{"report_id":"b1c76079-46a4-4999-a42a-0449d94930ff","version":6,"status":"done","tags":[],"date":"2026-02-13T21:35:47Z","url":{"schema":"https","addr":"bingwucoins.xyz/","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bingwucoins.xyz/","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"title":"Bing Wu 丙午 - Year of the Fire Horse","dom":{"size":16984,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (642)","md5":"1f6a945fc568bcdfafa782c72ad15ed3","sha1":"1308ec0f37a7c8d75f90abc99fd3fbb2cbccba2d","sha256":"d38290f074d17fa440a33fe07ad2702dedbc06e18315b361fcf636b2e2a23558","sha512":"998e56be83e60088ea64184de8391787efdcb4224401668bd395b24d72e40e5acdc12aa4df16602a7290346c2f9c03619ece512752a0fe707b330eb37e69d786","ssdeep":"384:Y/lq8BPkBLB4X3v29+4DXgwzwFh1tXjJKN:Y/lN9iLSX3vX4DQwz8T2","tlshash":"a872e66375e071230557c443aa6163ae3621e86bcd1b438576bf87a44fcbee29f9390c","dom_hash":"domhash580394f2815e9c8a183b1280d1890f67","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bingwucoins.xyz/","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"172.67.181.220","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T21:35:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"ext.same-assets.com","ip":{"addr":"172.67.180.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-13","domain_rank":0,"first_seen":"2025-03-18T08:10:55.085553Z","last_seen":"2026-02-11T15:01:24.185782Z","alert_count":0,"request_count":3,"received_data":330156,"sent_data":1485,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bingwucoins.xyz","ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":10,"request_count":5,"received_data":1083547,"sent_data":2411,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":4924,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":4,"received_data":99722,"sent_data":2160,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bingwucoins.xyz/sweetalert.advanced.cjs.js","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1356a55a1990c354cc95968f936c6b57","sha1":"4f1d6652d533e2178770d07a0e02453f2fcd8dcf","sha256":"099e2f986610b279a13fac206df140fc2895c89e9c691235d08ae3774ffdeea1","sha512":"9d3be83f35cc491a1b4d8cfce66744c427a797e915f380826997eeb22066182a8d9c83387a8a47870a1e5261fa94c3e75e85715661f53756c4e58f9e8c385239","ssdeep":"6144:0HHZDoSjoff+LvJNyWPKfHZsSo+T3zzBeQ622a0iZg+zV/3Rg:qHhVvezzBeQ622a0iZg+zV/Bg","tlshash":"8784668b1b87a044cb20a14a64e1a35cfc64d8f7a7c81c46adc1fd56e814e177efe678","size":404051,"data":"","first_seen":"2026-02-02T10:11:27.512469Z","last_seen":"2026-05-27T00:14:39.257192Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz/","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"16c172eadaca6f3903c2624138cb5aff","sha1":"fc12a0e0c8f6b7934adaa82e0d76360f076797fa","sha256":"8fb54cba9a10cfbb574d767756e4bf2ce104583ab2b4fa0f626c3bb2703ee0dc","sha512":"8aa442c614c5717f0a137ae4673724220e72aef78666571cc805398035f5a780a6fb32eae1df6c5502a9f6f85831316bdbb2304d58adea333ef0fc8fe1e16403","ssdeep":"6144:W37XDQYPiXZMLvJNIWPKfHZsS0+TNhZBeQ222a0iZg+zV/lRC:MDDdv+hZBeQ222a0iZg+zV/rC","tlshash":"5584438b1b87a040cb20a14a69e1a35cfd64dcf7a3c81c56adc1fd15e814e177eee978","size":397655,"data":"","first_seen":"2026-02-02T10:11:27.514678Z","last_seen":"2026-05-27T00:14:39.258033Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz/","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b04267f03cf6578893d7ba28a07c0e0e","sha1":"a8b8a91366a6d0735886107a20b6a4ec42a9cc82","sha256":"4cafe2bfe1323daf4cdc5fc7ae9e91908bbe4b445c2a073ac8e3bf48181e9311","sha512":"0c64f6cba807b3d3722c30e36e0a4a0a048ead362ddcfb4b02e9d5b4d693366b432ea7f087e7eec6b465e50bb490c7c4c5f6fe20578425aa200b5773095a0b6d","ssdeep":"","tlshash":"b6f0ab2e3914683a83bb141fe2ef6fd83832009b6841152a312ccd891b24e144bb69be","size":438,"data":"","first_seen":"2026-02-13T03:01:15.84413Z","last_seen":"2026-02-22T19:24:33.804666Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fstyle-loader.advanced.esm.js%3Ft%3D29516975%26u%3DuY7Dvst5jbxSI0m5GDY5NzRhM2Q2MWZjYjk4YzY3NDQyOTkxOabUJfxIZlawYnWKuQ","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-08T13:18:27.600009Z","times_seen":2556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ext.same-assets.com/81743851/291681618.mp4","fqdn":"ext.same-assets.com","domain":"same-assets.com","tld":"com"},"ip":{"addr":"172.67.180.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"86f3a1bf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 03:34:16 GMT","end":"Thu, 02 Apr 2026 04:34:11 GMT"},"fingerprint":{"sha1":"CC:30:3F:32:8B:22:C2:13:6C:E5:E0:11:2B:D0:2B:2B:0E:06:23:22","sha256":"32:0A:6B:1B:FB:A7:00:B3:87:43:57:7D:3A:04:13:B8:83:E9:06:92:BB:17:53:19:05:19:F5:D8:09:E9:0C:37"}}},"request":{"raw":"GET /81743851/291681618.mp4 HTTP/1.1\r\nHost: ext.same-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=4849664-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bingwucoins.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 13 Feb 2026 21:35:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 15061\r\nage: 0\r\netag: \"21b9a37cabb5c63d214c026509df6ad2\"\r\nlast-modified: Sat, 17 Jan 2026 23:07:52 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W5QjaVOcH0YqyqIX3s6bD4coSXCkStj2D3BnKiH4%2FcZBP1ddNrjwVxQs7DXgejRLodeV6Ja7d2FT6Jm0kOXPWM2%2BAW5Q7dIchtfOMRbFucECoXM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 4849664-4864724/4864725\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: 9cd7749ddf9a4651-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15061,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"35dedba0276739870ae9dbcdf9d8ae7f","sha1":"347939213d637d8d010164d75b3d6af6e1999a7b","sha256":"edbbd27ff387752f04c28dafc535490bb79fbd0f48ddac251d9cbf29669462e1","sha512":"d6922a105d235f4ed4ff945104eebe29f0c86be979243f98bf81b738804295d8a589989ea0d9ef7b5f3ab4c8022a6606bc26e99cf2cb166bbe5cce38688267a6","ssdeep":"384:ShWoO3HTHZG+9SLwGoNPJ+zfdCB7+4NZ5L8ZM11FM3TF:+O3zA+BhJ+zK7+QYZGFsTF","tlshash":"d562bfaa73553683c454373a9bc4432437f3d6583b6f0a630aa75b908c917a085b78ce","first_seen":"2026-02-13T03:01:15.80523Z","last_seen":"2026-02-22T19:24:33.79885Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fstyle-loader.advanced.esm.js%3Ft%3D29516975%26u%3DuY7Dvst5jbxSI0m5GDY5NzRhM2Q2MWZjYjk4YzY3NDQyOTkxOabUJfxIZlawYnWKuQ","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bingwucoins.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:52:14 GMT","end":"Sat, 25 Apr 2026 20:50:56 GMT"},"fingerprint":{"sha1":"4A:82:9F:8D:29:AD:45:B4:E3:01:DD:02:94:1C:A9:2A:B8:02:D4:02","sha256":"26:C4:7A:47:CE:11:A6:40:48:DA:14:E4:51:EF:B1:4E:77:C7:97:E8:34:A5:95:A2:B5:68:A9:EF:34:D3:2A:63"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fstyle-loader.advanced.esm.js%3Ft%3D29516975%26u%3DuY7Dvst5jbxSI0m5GDY5NzRhM2Q2MWZjYjk4YzY3NDQyOTkxOabUJfxIZlawYnWKuQ HTTP/1.1\r\nHost: bingwucoins.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bingwucoins.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=style-loader.advanced.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 21:35:26\r\ncdn-edgestorageid: 879\r\ncdn-requestid: a80c09599f83dadf424bc15c1a74ccd4\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qzv0tm9QoASBZWTNDi2EJJKEXJg3GNKgIl09ioE%2B7Z0EZt%2FrnOAvWW7Kwg8E3kxarY0MigNGujCtWyre7mVWTXnwVaVmdXNaDE5%2BA2z%2FMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7749e4b1cc3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-08T13:18:27.600009Z","times_seen":2556,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz/","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T21:35:25.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bingwucoins.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:52:14 GMT","end":"Sat, 25 Apr 2026 20:50:56 GMT"},"fingerprint":{"sha1":"4A:82:9F:8D:29:AD:45:B4:E3:01:DD:02:94:1C:A9:2A:B8:02:D4:02","sha256":"26:C4:7A:47:CE:11:A6:40:48:DA:14:E4:51:EF:B1:4E:77:C7:97:E8:34:A5:95:A2:B5:68:A9:EF:34:D3:2A:63"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bingwucoins.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 21:35:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 20:08:28 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8CkXyXBmdOpIW8cTmPNPeuFqU7%2FPo1SVEkemiI%2B5E1MN9JHqwTCvp5muHGwDXVMacyFVxxAQ635lF0RlBEZ%2BFwj5I1P7tFK4p23rp9IMw%3D%3D\"}]}\r\nage: 90421\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd77497cd8fc0a2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16617,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (636)","md5":"770727aac0d69d0287cc247437b834cd","sha1":"297f004388958507b7977bf3c584f83840afb0d8","sha256":"e0265c7c19e13d0df418aac12b749987843bf16aac29808ce0d737c86d6c61fc","sha512":"ed5f534af32b74e7b7bea5b18afa3981b41f33034ba92e7d2b3a02f891a5f04c4ff418e9fc792075cbe3a43212c64b8f4597ac040c76cfd3f4a5f79753d3c519","ssdeep":"192:i/ShqPyXx/nZTXzo+M+eGsGT8HX3Xggx29+4DXgwzlaFSU1tSGT8uJSQ:i/cq8BpBpB+X3v29+4DXgwzwFh1tX1J5","tlshash":"f972d66371e071230557c443aa6163ae3521e86bcd1b438576af87a84fcbee29fd390c","first_seen":"2026-02-13T03:01:15.82909Z","last_seen":"2026-02-13T21:35:51.53453Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":91,"dns":60,"connect":8,"send":0,"wait":22,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Cinzel:wght@400;700\u0026family=Space+Grotesk:wght@400;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:25.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Cinzel:wght@400;700\u0026family=Space+Grotesk:wght@400;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bingwucoins.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 21:35:25 GMT\r\ndate: Fri, 13 Feb 2026 21:35:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4238,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9a49382a62a1fab183e537f523186dec","sha1":"ddd9aaebd49b152689ec03decf68afa8b7568179","sha256":"b1af210ba7d8e0cbf1f4a7a00d93df1355ae754fb4772647e57d18bdc632a911","sha512":"b6001920d5404b6052204d52e4461dd3d05a0844e59add4439746c0b2dcafdb20ec4bd887ad7e68e4118ac4d3c2e6437c83ed3d529c25e91e4e47343063ea297","ssdeep":"96:mOEaYJc+uaOEa9NTOpaYJc+uaOpa9NDNQOEaHQOEaGJc+uhQOEafNDNQOxMaHQOM:xcMVc1rx/GiZfRG4W","tlshash":"509101d204679100eba35cc226cebe33fe4ea1516444d9386ffe18d8ec9ac325315b2d","first_seen":"2026-02-13T03:01:15.837746Z","last_seen":"2026-02-22T19:24:33.800459Z","times_seen":4,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":94,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz/secureproxy?e=ping_proxy","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:25.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bingwucoins.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:52:14 GMT","end":"Sat, 25 Apr 2026 20:50:56 GMT"},"fingerprint":{"sha1":"4A:82:9F:8D:29:AD:45:B4:E3:01:DD:02:94:1C:A9:2A:B8:02:D4:02","sha256":"26:C4:7A:47:CE:11:A6:40:48:DA:14:E4:51:EF:B1:4E:77:C7:97:E8:34:A5:95:A2:B5:68:A9:EF:34:D3:2A:63"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: bingwucoins.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bingwucoins.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\npriority: u=4,i=?0\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 69223\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 02:21:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVWowesaJIP%2FJ43K%2B4093dsX9hwGydRcAqaGEvVahMlFF0QlXrzR3bM5uSWQiVOOw9iWSSA8bfB%2Fb%2Bho3RnrC00Rp3RYKINgnZt2UIh3yQ%3D%3D\"}]}\r\ncf-ray: 9cd7749afac7c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-08T13:09:33.777887Z","times_seen":8784,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bingwucoins.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 16:32:02 GMT\r\nexpires: Fri, 12 Feb 2027 16:32:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104604\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-08T19:39:48.002838Z","times_seen":18976,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":136,"dns":5,"connect":22,"send":0,"wait":16,"receive":1,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ext.same-assets.com/81743851/291681618.mp4","fqdn":"ext.same-assets.com","domain":"same-assets.com","tld":"com"},"ip":{"addr":"172.67.180.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"86f3a1bf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 03:34:16 GMT","end":"Thu, 02 Apr 2026 04:34:11 GMT"},"fingerprint":{"sha1":"CC:30:3F:32:8B:22:C2:13:6C:E5:E0:11:2B:D0:2B:2B:0E:06:23:22","sha256":"32:0A:6B:1B:FB:A7:00:B3:87:43:57:7D:3A:04:13:B8:83:E9:06:92:BB:17:53:19:05:19:F5:D8:09:E9:0C:37"}}},"request":{"raw":"GET /81743851/291681618.mp4 HTTP/1.1\r\nHost: ext.same-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bingwucoins.xyz/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ndate: Fri, 13 Feb 2026 21:35:26 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 4864725\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"21b9a37cabb5c63d214c026509df6ad2\"\r\nlast-modified: Sat, 17 Jan 2026 23:07:52 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5rM%2FjxF4jyTTIulsJ24vDtt%2FvZsRLpFIeBF5PcdpZ6U%2FxesI0Rk6D7Ven0k2HvoduNXBzVkGg7RVuMtTz9Z%2B6wrE9NjNzI3MW2YKtnfn7dSulo%3D\"}]}\r\ncontent-range: bytes 0-4864724/4864725\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cd7749c1c884651-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":311950,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"70628727cec14241e0d750dcd43b533c","sha1":"bf9b583ede369b8804418d249b7931e6ae240caa","sha256":"b7c192df24caf9f722a21fe77f4a7facb23491a405bc27c5cd58ef20a5f4eeb7","sha512":"26d1fd4658ab33ffddca13bad0af42fa0c1f0651639982bc6f0b41e34a55c2d57b5b8da3c643fd01e9231c78e239fbe5ade37eefeebeb072b7159410dbd72edd","ssdeep":"6144:3LlI1OELn0RK8m4uIlCTXQfsAqOVX4qbL0dDohnMC5kptIYWfWu7Q3uaR3R:7yOmnAbmHIlCTXR8XtL09ohgpqYWOWQN","tlshash":"ca642358704c98516ec93a8164a0d0fa7c4bc256d3623efa9743b734173e6d2af39b72","first_seen":"2026-02-13T21:35:51.546266Z","last_seen":"2026-02-13T21:35:51.546266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":45,"dns":12,"connect":8,"send":0,"wait":237,"receive":31,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz//secureproxy?s=%2Fjmpd%2F","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:27.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bingwucoins.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:52:14 GMT","end":"Sat, 25 Apr 2026 20:50:56 GMT"},"fingerprint":{"sha1":"4A:82:9F:8D:29:AD:45:B4:E3:01:DD:02:94:1C:A9:2A:B8:02:D4:02","sha256":"26:C4:7A:47:CE:11:A6:40:48:DA:14:E4:51:EF:B1:4E:77:C7:97:E8:34:A5:95:A2:B5:68:A9:EF:34:D3:2A:63"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: bingwucoins.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bingwucoins.xyz/\r\ncontent-type: application/json\r\nContent-Length: 2196\r\nOrigin: https://bingwucoins.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2196,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:28 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e1-I49Jv5nyYSFIf4qJSBTZ9ONq9qI\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9998\r\nx-ratelimit-reset: 1771018587786\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/13/2026 21:35:28\r\ncdn-edgestorageid: 879\r\ncdn-requestid: f417f178522902e7945f4a4e586f6dab\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LtrwRHUCeqUCQb5UXZEczEihRNMkensPuIF%2FP01unJkMZap0w60KYomH50NefL5qaNIroj0MeUJkj%2FrOmKoqJsj4h9nfIWyKQMtBIcGgBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd774a5abe4c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":225,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"faf5acc6aea8c640dccb326593b0c137","sha1":"238f49bf99f26121487f8a894814d9f4e36af6a2","sha256":"6c25dd583335fadeef725a34c97901f9e882041c5be1a1d22a32b1e56438f0ac","sha512":"5c8f17b70e8811e6269ba8917d2e28f0714d788a9b6c24444783a0671fa3135b046463521f3d3a329b877e313a4b1f2b3272152269a9a75f5fdb17e93e556da3","ssdeep":"","tlshash":"3fd097c2a820b216a9214081b2027e1c8f093e08d8f50ecc1d601069b032890178d714","first_seen":"2026-02-13T21:35:51.547944Z","last_seen":"2026-02-13T21:35:51.547944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":572,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bingwucoins.xyz/sweetalert.advanced.cjs.js","fqdn":"bingwucoins.xyz","domain":"bingwucoins.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.132","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:25.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bingwucoins.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 19:52:14 GMT","end":"Sat, 25 Apr 2026 20:50:56 GMT"},"fingerprint":{"sha1":"4A:82:9F:8D:29:AD:45:B4:E3:01:DD:02:94:1C:A9:2A:B8:02:D4:02","sha256":"26:C4:7A:47:CE:11:A6:40:48:DA:14:E4:51:EF:B1:4E:77:C7:97:E8:34:A5:95:A2:B5:68:A9:EF:34:D3:2A:63"}}},"request":{"raw":"GET /sweetalert.advanced.cjs.js HTTP/1.1\r\nHost: bingwucoins.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bingwucoins.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Feb 2026 21:35:25 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 25 Jan 2026 20:08:28 GMT\r\netag: W/\"6976783c-62a53\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 69223\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fwiw1cg4XMsT13qZ6nQ8deOKPc8n4Chnm226LvIxKV7TBvJfVwuBzd3oGWPAZIEyxavyqO1kDa8Jdz%2BrfId%2BZzwbQ%2FW9Ld3claCfz9royw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd77498ea86c3b8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":404051,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"1356a55a1990c354cc95968f936c6b57","sha1":"4f1d6652d533e2178770d07a0e02453f2fcd8dcf","sha256":"099e2f986610b279a13fac206df140fc2895c89e9c691235d08ae3774ffdeea1","sha512":"9d3be83f35cc491a1b4d8cfce66744c427a797e915f380826997eeb22066182a8d9c83387a8a47870a1e5261fa94c3e75e85715661f53756c4e58f9e8c385239","ssdeep":"6144:0HHZDoSjoff+LvJNyWPKfHZsSo+T3zzBeQ622a0iZg+zV/3Rg:qHhVvezzBeQ622a0iZg+zV/Bg","tlshash":"8784668b1b87a044cb20a14a64e1a35cfc64d8f7a7c81c46adc1fd56e814e177efe678","first_seen":"2026-02-02T10:11:27.512469Z","last_seen":"2026-05-27T00:14:39.257192Z","times_seen":71,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"bingwucoins.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bingwucoins.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25904\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 01:01:41 GMT\r\nexpires: Sat, 13 Feb 2027 01:01:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:58:32 GMT\r\ncontent-type: font/woff2\r\nage: 74025\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25904, version 1.0","md5":"e7ed1ab78a1744183d3dde29701c5fa8","sha1":"e3007b7235a3e42a9c4ce5020ab4236000073885","sha256":"09941fb1c169c38fd414536b37690057fc01b3117a5c63dd6571186540c8f370","sha512":"da3f51449b0f406be081cb782cb3ffece599cd29045c142eb00b2a591f491f49e05fd20989f510c5f3b4e443b365a82d78c25b38133c61b248cf3767f1878ccb","ssdeep":"768:IZQ9vezb0u8t5Q0NM3LXhros4eh/Cy7rEfW:Qzb6mFGelCQQu","tlshash":"32c2e131e18142c92d548df72b8f78915d4de0636fb3919482d5ab3ade2e70a22b41db","first_seen":"2025-09-10T23:55:05.516003Z","last_seen":"2026-06-08T20:51:16.924222Z","times_seen":3149,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":87,"dns":1,"connect":7,"send":0,"wait":9,"receive":6,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/cinzel/v26/8vIJ7ww63mVu7gt79mT7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bingwucoins.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25904\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 01:01:41 GMT\r\nexpires: Sat, 13 Feb 2027 01:01:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:58:32 GMT\r\ncontent-type: font/woff2\r\nage: 74025\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25904,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25904, version 1.0","md5":"e7ed1ab78a1744183d3dde29701c5fa8","sha1":"e3007b7235a3e42a9c4ce5020ab4236000073885","sha256":"09941fb1c169c38fd414536b37690057fc01b3117a5c63dd6571186540c8f370","sha512":"da3f51449b0f406be081cb782cb3ffece599cd29045c142eb00b2a591f491f49e05fd20989f510c5f3b4e443b365a82d78c25b38133c61b248cf3767f1878ccb","ssdeep":"768:IZQ9vezb0u8t5Q0NM3LXhros4eh/Cy7rEfW:Qzb6mFGelCQQu","tlshash":"32c2e131e18142c92d548df72b8f78915d4de0636fb3919482d5ab3ade2e70a22b41db","first_seen":"2025-09-10T23:55:05.516003Z","last_seen":"2026-06-08T20:51:16.924222Z","times_seen":3149,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":132,"dns":1,"connect":20,"send":0,"wait":8,"receive":6,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bingwucoins.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 16:32:02 GMT\r\nexpires: Fri, 12 Feb 2027 16:32:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 104604\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-06-08T19:39:48.002838Z","times_seen":18976,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":129,"dns":1,"connect":20,"send":0,"wait":14,"receive":1,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ext.same-assets.com/81743851/987537458.png","fqdn":"ext.same-assets.com","domain":"same-assets.com","tld":"com"},"ip":{"addr":"172.67.180.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bingwucoins.xyz/","date":"2026-02-13T21:35:26.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"86f3a1bf.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 03:34:16 GMT","end":"Thu, 02 Apr 2026 04:34:11 GMT"},"fingerprint":{"sha1":"CC:30:3F:32:8B:22:C2:13:6C:E5:E0:11:2B:D0:2B:2B:0E:06:23:22","sha256":"32:0A:6B:1B:FB:A7:00:B3:87:43:57:7D:3A:04:13:B8:83:E9:06:92:BB:17:53:19:05:19:F5:D8:09:E9:0C:37"}}},"request":{"raw":"GET /81743851/987537458.png HTTP/1.1\r\nHost: ext.same-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bingwucoins.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 21:35:26 GMT\r\ncontent-type: image/png\r\ncontent-length: 1145\r\naccept-ranges: bytes\r\netag: \"ed6740d90cd839744d48523d4991a6f7\"\r\nlast-modified: Sat, 17 Jan 2026 23:07:51 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3hULiqJqU7OAlstZF6Qsh4thiNzquLs3MJr25rAxqdeYPeRBI9xdXx49Vm4jMUBrMht%2F1fJpuXeum5KtjSBmR4vbOkoURl540iQi68ohpMnVCho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\ncf-ray: 9cd7749d5ebb4651-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ed6740d90cd839744d48523d4991a6f7","sha1":"a8e4f5b4d7be660dc6f5279389a88b0c95f5f21d","sha256":"b6acb73abb0b7e8e808d72c016e81d97860bc7e7e0eb4f06ff76ba1d16a5b04f","sha512":"d22ab125bfc6197c15d72e5119e6621e82dc0f841fde4510406ef791e0b311826c9d2d80f39230ab3f64f27750cd6da26ebd8180e455cd9a430601e386f38faa","ssdeep":"","tlshash":"6d21c64ff321e8628d9d9892290397640c11ebd0bd49308f480a5ff17572ab0878e654","first_seen":"2025-10-27T15:21:57.79985Z","last_seen":"2026-06-04T19:38:37.672125Z","times_seen":244,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}