10-28T19:02:37.242211Z","last_seen":"2026-04-21T10:17:27.227232Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-5500105f.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-5500105f.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-5500105f.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:25 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-30fb8\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 61880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200632,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"77147f4f982deda95dec0f85e3fce832","sha1":"851f225491eea090a264e30f4954814dff7bba89","sha256":"954596cbd6b8c736ca52610472ca3c5a620e75797b95cbe37e9da1c557f29a6c","sha512":"d838217d802a3987c8760ddeb62da1a366de8618294722bd4056827ba59bbad8149dc612729ca8d6c0c54d4d8c3ab921129ad532ffe01452e44ea04460343c2e","ssdeep":"3072:F8iVoqdYyBmnh30BIea7Srdy3RocCrP1x8FmP8JK3g8o:F8i3eyBmnq/dykBx8FmNHo","tlshash":"4e142b54b2d6b07943ab60e4142f101af175bd997808c8a8f774d8d2adf8e8a517ff38","first_seen":"2026-04-21T10:17:27.229866Z","last_seen":"2026-04-21T10:17:27.229866Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-7b144d54.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-7b144d54.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-7b144d54.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:30 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-3da4\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 4763\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15780,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15780), with no line terminators","md5":"ad955f88433a0814bfec24b0b0e42e42","sha1":"f414a6a0876338e04437259fee5d4d4dc5eb6769","sha256":"8a11d6849af4cba5a28f0de87aabe9e88c2e1ac0a413a291c6cc95d17295d2af","sha512":"d94ad95fef22beb250337ee0a55d40c7d8121e180120d2903c35a0232e24ff46c71b524073fee0070e077074e20d555f829d5f1420b1780c2d50b310ee43d44b","ssdeep":"192:6x7nFLtKEYymuj8IOC8URYFslBaR2Yq9DVatUS6T9j6qwciWTFtXaUjOxEk2DC4q:I7FLtzjzvyeY/6ZuqwciW7jSxk+4J5b+","tlshash":"c462f94ab1dda46c9957b13d1b2f272672229c456024d6c8f3a4d6e0f8dccd8622deac","first_seen":"2025-10-28T19:02:37.158861Z","last_seen":"2026-04-21T10:17:27.231856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~73914085.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~73914085.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~73914085.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-36658\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:45 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 48769\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222808,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"119d6e5e1e364c38a92afc445d994a5d","sha1":"6f2bb2d4e3a817b623701e1fad28099bc5286966","sha256":"9e24c4eaff73072beb9473d3d211c8ac1d28dac2beb8cb61e8c2efc19ea32d67","sha512":"0e8af8ca0f52ad6c3c4e60299371137d938362b090ef23aa50913f83f897843893e4df68310cb2c17ff22e55ecb5a134dcc98bbc9a08955af1bf6ec3f784ab7f","ssdeep":"1536:m3d9gGLHkRXkK/bmT55kEhDpirGq4saCQemGsqVHBgLXw3QjNCcd0BWmiOJDBgbM:msOkdEkEhD7f+","tlshash":"542451e462402856d1654f8280adc28ae72dfde47c9c23679f6bbef30ca4756411ec7b","first_seen":"2025-10-28T19:02:37.337451Z","last_seen":"2026-04-21T10:17:27.234273Z","times_seen":2,"resource_available":true,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-3a6f3200.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-3a6f3200.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-3a6f3200.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-27a9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:57 GMT\r\ncontent-length: 1984\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10153,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10153), with no line terminators","md5":"75c7cb45eed5d6c4eef1ecf2038a7bf8","sha1":"173a927b0910456db78fdf39af5c5a2ed66edaea","sha256":"8a6f91c8495602f0f3dcee6ea769b2376fd737969e1f60ae29d186b60a96dc7f","sha512":"8fdf6ce6b37a601ce8febbf83f1ed8991d5c3f31eb7dfaeb698837fbd35badad23e38ce8a654ecea9e101e6d34cce1d634391ed59c6a604176a85ba3af44559c","ssdeep":"192:Oeq0wgiQqwsOaq+sqYugGY49PuSKhnMnqCcpaeh:jq0wgiQqwsOaqVqYugGYhnMjcnh","tlshash":"5f225571671e211cd17ff8a53d90778c8629f123e2029edaa6397835cac758236b47ce","first_seen":"2025-10-28T19:02:37.318477Z","last_seen":"2026-04-21T10:17:27.236019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-456ec76b.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-456ec76b.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-456ec76b.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-4a9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:00 GMT\r\ncontent-length: 350\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1193,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1193), with no line terminators","md5":"4e731c0bfd687144054e054413d4e077","sha1":"2a4750e29f4b97017d8ec7386d96d9420f112733","sha256":"d48d3a5ee212eacc8605a7cfbbf65d1d271b2ed025ce6d502308aba8c367a6ef","sha512":"9974d222b5bc9716f5b5488700dadf8091312723cea1af33f95fa3c23bfce981df50bf83b95a7f3ce854600c407b9e69aab5404c9bc5dc5c790e1789a9c1727b","ssdeep":"","tlshash":"d621d5316f2e502ce1eaa89af458b59c514cb20f665b9c65e6537817c8830f3313434d","first_seen":"2023-09-23T01:29:00Z","last_seen":"2026-04-21T10:17:27.237642Z","times_seen":42,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-2cdd1bb7.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-2cdd1bb7.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-2cdd1bb7.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3dd0\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:00 GMT\r\ncontent-length: 4803\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15824,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15824), with no line terminators","md5":"5e0802636c44958ee1677c510b7d2410","sha1":"0bcc701a726e6929df0783cb0276e33690fc108a","sha256":"a8da3ab29620b7409a049c889020c82ca458e1dd99b424439e2293df882fea00","sha512":"d2c70cb1e85195549816e3b418d18617002cca9f55ee9f573b6a57dc7091281ccfe25c0aaa852a394e2ecb2dac8874aabfc9c252e30cff706a575990698d5e14","ssdeep":"384:W7rLDuFhIKpRUk6ZuqwciW7jSxdx4q5bN:cPDMKKfD6Zu7ciW7jHqNN","tlshash":"8462f90d71cda47c9957b23d2a2f261a72266c456019c6cdb3b4d6e0f8dcc98612dfac","first_seen":"2025-10-28T19:02:37.209703Z","last_seen":"2026-04-21T10:17:27.131412Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/api/identify?domain=cowfuoe.top","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /api/identify?domain=cowfuoe.top HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Version: 1.0.0\r\nPlatform: Win32\r\nLang: en-US\r\nAgent-Identify: 02edea11-b276-4402-83b5-630259d51b26\r\nDevice-Id: h5\r\nRequest-Salt: \r\nRequest-Date: 1776766608\r\nsignature-before: undefinedMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.01776766608%2Fidentifyundefined\r\nSignature: 5ea9b8a0c9bc54f4b2cc8849a58663e6\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:45 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":221,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7972cab6fb7f916d7425b62fac11cc79","sha1":"ba314d64c9048c3d85c9d3344afd45a5c86bd151","sha256":"6c8a856a5c8b6abb28914b564b86f8c12c8ec762f9696f078d3e5100787d4124","sha512":"06e6605b03769964dd9d4f8b9df9d6efefd434cff045eac6a461fed908a5ad9b5d8dc077c15c2fa85dabbbf204110754adac98328fc933912fd4eaf076bc58b2","ssdeep":"","tlshash":"ced023ac4e9cc6034ccb42fd3034836cd12e3000a344053330fb8a38c01021c4dd0901","first_seen":"2026-04-21T10:17:26.979461Z","last_seen":"2026-04-21T10:17:26.979461Z","times_seen":1,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-vendors~cfbf0a2e.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-vendors~cfbf0a2e.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-vendors~cfbf0a2e.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-18041\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:39 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 35508\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98369,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f00689f095d97d4a19f5444857c85326","sha1":"ce67c837aeb571cb601fe25e3766602719e69b88","sha256":"d5ea11baf8262b1dc6ef2c4d315616d3ede64b6987f11dca2f5c92daf26d2cee","sha512":"8c16ababe04aac2cb948af249b767022562f3bf8efc5ab67547b119222236625f863f56282cc56ca2c9761e96eebd3cb7d491d4d1e5d8453a48d9bace0de3a3a","ssdeep":"1536:PDQbFNJ+jqkiHcurx3WqyrtpqoSWEDZgU14iVbVmfM:PMrxmNH9yD1j2fM","tlshash":"d0a3f87785c0139c7327cd15afc4f6d8c269d122e9910ee9f216261e8fdbb8511a2b2f","first_seen":"2024-01-27T09:31:41Z","last_seen":"2026-04-21T10:17:27.23912Z","times_seen":7,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~fdc6512a.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~fdc6512a.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~fdc6512a.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-45ba3\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:49 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 47072\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":285603,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"data","md5":"46533324f6e767421471a87776a1c664","sha1":"16cf1df9c671a21a126b5ea8b4275ec4f589d6cd","sha256":"667405695e96fc1490e953508629a821c83218e270fe11225d12ce101e953764","sha512":"5a5fa1b39bcab67fed761594eda439c80c821a7c3179f78b206f4923e71145d56265f9deaf454cf04b23ca8fa25442dd1886d0af0667d58f0acd7ed9be15b641","ssdeep":"6144:xAhz/GvQXU7YatYKrWnh1hL6W2s2ikSkHeYp:IzsB1F","tlshash":"f154b680f674b053479e3aa4096b100ef27abb7d2447007cf558d4f6bcb99c86a6af35","first_seen":"2025-10-28T19:02:37.15076Z","last_seen":"2026-04-21T10:17:27.240671Z","times_seen":2,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-00160a1a.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-00160a1a.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-00160a1a.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-7ff\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:53 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 551\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2047,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2047), with no line terminators","md5":"e946f9a2e91faf087809cb0f85e77b8d","sha1":"1dd1fcbe3bcb92146fefa54f5e091163609392ee","sha256":"e418335ab8fcbbbc06b8c351c4ea701d9f277a57e694c9308b4b133d7a420bd7","sha512":"8c8f0ec1f13b41100b5582556ade5d322b0d5e5609e5cc3a7cc3ec6e2005d876115f87928473930164747dc92cf986b4c600ddb85ef08990d7c5d0792b9db8c8","ssdeep":"","tlshash":"09418bf53b0c202dd4eef1167a9034ad703adb52e2421a69d001f95d4ed3ae730eb54e","first_seen":"2025-10-28T19:02:37.167776Z","last_seen":"2026-04-21T10:17:27.242078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-2eee1020.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-2eee1020.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-2eee1020.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-8bc\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:57 GMT\r\ncontent-length: 630\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2236,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2236), with no line terminators","md5":"bb8cef78cea86901e1b6754492e78dcc","sha1":"3c531dbb6fa051b33bc4f03ec875cfd84e162132","sha256":"387a4ca7137b1853650034be7faad78eb2c0b5cbec5623a17ffa5e32a5e31b00","sha512":"a13802da91281316b8910476815ab90125b47d8fea8e7def30c1ecad8cded6afa61ccaf23210f2d18c69f6400b382dde94ca58ef8da1f46be7878b11db1814a9","ssdeep":"","tlshash":"6c413f32a619110c8467f549f5d8ba98821cd223fc58addefb07260b4ecb6cb317134e","first_seen":"2025-10-28T19:02:37.29792Z","last_seen":"2026-04-21T10:17:27.243307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-429402cb.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-429402cb.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-429402cb.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-7aa\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:58 GMT\r\ncontent-length: 501\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1962,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1962), with no line terminators","md5":"ff180f84a4adab1af1057f0dd1c67d69","sha1":"b603e9f0b64de4679e5fab5d7fb8648c41c2dd14","sha256":"97f0548733cee645133df4406acacbc4bfe7b36c96a6035b16540db1152515e0","sha512":"b34e240889113a9fbf3599e4d2226b4a4cbd0fc4e4fd39c8e329ac928e6f7f692231f42bfaed73b5f98e7c069d759d1827316d5678fa86bb36362a4a92126113","ssdeep":"","tlshash":"51415531b65ea034e36bc01a35b6b51f5018d682eb499be5a651221f8cf7f9723a0b4c","first_seen":"2024-10-06T07:43:43Z","last_seen":"2026-04-21T10:17:27.244914Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-606945d2.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-606945d2.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-606945d2.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-635\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:05 GMT\r\ncontent-length: 498\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1589,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1589), with no line terminators","md5":"cba55faf2192a6ef2dabe16cae3a90d3","sha1":"a4cdb406e5896f6526fc1cf7c9f1661b5cabce2a","sha256":"5d94b1fa0c61993340e847372db6d976ce95b814d2384e59de31088b195bef40","sha512":"e2593e2cbce8e4d175b1174cefd97aa7cdd36ab5276245465ce6f3aae34e9f010bd264d1bc794d96a040ac6692ef34b0c9cae6996be1f989f205697a14f600d4","ssdeep":"","tlshash":"af31de31672da424d437f65335f1a4dc635c7a07e3074aba9712382d88e31ce2632a0f","first_seen":"2025-10-28T19:02:37.287824Z","last_seen":"2026-04-21T10:17:27.24631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-c3a6a376.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-c3a6a376.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-c3a6a376.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:33 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-3ca2\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 5373\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15522,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15522), with no line terminators","md5":"5a134e214b06efab7038725320f3fedc","sha1":"ffa60445b59c259d833fb7ab1a259db36329900e","sha256":"66ab03827591e7e3e52ca1cc1e6c4970c02259b3096dd13059be23687264766b","sha512":"f115a870f607092b6fd4fffb2cc9650d242b7207df0fd766c6948c012dd9524d98146edf5446dd467e6ad31f816f6906f4d662eb9a2a6097ed4353805d34965b","ssdeep":"192:Nxjr2t0rqn2xuRrHntDpjzMpLS2uOO+DTgVHdeQTYto9YJbYxUlYDfqh2u+1B:Hjrm0VxchDpqL91giQTYto9YJbYx6+1B","tlshash":"c362b65ab0d7f56a9ecb6051502f3521a0332ec4e414948ef7b8c9d8daa9e5c231fb7c","first_seen":"2025-10-28T19:02:37.334387Z","last_seen":"2026-04-21T10:17:27.2479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-5500105f.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-5500105f.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-5500105f.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-72e5\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:04 GMT\r\ncontent-length: 7233\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29413,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29413), with no line terminators","md5":"f33429fa6d124a0446e8c1e3b2f20537","sha1":"0ccdd66788ae6b9727a53edbed9d92b138645af0","sha256":"ec1b216f2942741895445214aa737d1f5a39ed18651c6b605a5a61a6023025d0","sha512":"57c896f8775bb2c6886e44cac8e850d5b5d33955e5ffd8c35bf8a87de8796015a8dfceb6bd9199be0330394ba6923a91798677394b653d42244df7256b540abd","ssdeep":"384:6UV9/2iOz+EYvojgJXb0pJNqh4CYUvU7OGeWFQXakCV+9wClo5rGN6fOTrixi9F2:fOiFeGuQyGrJtQ","tlshash":"d3d2d6323b5d1814f0bbcd5e7ad1f6884558c963eac30ea59621392acfc39c375a5a0f","first_seen":"2026-04-21T10:17:27.252988Z","last_seen":"2026-04-21T10:17:27.252988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-b0e882ba.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-b0e882ba.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-b0e882ba.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:30 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-14bed\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 22604\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"405f2a5a4747a8978ee94a37dc6bf48e","sha1":"e0b830bd442ac4bc33c6f0bd4b7f79de9f01e75d","sha256":"bedf1d7a870113281e462629dca170cd6b113dda79fced4a4196974baa442f82","sha512":"b586a95fa1c7f9c61ea823bdfd80f73805d20fb4704cd03773fcc32a2bd0518723285b7b07ae2af722e6daa759e8cb639d5ba297b709510dfe26d49cbd3e059d","ssdeep":"1536:MnqRYeWwGy8YPal+/+brYHZY/4mGoryJ8Ze208y3nQM1d+Z7JTvY8mJWTyVUa3Sm:oqRYeWw2YPalbrY5YLzUQk8mJWTyVUaB","tlshash":"8983fa89b2e3b039c2a76028001f1606f23a7a54a055d4d9f779d8e5adbcd4d622bf7c","first_seen":"2026-04-21T10:17:27.254751Z","last_seen":"2026-04-21T10:17:27.254751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/files/ljxdd70byd0cyyphrwfyu9wds0zierz1.png","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /files/ljxdd70byd0cyyphrwfyu9wds0zierz1.png HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/files/ljxdd70byd0cyyphrwfyu9wds0zierz1.png~GETd41d8cd98f00b204e9800998ecf8427e~D\r\naccess-control-allow-origin: *\r\nx-amz-id-2: UgHkzApkiMDmf8LHqOSweYvFbJ0kgnZ1M/J3jePon8y8Hq/UMVlEhcp9oGL7WpvWeDWlJXFs9tiekv69XLbWjDQTRx+Jv2Ip\r\ndate: Tue, 21 Apr 2026 09:17:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-disposition: dfvcc3/files\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: HIT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nlast-modified: Wed, 07 Feb 2024 08:33:13 GMT\r\nx-amz-request-id: DPKD8P9QA748DHG0\r\netag: \"ca174faab19bce3edc0eade79916167c\"\r\ncontent-length: 45001\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":45001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"ca174faab19bce3edc0eade79916167c","sha1":"49620255066b68a6e9f4244836e31182cd8d58bf","sha256":"7ff5e94a9c5e848dc9f5eeb989ea49982c4ac7a1755b4cccc78b79ba37c518d4","sha512":"980942f1ba3440d92f02f925e1bf66466c695095675c8e41d45ec922a23a33763affe02513eebbefe7c54f778d10bcd4d27a50c4fd47dccd6dca61a4d2217bcf","ssdeep":"768:L3iBmjgpnW24IeA9cz1A7GS9Vo6W/FBV/P0QJvPm8SGzwTMlf0Rp:L6msp3cMZPI3/P/vO8DwO8Rp","tlshash":"ff130143b879dc5377c0afed254602ed0738f0a991e6baed85c378274a369598ecd0d2","first_seen":"2024-08-19T19:22:06.121808Z","last_seen":"2026-04-21T10:17:27.256774Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/app~5a11b65b.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/app~5a11b65b.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/app~5a11b65b.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3afd\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:42 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 2483\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15101,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15101), with no line terminators","md5":"8f0c5287011c563f91811ef316e09575","sha1":"d342b22e43c05f5729490cf6a95f10844ae347a4","sha256":"0395d6f592d2ab0c138bfa304d5562701a998015432fe00490ad60ed32965f73","sha512":"8ec508be44c2e4982c4e29e98f7b45e8777b48a4acdd2b689eee190079e392b7ae48700f6ccff213b648cdb23af03a55d45f356d30063a21094f4f79c478ece6","ssdeep":"96:GtC2TUJD/jnlFti1S982942Trp4PrqCHy2ZW1Hl/hwWNm7/+kVyUJ/+KstVtSCPt:OKT6uebYfOJ43JyCqA60","tlshash":"056214b22f8a2018d1b7e65f3ad0bd48545eba02f256cd9d920678398cdb5d73bb070d","first_seen":"2025-10-28T19:02:37.238746Z","last_seen":"2026-04-21T10:17:27.264612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/runtime.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/runtime.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/runtime.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-10e8\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:40 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4328,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4328), with no line terminators","md5":"aaed8575d62a6dd6a4b40c674ff09a0b","sha1":"840196d560ea56a8ac526c98278ef5ba75b208f9","sha256":"5c7c677a7fb6b45c52e7214e1aaf9733dbdf714d7724929aafc873b8d4f083a5","sha512":"22a4a70bbf143e1f9823e3ae1ae68c1de4cfce33888e10f6ebb916476b15ebf3c9b1ab99b7d2aaafc77760c29d06bd3d2f8df99e3c402d2af2f8d87c29f39fc0","ssdeep":"96:Et0XJlL32mirpO8kDLX0PWkRUGCwzjX6F:VJlLG1iDLX0PWkRUC6F","tlshash":"60911eba3394b56917012ca7443ff713b1b359b20e39a790970ca9b5bb308f95317e52","first_seen":"2026-04-21T10:17:27.271172Z","last_seen":"2026-04-21T10:17:27.271172Z","times_seen":1,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/fonts/Poppins.e212f840.ttf","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/fonts/Poppins.e212f840.ttf HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/static/css/app~748942c6.1776481941933.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/octet-stream\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/fonts/Poppins.e212f840.ttf~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Tue, 22 Aug 2023 07:53:38 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:34 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\naccess-control-allow-origin: *\r\netag: \"64e46982-3eb98\"\r\ncontent-length: 256920\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":256920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 15 names, Microsoft, language 0x409, Copyright (c) 2014 Indian Type Foundry (info@indiantypefoundry.com)PoppinsRegular2.000;ITFO;Popp","md5":"e212f84086965da44a6c84f3d9a683a4","sha1":"58ca484f2ec5b8817a63136af362e1db1d29d49e","sha256":"4554cfac77e8cefa48f89ffcd4f1705f7c02ee34bd9b25415d1208065e4edb52","sha512":"2fbe3f5c702783f5e64ff1438f6cbc6fbe01d04a200cd4a589ac2630cfb158959d8af47f2310d764b6807cba3c348822414803756bd668aa02c3a9b68cfbd69b","ssdeep":"3072:WXR0+hO8o9KyyyRfW1nB37vVzmHAoPsApxuv1fzvkpJfn+aPFJENNjFuzKM/gXgK:qR0+hO8o97W1BJz5oPsAZmaP8NNjiFK","tlshash":"06448d91e56edf49db60ac3654376327baacf0356d9219a3c24f3718f4e20e016b21db","first_seen":"2023-04-25T17:00:56Z","last_seen":"2026-04-21T10:17:27.275127Z","times_seen":461,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-7f1197bf.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-7f1197bf.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-7f1197bf.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-15e7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:05 GMT\r\ncontent-length: 2069\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5607,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5607), with no line terminators","md5":"2f24a24708b26356eb46d3901a1674a1","sha1":"8c86aa43c95ea21a2998d3045a9d536e968e26fb","sha256":"5bb8eb5875753fa731bc72108a01b85627e709bf651275b3954322d1bcb99d7e","sha512":"aafe7d989f53eb106bd964cd0670f4c0e096cb6d079a06c60ce718e493422152e5fd4e4924c92a3fd564858fffcf9bf190e2f2167dc8b3898d68bf8424d5401b","ssdeep":"96:s1gNjHcHV8J/bk82CDJMSFYvRuV7rOLhfJ4o:6UK0/QCDJtAR","tlshash":"c9c168335b4c2129e92bcb7a35d0b7d8910de312f3614fbde3922c254d57ad22499a0b","first_seen":"2026-04-21T10:17:27.281198Z","last_seen":"2026-04-21T10:17:27.281198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-93174c82.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-93174c82.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-93174c82.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-2ff9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:05 GMT\r\ncontent-length: 2292\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12281,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12281), with no line terminators","md5":"27313aa7fb6d43266face9d600f23101","sha1":"0e25f9426da7dedd85f87ee6f1802c4d7575b943","sha256":"275b834a7b90d9c19adf465e87d6002b896ac1826efcabc16950e904fa7502fe","sha512":"e6eda6e47ccc1ca878a2a0ce9345c2e78e01d527fd7544ee035db5938f1e5662050752c71505dde7e6aac2e82f4cdf939db9e6548e54c2f077df79ff7360a7a9","ssdeep":"192:Oeq0wgiQqwsOaq+sqYugGYYYbglzyyiyw:jq0wgiQqwsOaqVqYugGYYYbczyLyw","tlshash":"a942243ac23d100cd533ca663998f5884275b227d646a6f6e172f4368fd3e9136b168f","first_seen":"2025-10-28T19:02:37.298887Z","last_seen":"2026-04-21T10:17:27.286681Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-584f9130.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-584f9130.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-584f9130.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:28 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-14e0\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 2043\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5344), with no line terminators","md5":"5188f347c61826583b26d208bd9da03a","sha1":"a869193b75ec0e53fc07e5d1a23501f1d15eab9a","sha256":"b2fb7bb33fe9c8539c0edf5376dd98055b6281b53e31696740790c87abafcef8","sha512":"336a9f8b8f6f553729fbd504f9c032e482936444215c1060085a8e6da3d4849416fdef1ebf9c0495c08306f3a00e67afb886ab25b9e82a6d64b0b1ab5f16335a","ssdeep":"96:zxL/W8iPrULz4kA3FvOR8pGicBJOf9j1LZQ0Z+7H:zx7FiPrxkAd2SP4Of9jRZQ0w7H","tlshash":"6cb122107497f1be8d5a1002c12a2b31f4353ee9c541d1d7e7bcc99aac98d69372eac8","first_seen":"2025-10-28T19:02:37.292073Z","last_seen":"2026-04-21T10:17:27.290583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-606945d2.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-606945d2.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-606945d2.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:27 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-1e94\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 3545\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7828,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7828), with no line terminators","md5":"2523c6885c24b6eb7b24232c0a459e91","sha1":"263d72be9ad3ea9667c39f2ece925a0b631b0999","sha256":"456e4ec3b5915304782af9614dbd98fe1cceb384a1ead91bca2eb0f5c493ce1b","sha512":"f5287a3945ddf8ec5010f048986077c7be31c17944448161188020df89ec0630152dc8d4eb92c47c714703f0d8724d1e5c0ad27a2c53c2be420f10e0855cbab8","ssdeep":"192:9xlhCyD+VhGmaMZ1EvWzaSE25UBys5Nsn7insyyu5ietKe6MR4:3l0q+VhGmaMZQWzaSiBycNyFA5FfC","tlshash":"6cf10898b196f58e0e3121b9516f2072d2333bd9841858c1fab1c8daccaca65521ff6d","first_seen":"2025-10-28T19:02:37.276764Z","last_seen":"2026-04-21T10:17:27.293447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-6e12bc6d.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-6e12bc6d.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-6e12bc6d.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:28 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-3667\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13927,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13927), with no line terminators","md5":"c6b13555bcd691dc93d62cf91b24f54e","sha1":"2239bbe919c699a715c3f5b65592fe42df2a8ea0","sha256":"cdc0a88589d3495457313606fce1caa8ee7578eac500af469d44f4f7e18bee3d","sha512":"ea5c859390fd822f9cb55ec49613ec4337c341fc2036630adeabde10ede01994784810142bf4f1ad2e4512368b42eba748bf5ef3da3aa1ce8abba08ede3e476f","ssdeep":"192:1x4LOAqxNx8RYF8QnTpjz1uQunV9SzAaoYP0YbRVOKb:f4LOtxa0TpwyAaoYMYlVvb","tlshash":"475252577082e66acece5012512e2931a0772f94f015d0debab9c9d5daf8e58130fb7c","first_seen":"2025-10-28T19:02:37.195932Z","last_seen":"2026-04-21T10:17:27.29641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/app~21833f8f.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/app~21833f8f.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/app~21833f8f.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-157d9\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:50 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 17965\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88025,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65437), with no line terminators","md5":"fa1b2f0580617a01483e0a32c651cb9b","sha1":"ec32c4b0742ae6293b728df5176df26e0068c723","sha256":"6242100c0e26584d4b16c5f847ea6cfb9bdf13f2598b97f6cbc89fb1d84198f8","sha512":"b9ecd25b5d72b2b68389825bd5b080a3efa66e82b4e7340740a834def8011f6debe31ab9ab4920ca63a4900cabb97e889eac4dec61df6c9e76ca3ade43fa776f","ssdeep":"1536:/ZBpm5CE3I9S5zyM2VK1DWaJJ8OZkn0yAH0AHqB5q:RIf3IeztDnJRSn0yAH0AHq2","tlshash":"bd83725af089b77eae22b250301f11b5f3656fe8d1184052fbb8c682b9e4964173fd6c","first_seen":"2026-04-21T10:17:27.299586Z","last_seen":"2026-04-21T10:17:27.299586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-08e808ce.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-08e808ce.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-08e808ce.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3d3\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:53 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 279\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":979,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (979), with no line terminators","md5":"1caaa1ea7517cc775e98fa5066e88752","sha1":"5f811ec29bb1275321a262b5c616e8c39d119f64","sha256":"785eef391bdd91c515f28d66497da4e9f58a502a76b099940d71ac306a09638e","sha512":"be4bd0704ad61660fca3f838683bd8c5964bead45e79745c920b8a0ef5d39e0e199377740a25bd4aef0909bd56c283eabcf7e0c93565903b59475f5e54fd6e57","ssdeep":"","tlshash":"0011e631dea62319c1ff905e77dc70485acab5b791e7f48e2e42d0184e972ad32b0b46","first_seen":"2023-09-23T01:28:59Z","last_seen":"2026-04-21T10:17:27.302195Z","times_seen":43,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-40657cc8.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-40657cc8.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-40657cc8.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1fa8\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:00 GMT\r\ncontent-length: 1661\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8104,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8104), with no line terminators","md5":"f5760ede0c4466138ded42abcb564596","sha1":"06086b5624fd33b06cc53383a4f7900da4e61133","sha256":"8f8cc4b45a3b387611c01711622532a2235336dc7e35cf04bda94cea56fa9520","sha512":"3ecbabf056a0e0b8117972ba9cb2992cbe748ebd56e970a5851a6a3c7ca92ccb7f677cbcb31df838fbc0e7bac34e8895f4bdb4a744a2c0cf3200eabf066651ae","ssdeep":"96:eIk/kCzDnktTdeenXWdLe2dh+Fcp27MFJm:OGX4UMm","tlshash":"94f13623226f1e1ce42bdd647ad462d84318d123e5535ae9d9717926cbc3dc325b238f","first_seen":"2025-10-28T19:02:37.133965Z","last_seen":"2026-04-21T10:17:27.304827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-0a77157e.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-0a77157e.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-0a77157e.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-16bec\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:09 GMT\r\ncontent-length: 25074\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93164,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"bd2bc9094b020a2631e35699b70bc22c","sha1":"3c0dea521ccbd2a704fd39d0841d5576aaa39a5f","sha256":"72d7d8c02fab94d63de73be9c0443769821017693e6090340c77c031453e4e1a","sha512":"356f8979944ed77c93e362de319b1963da4290740ef7d0ebde1c56ccdd1e53a81b3c1b1bf37e1e7135ec7fd14f5a3ad784bab7a399da6a657ef75bfdc8b9b277","ssdeep":"1536:xGdpPtWVGPSPVaVP9jt/Di42GordW8Be/rJ0vYQ9Od+jURTR7Z5d7j0ImYRG:QdpPwnVaV/pVW5Ao","tlshash":"c893e889b1e3b039c5a7a064001f1615f23a3e54a456d0d9fb79dcf0adb9d4ca22af3d","first_seen":"2026-04-21T10:17:27.307387Z","last_seen":"2026-04-21T10:17:27.307387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-55ebe7b2.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-55ebe7b2.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-55ebe7b2.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:27 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-c155\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 12187\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":49493,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49493), with no line terminators","md5":"d6a34b95a6a04c3f2a97ec536951e6e3","sha1":"6c961cb468d9033b154868988d64edf75a1bb4e9","sha256":"746c35ff565f27983e89a0d270674f0317ea524acacc6d866155b940cc45ac21","sha512":"99b922880dcbbebdbbafd381d9287a4ac07b2a43a22b9d8ac7bde855daa551d17189d368b28a5aa32d52931e69d2fd7a5f33f7f6ebfd12e4d06c5d3207bea7cc","ssdeep":"768:oz7uUgBxXgZep3m6eBYoaqtEaqZ4h7dL2P6Zu7ciW7jeBHX6xyw:k7upBFGep3mBYmEUZ5d7jsX6xv","tlshash":"6e23d645b0d2f02dda4a6065546f2635a1362fd4d424c8cef77ccae099a9c6c233ea7e","first_seen":"2025-10-28T19:02:37.222168Z","last_seen":"2026-04-21T10:17:27.309501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-bdfe8b10.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-bdfe8b10.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-bdfe8b10.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:32 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-19886\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 34126\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104582,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"07a9e7d5f54affaa5066191dd9b00518","sha1":"d32161977bc38dbe02e56ac7b4547588a87652d6","sha256":"d501bdd1395e432984f149597b9abfeb2459b146bdca1aa6effd7c4157c1b9ae","sha512":"7051dd220eccf3d7faab1a99eea39133513f6bc10f2a180b84b0607792d1fb2132b109a2eff0a1dcef676ea3d9d6ac9e10cc737bc860391be1cbf87e4e5fa41e","ssdeep":"1536:OoUCduzaLA66sjgEqw6jrauoPgjHewyVJZ7IVdUCoY7h7mskZ5d7j+w2H2V:0CHc6yraOHewsJZOCCooNmsiNV","tlshash":"5ca31a88f3d5b07a43a764e4542f0007f136ad59a84988a8f774d4e1acf4eca607bf79","first_seen":"2025-10-28T19:02:37.263571Z","last_seen":"2026-04-21T10:17:27.31174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/files/ljxdd70oqa0de2ncy95rltp5d0xezwkn.json","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /files/ljxdd70oqa0de2ncy95rltp5d0xezwkn.json HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:44 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-amz-id-2: +5MqBvWMunkyVG+OcjOFIfCymNq627vUd90wxs3JSk1Cq14FBubK4kKslUdTajfH2iOTKQggywiDqDbh8iS3N8SbL9FvhVWh\r\nx-amz-request-id: W6C2KXFCBXCQ4JPP\r\nlast-modified: Fri, 07 Nov 2025 17:43:10 GMT\r\netag: W/\"c1e0335fa23741e2aa4b12143ccce219\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\ncontent-disposition: dfvcc3/files\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":957227,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64748), with no line terminators","md5":"cc6d6945509987c3bfb54066c84e7cbf","sha1":"27f6e0d66ea1fc4fda0c3ebef80417c4175ddb43","sha256":"51ab9991c6b31c390e0bd1b686f2326a8d2fb36e0dd09021f02ffe730a77f802","sha512":"d562a1cf91aca18f39e3703c8eb31b765a22531021fec353f340329c1f27de46ff2d2f8e3789700646e64b0ae736cd24a821f674da8720bc965c6e5d90a5110c","ssdeep":"12288:4OvRPrLkmp/l0XLTNK3oPtZP+4QP2tP7ShvI/mag0NrVc2D7ldC6k86JxPCPQNXL:FrLvSXFKIN+4QIS1I/muVtnAca","tlshash":"2e45e61583bb83310dd136e43c07f792bfb941a9734576ce8a98e8ee35d9d28e025e91","first_seen":"2026-04-21T10:17:27.313522Z","last_seen":"2026-04-21T10:17:27.313522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":700,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~fdadd360.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~fdadd360.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~fdadd360.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-4f5bc\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:47 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 67593\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":325052,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65506), with no line terminators","md5":"94c3926759cd05ff968c2cbf1f0e58a1","sha1":"81dd9c7b477f6d143d6be47ccbb1db3e37f2ea5d","sha256":"890d0fd30c05b34666f3e003640b324738518dc8007606cd599fdef94f682a9d","sha512":"a3c2210e16e5e59f400edaf4cb4ee8b3dd2bbb304a9165af62a8eb752222904e5c980b570bb8ba2d72adeca9dc1c00da4e8e2c797cb5a8e5563f360af3bb04c4","ssdeep":"6144:GE6vmfsF8fe4Ojt4/3IIA1pNa92eQb1JUU9ATIOejo/Kyg6Uc8Fm:dARBN0k5iwo/Kyg6Uc80","tlshash":"cb64a689f5ceb6150b5f35e5c6bb041be2776e84b80c4820e6c5c8ea3868549723af7d","first_seen":"2025-10-28T19:02:37.266521Z","last_seen":"2026-04-21T10:17:27.314984Z","times_seen":2,"resource_available":true,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~2900d54e.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~2900d54e.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~2900d54e.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3f7ca\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:49 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 79919\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":260042,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b2c851744f81b8dac719e8fb2a4de870","sha1":"19cab5c7c6faad338f9289cdb373f032865e53ec","sha256":"a793824114cedf2a089bb4b94be9946ec5f1a59afed0a5013e5de407666a3de1","sha512":"dd8f7a397df9a01404b1310a3af16a4903abc4c9128401a94dc36b7c254246cbbd9bf387921feeb3f7ccef1a0da5a1123d5c22770230d8049dde820d143feba1","ssdeep":"3072:E8tqUp6AVCXxEUxWQs4tO1JJ9ZFlrZpdJtREnBqek:E8pJVCBEUxWQxMJJ9ZFlrptEY3","tlshash":"ca44f8d8b690b064435362e0803f150bf23b655db50ec9a8f625e4ee6cbc44d627bf7a","first_seen":"2025-10-28T19:02:37.338564Z","last_seen":"2026-04-21T10:17:27.316376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/app~748942c6.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/app~748942c6.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/app~748942c6.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-46a90\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:51 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 98019\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":289424,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"0f53ef6617a14b5560267b0ec9594c0f","sha1":"4bdd382e0a534652d2bedbd2a35fe9d84d76082a","sha256":"614ff1502790b64ce2b3c4ea067ed037d85840d9a652f2277224f94bfd0a9b71","sha512":"5ad31fead3ee46d1cf4b7968ad081944f9a711fed5ea89222df680640f710ef444fa55851d2deaa007ccc2c75ac14e3f7555b49fb7d4c7d84478398ccfa01e2b","ssdeep":"3072:7oDhKpWN3Gg6uux1VA99gyq96Ii+F8qrV76rRRbABDCct153mTpnK4ua5d+4k2rh:2IsRiHlA9y6plK4urj+bGG","tlshash":"cf7464045b76d7221d9df6b42c5fcab4bea9020453409e422fb480ffad65d14e226feb","first_seen":"2026-04-21T10:17:27.318055Z","last_seen":"2026-04-21T10:17:27.318055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-464a2a93.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-464a2a93.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-464a2a93.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1257\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:59 GMT\r\ncontent-length: 1113\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4695,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4695), with no line terminators","md5":"eed1a4ceb71213ac6099e869564a02f3","sha1":"a7ebaaca4e36b20d644943aeb97cf018229f4a0b","sha256":"1c8a7683a97821fc3f58dfbaf1ceccc1a851e580f1a9ea353df192f8df4bac8e","sha512":"28ceaabde5dfef2d6def16560175bbf7c5379121b7efc72c67395c33a23d4a0d5a777380e78b21a068c7bb5de098114fc7323c74a6cf10ff6054aa112e3e2585","ssdeep":"48:t6Y2qIwWl6/kCMnOltLPX3kMOhTJOK0sAxyQCHVK5UenqGngSr:t5pIk/kCzDnktTJ6sAEZAUHtS","tlshash":"4ba135135b9e2724e42bdd4926a8e6d98324c6b3d5032bfce5506a12cfc398537625ca","first_seen":"2026-04-21T10:17:27.319212Z","last_seen":"2026-04-21T10:17:27.319212Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-9e4e3f36.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-9e4e3f36.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-9e4e3f36.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-a22\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:07 GMT\r\ncontent-length: 569\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2594,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2594), with no line terminators","md5":"65e278db64e452be9cf02b836934a561","sha1":"e167fba337ade492d6750c4e6ec81ce125b0e10e","sha256":"5286b30c8016fea947fec3c325a0685f95b2a71660eff73256b5e84277080641","sha512":"3a9d076b10f82756e186d587a3b2017f33a5d1d940bd48358333a7b7f60153b08d0cd2555518a5ef7f1ad151ac83c155b3191d36c28c42b0382d616c86ece97c","ssdeep":"","tlshash":"025174236f1ae803c53bf8253255766c1618565ded8fdca6e182191d8ff36d322b0b4b","first_seen":"2024-10-06T07:43:44Z","last_seen":"2026-04-21T10:17:27.320298Z","times_seen":5,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-be88b160.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-be88b160.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-be88b160.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-1086\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:08 GMT\r\ncontent-length: 913\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4230,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4230), with no line terminators","md5":"4042f7c26737a1b7b029d3eb15b75080","sha1":"705dd3b822df13bb0c788aa070b6a55073130c49","sha256":"4ced1ca30ef217e8a4fa297bfbb359cca96075d04f42c9c4fe2510693dc9113a","sha512":"5569a53c8e4577a8d706fa92066342be0ba4784ddccbdb8986b838e486ed912dda8121302c43124f0e4b678333a4531ca050a5593f3e1b9ca8324b79ed0ffef7","ssdeep":"96:0i1KkrrszAzPpHn+9bBY1BCRB6BgBwvBMfKBVBEEvBKJ/+tB0OW:02rszAzPFn+xBCBuB6BgBwvBTBVBXvBo","tlshash":"1091de71771a101896e6d45b3698b308163ced43fb46eebad27f201f84eb2a535b170b","first_seen":"2025-10-28T19:02:37.281238Z","last_seen":"2026-04-21T10:17:27.321444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-4e3d403e.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-4e3d403e.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-4e3d403e.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:27 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-9cf\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1084\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2511,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2511), with no line terminators","md5":"835d775e280b3c6813eb9e2407c72d6a","sha1":"228ed98f7af5eeca8830deea3afa59ae703e8fce","sha256":"e7cdef3ecd48cfa2780bb37fdd8335cc5df6b999ec98a2c6610c0f7e42d3cf65","sha512":"7f8fbb8cdfec473c0a7060a53c0f51685ce72298b64220b5f2e6b43e5c0b5009195fba2059d0076bb66303a6ee47bf1579390cc7a65b767f8ae0e127993b1b52","ssdeep":"","tlshash":"51513e56f483f0689fbe2080922f2636a1291dd0a5a1a992f3b0d0f955f0a55432eeac","first_seen":"2025-10-28T19:02:37.157631Z","last_seen":"2026-04-21T10:17:27.322564Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-58d001a8.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-58d001a8.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-58d001a8.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:26 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-1238e\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 20063\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74638,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8f020bf27dc916e47d45f109ac46cedf","sha1":"9ff189334891f84d44fb207af058aa830940f9fc","sha256":"c029f85251287c6ead0c55a68cb5250ac9a8eee1f085ccaec33cab1887d93add","sha512":"b908181f7b5c3830688dc2ada987979cc49d5224be36c9ca1aeea2754de983ef5bacfb0f13195c678202474e028d78a1f59c669b95a9b0701c6de3510c752470","ssdeep":"1536:VskM1ojnNtza++YDWrY0XI4mGoryJ8Ze9gKtb+QKd0d+dKaV+L8mJWTyVUa3SEO7:ykM1ojfza+erYAltZOxW8mJWTyVUa3ST","tlshash":"bb731b89b2e2b03582d7a058002f0606f33a7654a096d4d9fb7ad8f5adbcd4d6127f3d","first_seen":"2025-10-28T19:02:37.308104Z","last_seen":"2026-04-21T10:17:27.323692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~41ff223c.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~41ff223c.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~41ff223c.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-42182\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:44 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 78532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270722,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fb4737dadf31541033a95a04eb1c836a","sha1":"1d391fd9ede900a5dd06d9ecced9f9a2a4b2f87c","sha256":"c3687bc507eed0dac0123dc8bea0a0800eebbe61a2ed9ffd7ca1244399cdd5d9","sha512":"5044e8f9e9de30225beae868d99055e682db53ed54bf8f9e7e804ef6e4e6aff254981737cea02fd4d37cd19898e01adab45e8918572dccb1415b257d3b73c132","ssdeep":"3072:HLq7HQMaLHUoMsf+oNJ024Bu/TS35ryXD7lGcsKhozbyPu7B:HawMaLZJpNJ02q35WXDAcnh6biu7B","tlshash":"a0442aa97244b06243e332f851af180f9336144ce94ad528ba55d5e96cbe45f333bf3a","first_seen":"2025-10-28T19:02:37.305747Z","last_seen":"2026-04-21T10:17:27.324849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~9c5b28f6.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~9c5b28f6.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~9c5b28f6.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-50389\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:45 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 65640\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":328585,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e55fc81473c0e69568ccddf6bacc39bb","sha1":"a1db58888937998f2afde57cb5c9e8f86d7551dd","sha256":"6dcc1bfbe05d8ea5990c0ee335e78217f25361ed21ded61c547f1375e8627947","sha512":"a617a8f69a4d1e06ecdddf22caba4848f4ae1e7e021a019aff87c1c875b3461d5a7d51bf30b32bc58001cae1c61c925783768d6d7fb90bd5315ebbcd3ea53baa","ssdeep":"3072:c7Mpc8vx23plo43A8+G2sNsZ/BTE5kUOz/XRmU7Mpc8vx23plYB8+dpM9f8vX73M:Th43A8+/hZtE5AXg7Fgz","tlshash":"b264d984fab5b05247aa7af40c6f404ff275ba2d680740acf654c4f27cb45c9692af39","first_seen":"2025-10-28T19:02:37.22085Z","last_seen":"2026-04-21T10:17:27.326049Z","times_seen":2,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-06d86171.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-06d86171.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-06d86171.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-98b\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:51 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 682\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2443,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2443), with no line terminators","md5":"aab7fd597b7915ab839965e4357aca16","sha1":"967051c6379193e5e5627ab2cf02df69f4eef486","sha256":"fa171b04062448a56c73ddfcd8c30c43d9ade06551502286f2184d2511573547","sha512":"7398bbe0efe2e128bab5cad358c582aec203e866b0338228118d41319147847478b036e5495d6516a899e86c3f289ede0a0fb46259179ffeacf2f8a998d432d0","ssdeep":"","tlshash":"d55131216a62100dc4b3e90ebde5f458970eeb03f2954c8eab91555d8fc3fc231b432a","first_seen":"2025-10-28T19:02:37.258605Z","last_seen":"2026-04-21T10:17:27.327177Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-1c17d1e8.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-1c17d1e8.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-1c17d1e8.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-14c9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:56 GMT\r\ncontent-length: 2390\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5321,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5321), with no line terminators","md5":"7d9c512ece0c5be418387555864856c6","sha1":"21b3333f043380ebb8e0949b069e74ea862eb91f","sha256":"59bfbc55f09a7aa19a6a42772e7018e1deb8b6a38496dbc264121363257ada0e","sha512":"010d60459999c097ed1e55cfb8d124f2578d9d67b2ceeeacb413bbc16e2b495df776feb87c6658f36709fb4eec85ae19949bacc5f457038ff2d4f167c266957c","ssdeep":"96:gxJ775y17i0dNNOaReW5yqOYaUMXLVxl12+QXpTqKu/zUMgW9RCwY:EJ79y9i0J2jYaJXLVVXQXFqKu/zUMh/q","tlshash":"85b1a6b2a21e2524ec2bd92caaf86504892dc653e64e8cda7707713d8fd72d3257230d","first_seen":"2025-10-28T19:02:37.211768Z","last_seen":"2026-04-21T10:17:27.328266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-47b66731.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-47b66731.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-47b66731.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-cb33\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:16:59 GMT\r\ncontent-length: 6304\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52019,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52019), with no line terminators","md5":"647420e75f83f7ab01570a3a800d8532","sha1":"3e94e7509e0e5a561177637576b763333731a703","sha256":"ab5a7a6a793b72a8989e4afc632b73a44b2303f035f68bf04c185437490b9e4a","sha512":"e7961a432c9b2eed8e3e33c00e1e86c1891d8db6a421cff106ea52ea4289348317fc3f6de853bc6b5a061a56c1fb79f31641ad67c8cd9ec26b0138ddbfa7c6a1","ssdeep":"384:XBA7bG4YfPZSYSeSpuYYYREYXtUK58Z8E8bdPH8n8O8pKPen8H828RxGUft/2ie0:qtOYe+8y","tlshash":"da337531773e1824e57fc95f78e0bf85561cb643e24a4dd6fb026a1b8cc75823262a4e","first_seen":"2025-10-28T19:02:37.286682Z","last_seen":"2026-04-21T10:17:27.329565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-6d8e419e.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-6d8e419e.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-6d8e419e.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-28b9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:04 GMT\r\ncontent-length: 3033\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10425,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10425), with no line terminators","md5":"65c123262043a7fc46c1d20d5e6e6f18","sha1":"f980d8ee545430cbdf961b45fb68907efe97f4d0","sha256":"45fd97b8f9442c5e29905e56c5b1f2d3b93a847ad4a5e33adb2509542533544b","sha512":"c6b59d88c838fa7c46250c98c92ec6773abbc1d4b36fed8161c9196c51d6cb2add4722abaabcbb801288a0139c77ff25b7503f26095fa075e79de6d146f01c8d","ssdeep":"96:0i1KkrDoDyYggdWaxKYwUah+ywHurmdUhUizcawKVwlUwRwZwgnzLKdBew9icOZg:02EqmHvp6j2mqLrdQl3yz","tlshash":"d72287329336e40991b7e8da35997a58ac18c53af74ac9cd82463427cddb69333b234d","first_seen":"2025-10-28T19:02:37.153541Z","last_seen":"2026-04-21T10:17:27.33087Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-7da1a077.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-7da1a077.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-7da1a077.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3fe\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:06 GMT\r\ncontent-length: 331\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1022,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1022), with no line terminators","md5":"3c63e27e2966118e7a3e2bd200b5cc12","sha1":"729d187bf7d1b7d658792ddcabd0bdbb5a184988","sha256":"48aed12ab8b2ac4e0a5df870875b9c9414b146686127b8036050713a515c946a","sha512":"8c702666fe87d31c442eff9e95da65473860ab92d44a52b6b1c4f4006c92cef9e5311ab5d11dae3a45234458ee1839bda13aa2b8fcfa2e45a532d0d7d2cb2797","ssdeep":"","tlshash":"ea11599036183074a6f3f47e70f89a65a2309191c32299bc9690d6c74beb0e7333386d","first_seen":"2024-01-27T09:31:42Z","last_seen":"2026-04-21T10:17:27.332114Z","times_seen":20,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-7f1197bf.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-7f1197bf.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-7f1197bf.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:30 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-1f2c\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 3090\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7980,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7978), with no line terminators","md5":"5c8f3f58adefb26692e45a60145165bf","sha1":"6e9cd07b2b862f64ccaa8a80eda63831bdd5ca62","sha256":"184d893448bca04e4d71342d13f0347be49d1373869699556bcb07be347a1401","sha512":"254572e66f729edd3f8bfe3f57b6008e63ea75ecccba01f4eb6bdafaa0bfbcdac74f3867abdb2b4f81d5cd8bf6256254390387378d115c9f38d71d3c309cee9a","ssdeep":"192:wx7a2IU5vtOT7z20vGYtdL+sY5QSwtY0nzvbp5N5IIiK28j1Z2NyMKi:27aEtF0vGYtdL+sY52Y6pNkKQNyK","tlshash":"fdf1a499f483f1aecde62090011f2632f1653ea96815a497e1b5d6c1acf8c5e422ff2d","first_seen":"2026-04-21T10:17:27.333936Z","last_seen":"2026-04-21T10:17:27.333936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-58d001a8.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-58d001a8.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-58d001a8.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-6581\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:05 GMT\r\ncontent-length: 7079\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25985,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25985), with no line terminators","md5":"64df7960587f38c187570774297a129c","sha1":"2a3d350e36fb003f299124b2d6ae278607e04cc9","sha256":"f1b861b778cfd93987a6ea548676eb341cfc4ce0db6bed79f92cbe00819a06ae","sha512":"aa53aab8a699a1aedeeb6b87dcb03513b1906bb89a17ea22a61b950415800319760d44879cfa693c4f90b6e6fe0a99d08b4ab6173bdae738d9b6099bd846d6a2","ssdeep":"192:ctq65NNY2LJaQ6OCOwoOS2qezsMVVnhOLLCynpXZ27aA6OLLCynpXZ2qOrWgDEAd:cI651JR2q29nuLDnpJuaALLDnpJUWwjd","tlshash":"74c29731a36b1428f02bc55d2190e98c867ef602e6434fece691766acbcf7c1319579e","first_seen":"2025-10-28T19:02:37.250785Z","last_seen":"2026-04-21T10:17:27.335331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-06d86171.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-06d86171.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-06d86171.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-25e7\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:10 GMT\r\ncontent-length: 3264\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9703,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9703), with no line terminators","md5":"2b38d0dd96b5521e32a4e28a64b28cd3","sha1":"a5034042195b08455ae4600542b7b66366982f11","sha256":"65f492f1fd779749cbf16e5edcb95dea7bef3ab783fe9e194d0aae15458dd788","sha512":"abe36231238e435e55485b8f12f571b79885ee76fb43f911244d599a11f04fa34c7daec75ad622a8c664f01fd8897da225a64f5ae98343f45c86c409d0571444","ssdeep":"192:OxjLVK0yNxGzOEIDPpjz34RelNc52eTYPN:8jLVK0+xG6Pp2ec5VTYF","tlshash":"ef12b58ab0d7f8599bc76052542e3a22a1272d84e01594cdf7b8c9d9de24b5c232ff3c","first_seen":"2025-10-28T19:02:37.267506Z","last_seen":"2026-04-21T10:17:27.336568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-0bf37891.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-0bf37891.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-0bf37891.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-48dc\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:11 GMT\r\ncontent-length: 5647\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18652,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18652), with no line terminators","md5":"b490356adf28743b537c6c44cc856ed0","sha1":"b3a7a1253e08291820e16e0e1c1e1425cccfd2e0","sha256":"c87eeea01101ec1a84dac778c9a9df9af41b16b0aab8a1a453a5fcda8eb25445","sha512":"0dd2aa7687155d54a686ecbbe6477a3e0a1fe3138fc65e12c8f659758d9fa968d3406de262267a8642c4cf2ba1d9d20a54437b1c9958e2f766ae317262f84149","ssdeep":"384:3jf7CUlhBxt5vHBkEtSpALRIqqJjsF+2MZ:Tf7CUlDxt5PBkEtoqYp4+2MZ","tlshash":"00829656b082e56acdca6025502f293591332f94a425e08eb77dcdd8c9f9e6c231fb3c","first_seen":"2026-04-21T10:17:27.337814Z","last_seen":"2026-04-21T10:17:27.337814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-2f91f326.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-2f91f326.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-2f91f326.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-849\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:12 GMT\r\ncontent-length: 950\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2121,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2121), with no line terminators","md5":"fb25fa0757be808d4eb002958ba62f0c","sha1":"a88922eb37f4c170550f4995b45c5bfc5d2cc9b4","sha256":"da1a6f74eef18a3a008ba088baace492cb280d1c39ac5b346ee33157adf5f522","sha512":"e400a680b3fd636eb61124727e089bafbe5fabc0ff1d10f0de5d59a5e78703b359cde7f52d2c82c59b3eeaf2b1aa4abdc1666a6f48f1d22be1f417a5dccda314","ssdeep":"","tlshash":"6a413168b583f0fc8e5a6091412f2632b1363ba44618a8c1f6b1c8c9adf4f55526ef5d","first_seen":"2025-10-28T19:02:37.332467Z","last_seen":"2026-04-21T10:17:27.339228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-9e4e3f36.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-9e4e3f36.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-9e4e3f36.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:29 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-93c\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1040\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2364,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2364), with no line terminators","md5":"8bde0bb987624b02fbca9be50baa4234","sha1":"f00c5a8fe59a71e8c6cea50221608ad8bc2ff1d1","sha256":"199dc6aef71dab8700bfaf0c0421953a579e300e14115e901da84c676f058114","sha512":"92172eb8e13bcfc21e8df6e79fa161cc8b6959b1418503117bcce7ba7652b9c39795ebb29ba9be876f0b08c608422ab176d9d377806a6984de78c56ef9b2f5c8","ssdeep":"","tlshash":"344174a7f183b4684fbd2080a63f2576a1282984b9919982f7b0d0f954f0b95022ff7c","first_seen":"2025-10-28T19:02:37.217349Z","last_seen":"2026-04-21T10:17:27.340426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/api/wallets/19/templates/0","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /api/wallets/19/templates/0 HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nClient-Version: 1.0.0\r\nPlatform: Win32\r\nLang: en-US\r\nAgent-Identify: 02edea11-b276-4402-83b5-630259d51b26\r\nDevice-Id: h5\r\nRequest-Salt: \r\nRequest-Date: 1776766608\r\nsignature-before: undefinedMozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.01776766608%2Fwallets%2F19%2Ftemplates%2F0undefined\r\nSignature: 3d4e9b830e02792ebdeaa126ae45edb8\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-status: BYPASS\r\nserver: nginx\r\ndate: Tue, 21 Apr 2026 10:16:45 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *, *\r\naccess-control-allow-methods: GET, POST, OPTIONS, GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type, DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":574,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"65a7f3ef0e243347d5742f3459a0c16f","sha1":"d5cf2b1ce03f293a5ee31eb20f9cd15806a7ba37","sha256":"9b4d605150e51d54651e3072a7bded28c578bcf72702a431dcda99dee61e5d27","sha512":"98c60daecedd485f8c30011ea5c00f952c2b2f3e4e93a34ce23a0ec8b67782ab1ae1ebd2e8fcc113b3e2523d462e299566272645be58f9161b7ca799f130a841","ssdeep":"","tlshash":"43f0e1f2191860054a5183cd30bceef9dc9d358e81e10bf754389772805cbd034479a0","first_seen":"2026-04-21T10:17:27.071269Z","last_seen":"2026-04-21T10:17:27.071269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~b5906859.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~b5906859.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~b5906859.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-40d3f\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:45 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 76285\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":265535,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"eec9f93975be004060d1ad5b111b7f1d","sha1":"8fcdc5e5a99f14b11f51032565382e59b1139ce9","sha256":"c982e2d28d1c3f9602982515343f9052f4580fdbf933c0725d01537c22cefdbc","sha512":"0e9079175164b09a1278c8d9cd773f0d7bc195ed97e0bcdcb60c9acbfd7c796f13a5aecb1e73f26127d5f789332ad30aee8f33da3aac22de26dde324b0e2a7d5","ssdeep":"3072:bilu6EyLGxWkUigOl8azckgsyb4ohvBCvFRd2CXJh:bil1LGxWkUigOTK4Tth","tlshash":"2144f8987654b01283a736e4042f500f9236a90da90f953cba59d4eabcfd486373ff79","first_seen":"2025-10-28T19:02:37.313346Z","last_seen":"2026-04-21T10:17:27.341504Z","times_seen":2,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-vendors~44606203.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:46.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-vendors~44606203.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-vendors~44606203.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-3d085\"\r\naccess-control-allow-origin: *\r\ndate: Tue, 21 Apr 2026 09:16:47 GMT\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 53139\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":249989,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"eb3aaee30598e1c54b920653527e83a1","sha1":"1062de9fd3f0ccee20931864fc41b1e287275302","sha256":"73c68bf8f0f917bcf4ae1bb6a70b07cbc587a15b53348cda3f4fdaf5665170f2","sha512":"63bd07e6eb93dee933edeaa9baac13feb2525219d57bfecfe09bab82cec3132ae036a069d5beb4f9a33153fa9045799e037cc61bed9b71ea0d4cbdc2302b0d3a","ssdeep":"1536:Jr1p6JDZm5oCUe7pMxAyhvXez1KK5lrzEe/u2RabmDna3ipnzfnjsEODen/rPq+p:eZm5UGMxfUlF2Wjs9De/rJOaSdIlx","tlshash":"8e34b4c9b6c2f0d333a330a0447f7496f1761c91b90e8991da62e4d17eb4d8ad13ae5e","first_seen":"2025-10-28T19:02:37.227717Z","last_seen":"2026-04-21T10:17:27.342606Z","times_seen":2,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/js/chunk-80cc98a2.1776481941933.js","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:48.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/js/chunk-80cc98a2.1776481941933.js HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/js/chunk-80cc98a2.1776481941933.js~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\ndate: Tue, 21 Apr 2026 09:17:31 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"69e32dd4-93e\"\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-length: 1042\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2366,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2366), with no line terminators","md5":"d2a83f8a9b185577b6bd476ef2447829","sha1":"7a537960e9dec6990a4dfe5552b06964e9991a6e","sha256":"90e3e26ed1b7d93bdb7c0fd243d797f5a43e23a132688655ef72cbaf72bffa04","sha512":"8af73fb4de3f9c0ab1e463d01ee6965d345abb02b9222440c9979a4bb29c7fdbf6c88ce12654f26229c79d45281ac0abe16b9a21b9a0124b7517984cb316fd32","ssdeep":"","tlshash":"6c4145a7f483b46d4bbd2180a62f2476a1292984b5a19942f7b0d0f954f0b95022ff7c","first_seen":"2025-10-28T19:02:37.277847Z","last_seen":"2026-04-21T10:17:27.343753Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/files/ljxdd70esz0dbkt73bh5ggc130t84wlu.png","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:49.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /files/ljxdd70esz0dbkt73bh5ggc130t84wlu.png HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/files/ljxdd70esz0dbkt73bh5ggc130t84wlu.png~GETd41d8cd98f00b204e9800998ecf8427e~D\r\naccess-control-allow-origin: *\r\nx-amz-id-2: nw/3SHmctV6/mOxVA1mMMcJxvVIJ8hwhubChwAil8Kjywr/FcmQxE1+wwEot+Tx83OY0bhr6dttpjbVxx4VG+ahvTU0z8BdB\r\ndate: Tue, 21 Apr 2026 09:17:02 GMT\r\naccept-ranges: bytes\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ncontent-disposition: dfvcc3/files\r\nx-amz-server-side-encryption: AES256\r\nx-cache-status: HIT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nlast-modified: Fri, 25 Jul 2025 03:17:41 GMT\r\nx-amz-request-id: DPK95HQHYY731GZZ\r\netag: \"fe46f3c296e401cf78e8e9838a00013c\"\r\ncontent-length: 927\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":927,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"fe46f3c296e401cf78e8e9838a00013c","sha1":"3fd39e63282b1ea900ac5c54b0609d04da2a1ab3","sha256":"f722bee136d744f818f22af4e2235c2b1166eb27dfd063aaa76ff0de84f4fa72","sha512":"3c1bfe1ecdd5a35a67ee0f6aaf6e7eb164e593e348bc172fc33503b04a390d9639b621bca59868d9dfee6db5716ba879e8dc3f2903b7fcaea80b5e887cfded39","ssdeep":"","tlshash":"941144dc8bd79d3d906a42b60223401594fca6c89e4b008d3bd25ed3ab51d42640f3fc","first_seen":"2025-09-02T05:09:23.184459Z","last_seen":"2026-04-21T10:17:27.344963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.cowfuoe.top/static/css/chunk-844845b0.1776481941933.css","fqdn":"www.cowfuoe.top","domain":"cowfuoe.top","tld":"top"},"ip":{"addr":"4.178.241.13","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://www.cowfuoe.top/","date":"2026-04-21T10:16:47.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.cowfuoe.top","organization":""},"issuer":{"commonName":"ZeroSSL RSA Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Wed, 25 Mar 2026 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0B:01:E5:BD:43:74:6A:7D:EC:1C:E2:D6:6C:D7:3E:F2:CF:B4:06:90","sha256":"8F:24:4E:8A:BE:DC:53:C2:64:B6:22:EC:FF:1E:BA:70:77:81:F3:5E:37:80:96:CA:DF:A8:B3:47:48:37:CA:A8"}}},"request":{"raw":"GET /static/css/chunk-844845b0.1776481941933.css HTTP/1.1\r\nHost: www.cowfuoe.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.cowfuoe.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\nx-via: paris55t6000000\r\nx-country: NO\r\nx-cache-key: www.cowfuoe.top/static/css/chunk-844845b0.1776481941933.css~GETd41d8cd98f00b204e9800998ecf8427e~D\r\nlast-modified: Sat, 18 Apr 2026 07:08:04 GMT\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\ncontent-encoding: br\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-cache-status: HIT\r\netag: W/\"69e32dd4-95f\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,Access-Token,Sign,Lang,Agent-Identify,Client-Version,Platform,Device-Id,Context-Type\r\ndate: Tue, 21 Apr 2026 09:17:07 GMT\r\ncontent-length: 496\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2399,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2399), with no line terminators","md5":"8f199a93905853d7666fb0924b82234b","sha1":"e5d609f36b8d47ba735098256dd82437ec337ad1","sha256":"9d4b4ca96e1df5cd502584501c43d892049a274c852264013d6f953648b92390","sha512":"be78c8a2d034805141d7cf2c5f63edef2d58239e346290171f3a95497630e91d4a45b685bf80417fb2451743696fd58ce3ca551ce4529f21b73a88a9f242fb46","ssdeep":"","tlshash":"30417cb5212cc11971f2d2a2b65c3e685e858622e58e05de812603670fef3db377074c","first_seen":"2024-06-20T16:56:56Z","last_seen":"2026-04-21T10:17:27.346403Z","times_seen":6,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"www.cowfuoe.top","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"www.cowfuoe.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}}]}