{"report_id":"a7311edb-eee9-49de-8a4f-e6b5831f1db0","version":6,"status":"done","tags":[],"date":"2026-02-21T21:35:23Z","url":{"schema":"https","addr":"345934coinbase.com/","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"345934coinbase.com/","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"title":"Sign in","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"345934coinbase.com/","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T21:35:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"345934coinbase.com","ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-21T20:27:50.124742Z","last_seen":"2026-02-21T20:27:50.124742Z","alert_count":75,"request_count":25,"received_data":8263991,"sent_data":10895,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":5,"received_data":21620,"sent_data":2379,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"345934coinbase.com/BybxolpF.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BybxolpF.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40480\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-9e20\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2F%2B8GCszQgbLRv7WrG6JTO1PwFRpsKqmKzG%2BUggm5hUrmNGUa0TSQQnj0l09J%2BtPMBytZESinTUcFdP9tJ5Qfpe7nrszRUU2jdnwSskWXoyJ8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a035cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40480,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.2097","md5":"c9a6e887656f7b1014db3f1a07247ee2","sha1":"371f6e5792cff6d3bf6122392d2403f05f1ca445","sha256":"5db56ddf9ab991fc7a3a5b188b6b0c92331213ec4991b71d9821c36dcbcdb687","sha512":"8544191d90eb82b7ed77b813bebb04c918677dd206f37d151db7ee5f34feef64afee26b0ea94398a64a8aea0d8c6d8613dd1b106eb49142a485235e6e19e2710","ssdeep":"768:Czw/1p285wfUizBtYzRe195L9i980ZzsDTdPALCNVb872CEzwZfkAYl:tI85WBtd195xi980Cn6IbT9ws","tlshash":"810301d9265d774ed88b863709c227308ce889d6720be1872bb4a18371e6ec8c625fd5","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-08T16:54:29.981802Z","times_seen":1549,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/BJ1-X6Dz.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BJ1-X6Dz.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 39128\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-98d8\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLR3qCdNBOlhi%2FLEm48JcjydaafuMvLZB5ng1jUCAAuzPkdx1JoCz1SoczfACBIMu79fZwz%2FZvaqYPH5QADKeyGn6AqTwCmquCOVanxMh2tXHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a335cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.2097","md5":"d65a3b1d9255924adbeeabac46787723","sha1":"2f5d6025d09e81ac0a6583f050560013f2b3fcce","sha256":"b2943cf448795751c6a309662c5237904fcb74e31507271deb64437350274b8d","sha512":"5e993defeb28e2a1332a02a017fd096a2b5a5d7d9d5294959e5bd8da51ccdf6b5bbc1b568126a89c350c43029d0e43da49fe14d47f85c6f2e45e87eb2d28e455","ssdeep":"768:r9ukWoIxmQnMtkdq0wReJL2N29X+bbzkoWy2ptCC8m5e5mFLEVy3:r9u7xmxtkAzReJiFbE42bCC8ceUFLEVQ","tlshash":"1f03022fc4b1f3e9a0d05cb96a3733d9e8ef1654318bb75138ae1ee5f8d69061209135","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-06T11:10:14.385622Z","times_seen":572,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/Br_AihZQ.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /Br_AihZQ.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 220536\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-35d78\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlDmobBFczPKq3%2FQovrDynItHc66zM%2FhAYkaxqCZcxOxNvLos5Ne2l%2FHde2ieF60d9kAyqsJ0XXrda674e14HWQpiBD7aZsEY7a86LiyhoTKQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a835cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220536,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 220536, version 1.0","md5":"059d2edeb663a16de959975d5ed21db8","sha1":"3674a0e6fbc086cf109a1b192ef5016d328fdfa5","sha256":"3231b77ee2775dadbaa76de85f95763976aff1091f63a67fa553d727a6edb933","sha512":"fc26a8fb8b2ee58fe21fb45a1812f6ccccfc5f8ed55b4acd49657c9e4de33fbfe0171c01a7a8fd13fc1e4090cc5d003c760054029f76af6004a0dd3462112cec","ssdeep":"3072:2CVJbxBgG+v9LhLHCl1w6xw5WRGJWXyCk3sXEAPV9v8LMEXJOxH81AYRtCjbR2q:2CVJbcGuphjQ1w6NRb144/LvEJVNtQ2q","tlshash":"b6241215f394a434b28f61505f818fa87364fa8185f69fe0b37b45ffabc2a14351a1ca","first_seen":"2023-05-01T11:03:15Z","last_seen":"2026-06-08T15:14:53.528983Z","times_seen":11502,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/Cj4x6tOw.css","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /Cj4x6tOw.css HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yt0UlqrTw1bK7i6b3XR58Co3vP6jNUyOmOAlGFjqzN%2BxtuAqcmwDnxmP5Od1X%2B1EGnVYE8HkPMpW9dNYev1PMeAOp5NzfvFn6r3B2EnBhNVg5A%3D%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69979b0d-55948\"\r\ncf-ray: 9d195f04b8b735cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350536,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bb143924ea0fbf5e3554a5111908b7b0","sha1":"bcf8ffcda124fac421a2eeb3472d229374e9ad9a","sha256":"9ff6980dd590dd2747690e6cb433977ce3cc2373696282502403cad88f20b52f","sha512":"39c46509cc1cebbb169e0cca208606a229b36d8df5edab1fb9358ddb863ef0ab25e260166d6f7c5682f3b4c1fd02bd528fbf34b02dc82c202094b238e2592f36","ssdeep":"6144:snx51ySVfUIm7u0oi2hHLA++/q/hsdCkhlK3SSAEbRFWNOL6lAr4ZcaAWfr/VVDv:sz1ySVspu0oi2pA+BWdCWSPWNOe","tlshash":"7d748d2c6b54003b3ca750f5e198fa5de25b74c1ef3e9ae7fc9212218ac63b29c53614","first_seen":"2026-02-21T20:23:34.009797Z","last_seen":"2026-03-10T18:53:22.565619Z","times_seen":24,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/buK7pfZL.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /buK7pfZL.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 129444\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-1f9a4\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gaUS5sJbdR6oMJCTYIGpGp4CJuqB3oIvBt66Zhg7wXxXN9I7MBGmQh8MBX6iYHmFCGt30NTeTzdRgtSPuLr6TUesBUEw2vykadvCxkH0NvG5QA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a635cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129444,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 129444, version 1.0","md5":"b2e733757662a0d8b383e377ee003a7f","sha1":"52e1515ffe06aa6a5db4b076aad8f00e458c3395","sha256":"95b944a1ab5d3c97494ba663f7fb41bd59e21dbd99874b2bc769f04d5e7e8baa","sha512":"31473ca65355eb7b3f48b4e6b8ca59f27e1aa902c54e94a7309bc2730bfcc408ba06463d063f139b2fa77d56dfb5bed0c85de60e4ce4209ee4b345161903539a","ssdeep":"1536:Bglnc+PU69ZpY4h8xAg6WNCGREedQZslZ2uwO8vdH7zScHChq+nDxbcxCBNz2XDK:Boc/69Z+4h8kGREHuwnVH7nChHiNTK","tlshash":"2ac31215b101de01f6077e3d0edf46aa8a5a6755f3223a816efa7d4096c84dac9c0e2e","first_seen":"2024-10-29T09:00:47.545675Z","last_seen":"2026-06-08T07:58:55.825424Z","times_seen":308,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/DDTFSkjA.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /DDTFSkjA.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 234260\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-39314\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvxRppEPPcFZY2Yg9ohlwXp%2FSrTfi4G8yxspfkN0rQhSECrMHlH5cbUoxwAJ25dG1tU5dL8KmALp27mBq6xABVlVX2G3K9Mi5J%2BHTxw3Am8lCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a935cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234260,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 234260, version 1.0","md5":"b37ecd8895b373064f6e8630804f08aa","sha1":"f2bfb2774a6294a641973b2920a9b2d7b2d863c9","sha256":"7b0041c48ba67087fcf5f6e8ec8d24e95db06cae9bf78c45b4542984bcb7208c","sha512":"5732de86b7022db347749e010e64a6b5a771cdd4d81d03f20593268028455cb2ea2b4047566cc742a00106584f7584bd7d5a79bad7fab09292c8dea4493542b3","ssdeep":"6144:e1+WZBHan60UAryv9uqI7l/i2c43oOBODy9HgW69FOdns:YRZdAr6PI7Zcm7Omlr69FOs","tlshash":"6234231774803114faaa7505df798a9a45835dfdccd0ca7cc8b6203cbe6b6d9e486c2e","first_seen":"2023-05-01T11:03:15Z","last_seen":"2026-06-08T15:14:53.520285Z","times_seen":11016,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/BCq1pqtM.ico","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BCq1pqtM.ico HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kBYOz36aUFf71Tq6kSiapfJXTfvZ4Mge4Ro2IHRllApl%2FWmz2kx4RXRnlfkEmPq5ssR8d61hQ3WuFHbrwg%2FsEsf7i49SHoW%2BdelZ03JOTjOWAA%3D%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69979b0d-3c2e\"\r\ncf-ray: 9d195f04b8b035cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"674b1050f47ba36f4b216c17f9fbf3b1","sha1":"c34cbe2d9fb02cac4364e4b66bf48539bde90b04","sha256":"60d78140b71f9fbb5bba3e591265f8ccf109ddd6cffca6ea72f15141864131b2","sha512":"b7746c5d8480450cff6cfbf4c6ddf96cb1a6c114847557ab44ffbdded3ea37d2e143b3e8d563314f693951e9e8b703aa21f7dca52a38c8fdba186136aab89b90","ssdeep":"48:rLUmYeexS5Gd1C97DUPrjwfQRu/PIqvcgveoz7:rAte0S5GaUzcf5HzB","tlshash":"a6626496a30811b0e79c6e32005d1dca87673f669e0470d93c06b2a7fbbf4d66125b57","first_seen":"2025-06-07T16:15:15.295101Z","last_seen":"2026-06-08T13:05:34.121687Z","times_seen":212,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/D0WpdhMO.js","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:02.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /D0WpdhMO.js HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/Dql2va_O.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:02 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0ROI4hie7%2FBAIXng908OSH%2BfAxCK943bBmLxF1t4F4IwC6syKGWSHs0bmQHdfvAI1vUVoXPfKn44bJqQWgrBe9FvvuBIK4qHWEQ%2FpFI8mTkog%3D%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69979b0d-32a3a\"\r\ncf-ray: 9d195f0b195e35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"0d2905db6c948c42b76287c689b83b93","sha1":"4b4a2f325ad96e7e1c34f1a8cdd7b8b2edee0e75","sha256":"c68a8692a02c66bdf6c4effc39ec66733fa42ffa4079662e284127a02d851928","sha512":"3d7caad90677fd4e93c291ea8fb8f2f33a271a694b81eb09aca7bf416cc2c464078c0aceb0617e8aa7ad189892b9771f1e12a2ceb5909b4cedfbba98f3210bed","ssdeep":"1536:XfsA33vGMRWi+72Hvv0aqqLkPOXSaQ8s8xPgyRTCAegnse+P2nQy+iJWUoQ/2w0w:X13uMwSHfkqSz8s8x7jjorwrKT25V","tlshash":"d6145bec31aab6659bf352b5407f1007733929176c4c8860a210fdda7ab944990bbffd","first_seen":"2026-02-21T20:23:33.983807Z","last_seen":"2026-03-10T18:53:22.559763Z","times_seen":24,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/Cx55tMiv.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /Cx55tMiv.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 128176\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-1f4b0\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ongAZd1qp5Wj2aLb37Gud%2BaiD%2BogjPaF%2FaKTtMNkLRdtg%2FBcFNYpYbmF9PSJk5EgBbm%2BaMHyCMw5CmAM7QFMeWDkvtC%2BtbyMfY0Af6Oc%2FDt%2FRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a435cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128176,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 128176, version 1.0","md5":"a1314e64fe46e52978b337778dc72a97","sha1":"755e12623cab1029f43c612cd667c6454c451324","sha256":"b9e9da8a052106c277f0f325a1d053034137ad73cded1bf4234ada000cb05a1c","sha512":"82c06aac61901944d95deb9c0c5910f375884fdb3e34a2d2e87e0294b0470c8ffe18917bc4aacec7e12e6fb95544acfe78c4a479dd06dbf44cbf5a1e72a7ecb1","ssdeep":"3072:CQULIX/aCpQtl3v19g9QvvoM6fOZ6PKfhOQ9af3zM67yN89r0:nLPxStFvtn/bfhXk3zM67U8K","tlshash":"75c31253f3a69ba88894cf0325bea70bc5fc1be3e94c5151109e185e4dc7b6ac6f191c","first_seen":"2024-10-02T18:17:27Z","last_seen":"2026-04-02T14:17:18.869187Z","times_seen":104,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/ByWvSc4G.ttf","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /ByWvSc4G.ttf HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 154192\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-25a50\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rVYO0AbMw%2FMt0oTJ0%2FHM0aeq3xMDj6WKDdMJLwuB%2BjUPu0soogUbkVmvSO3qsw%2FraysaFNFKfyALyEI6Me3hImRzB0yFYj3GFlUBE6oxnKsAUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04b8ad35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154192,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 19 tables, 1st \"BASE\", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.�Version 3.001FontEuclid is a tra","md5":"d5aac9e768d285a459e8b4ea0ff490bf","sha1":"4347a5a09e8e4014ec4a13634f20fafeb1c7b6c0","sha256":"08b11e464af41dc1764715793aee5078e632b68606feb061b996f3ff8be7401c","sha512":"6a6b821b346032021d4170d642dc0595933f4d4649590dddc7f4d90ca831924a5c4da5891fbc7c00fce9c22b90dacb589bb0029b2acbc408565dd1b7f31b5018","ssdeep":"3072:x90EsTtZRgffc3pLn1dtNtMcO4ezRwX6Q/Jg:xLAtZRgHMfjdX6Q/i","tlshash":"0ce3e747beef6907f3565eba8de1c6f50271b40aef7229063ca68610cacf1405e53b94","first_seen":"2023-04-11T20:16:04Z","last_seen":"2026-06-05T19:10:18.899132Z","times_seen":518,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/BjPbPCEJ.js","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:02.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BjPbPCEJ.js HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/Dql2va_O.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:02 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vm77e8OK%2Ff88ahLhAjM4oN1WpUnkutgGi4D%2BN8UJdISb4j4igqddCi9wGGCECWjifxPIm1C%2Fu%2BgV5EMScFQGHDq4GiBTmT61YnnmznT7P4hzuA%3D%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69979b0d-59c3d\"\r\ncf-ray: 9d195f0b195f35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c84c21d05dddcd0385aeb9d5dd1c316f","sha1":"4f3a592d6e53297d1625e492b6fa99c8a65f6a62","sha256":"5b82690456f5093ba19df62add877e4d3e67c1b3d1924eb968969fa08d4ae3ca","sha512":"3a2000ee26afe6e0457c9a36ad046d4eb762d53a10c845ff1cf783db900a6124f68f50e9e820fed4da72d299c2d94ee33842bb1ce709de92e7ef4453e3bd1444","ssdeep":"6144:4tw38Zu6BSn5NuwLtzi0yCwmGftyHNU2HZHCklyZp:6wYukSnv20yCwmGftytnHEklC","tlshash":"e574f506099c4e7583ed12e000f72cc561794d06e9cc3cbfb9ada19b9d25bd6e0d2bad","first_seen":"2026-02-21T20:27:57.401173Z","last_seen":"2026-03-10T18:53:22.549979Z","times_seen":23,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T21:35:01.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lxxlYI6GiPmElbvQXofEmnIE8A%2F48TvruZeIr30NwPQ54nZmaqUq%2B42sfpgLuhVoIuU%2Bs5QPn%2BRQQL1TbILjk8LNXndKG72aE3AEjcMAWxDWNg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9d195f035e76e9c1-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1772,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f85f80c408c2aae628ee323666ad88e0","sha1":"5ebd5889f30b3d94e279a855cbf730dae080716b","sha256":"2e32b9e0f8f17a12e21779e8e9085dd0d95e9e24bd8b82c8ebddae91db9fbccb","sha512":"66d4d2fb107c146227c9125d388882a08669dd9e7406732d2ced92cd32319c6e42a450dcf993af9cb35c7d44daeec13194053f1c8792e87b2c56bbf3149ebdd6","ssdeep":"","tlshash":"8831282431acc9ae92210b197ec5b475eecdf7475d4dd4a0e0b764bf4f007a28ea381a","first_seen":"2026-02-21T20:23:34.024959Z","last_seen":"2026-03-10T18:53:22.52011Z","times_seen":27,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":45,"dns":17,"connect":8,"send":0,"wait":43,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:wght@300..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:02.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Rubik:wght@300..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 21:35:02 GMT\r\ndate: Sat, 21 Feb 2026 21:35:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2650,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"78910000f244cb7673b66e0173403bf0","sha1":"f903e44c009cd318b901b0aadd8d4ef1ebc2d084","sha256":"10fbd330ddcafd1e746210c481888bdf7a6807537fc5a0c979c41832036ae11c","sha512":"7c6f474938af6ad137c77098bbe3d94b325dbb5a5bafc7ae8c3bec7325df833faea77f595ef17de69b2a4dec0359fb9692892260d013ad0d560317cce52d8516","ssdeep":"","tlshash":"5351cbe4481a4044bf472c8163ce6d27ed0e62553490c66d9ffd0a9aacabc2233617ce","first_seen":"2025-09-14T11:43:42.937288Z","last_seen":"2026-06-02T03:15:40.308422Z","times_seen":229,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":97,"dns":1,"connect":21,"send":0,"wait":36,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/D-AGEC5i.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /D-AGEC5i.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 160460\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-272cc\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A6ScBtbCm2%2By6GUrfBawjEjkfCnDZl1Rg%2FtevAw%2BHWv7BYfyayXCnC8%2BD%2BB2fYn3PHbrgSBUxaKnR4SJc2nadjS3xancB605p%2F7Hsil5JkJxeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a535cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160460,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 160460, version 1.0","md5":"a2a3093b921a74c8fe0971b9cb510366","sha1":"4332214bc091bfb45ff88fa8527b50fb5d08e044","sha256":"92721eca0225b378076085a2969b03744fc5513e428198f34e7a98edbcdfb464","sha512":"c8034bc47632bca741e81afe5b7a77839e24e294493ad4567398c1f2df2b820df1faf858c7f40a846f4964d67bc05207d7235ca04b72d28403d83878f45b102b","ssdeep":"3072:dfstH4wOP6DylGeiX9Xl0Kv6bKB94jH2kiCZ1KzF/8BCICIQa6+qI2:WH4wOP6DDt9l34jpiCZ1KZUMVb7I2","tlshash":"d1f31244519a37c7c7ade280c932d831ee10df1364f674aa9fc279208a939e5257f72d","first_seen":"2024-12-11T12:29:07.672509Z","last_seen":"2026-04-02T14:17:18.859749Z","times_seen":127,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/CjQdXzIP.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /CjQdXzIP.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 129484\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-1f9cc\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnXYR5cYG0nxhYFO9G22NltPkLuR69J2f5C5uTUqd85isEHgMMYiimBRYM4u6BQYtsOfNLC8UEwddReZUPHV6WqwaPwWyshtT1IHgrGna3MdAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a735cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129484,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 129484, version 1.0","md5":"5071d158eb5ba0431b8922015ed930c6","sha1":"46a034ed9ff3728e11dc64a0c9940d552daf6083","sha256":"93c70675bf7a740fb2b357e085c31de4e1adcf2b6a636135aad9cf1d65d93b53","sha512":"6018008b75be892b1fc4609ca91b70357a756e93832b9327ce30a78c091fbca3bc43b14eb5555befc1268098e2e3641a59bb89eae61a82e2de149b4a833b2eab","ssdeep":"3072:GG0TPZl6kKpGuhPvj1xO1V7s7DHpMjbGnFRsLEekloxzlxlJy5yKat:IPZwGkvj7p7GbGnFRs4boxzPl5t","tlshash":"6cc312deb524a70da96e44ba508b47a30ff54212d2fe81b67f019cd37b12de3904e762","first_seen":"2024-10-26T16:56:26.218198Z","last_seen":"2026-06-08T15:14:53.536222Z","times_seen":10140,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/BFLONdRO.ttf","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BFLONdRO.ttf HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 16672\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-4120\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rz%2FVDoNBGGaYfdeUuhKMCmZFJvSHqACB6din%2FAWAVr3S%2BpcvD4zYUtIfJawmMbrFFtRpbLd593m4tYTtZy%2F8BIJyl5GX5V5WZMXmSshLMaaflQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8aa35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16672,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh, Copyright (c) 2018, Gurpreet Kaur Balgir1shared-iconsiconsFontForge 2.0 : shared-icons : 23-7-20","md5":"e48c756b6037d6d7ec88e3e75f2f0e83","sha1":"7822fdf8e0e11f419930f413e2b9766284543eb5","sha256":"7b28292cd7fb89caf6051ad0eb4e464c1ea4f83062842aa95cc697152a135d48","sha512":"04ad2c880de12140fdfbf1b2e863724098a2f335683b1089305e405bf5c9c8d38249b7f111779de9c716b93da0d5e1a3bd34b85769c1e05db32c7d878588228d","ssdeep":"384:1E4VocGSRB1aWsGHjQjlIhNvkiiNfLbV91aA7YkLK:1DZvaWs1ja1kiefLLoA7BLK","tlshash":"e6726d52e727c1cef15a4eba08568aebcf368701b62363d7f6432e1a95570d00eb3b15","first_seen":"2023-04-14T16:55:58Z","last_seen":"2026-05-28T13:05:57.872183Z","times_seen":439,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/BhTihOWf.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BhTihOWf.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 37128\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-9108\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2CaJcn1%2BAlLg5%2Fu162T5XnbT%2FdCLjTlsvQY1w3Y1DOapYBJvFl4OhRpQCMdHEnnPiT7Y8FY%2F4SEzygt8ZUqohK%2FgSiPdsQ3B3eoD6qBbwyQHhg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04b8ab35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37128,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 37128, version 1.0","md5":"edf0df2d1378e39073417bbc91f42470","sha1":"30682c17381e680f233d075ebc18291649ddf432","sha256":"bb9f64211722a2e83aa7a86bc01f8cf2449a984873f1514d49d7e66df897f3f9","sha512":"38e6c50b7a8089496c8201baf87b17b1b61f4a8a3cb4e4d3e960fa211dba764d179fad585da7d608a4a7fc000873da94d7383da6a3f7c6d49bdabf4a49ccacaa","ssdeep":"768:SBX/M0n5OmDBOu79k79j8ZYs/3gC4vXgX+ZTBRxkdiv3h0Ha4u:8PM05OKE7CZBvgC44mbkM3+aL","tlshash":"53f2f222fbb87c8b8006a7c5ceb3391bcab4042ad9af1d43ff3b6558171c549187d2a4","first_seen":"2024-08-19T15:19:59.825193Z","last_seen":"2026-05-28T12:41:18.805733Z","times_seen":192,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/GSjGHIWL.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /GSjGHIWL.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 36956\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-905c\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fx3TBPLDCsZcsA%2FHHeKQrRoksS3zBjc1B96TryMg2ra4DsK1vKWyGf7Gz467gquuuEffrvou7aaMuyL3zQag%2B28uvg4dkgtooQV4R5HX%2Fu4PFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04b8ac35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36956,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 36956, version 1.0","md5":"8b52afb321221a790f038d2c160a9f05","sha1":"1d48477f01daa3f6a79c3107d896e099e569de97","sha256":"2d797ad69240551e7ab710bbbc14a9598a9cd4f61b5b280789aec834dbb740fc","sha512":"85ba77f242018cfade55d2fd163cdf4998dcccdffc112340aad7a3c7b9b1c39b5bdc8db916b25e67a0d6c719aa7c7c24cf7903468d16d4f552322fce76160a65","ssdeep":"768:sKAfNwqj/q2HHsTH27wh26J7siRmB5VRFzi1AEUcoSsht59vyoghqfk:sdvgW8g6J7LUFW1GS2t59vtcr","tlshash":"def2f21ba180e731ef8c66d12d78404ec0786a1af502b1cec6f6f21a457900fa2b1bd5","first_seen":"2024-08-19T15:19:59.826011Z","last_seen":"2026-05-28T12:41:18.850041Z","times_seen":192,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:02.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:opsz,wght@14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 21:35:02 GMT\r\ndate: Sat, 21 Feb 2026 21:35:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2436,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c9029b9be7fdbe03f05037ced4f6e0a9","sha1":"7db0cbaefa01daa5d610eb32b72d6465ca756b26","sha256":"cd4aee9022eea9f99866bb02f849a83354973786f0a4db6457ab1f4c3d38f8e6","sha512":"80cc884b7c66a1f585854f617a10cf591a0c0bd8b0eb5e9696b655b7b74d12df2ec06ff9bcd6c73a02febadff3432e347d43b17ccaabd141a5d1ebbe93ba7bff","ssdeep":"","tlshash":"3141ac91006be504af431cda23df7e325d8e15466082d67eaffe1cc55cead22432878d","first_seen":"2025-09-12T02:44:04.635127Z","last_seen":"2026-06-08T17:29:57.883248Z","times_seen":1661,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":124,"dns":1,"connect":23,"send":0,"wait":32,"receive":0,"ssl":112},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/D0WpdhMO.js","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:03.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /D0WpdhMO.js HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://345934coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BV0wXbD%2Fm9rEUuIaJ24sCvtWljqSgUkJq0o7%2Fa8tPgg8Pfm5AhqkE%2FHKplTSUuCnLHVEbJRwCFpTmEAWn1Z5M50j8ir8IzF%2FMgeBzI7TgJLKA%3D%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4055\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69979b0d-32a3a\"\r\ncf-ray: 9d195f0c498d35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"0d2905db6c948c42b76287c689b83b93","sha1":"4b4a2f325ad96e7e1c34f1a8cdd7b8b2edee0e75","sha256":"c68a8692a02c66bdf6c4effc39ec66733fa42ffa4079662e284127a02d851928","sha512":"3d7caad90677fd4e93c291ea8fb8f2f33a271a694b81eb09aca7bf416cc2c464078c0aceb0617e8aa7ad189892b9771f1e12a2ceb5909b4cedfbba98f3210bed","ssdeep":"1536:XfsA33vGMRWi+72Hvv0aqqLkPOXSaQ8s8xPgyRTCAegnse+P2nQy+iJWUoQ/2w0w:X13uMwSHfkqSz8s8x7jjorwrKT25V","tlshash":"d6145bec31aab6659bf352b5407f1007733929176c4c8860a210fdda7ab944990bbffd","first_seen":"2026-02-21T20:23:33.983807Z","last_seen":"2026-03-10T18:53:22.559763Z","times_seen":24,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/CH-aRrrD.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /CH-aRrrD.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40016\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-9c50\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PKwZ9PiYIb0%2BYGKsvmHQ0PdqtYScVE7Y%2BMtFigvlmGaz7bGzJRiotuyLyYSsk671RsmC7E1qMKoV0H0g46dSEUJ85v5CFgcv1WbBKthP%2BryKmw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a8a135cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40016,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40016, version 1.2097","md5":"b54c6aeed882bdf66df4e5fac9c2340e","sha1":"b483fbe25190262b648b390c11e6bdf9fea33edb","sha256":"81368223143520415fe7fbdc3792d2d52ad7e422d8b214661ff932afe577b779","sha512":"3afc93e98b6a5a756a0e0adfc5d04da8258cbf9065fe4a90673d3193baefce1fb9867fc235dd953a4dce5a2b033b3d1f4280f20270db913baa0f72a3a73bf804","ssdeep":"768:acqYNePjaM2LJWNjCEa18ryDLCIZJFxucAMXM9tcrYecoNj46FSc3Xy6mjLk:a2NePjaMG3CIVxu3cMj1ebx4aSc3Xnm0","tlshash":"8603f1e3a36799e3dfaf54a575c21eac1a1044d765a3afa9d5f2024730d2d0d54031ec","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-08T16:54:29.987327Z","times_seen":1454,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/Dql2va_O.js","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /Dql2va_O.js HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlZOOrvk%2FuQff2sWOuggngX0SecUJfneP6VujZ0I7BWhPiKFuUzkrRf%2FDB8Cit1L19866mda6kajzKNGzsl0aK4K4Ma%2FyNSd%2FinFPLtorz6zRQ%3D%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69979b0d-4e4e30\"\r\ncf-ray: 9d195f04b8b135cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5131824,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (36506)","md5":"3a7e9436ae2132501fce34d9cb65e613","sha1":"d49c9a085aa0a0d979eeb92730d1dd232acd2157","sha256":"6d83723f7954205afcc782194ef76bce70cd15e5fcf03d14fe4723e735ccea27","sha512":"717a7da3f832b5c2a13f492e5bdbd8e1578203c6ec5ae48dd524cf1c6074c9100bdca0ea84968e5d8f6d7f2cd6e95528d18fea95eb58b863a852d2bd05c9003c","ssdeep":"24576:YoNeV2GHkRxMuu+83HooPs2fSb63bJ2DXyLR:kRuu+83HooU2fSbOV","tlshash":"30256d8c76d17c8197636cd60d3f2087b8ef7ac1b409e9c5d1a8a4e63da2708b05bf59","first_seen":"2026-02-21T20:23:33.992666Z","last_seen":"2026-03-10T18:53:22.522031Z","times_seen":24,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:02.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 21:35:02 GMT\r\ndate: Sat, 21 Feb 2026 21:35:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5621,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"24f442962425bb037a30e74e1baff1d1","sha1":"00dd4cda3c115278908efc6deb9f9e0acb7aefc7","sha256":"eab4455c5cfa26ea87d45e54f8ec8d5909c88a80588cee8a4f98b28dd538c979","sha512":"4cbdce4ea3bb84b4f4cd118d8ced61e7dc9efbd743cce75ed1e76d9895d6f98bab06b34aa1b48f395231c9b1f7dc3e54cde25e4121efe7d609b5cbc4538f9cc9","ssdeep":"96:1O4baN9flO4baN9lFZKO4baN93O4baN9fTO4baN9/y+aZjzBrgO4baN90ubqGIF6:6N9fKN9DN9MN9fgN9/qnN9DbqGIwV49S","tlshash":"3fc1fc91041704049b838ce223cebf35fe1e92116142d1b5abfdab6b9ddbca6426935d","first_seen":"2026-02-20T06:09:43.867981Z","last_seen":"2026-06-08T11:08:53.6388Z","times_seen":409,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":93,"dns":1,"connect":26,"send":0,"wait":39,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/BDyAm2xz.woff2","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BDyAm2xz.woff2 HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 40632\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-9eb8\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OOs0EF%2B36YRCLqYtgNiwGYkgkHSI3H1feV%2BTKEhJcrZ48kYSp4qDGQZrkgPAAUwWjyfNJzqLtI3vghxEenXKn4IoM0kbzgq0vDw7fvZ2bejhZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04a89f35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40632,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40632, version 1.2097","md5":"62bf1b795c1ad225811afd9715abdc90","sha1":"0ddcce99464162ee676d81ac4bba9dcb001aa40f","sha256":"881387e5619f45f03a99e2fa88a752237343c0bef2414425c3219031653ce45f","sha512":"f59286ca8381ea5f1c29ce03b2d6baf862adb0c0b124dcfd9363fbe214da7e739f86c863a104f3b37942359c45a9a039d6b759c3f47a9745f7caa489ac2cecaa","ssdeep":"768:7ULSNCQzC5hiA5z9A2Y76nwuLRhVGviFiqSbi7cpR:j0iAZO2nwuswiEM","tlshash":"c703f1c427b02afe5e86347ab4c351497bea1814914b8b79405546feb07eca157abc33","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-06T11:10:14.386568Z","times_seen":402,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/CkIEMcBJ.png","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /CkIEMcBJ.png HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 36761\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=4,i=?0\r\netag: \"69979b0d-8f99\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teXyPj983SOvDL%2BwyfgjsNeqgPqTUm1uvtwpAeNpTd3%2F1s4qCXZfBsu8wPQGDK3aYG4BynHIEAdT%2BE5IgxP1Vr1uofMHUq09iiNNPb%2BDw0%2BPAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04b8af35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36761,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2764x1728, components 3","md5":"aae0cc48aa1bb22416d9b96657db2e30","sha1":"c72f013154118379b9f1058882340f0a322dbca1","sha256":"206c4664728867aba763af35d0485c028c15a8e2ce42881dbd1f59ba3a72aab8","sha512":"1031757f8017be6dadd6c3b727bada97a98c69840c5c9f8e0f59e0b5d9a028dcf28ed98528712eb0a138ddc4ae965154ec1049d9523f6b2769a79cb3d3133fea","ssdeep":"384:mODiomgfxi8MKP1/c8sh7owPEkS1hb299nA4hzScBJTZNTfSsPfynPzhfB75DtzL:mMZL9K8stskSWDjBJtN7Szbhp76JC","tlshash":"aff21763bb44a667d08c277188c7072a3f661d72825e41539b8989345abe3b53c8f7d2","first_seen":"2025-01-06T05:04:50.57995Z","last_seen":"2026-04-02T14:17:18.852401Z","times_seen":93,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Barlow:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:02.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Barlow:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 21:35:02 GMT\r\ndate: Sat, 21 Feb 2026 21:35:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4920,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a224f9d607796510da71f344d5470aa3","sha1":"4fd2b4bf225290ce12df7f6ec1364dd746e9cf49","sha256":"2e20b108ce5c6818d39f96fc6b8973d1f1f2d4efa028d32b161477bbfc257222","sha512":"3a08374b3d9862f505b82d4b88ee8821822ae018fe8b58cfb3675d1639b3cc5a32c47d6f020ff7c7b7b19077a4935791f184c3d940895c30c7c6a559b6a66394","ssdeep":"96:cWOEasOEarJc+uyOEaKNDWOXatfOXatnJc+uyOXatWNDWOxMat3OxMatfJc+uyOj:chDvkWyVlL4Pslu4ID1tb","tlshash":"0aa1ed92046bb100eb970cd223ce7e36ed5e62617444d57a7ffe1888ecaad252325b0d","first_seen":"2025-09-22T06:39:47.316961Z","last_seen":"2026-06-05T19:09:34.179808Z","times_seen":165,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":93,"dns":0,"connect":27,"send":0,"wait":38,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/BjPbPCEJ.js","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:03.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /BjPbPCEJ.js HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://345934coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:03 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wc%2FKtw452fuzuPVZ0gJ5ihaDH8%2BYGBMMBeSLORbco%2FxFU7x4L4TDriu6%2BpDp%2FXymeFTUEN%2Bk%2BpMQ6PJUs%2FxRebCkwhkGXeVQMYPBoeb0o2b6ug%3D%3D\"}]}\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4055\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"69979b0d-59c3d\"\r\ncf-ray: 9d195f0c498e35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367677,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c84c21d05dddcd0385aeb9d5dd1c316f","sha1":"4f3a592d6e53297d1625e492b6fa99c8a65f6a62","sha256":"5b82690456f5093ba19df62add877e4d3e67c1b3d1924eb968969fa08d4ae3ca","sha512":"3a2000ee26afe6e0457c9a36ad046d4eb762d53a10c845ff1cf783db900a6124f68f50e9e820fed4da72d299c2d94ee33842bb1ce709de92e7ef4453e3bd1444","ssdeep":"6144:4tw38Zu6BSn5NuwLtzi0yCwmGftyHNU2HZHCklyZp:6wYukSnv20yCwmGftytnHEklC","tlshash":"e574f506099c4e7583ed12e000f72cc561794d06e9cc3cbfb9ada19b9d25bd6e0d2bad","first_seen":"2026-02-21T20:27:57.401173Z","last_seen":"2026-03-10T18:53:22.549979Z","times_seen":23,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/favicon.ico","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:03.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:03 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZwMdxnO05cL%2FOjM1vBReL0BX9iu9GRDmnsnNSzf8gb%2BSUCorsF%2BpaLDgSDHnhVi%2BFsQPaiD16FeOW7xn2MO7Ra5cxKe6JSCwzd4lfh6EuCmlA%3D%3D\"}]}\r\ncf-ray: 9d195f104a5035cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1772,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f85f80c408c2aae628ee323666ad88e0","sha1":"5ebd5889f30b3d94e279a855cbf730dae080716b","sha256":"2e32b9e0f8f17a12e21779e8e9085dd0d95e9e24bd8b82c8ebddae91db9fbccb","sha512":"66d4d2fb107c146227c9125d388882a08669dd9e7406732d2ced92cd32319c6e42a450dcf993af9cb35c7d44daeec13194053f1c8792e87b2c56bbf3149ebdd6","ssdeep":"","tlshash":"8831282431acc9ae92210b197ec5b475eecdf7475d4dd4a0e0b764bf4f007a28ea381a","first_seen":"2026-02-21T20:23:34.024959Z","last_seen":"2026-03-10T18:53:22.52011Z","times_seen":27,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"345934coinbase.com/DSa3cfOr.ttf","fqdn":"345934coinbase.com","domain":"345934coinbase.com","tld":"com"},"ip":{"addr":"104.21.48.184","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:01.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"345934coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 19:23:56 GMT","end":"Tue, 19 May 2026 19:23:55 GMT"},"fingerprint":{"sha1":"E0:A5:21:E8:61:C0:28:85:58:FA:7D:9C:8B:EF:65:AF:54:B8:67:EE","sha256":"E6:D6:9D:53:09:E9:6D:E9:F3:D1:76:3F:DC:27:69:8B:7D:93:2F:8C:43:22:8B:0D:86:8F:67:3A:17:2A:90:63"}}},"request":{"raw":"GET /DSa3cfOr.ttf HTTP/1.1\r\nHost: 345934coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 21 Feb 2026 21:35:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 150928\r\nlast-modified: Thu, 19 Feb 2026 23:21:49 GMT\r\npriority: u=2,i=?0\r\netag: \"69979b0d-24d90\"\r\naccept-ranges: bytes\r\nage: 4054\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1JPCgjqQ7PAwMaILpQ7MJfGdanK%2BLsmvlmIGXGB1wLtXUBwdL0NQ15f1TS3MvClCJgTPRv2mTYl4VPLEQ3dhSzKWNeD2LyYyqfmiPfsFZnU5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d195f04b8ae35cc-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150928,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 19 tables, 1st \"BASE\", 16 names, Macintosh, language 0x2, type 1 string, otCopyright (c) 2018 Swiss Typefaces Sarl. All rights reserved.�Version 3.001FontEuclid is a tra","md5":"cd393be20accd12b36efefde5bb590db","sha1":"df1ac0dc8cc96d6ef9f5be99fa7addf30984dbd8","sha256":"df4f17393abc2d0e8ea15d6b55644cfdee10d34445d6c26204f427554f3754de","sha512":"60f626dcf0f0fcf0865e82168f6b4cd1a1f9012def179b8e0d4e6bfeb9a1bab148c3c9a19f8893babafbe2d9a482364db78670d0db7efa8d2001d743df922613","ssdeep":"1536:TfKjbaUGS+oLMrCz0IqHX+Z9AtiT1pS0+3ntrhrYCy91H1a4m6PNFSiihNyAqZTt:HoLyXTAHX3/8hDqZuoz","tlshash":"90e3c547f9fb2907f3561efa8de9d6b50231b41bef72260a7c548a10d6cf2409e43a94","first_seen":"2023-05-22T07:41:24Z","last_seen":"2026-05-13T17:52:44.97205Z","times_seen":438,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"345934coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=IBM+Plex+Sans:wght@100..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://345934coinbase.com/","date":"2026-02-21T21:35:02.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=IBM+Plex+Sans:wght@100..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://345934coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 21 Feb 2026 21:35:02 GMT\r\ndate: Sat, 21 Feb 2026 21:35:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2563,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5836c78f48d3f3249fb37214707c6f46","sha1":"dd15d50de5f1671b4e4a7245b92740e51b6d95a6","sha256":"846bbee599bd0f909e85cd7cb2aafb40e38447d2868e0864d46c356479119d50","sha512":"480fdb6cc3a8430517f632922ccf2d4b8d5371b4b8090f8a046de0cf8f0e24eafbb973ebf7d3cf9dfdb122f753e8132eb4a21c6d926395c51e42f83c98c132b1","ssdeep":"","tlshash":"ba51ec54806a6480a6031cd233cf3e739d5ea4503445e6bd6ffe6d749cabe366261b0c","first_seen":"2025-10-08T23:47:36.151798Z","last_seen":"2026-05-30T06:23:07.161981Z","times_seen":95,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":97,"dns":1,"connect":23,"send":0,"wait":38,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}