{"report_id":"b2980fa5-7a5d-42d3-b023-50d1f86a81ac","version":6,"status":"done","tags":[],"date":"2025-09-03T15:58:48Z","url":{"schema":"http","addr":"93255coinbase.com","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"93255coinbase.com/c/app/","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"title":"Coinbase - Please wait"},"submit":{"url":{"schema":"http","addr":"93255coinbase.com","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"104.21.85.171","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-08T15:58:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"93255coinbase.com","ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":37,"request_count":37,"received_data":33193,"sent_data":20734,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-09-03T15:20:50.935949Z","alert_count":0,"request_count":1,"received_data":60310,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-08-28T15:50:28.221861Z","alert_count":0,"request_count":1,"received_data":61509,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"93255coinbase.com/client.js","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9911daf4d6709b1148e64b08643ca9c5","sha1":"a20e58ee48d531a62ea80b0bdc305382264bcac4","sha256":"f574b6e6b3a968cda5f51bec2c090d8eb095fbcfc383314f94bc15676a0d6692","sha512":"47d418e9908430bad2f05360ee99c026241a6e2855874d7195db7f380378d948623c6299ba421bde6ad0e681b9801d934d2c30a6ba850753c035141ad193fb3f","ssdeep":"","tlshash":"ff71738e105e2271493a6af5a64b1129fb7292372541a21e7e8c52503fb0c2f41b2fef","size":3766,"data":"","first_seen":"2025-08-30T07:27:07.114554Z","last_seen":"2026-05-18T02:49:06.201931Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:32.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:32 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPxun3%2FLe6yn538Lbqsa8%2FeSsJiGwPnEcHAmRffVehE24QZQrd%2FSVz609MRqOY7SdbLZlkTGHaYD6hMhG8zZfXDxTxNvh8TwTNjB7qseklFT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672fdeb76723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:31.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:31 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55MV7H7hM7ON7sKIpcIVNZYhh%2BWx1UgrShwmD%2FRYS8RHi84XHou39Mou85s2tfs8R3xwBg1CeuTpEfnAG%2BremQY%2F0Iioh80y2bkmFRviZ9hc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672f66a9f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:29.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:29 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FecXEqUYiAeRTvK44H09Le4ZnAa7Z1z2mdh1WeDAKXqM4MXDZoIb8bQHnd0%2FKTqhxpUnFeMytP7j18Pi2ULAdJErBG6DNgtMs9fkhpJIfL4e\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672e7688c723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:30.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:30 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=opdqOsdPtCNITjQ0lOwbMjGjhxB%2FeUyAONmhXkSq%2FIa0dbdaOZ%2FZmMfIL6dS5NNmU%2FzUQmQt7BN%2FWxg5Ck4cshzWsfhe1NlZRfWuJKKlExjT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672eee98d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:37.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:37 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4FqmB%2F7jsYrTT3k1uTItv7BuAcAo9Mfn8MBBXsKVhEoIiRfldwh%2FkzBsWqkfqHyfzkQOAQpFSGnw6RunKVzgTgwaYC3Zt0Ce%2Bh0TeBdPZAM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9796731bef21723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:39.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:39 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaSIeM0VMLOKUgycLCdlKggnadfltZ76p2RLAsUutTURoOBW%2FKxRnY0Z5%2BvyF5eKml24VKNj%2F%2BgIIvDaocKxEKPXHQgtxEgnA%2FLNI2VtDjKa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9796732ae965723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:41.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:41 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YlzaKdVEzyOPVEDB92mqXwZDt051m%2FOl7ei4bZYpM%2F8jhn6xsHSTBKB7zCpBsdZuQEM7fj%2F3myX%2B8I4IXQ4aTRfTrpcDsgLz8SAMPU7OpkBB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673326bc7723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/c/app/static/assets/CoinbaseSans2.woff2","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:27.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"GET /c/app/static/assets/CoinbaseSans2.woff2 HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://93255coinbase.com/c/app/\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:27 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RuX2oDI4flr8iuu3DhZhwyb5SUYleR27MnUKjDZVguTJ0QQ7z8WgIJFiNAunrngKNRHGnkwhG%2FWFQ%2F%2F31bENnfmwedy9hu3hH%2BklF9k1c85G\"}]}\r\ncf-ray: 979672dc3d6e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T23:02:15.373438Z","times_seen":546439,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:33.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:33 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7X0nj462T%2B%2BFYZ0Tm2nGuJC0BJ%2BW1LKD7G4J9cV7xEQ8gcjc87zt2wYs6dSiKGrnFWUh0%2BSX%2FjgwkSoyGEU1nqn7oNcEOe223i4dr5YbMnpu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97967301abfb723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:33.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:33 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBo6WRSqC8bvqTG%2FkgmukDv4ifdzis4AiL%2F7HeMV8Jk0P%2BHqM9uqtns4jLYldbGMYlw%2BvaDlDT5TuWSyrqsL0j7ielOVIXGUDn%2FdsobFEhpo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673056c5b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:35.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:35 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlMs9bvj%2BGb7hDwSKWQKlYEyXI86gNk95yt06DcZi3OB1srOmggTCNtMumsRVqXQkMJ8xKWgBO06Rvzb3PKk8kXKWbOSpOmtS8AbsLXMXf2c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9796730ced5b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:39.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:39 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2BlWHMsrAqEyxxRnNbOONXYUvIzEXD%2FfxVZlmxB4gBJXGpA03MAtGY9xcSgRt0IZiwJ%2Bf55xQj%2BXdAYqqVs7tr4OIm1qkI0aj61PCVsw94h1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673272883723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:40.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:40 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WutaiiHqm4CO%2ByZFptUwzaLTm5imB4IROmO2MRZQcs3pAo3S6mIOR4bo766WNgK0mIvbq0UTayVTVdCQuvftLwaMQVYFXXezV1mU5%2B2fcizM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9796732eaa2a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:42.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:42 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqI0ot%2BGjUkWBHO0ttSEh2OYIHLoPo8UV1GCaI633avX4lWbgwUUspmfGAyXSVNkjSvjx%2Bfg8%2B5LmanPTmWtvFLTxp0DHVay2Wq8hVXqr1vE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97967339ec82723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:45.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:45 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DjW2WSl%2F4ghHi8KcKXMv4IiX5WhlPjfBVmBjgx2kdOAl2kv%2FDIKgRGq6UV3qXdvU7qlB%2Bg04BIZcxFELjjICU6IxvGpJb%2Bk1CZXzzKoKSLRN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9796734caea0723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:32.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:32 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xo%2BgnG6MMNyl3n316414T%2Ftuq9tY1QiAR%2B3rBl0JUh62BdMrwmuOHJ%2BHIPsJ2WzywPQyis%2BCrQXVmx2c%2FVmKdRRCDBWxWfclk0UmWPw%2FN6Js\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672fa2b1d723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:27.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:27 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ES8i7uZZsRCSDxsfZGzgt2FCXGVGh0QUeFBXOUkv80rKFZCfSYpjru18yWwLYs5ptbIOAFnPJJUu5P3TybEfBAZ0db%2BcEHvsmMVF%2Fgr1YkB7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672dfee18723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:28.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:28 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M67zru5Gw93fXF72AXeyugdlO1lQvE2UyDaeYx3dJAoogy8GGlfEstGXd3BdpTIORgVUHnEIHIT%2FNJ5kGfDVbWKEvGzPI8abSYjmI1tMsMfi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672e3afa6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:36.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:36 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HdggHciAQbv7EXZr%2BHbQq0SM9U64y3a%2BkBS8XdCfQ%2FS6ySZR2fY99Roq9d%2FSpdrCTAKiJj4RQf6qqEV%2FIjNHsTDxz7LZG8sZ9XGbgdR4DQst\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673146e13723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:43.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:43 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sM%2BA7u0gV4WilWU5MKoaucZwMkCwnyT3%2Bx10r4jO9FvDX8jcTLrqED2NMteA9ZQ2z4CKEbcckSL2XPz1qLsJnDJYDJPBXLk%2BnLVaaWetPocn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673416d58723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.4/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:27.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Jul 2025 17:08:10 GMT","end":"Sat, 18 Oct 2025 18:08:03 GMT"},"fingerprint":{"sha1":"66:D5:51:E0:8E:D7:2C:D1:E3:98:58:99:22:9B:73:C4:6F:32:FD:EC","sha256":"52:CD:3D:83:E5:5A:57:37:9F:D9:0B:EB:C3:EA:67:B7:4C:F1:74:93:B7:C9:E8:0B:E3:E8:CB:2E:7A:94:A2:78"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.4/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://93255coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 15:58:27 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10462\r\ncf-ray: 979672db7aa8b28a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"613fa20b-28de\"\r\nlast-modified: Mon, 13 Sep 2021 19:10:03 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 472259\r\nexpires: Mon, 24 Aug 2026 15:58:27 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Anstq6q%2FVc5%2BdCNthz34ZWfSCtjx7s9M2B7kGkTfFfTWaIh1gHTOh17LgnD8C7C0qyiXluTUTF7SOG2KuHxU2yRrqhlHITecpx85mrX6HebRlFCTUzzfP5i7%2FspBT2h1YkNmQy0%2F\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59305,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-08-04T22:38:39.708895Z","times_seen":47203,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":26,"dns":5,"connect":1,"send":0,"wait":15,"receive":4,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:34.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:34 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkOgjghs8c373svCF6Z47Jeq1aEZdjP2KMop85n1dI3y%2F4zCMtn2ZX8HusZ20Q7CtB7GnAdngJVmeLISOVNMkIQxrsQtSZY5zbXpoPvkMvzH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673092d06723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:41.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:41 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wP7uHg9WBin3YtoKn3XYy4CsaL2TuCvMCy2kHBulDmxdLNIzz6ripQXit4f9BwIvT1WW3IJ5LhZ8Vn2rncmTUuzZBY3A%2BYS0%2F%2BSsNhG9vMxt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673363c32723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:45.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:45 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Epw60O5OLN1HYkHmQ5pvoi9mFj2tp9wh0KMjwi9y%2FjjEGu6uET3zaXZAIOGSV0f3oayTbeU8GH1RAULqxR%2FVkq0zlte7IMlEfjWe54Ae%2FqCL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673506f0a723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/c/app/","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T15:58:26.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"GET /c/app/ HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://93255coinbase.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:27 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 10 Aug 2025 19:11:06 GMT\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0KiIEYKV5hsHgfzZ3WRtT4wJLqnlcsL9%2F6hUThUhTOeybAk1jwQ6bKGq6PvUi15A7QZL%2BjSsHdw1spGb7hcdHtvXtM0j9l7BAcDZiMxbQcM1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 979672da5ce8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6909,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (844)","md5":"5e3e8f702d2ad66671a043ce7e1dbbff","sha1":"b2123825acf51ef63033e9f1dec10d48de413808","sha256":"acb4ef27b60efff3d0a6ef6adbd7db9a865b7875a578acd44203ea9dfa03a114","sha512":"90c0d15addd514b9d09ddbe010928c36f1c0075da2c3802deb841370fef1f7e8c5fa1c31be715b4bc1797738dfe607ccfae8d82bb42bf8e378e57c703f984e5f","ssdeep":"96:TLgSAzODpb8mDHh5pTR8OUz7GcFo6YcfRiJQJ/vI/nO:YSCODpbPrLpTRVUznFo6YcfRiJQ1inO","tlshash":"2de18266195360227d6391583feb57012aa4b403920acead3ede335ccfc57ed99a374c","first_seen":"2025-08-30T07:27:07.118634Z","last_seen":"2025-09-03T15:58:52.013126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:30.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:30 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qc0%2B5Hor9tm5TY%2FoCbRud%2FAQaM7b9CP%2BiW56kDz8BVpXoo1pH5LYULoQXUfxQxChFvChJbn8zFs9za1C%2Bp0sOLRUqUWoahNr7D5K6DmECMVm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672f2aa0b723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:29.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:29 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kCj%2F3CEoxCsJ5pxE0QqcZfeExQwlC2t9v%2BGj4SNLlKMs8y3%2BDxgyVAXHhc3mkx1rmsIZoemx3MUDsFfwWTjJbQ2z0CZqQvQFViz6GVkW5W1K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672eb2911723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/c/app/static/assets/CoinbaseSans.woff","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:27.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"GET /c/app/static/assets/CoinbaseSans.woff HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://93255coinbase.com/c/app/\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:27 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dhs2etwKaQEHUOUZaKKVkJW7KIFJHxEImWvgEiYIsbqVOqHPnanHP51USwkXfVF0wDX5DyBi%2BslBBjeNBGBBJk1hXOdN3KYbdkR%2FnFbEoCVs\"}]}\r\ncf-ray: 979672dced84723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-04T23:02:15.373438Z","times_seen":546439,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:35.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:35 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZypGuRZd%2BVzfRq2qHkPL5lWmFJ2Cw%2FgZtNQo7rivvAwf711qcqgvdpCLIKnLQAuPS6yDRbo7PFHCRIjacMybBDM2Evy0YmqPIJprShr7ljk0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97967310ad9e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:38.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:38 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sVLzGR5BkohDOkVqcAhaU2AY9R%2BRAaJ0ee7MNhJyn4XCuheuV8sFXtBmccd2bipjC3NZCL6PJ0oxcCiMUlmCBDpyk0o0heOCeHVt7STCr%2BJm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9796731faf93723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:38.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:38 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXOOksZpwqdpzlFSoTvjm%2FzXGR9F6187WzlzowX8OGb742uDAzjN7%2Fp3S%2FfhiTl9r89xLHqLyh847P5CLzbLZIRcqV8po0cUI3YrM%2Bwz1wRR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673236822723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:42.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:42 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V9yEo7BJriTCPzpv5ct4i1wfC%2FVNX0ltuyjB%2FPa9BPE%2B3cJ1wqMdhkdhuYlzuhO%2BTc7vvs%2F%2F2K5qWqWI8FR0qb4cswAELnap%2BqVGcoOx6nvH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9796733dacf8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:44.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:44 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpdvYh0pn28mFu%2FpZn8Arbh8sZGlrDghKRA8bdj71yzUd5KXjjfjgsQ%2FHRRfV%2FXjO1MLqvJQO6O7XH19CFZoUp4sVm%2FhHrTWgGd9K7j4pUUI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673452db8723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:44.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:44 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0qfEbERHnvzwryQf4PMGYxS%2BnpGLUJEWJYSwmVXgL8yEQ5aIHL%2FdyvlO8815qSUNggvgrRX1IP0rvNLsKvXc0tM%2BU%2BWEh2vddBgxNNJlv11K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97967348ee2e723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/client.js","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:27.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"GET /client.js HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://93255coinbase.com/c/app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:27 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 21 Aug 2025 13:18:30 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ivprdyz6HpGlx2FKDsd3%2B%2B2xFPZDzTmObnqHNOkpFyhpFcBfZA9zmO21vVkgOaZqw4t83Icm%2F37inM7qZ9KapEC1elGc2SR7daayootNmKSl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\netag: W/\"68a71ca6-eb6\"\r\nexpires: Thu, 04 Sep 2025 03:58:27 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 979672db4d22723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3766,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"9911daf4d6709b1148e64b08643ca9c5","sha1":"a20e58ee48d531a62ea80b0bdc305382264bcac4","sha256":"f574b6e6b3a968cda5f51bec2c090d8eb095fbcfc383314f94bc15676a0d6692","sha512":"47d418e9908430bad2f05360ee99c026241a6e2855874d7195db7f380378d948623c6299ba421bde6ad0e681b9801d934d2c30a6ba850753c035141ad193fb3f","ssdeep":"","tlshash":"ff71738e105e2271493a6af5a64b1129fb7292372541a21e7e8c52503fb0c2f41b2fef","first_seen":"2025-08-30T07:27:07.114554Z","last_seen":"2026-05-18T02:49:06.201931Z","times_seen":12,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/thumb/1/1a/Coinbase.svg/2560px-Coinbase.svg.png","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:27.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Sat, 16 Aug 2025 07:58:25 GMT","end":"Fri, 14 Nov 2025 07:58:24 GMT"},"fingerprint":{"sha1":"00:6B:23:79:C6:3F:3F:33:1C:96:A8:58:E3:42:75:58:02:2B:84:D3","sha256":"AC:53:65:9E:C2:DF:AA:6F:9B:55:55:44:CF:4E:94:5A:41:C1:12:6D:4F:EA:F3:3D:EB:5E:40:17:00:3A:2E:26"}}},"request":{"raw":"GET /wikipedia/commons/thumb/1/1a/Coinbase.svg/2560px-Coinbase.svg.png HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://93255coinbase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 15:01:04 GMT\r\netag: a7046cfea304b1296011af98124e4973\r\nserver: ATS/9.2.11\r\ncontent-type: image/png\r\ncontent-disposition: inline;filename*=UTF-8''Coinbase.svg.png\r\nlast-modified: Tue, 27 May 2025 06:50:50 GMT\r\ncontent-length: 60265\r\nage: 3442\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/1\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=rf5CehBaH9r7JP6QYh5FAwJjAAAAAFvd9Je6DAWZLlSXruYe3pspmzUsnDama9Rn;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 03 Sep 2026 00:00:00 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":60265,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 458, 8-bit/color RGBA, non-interlaced","md5":"a7046cfea304b1296011af98124e4973","sha1":"ffcda77901891e90c434849464e68f4ed8dae13e","sha256":"c0595b31ab14f3a43ffb8d0451f54fc2411217d31d3a7719d9610a608350e083","sha512":"7ee0b24c15fe89980afa7f45f86c12023d3fca0f0185ff777b3395321fbb81a29a4e2327631619cfcbd5ac79359cf544505313a38f54c730382ce908b9a28a7a","ssdeep":"1536:HwnGcL81TpLyZNRE7QlT61V4B3/swh0A7:qw1VyboQlTSVGb60","tlshash":"c143f1fd6513c799ad219b4c2d7e90f69b800bf6c462acd6fc83f0d19607225912a2ca","first_seen":"2025-07-28T09:46:38.961625Z","last_seen":"2026-02-08T07:25:47.820268Z","times_seen":8,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":56,"dns":3,"connect":19,"send":0,"wait":37,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:27.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:27 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pe3hufepUdVAriX2UQJkas99rVDoyu73QAiwzs4z8Mvv3PSdNB4hlp0t9HzkMrlf%2FFkqZOSwxMrLwnu3HNheiW1cwdahswVwUj8HyhbPzmJO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979672dc4d71723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/backend.php","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://93255coinbase.com/c/app/","date":"2025-09-03T15:58:36.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"POST /backend.php HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://93255coinbase.com/c/app/\r\nContent-Type: application/json\r\nContent-Length: 155\r\nOrigin: https://93255coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: user_token=834f5d7d-bea3-4d8e-9a67-f2fa70025d82\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 03 Sep 2025 15:58:36 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BBrjX4X4AEsD8oAWs9g2h9tUNBTfPpZcj5WYEabGO%2BYkSr7bSi1NstGaJxGN6YQlNQcdoDJ6sOmU5QOuaet585%2FUpZYY%2BJHieNWq065ODFaf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: PHP/8.3.21\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 979673182ea6723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.3.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c05d54353277cf091c8e3636833c0b73","sha1":"2ca86008112459e259c51e8ec77ab96fff1b4383","sha256":"3eb8d0fa1b00ae89a680890377c8c60c03ed1c3078fff4d1d7909b57d58faf68","sha512":"c4cb31ea072cec334163af381ac0f2ba69ff20b45efe73f611022b601dbd248c22e0ddc309fad4d50658a890ba19879ab77389f4c86c981634a4168454aa21ba","ssdeep":"","tlshash":"be800000a08820282a800a8b000c0ca32baf0e82202f08a8880c0f200f880e0803802e","first_seen":"2025-08-30T07:27:07.109054Z","last_seen":"2026-05-18T02:49:06.191393Z","times_seen":24,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"93255coinbase.com/","fqdn":"93255coinbase.com","domain":"93255coinbase.com","tld":"com"},"ip":{"addr":"172.67.208.134","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-03T15:58:26.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"93255coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 23 Aug 2025 17:22:10 GMT","end":"Fri, 21 Nov 2025 18:19:32 GMT"},"fingerprint":{"sha1":"14:05:D1:0C:19:B9:A2:31:76:51:F9:2D:82:1C:AF:0D:7E:69:0D:1E","sha256":"FB:25:C2:A5:30:DB:77:B7:B2:5A:6B:8E:B8:7A:3F:F6:64:0F:CD:70:FA:BB:F6:CE:BC:8D:0D:AB:25:AF:09:08"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 93255coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 03 Sep 2025 15:58:26 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 29 Aug 2025 02:27:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=znrz3K%2BvMZCPEjkjCVFzZEJc%2B5b9rdGvZS0JG8XxHNBffYCdkMn60Sz2JHPVdNBEcTHu8sWnvF0ffqieotK7MjeTuU25vJlM721zd8pCmQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 979672d85d2556c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":320,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d55e6e04a4579c75815af8a6e97a8356","sha1":"cafbaf309779e544bde26a07017c9a9d67db0031","sha256":"4c5f4214dd29e382287e38e5ecc281bb4e58471a4c556142f9519613ef6b8a38","sha512":"97752a3ad4b2653dcb78c979ceaff027271fb9c5fd81931cc1ecde37e8b2061afb6aa0efb46c6b1700e7a5433f57dc99b3aa2a3df284c5a06d357550e7014dce","ssdeep":"","tlshash":"49e0cdc71ca2850905a1c6315ce1f51c5cf7159f1749ec4075c5b1291fcab9ec9d36a8","first_seen":"2025-08-30T07:27:07.110844Z","last_seen":"2025-09-03T15:58:52.019787Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":114,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-03","alert":"Sinkholed","trigger":"93255coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}