{"report_id":"b3c3ab9b-0821-4b49-b23a-4cd02221f94c","version":0,"status":"done","tags":[],"date":"2026-09-02T14:57:58Z","url":{"schema":"http","addr":"coinbase.dabaikf5.xyz/","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"final":{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"title":"Coinbase style system | Global exchange","dom":{"size":456,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"74b037c10af7a5be1c79c9dc0c5cad26","sha1":"164ea766fa51d16628d20b42098eb2e7ced8ba8d","sha256":"2851dc67774691b2229f4aab3b2c1c2f3945442b7cd133bf843620624b29770a","sha512":"f7051ba01e9900a6f584e025207801877d87b7de9c2d68a1ebe29945d779855917b11107102980554c80d1fdbf871d93feb1f1bf3cd85d096b7f51f1c9464409","ssdeep":"","tlshash":"2bf055a36c00d23a0d2257e46aebbe48819d4c41e221c851e3c994dfadf1f9dcc970b6","dom_hash":"domhasha99d7e361670836924092604dc22ee58","first_seen":"2026-09-02T14:58:04.344679Z","last_seen":"2026-09-02T14:58:04.344679Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinbase.dabaikf5.xyz/","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":0,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-07T14:57:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"share.9-0xy07vfb39dus-c.live","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-01T20:34:14.538309Z","last_seen":"2026-08-01T20:34:14.538309Z","alert_count":8,"request_count":4,"received_data":21344,"sent_data":2325,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":10792,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ipv4.icanhazip.com","ip":{"addr":"104.16.184.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-07-31","domain_rank":65266,"first_seen":"2013-10-09T05:58:12Z","last_seen":"2026-08-28T04:14:22.492997Z","alert_count":0,"request_count":1,"received_data":627,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"static-assets.coinbase.com","ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":379152,"first_seen":"2019-03-28T16:57:32Z","last_seen":"2026-08-29T21:28:18.545542Z","alert_count":0,"request_count":1,"received_data":2994,"sent_data":618,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"coinbase.dabaikf5.xyz","ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-02T14:57:58.940366Z","last_seen":"2026-09-02T14:57:58.940366Z","alert_count":0,"request_count":4,"received_data":226958,"sent_data":1987,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-08-01T20:34:14.539683Z","last_seen":"2026-08-01T20:34:14.539683Z","alert_count":7,"request_count":7,"received_data":6597,"sent_data":4963,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":4,"received_data":197376,"sent_data":2320,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0fb25983d05d95c9a086e0508d9b899","sha1":"a73a3f93fe8dd81cb9bce52aca59a599d27a6141","sha256":"d88b1a2a9dc7482a1c61e17c45261b3b31eaa25fdbda0949040ecf8a51b343da","sha512":"cdb85356908dd367ede1ef9cba026c8e7f022abc124c30f87fcef0d342667cc40c56263740b7ac53a0a8813f0e92d6e06fb0d3a288d565a4350267159583a002","ssdeep":"","tlshash":"e4d02be70231935402f355daaa97a34de11771027891e841619c4199bf1f50da86a4e7","size":272,"data":"","first_seen":"2026-09-02T14:58:04.405388Z","last_seen":"2026-09-02T14:58:33.19421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/routers.js","fqdn":"share.9-0xy07vfb39dus-c.live","domain":"9-0xy07vfb39dus-c.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac092061ad3f2f9f0b67b10be1aa98bb","sha1":"f9695b9dcbf75747fce928eeae35f2f425e71ac4","sha256":"83b6fa82bfe7e9221c7bdb644a3fde081e4cade63a660b5a21e7cc26d2122eba","sha512":"972c77015145202799a7ecf8e9daaac16e4b09a3ad1f0b74083d42136b7f685ec3622c2a0bb0a1bbfd0cc6e717e7cd5ee815f0b9d97e458774468645ac72897e","ssdeep":"","tlshash":"a111237ca998a1a0626b38790d6f410524fb4d03d949cd027b0dda54bf91e7c05b1ef0","size":855,"data":"","first_seen":"2026-09-02T14:58:04.372247Z","last_seen":"2026-09-02T14:58:33.171046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share.9-0xy07vfb39dus-c.live/4eUMYnN0826M.js","fqdn":"share.9-0xy07vfb39dus-c.live","domain":"9-0xy07vfb39dus-c.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ea4ba4e4e5e3cac5e31838b6e79a24d","sha1":"34101e4de72d713f810bcf88b34e82ec5af5b305","sha256":"c457dca5394b37e10a17f02149e19bac03adae7860bfd3dcddba086a9383c7c1","sha512":"073dea6809125d35a1f5a040cb28fb756d551875cb38ef206b45d44dc904207813ea04b579a6fb03e7eee7812c5c5c8c3f11460d97496cb775583412f8dd9366","ssdeep":"384:UrDxms0QJKPMm0MzMyielJzQ/4W10qwoa9+YG0KZFWr1/U+QUmi:UrDxms0ebm0MzM/erzBWi7oa9+YG0KZS","tlshash":"5172c6427380b4c2164f9ff7b63bb0d4d4195ca9ba80494ee605beb8ec90639dbc1b71","size":17468,"data":"","first_seen":"2026-08-01T20:34:10.412029Z","last_seen":"2026-09-02T14:58:33.179691Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/assets/index-D-Uk6pHS.js","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"scriptElement","is_inline":false,"md5":"850f6c9d6fbf7bf0bcde2396698579de","sha1":"08d7477fe7c26c091ca2faa51be32eddca52fc22","sha256":"1f347ea6cef52b6d236a9a0a7f198bcd52757aaf078150aced7fd20f30a81ef6","sha512":"41024906027162a6ff54f35e3fcdecebfb5d0d53f4daca14b0edf2f62ccd28af663c787da2c9adadd81c99b2837984e45ae5c8901ed67c8171f5f3b4e6aa2418","ssdeep":"3072:aoUQguYlooaBtHINXntU6oKIimFU60Av0cQE5dQ:aoFvkDaTHIN3GHKhmFP0Av0cQEg","tlshash":"8a143cdc31a9b6626fa356b1006f1a07733924236c4d4860b120fdae7bf548561bbfed","size":203643,"data":"","first_seen":"2026-09-02T14:58:04.399283Z","last_seen":"2026-09-02T14:58:33.189746Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-09-02T16:32:40.416413Z","times_seen":238870,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-02T17:11:45.193197Z","times_seen":751864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/assets/index-Eo3nLU3q.css","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:21.167Z","timestamp":1788361041167,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.dabaikf5.xyz","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"42:DB:97:58:4A:30:34:8E:37:AA:81:CE:FA:C2:96:DD:1D:15:F6:4E","sha256":"01:8E:6F:31:8A:11:AA:9A:96:C7:37:68:B4:26:DC:EE:71:6A:12:AB:E0:1A:C1:D5:96:52:05:94:C1:54:F8:AB"}}},"request":{"raw":"GET /assets/index-Eo3nLU3q.css HTTP/1.1\r\nHost: coinbase.dabaikf5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 14:57:21 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Sep 2026 15:39:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f19d-5010\"\r\nexpires: Thu, 03 Sep 2026 02:57:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20496,"size_decoded":6229,"mime_type":"text/css","magic":"ASCII text, with very long lines (20495)","md5":"11f203f2db5377179bcdb7f28f30cfc4","sha1":"02e04a6241dd726d734d02c9721a0cf48e963092","sha256":"9200cf7ee832ed28c3d83d650204c3d810f6b1877edfe612c7ccf56a508c30c8","sha512":"aba03b5c731e9ae2ae8c7dae79083ae12bcc0969983a0b0027c15efda7864218da35b33ca14b2d47722c2c169bf491481aecdc4de46fb57e174d37e1f3cfcae8","ssdeep":"192:f7JXS8iCADT6dQ1/9atWeBHTnMjqrwUT16MQXGSjgtYNcoJHWQmPek5zLVYM8:FTS/8Q1/9Mqch56zGiEFlZLVYd","tlshash":"7892b672a358212cf877d4a2eac16a8d70109243d67387fde5c0f52ac5d65f32b7a709","first_seen":"2026-09-02T14:58:04.349489Z","last_seen":"2026-09-02T14:58:33.185722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":699,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":699,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.64unagpw3t-g0kj7y7mbf.cfd/ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase","fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","domain":"64unagpw3t-g0kj7y7mbf.cfd","tld":"cfd"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.006Z","timestamp":1788361042006,"http_version":"","security_state":"","security_info":null,"request":{"raw":"OPTIONS /ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase HTTP/1.1\r\nHost: www.64unagpw3t-g0kj7y7mbf.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: xx-f,xx-h,xx-ip,xx-s,xx-st,xx-t,xx-u\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/favicon.ico","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.257Z","timestamp":1788361042257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.dabaikf5.xyz","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"42:DB:97:58:4A:30:34:8E:37:AA:81:CE:FA:C2:96:DD:1D:15:F6:4E","sha256":"01:8E:6F:31:8A:11:AA:9A:96:C7:37:68:B4:26:DC:EE:71:6A:12:AB:E0:1A:C1:D5:96:52:05:94:C1:54:F8:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinbase.dabaikf5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nCookie: _c_uid=b4d3d350-6f73-4bdc-84da-7cd30b2cd397\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 14:57:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 138\r\netag: \"6a96a5c7-8a\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":138,"size_decoded":292,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-09-02T15:58:05.254279Z","times_seen":320344,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.64unagpw3t-g0kj7y7mbf.cfd/ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase","fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","domain":"64unagpw3t-g0kj7y7mbf.cfd","tld":"cfd"},"ip":{"addr":"104.21.58.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:32.170Z","timestamp":1788361052170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"64unagpw3t-g0kj7y7mbf.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:30:49 GMT","end":"Sat, 14 Nov 2026 18:30:43 GMT"},"fingerprint":{"sha1":"CD:C3:D9:39:48:06:D5:D9:6E:F9:B4:8C:CF:E6:3C:1B:2B:17:A2:72","sha256":"66:DE:83:C1:42:E7:FF:51:92:40:2A:21:CB:5F:FA:D0:5D:F0:CF:95:05:35:63:F5:DE:10:9D:7A:A2:D7:DC:E6"}}},"request":{"raw":"OPTIONS /ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase HTTP/1.1\r\nHost: www.64unagpw3t-g0kj7y7mbf.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: xx-f,xx-h,xx-ip,xx-s,xx-st,xx-t,xx-u\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:32 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyJodfEq2gMZ%2BWdqCBUS2RQtRV3b31k0k7pXbPS3aaCGjKzwcyhp01S3uboL%2BV%2BIrx54tMvXKNKCbgzPfqcIDVbypV4sSJXb%2FRsJ0NaDTPYYfU0M8xBfPNcoMyXTn9wd58%2Bxe7DWJPaNLgNSPq1TXQ%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: xx-f, xx-h, xx-ip, xx-s, xx-st, xx-t, xx-u, Content-Type, Authorization, X-Request-ID, Timestamp, X-Ts, X-Resp-Enc, X-Hash, X-Signature, Idempotency-Key, X-Idempotency-Key, X-Channel-Code, X-Telegram-Bot-Api-Secret-Token\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD\r\naccess-control-allow-origin: https://coinbase.dabaikf5.xyz\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 600\r\nvary: Origin\r\nx-request-id: 318670a92addaabfb4fa59f3f939ae2d\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34d5e20199fb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1105,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.048Z","timestamp":1788361042048,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 15955\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-02T17:18:23.214164Z","times_seen":275577,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":6,"connect":31,"send":0,"wait":19,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/34ef644ff217a50beadde64dc8e23a7dx.js?channelcode=9ff9aa425f49080f5c822e41ee13962f?1788361051986","fqdn":"share.9-0xy07vfb39dus-c.live","domain":"9-0xy07vfb39dus-c.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/foxtimes.html","date":"2026-09-02T14:57:31.989Z","timestamp":1788361051989,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /9ff9aa425f49080f5c822e41ee13962f/34ef644ff217a50beadde64dc8e23a7dx.js?channelcode=9ff9aa425f49080f5c822e41ee13962f?1788361051986 HTTP/1.1\r\nHost: share.9-0xy07vfb39dus-c.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/foxtimes.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-02T14:57:19.753Z","timestamp":1788361039753,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.dabaikf5.xyz","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"42:DB:97:58:4A:30:34:8E:37:AA:81:CE:FA:C2:96:DD:1D:15:F6:4E","sha256":"01:8E:6F:31:8A:11:AA:9A:96:C7:37:68:B4:26:DC:EE:71:6A:12:AB:E0:1A:C1:D5:96:52:05:94:C1:54:F8:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbase.dabaikf5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 14:57:20 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 01 Sep 2026 15:39:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f19d-416\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1046,"size_decoded":1062,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"d544fb2854df4dbd9867e421f7879aff","sha1":"68c0c6ce766bd62580e14127b380edfd62daded5","sha256":"617e3c4f2f7f0fc1b163a2b9352e9722b125154742f8b6dedff69c269ea4631d","sha512":"e17f7dbbb2dc7e2ad294828e321e36aa1ed2777926092d6f31a72e941cc617572443e0b450969175bbc2fe9bfd6aec9173e4fd472975a3035a2ed98b10eed5f2","ssdeep":"","tlshash":"421142834970c4590121819a3cd2f00c5a63f14ba6c8e80531fc80b57f86f4e8ccf9b8","first_seen":"2026-09-02T14:58:04.366825Z","last_seen":"2026-09-02T14:58:33.17577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1028,"timings":{"blocked":-1,"dns":110,"connect":225,"send":0,"wait":230,"receive":0,"ssl":463},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/routers.js","fqdn":"share.9-0xy07vfb39dus-c.live","domain":"9-0xy07vfb39dus-c.live","tld":"live"},"ip":{"addr":"172.67.156.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/foxtimes.html","date":"2026-09-02T14:57:22.697Z","timestamp":1788361042697,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9-0xy07vfb39dus-c.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 15:24:32 GMT","end":"Sat, 14 Nov 2026 16:23:19 GMT"},"fingerprint":{"sha1":"52:DE:FF:50:80:38:7D:07:01:2C:5F:1A:20:19:8E:87:B2:22:7F:A0","sha256":"95:9E:E2:10:C8:49:32:8D:6E:05:04:3D:AA:44:89:A4:F3:66:81:7A:9E:AF:22:C6:D8:26:D5:0E:19:B8:F8:65"}}},"request":{"raw":"GET /9ff9aa425f49080f5c822e41ee13962f/routers.js HTTP/1.1\r\nHost: share.9-0xy07vfb39dus-c.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/foxtimes.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:31 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a76c399-357\"\r\nlast-modified: Sat, 08 Aug 2026 05:50:17 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 09 Sep 2026 14:57:30 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-security-policy: frame-ancestors *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YrUQPYBcNCEqL0LdvIOhZZFdJ7SvBfasdGsmFpvVm45VIr20HrBVBHKHA2v%2BHo3zjBWU1dVkl1O8uhOqCyc3gpB6l5CMZUfolMpKgBp9SrTVnPBS0xqDEoD36sYwXLApKMfh81nCOfEEiOTtfcSV\"}]}\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a34d5de4d98fb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":855,"size_decoded":1370,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"ac092061ad3f2f9f0b67b10be1aa98bb","sha1":"f9695b9dcbf75747fce928eeae35f2f425e71ac4","sha256":"83b6fa82bfe7e9221c7bdb644a3fde081e4cade63a660b5a21e7cc26d2122eba","sha512":"972c77015145202799a7ecf8e9daaac16e4b09a3ad1f0b74083d42136b7f685ec3622c2a0bb0a1bbfd0cc6e717e7cd5ee815f0b9d97e458774468645ac72897e","ssdeep":"","tlshash":"a111237ca998a1a0626b38790d6f410524fb4d03d949cd027b0dda54bf91e7c05b1ef0","first_seen":"2026-09-02T14:58:04.372247Z","last_seen":"2026-09-02T14:58:33.171046Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"share.9-0xy07vfb39dus-c.live/4eUMYnN0826M.js","fqdn":"share.9-0xy07vfb39dus-c.live","domain":"9-0xy07vfb39dus-c.live","tld":"live"},"ip":{"addr":"172.67.156.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:21.163Z","timestamp":1788361041163,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9-0xy07vfb39dus-c.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 15:24:32 GMT","end":"Sat, 14 Nov 2026 16:23:19 GMT"},"fingerprint":{"sha1":"52:DE:FF:50:80:38:7D:07:01:2C:5F:1A:20:19:8E:87:B2:22:7F:A0","sha256":"95:9E:E2:10:C8:49:32:8D:6E:05:04:3D:AA:44:89:A4:F3:66:81:7A:9E:AF:22:C6:D8:26:D5:0E:19:B8:F8:65"}}},"request":{"raw":"GET /4eUMYnN0826M.js HTTP/1.1\r\nHost: share.9-0xy07vfb39dus-c.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 20 Jul 2026 08:53:20 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6a5de200-443c\"\r\nexpires: Wed, 09 Sep 2026 14:57:21 GMT\r\ncache-control: max-age=604800\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: *\r\ncontent-security-policy: frame-ancestors *\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z6LBzXxTuoPKXwvivD%2FeaERXq1xkAEA%2BmKL2bj8wCNf0ut9SNEBQFtIlx0lSi9MM%2FsNycUmlEIxJyRrpJfYAx95w%2FP8%2B1wagS1Hq4LTNGcHvb7KIakJZm6T71yxB2eX0rkuewhaY%2F0my%2Fio78iQ4\"}]}\r\ncf-ray: a34d5ddbf9c87131-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17468,"size_decoded":8133,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17467)","md5":"9ea4ba4e4e5e3cac5e31838b6e79a24d","sha1":"34101e4de72d713f810bcf88b34e82ec5af5b305","sha256":"c457dca5394b37e10a17f02149e19bac03adae7860bfd3dcddba086a9383c7c1","sha512":"073dea6809125d35a1f5a040cb28fb756d551875cb38ef206b45d44dc904207813ea04b579a6fb03e7eee7812c5c5c8c3f11460d97496cb775583412f8dd9366","ssdeep":"384:UrDxms0QJKPMm0MzMyielJzQ/4W10qwoa9+YG0KZFWr1/U+QUmi:UrDxms0ebm0MzM/erzBWi7oa9+YG0KZS","tlshash":"5172c6427380b4c2164f9ff7b63bb0d4d4195ca9ba80494ee605beb8ec90639dbc1b71","first_seen":"2026-08-01T20:34:10.412029Z","last_seen":"2026-09-02T14:58:33.179691Z","times_seen":5,"resource_available":true,"data":null}},"time_used":700,"timings":{"blocked":-1,"dns":87,"connect":26,"send":0,"wait":587,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.051Z","timestamp":1788361042051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 15955\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-02T17:18:23.214164Z","times_seen":275577,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":33,"dns":3,"connect":0,"send":0,"wait":37,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.64unagpw3t-g0kj7y7mbf.cfd/ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase","fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","domain":"64unagpw3t-g0kj7y7mbf.cfd","tld":"cfd"},"ip":{"addr":"104.21.58.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:42.177Z","timestamp":1788361062177,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"64unagpw3t-g0kj7y7mbf.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:30:49 GMT","end":"Sat, 14 Nov 2026 18:30:43 GMT"},"fingerprint":{"sha1":"CD:C3:D9:39:48:06:D5:D9:6E:F9:B4:8C:CF:E6:3C:1B:2B:17:A2:72","sha256":"66:DE:83:C1:42:E7:FF:51:92:40:2A:21:CB:5F:FA:D0:5D:F0:CF:95:05:35:63:F5:DE:10:9D:7A:A2:D7:DC:E6"}}},"request":{"raw":"OPTIONS /ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase HTTP/1.1\r\nHost: www.64unagpw3t-g0kj7y7mbf.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: xx-f,xx-h,xx-ip,xx-s,xx-st,xx-t,xx-u\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TgbrF1R%2Fxltt%2BkHWQNKodMLGXqKCXqWte3ulL0z6FbSeArwkC0w1e9P278TJN68BV2boIJ2CR6mmDKO9RCorZOz%2Fcvw0gT%2BiYc9RsX1v3TzJ4QyzFsH6wSY%2Bj%2FMbNG7%2FgXT0q9nWY2TwrnJ3c0gF3Q%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: xx-f, xx-h, xx-ip, xx-s, xx-st, xx-t, xx-u, Content-Type, Authorization, X-Request-ID, Timestamp, X-Ts, X-Resp-Enc, X-Hash, X-Signature, Idempotency-Key, X-Idempotency-Key, X-Channel-Code, X-Telegram-Bot-Api-Secret-Token\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD\r\naccess-control-allow-origin: https://coinbase.dabaikf5.xyz\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 600\r\nvary: Origin\r\nx-request-id: dec38c083a30fbeb3b1b586185bf915a\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34d5e5e9cc5b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1109,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.052Z","timestamp":1788361042052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 15955\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-02T17:18:23.214164Z","times_seen":275577,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":32,"dns":2,"connect":0,"send":0,"wait":31,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.054Z","timestamp":1788361042054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 15955\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49344,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-02T17:18:23.214164Z","times_seen":275577,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":24,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:21.885Z","timestamp":1788361041885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 02 Sep 2026 14:57:21 GMT\r\ndate: Wed, 02 Sep 2026 14:57:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1447,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-09-02T17:11:58.415519Z","times_seen":42593,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":4,"connect":17,"send":0,"wait":38,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ipv4.icanhazip.com/","fqdn":"ipv4.icanhazip.com","domain":"icanhazip.com","tld":"com"},"ip":{"addr":"104.16.184.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:21.890Z","timestamp":1788361041890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"icanhazip.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 14:25:34 GMT","end":"Sun, 08 Nov 2026 15:25:27 GMT"},"fingerprint":{"sha1":"99:19:2A:59:5B:3A:DF:43:A6:41:62:32:D6:C1:BE:BC:0C:49:35:39","sha256":"07:7F:16:84:A8:D5:19:46:5B:AA:C9:F9:7B:9C:2F:50:B3:1A:E3:A8:9F:D5:57:CD:A5:99:45:11:D8:08:4D:82"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ipv4.icanhazip.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 02 Sep 2026 14:57:21 GMT\r\ncontent-type: text/plain\r\ncontent-length: 15\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\nset-cookie: __cf_bm=Hck7uCUfM0FA.k7MZkXS69X9f_hyusGGoaKetxzRa0M-1788361041.911721-1.0.1.1-.d_TNZNFFA1PdQjKCb6ttFV0JUG.vST3z9ssSeY5.uBDBoBBYSp10cU9vVfrlv7OqRB_vn2BCofsKO607w7Y6t0MEwUBr162Z.0l1TOZ9M9owZU12ZOSHCanhqC4kikT; HttpOnly; SameSite=None; Secure; Path=/; Domain=icanhazip.com; Expires=Wed, 02 Sep 2026 15:27:21 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a34d5ddffd022efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"Hck7uCUfM0FA.k7MZkXS69X9f_hyusGGoaKetxzRa0M-1788361041.911721-1.0.1.1-.d_TNZNFFA1PdQjKCb6ttFV0JUG.vST3z9ssSeY5.uBDBoBBYSp10cU9vVfrlv7OqRB_vn2BCofsKO607w7Y6t0MEwUBr162Z.0l1TOZ9M9owZU12ZOSHCanhqC4kikT","quoted":false,"path":"/","domain":"icanhazip.com","expires":"2026-09-02T15:27:21Z","raw_expires":"Wed, 02 Sep 2026 15:27:21 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=Hck7uCUfM0FA.k7MZkXS69X9f_hyusGGoaKetxzRa0M-1788361041.911721-1.0.1.1-.d_TNZNFFA1PdQjKCb6ttFV0JUG.vST3z9ssSeY5.uBDBoBBYSp10cU9vVfrlv7OqRB_vn2BCofsKO607w7Y6t0MEwUBr162Z.0l1TOZ9M9owZU12ZOSHCanhqC4kikT; HttpOnly; SameSite=None; Secure; Path=/; Domain=icanhazip.com; Expires=Wed, 02 Sep 2026 15:27:21 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":15,"size_decoded":627,"mime_type":"text/plain","magic":"ASCII text","md5":"67bca3c725f41cb5088b835a2b6549af","sha1":"a4aad7f09894cd5e75198b1ba595ddf896dafeec","sha256":"3a9b3d658b3171e02d6c1b7200b0f3be0949daf80252e2f38b137fcfde826e06","sha512":"a724055ae57f16bdd3bc10a399578e01825bc5794867648d21b27926cab5d91aafeb047b6fa5c9aaf271678f0ece181a26f0e9bb172e870d06e6871984b3bfef","ssdeep":"","tlshash":"9060008200320a0200800200008000308082028220828c00838822300800000a000030","first_seen":"2025-12-17T23:19:04.362166Z","last_seen":"2026-09-02T15:20:55.114121Z","times_seen":535,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":6,"connect":10,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-assets.coinbase.com/ui-infra/illustration/v1/pictogram/svg/dark/coinbaseLogoNavigation-4.svg","fqdn":"static-assets.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"172.64.152.241","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.024Z","timestamp":1788361042024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 04:30:46 GMT","end":"Tue, 13 Oct 2026 05:30:25 GMT"},"fingerprint":{"sha1":"0E:D8:37:32:73:91:42:F6:80:4F:1C:67:0A:B0:01:C0:AE:CF:19:90","sha256":"B4:80:8C:87:51:99:55:65:54:72:08:85:A0:C4:23:34:16:B7:0C:64:08:93:44:91:51:5A:C9:70:94:C0:04:FD"}}},"request":{"raw":"GET /ui-infra/illustration/v1/pictogram/svg/dark/coinbaseLogoNavigation-4.svg HTTP/1.1\r\nHost: static-assets.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 02 Sep 2026 14:57:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 31 Jul 2026 22:30:29 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nreporting-endpoints: cf-csp-endpoint=\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9nE1Arvg8xE1uWTT9AAlKikYBXSkMmtzaAUp4KREOgo-1788361042.0524306-1.0.1.1-u_EhO6vJDYBaX_MtfiKeJq00XPWhOgTZQ2XnGMxd0nowIKb87.dAStT5QhDuxKex78wvWzm_98C4RXy_pSatwhr2jDyk_FpHwdsT5xm8GaBRO3u7KJK3ctkLL649fbXyNPwy8tEybMScKYs8VgAbA3yhbfG9tfaRluzHDZkjTT0NGX.DYSNaiLApHy6bnQXg\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 35db3cf46a7038c88cad9b99f136fe06.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: BOS50-P6\r\nx-amz-cf-id: 8LiUbkO83wRhP3JOuzWpfwJWlLoy2gLYYUG_dqRJ9VpodSEe3bpktA==\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9nE1Arvg8xE1uWTT9AAlKikYBXSkMmtzaAUp4KREOgo-1788361042.0524306-1.0.1.1-u_EhO6vJDYBaX_MtfiKeJq00XPWhOgTZQ2XnGMxd0nowIKb87.dAStT5QhDuxKex78wvWzm_98C4RXy_pSatwhr2jDyk_FpHwdsT5xm8GaBRO3u7KJK3ctkLL649fbXyNPwy8tEybMScKYs8VgAbA3yhbfG9tfaRluzHDZkjTT0NGX.DYSNaiLApHy6bnQXg; report-to cf-csp-endpoint\r\nage: 1872560\r\nexpires: Wed, 02 Sep 2026 16:57:22 GMT\r\ncache-control: public, max-age=7200\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=LczXQgWUMuEXZS4aTJSmAEdyAzuHSHAfZuCkXQ0YyHA-1788361042.0524306-1.0.1.1-Twjxm7fDo9vOXXu2xk4b54JwOQtYbqmTrR_QPpSNNGkC28XnAd9vuttkafUlth_Vyh_sNtRqaVWH0k60AyTGN8HVJktjl_zLn8HHhBhO9jAf4oI6M1KiLUPRiNu9.1fq; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Wed, 02 Sep 2026 15:27:22 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hjob4Zhdd1g4KQy1JBOrUBFcf3bdS8ke9iwMDzHqmud%2BGG4M8Xb65jat3N0XVQLdARcbanlcB97b1RLNb3EYUedk47%2BoP5FbgHpIsf%2BLPlSfSybjWbLc1gG0Zwz0Omt3tRRWgPMKZqNIrjR%2F\"}]}, {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=9nE1Arvg8xE1uWTT9AAlKikYBXSkMmtzaAUp4KREOgo-1788361042.0524306-1.0.1.1-u_EhO6vJDYBaX_MtfiKeJq00XPWhOgTZQ2XnGMxd0nowIKb87.dAStT5QhDuxKex78wvWzm_98C4RXy_pSatwhr2jDyk_FpHwdsT5xm8GaBRO3u7KJK3ctkLL649fbXyNPwy8tEybMScKYs8VgAbA3yhbfG9tfaRluzHDZkjTT0NGX.DYSNaiLApHy6bnQXg\"}]}\r\netag: W/\"04f23b29a63bb1765ab0ba25e2830d73\"\r\ncontent-encoding: gzip\r\ncf-ray: a34d5de0c8a25694-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"LczXQgWUMuEXZS4aTJSmAEdyAzuHSHAfZuCkXQ0YyHA-1788361042.0524306-1.0.1.1-Twjxm7fDo9vOXXu2xk4b54JwOQtYbqmTrR_QPpSNNGkC28XnAd9vuttkafUlth_Vyh_sNtRqaVWH0k60AyTGN8HVJktjl_zLn8HHhBhO9jAf4oI6M1KiLUPRiNu9.1fq","quoted":false,"path":"/","domain":"coinbase.com","expires":"2026-09-02T15:27:22Z","raw_expires":"Wed, 02 Sep 2026 15:27:22 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=LczXQgWUMuEXZS4aTJSmAEdyAzuHSHAfZuCkXQ0YyHA-1788361042.0524306-1.0.1.1-Twjxm7fDo9vOXXu2xk4b54JwOQtYbqmTrR_QPpSNNGkC28XnAd9vuttkafUlth_Vyh_sNtRqaVWH0k60AyTGN8HVJktjl_zLn8HHhBhO9jAf4oI6M1KiLUPRiNu9.1fq; HttpOnly; SameSite=None; Secure; Path=/; Domain=coinbase.com; Expires=Wed, 02 Sep 2026 15:27:22 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":338,"size_decoded":2886,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04f23b29a63bb1765ab0ba25e2830d73","sha1":"ab91d3cfc9f014a37ba133b035931ae2ad3c8d31","sha256":"46dccac383898e139006a45bf84e65ba53795541a843a60a9520e6f2463f874e","sha512":"f9ad11010eeeb6b024eaa26b6fe704493f948da1f59738ff3156249d3f2506ca27ff98e85931c97547dc5080254053f58ede338520b40b10b624523e90bc1bb9","ssdeep":"","tlshash":"95e07d797567251c3089c3b49bee12a043dce8d53094c851d73c6d24a1536bff563c3a","first_seen":"2025-12-10T07:22:17.18456Z","last_seen":"2026-09-02T14:58:33.188615Z","times_seen":3,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":5,"connect":3,"send":0,"wait":78,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.64unagpw3t-g0kj7y7mbf.cfd/ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase","fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","domain":"64unagpw3t-g0kj7y7mbf.cfd","tld":"cfd"},"ip":{"addr":"104.21.58.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:27.098Z","timestamp":1788361047098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"64unagpw3t-g0kj7y7mbf.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:30:49 GMT","end":"Sat, 14 Nov 2026 18:30:43 GMT"},"fingerprint":{"sha1":"CD:C3:D9:39:48:06:D5:D9:6E:F9:B4:8C:CF:E6:3C:1B:2B:17:A2:72","sha256":"66:DE:83:C1:42:E7:FF:51:92:40:2A:21:CB:5F:FA:D0:5D:F0:CF:95:05:35:63:F5:DE:10:9D:7A:A2:D7:DC:E6"}}},"request":{"raw":"OPTIONS /ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase HTTP/1.1\r\nHost: www.64unagpw3t-g0kj7y7mbf.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: xx-f,xx-h,xx-ip,xx-s,xx-st,xx-t,xx-u\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Wed, 02 Sep 2026 14:57:27 GMT\r\nserver: cloudflare\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: xx-f, xx-h, xx-ip, xx-s, xx-st, xx-t, xx-u, Content-Type, Authorization, X-Request-ID, Timestamp, X-Ts, X-Resp-Enc, X-Hash, X-Signature, Idempotency-Key, X-Idempotency-Key, X-Channel-Code, X-Telegram-Bot-Api-Secret-Token\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD\r\naccess-control-allow-origin: https://coinbase.dabaikf5.xyz\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 600\r\nvary: Origin\r\nx-request-id: b7fc0dec204099f20e0c66726b51b970\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GfX3bykkoORhrjKi7lavIzmgp3z2YFzBNRZeFs6ldsbDRfvUYTL8pPZbSqknZSVYzzWXU%2BfOI7c0mCpggJZBhKLBQBrKyxfmKm7KQsQbA0HhqmwnyomvmSbSC3Sc4QHFvsfMNrQBW9w4Vj6vzHClCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34d5e005e2c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1072,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":623,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.64unagpw3t-g0kj7y7mbf.cfd/ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase","fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","domain":"64unagpw3t-g0kj7y7mbf.cfd","tld":"cfd"},"ip":{"addr":"104.21.58.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:37.172Z","timestamp":1788361057172,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"64unagpw3t-g0kj7y7mbf.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:30:49 GMT","end":"Sat, 14 Nov 2026 18:30:43 GMT"},"fingerprint":{"sha1":"CD:C3:D9:39:48:06:D5:D9:6E:F9:B4:8C:CF:E6:3C:1B:2B:17:A2:72","sha256":"66:DE:83:C1:42:E7:FF:51:92:40:2A:21:CB:5F:FA:D0:5D:F0:CF:95:05:35:63:F5:DE:10:9D:7A:A2:D7:DC:E6"}}},"request":{"raw":"OPTIONS /ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase HTTP/1.1\r\nHost: www.64unagpw3t-g0kj7y7mbf.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: xx-f,xx-h,xx-ip,xx-s,xx-st,xx-t,xx-u\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G%2FOXB5iHKzG6YSqXlF4VIlhRBU4wdzlYGrjooNc%2FjcVPBvZLDcajuSKk3eMq7FByKhY6TmVG0UIf%2FzFbdvO4hnS4OY9c%2BETc%2FONtEYPZyQRvIk%2FLPsCA%2Bf6Q3q3FWV1iXGymFHXm8uaYFYqcwSXVrg%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: xx-f, xx-h, xx-ip, xx-s, xx-st, xx-t, xx-u, Content-Type, Authorization, X-Request-ID, Timestamp, X-Ts, X-Resp-Enc, X-Hash, X-Signature, Idempotency-Key, X-Idempotency-Key, X-Channel-Code, X-Telegram-Bot-Api-Secret-Token\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD\r\naccess-control-allow-origin: https://coinbase.dabaikf5.xyz\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 600\r\nvary: Origin\r\nx-request-id: d20d8124779af4f1cc862ebf67409bec\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34d5e3f5b25b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1109,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.64unagpw3t-g0kj7y7mbf.cfd/ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase","fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","domain":"64unagpw3t-g0kj7y7mbf.cfd","tld":"cfd"},"ip":{"addr":"104.21.58.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:52.175Z","timestamp":1788361072175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"64unagpw3t-g0kj7y7mbf.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:30:49 GMT","end":"Sat, 14 Nov 2026 18:30:43 GMT"},"fingerprint":{"sha1":"CD:C3:D9:39:48:06:D5:D9:6E:F9:B4:8C:CF:E6:3C:1B:2B:17:A2:72","sha256":"66:DE:83:C1:42:E7:FF:51:92:40:2A:21:CB:5F:FA:D0:5D:F0:CF:95:05:35:63:F5:DE:10:9D:7A:A2:D7:DC:E6"}}},"request":{"raw":"OPTIONS /ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase HTTP/1.1\r\nHost: www.64unagpw3t-g0kj7y7mbf.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: xx-f,xx-h,xx-ip,xx-s,xx-st,xx-t,xx-u\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:52 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8AtT30mvqoRn%2Frj4Biz6JLz8bXhni6nmYDmJuXIlJW9H57pUztSCgGdEuVRBbcikedx6IgB1gZd5NaM3xAazkxManRajTHcT9JActKVDSqL9gDrloVnSgTaydze0UQ%2BnqfovVFe5F4IBjaMg6WJ1Q%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: xx-f, xx-h, xx-ip, xx-s, xx-st, xx-t, xx-u, Content-Type, Authorization, X-Request-ID, Timestamp, X-Ts, X-Resp-Enc, X-Hash, X-Signature, Idempotency-Key, X-Idempotency-Key, X-Channel-Code, X-Telegram-Bot-Api-Secret-Token\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD\r\naccess-control-allow-origin: https://coinbase.dabaikf5.xyz\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 600\r\nvary: Origin\r\nx-request-id: 4fc7682c34bb61fccdf05a1cd32617d7\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34d5e9d181fb4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1099,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":253,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.64unagpw3t-g0kj7y7mbf.cfd/ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase","fqdn":"www.64unagpw3t-g0kj7y7mbf.cfd","domain":"64unagpw3t-g0kj7y7mbf.cfd","tld":"cfd"},"ip":{"addr":"104.21.58.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:47.175Z","timestamp":1788361067175,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"64unagpw3t-g0kj7y7mbf.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 17:30:49 GMT","end":"Sat, 14 Nov 2026 18:30:43 GMT"},"fingerprint":{"sha1":"CD:C3:D9:39:48:06:D5:D9:6E:F9:B4:8C:CF:E6:3C:1B:2B:17:A2:72","sha256":"66:DE:83:C1:42:E7:FF:51:92:40:2A:21:CB:5F:FA:D0:5D:F0:CF:95:05:35:63:F5:DE:10:9D:7A:A2:D7:DC:E6"}}},"request":{"raw":"OPTIONS /ping?channelId=9ff9aa425f49080f5c822e41ee13962f\u0026username=tuiliu\u0026domain=https://coinbase.dabaikf5.xyz\u0026title=coinbase HTTP/1.1\r\nHost: www.64unagpw3t-g0kj7y7mbf.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: xx-f,xx-h,xx-ip,xx-s,xx-st,xx-t,xx-u\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nOrigin: https://coinbase.dabaikf5.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvOrGEKsASxzs65E%2BuY4ptu9DF34qBlYEWXApXoBjjqcLYjOpbIkmQGeneHDcEBcnQdNIlkbk%2BwynJH8tsPQ8hvH7SocCOQTgHPm8zFS88YmNDQ%2Bgq2Xw7b8Xbf%2FVoadg7YMRtZMcQOZheDafgVJHA%3D%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: xx-f, xx-h, xx-ip, xx-s, xx-st, xx-t, xx-u, Content-Type, Authorization, X-Request-ID, Timestamp, X-Ts, X-Resp-Enc, X-Hash, X-Signature, Idempotency-Key, X-Idempotency-Key, X-Channel-Code, X-Telegram-Bot-Api-Secret-Token\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD\r\naccess-control-allow-origin: https://coinbase.dabaikf5.xyz\r\naccess-control-expose-headers: *\r\naccess-control-max-age: 600\r\nvary: Origin\r\nx-request-id: edf75a8631614ded30f67c0f12aed64d\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a34d5e7dde99b4f7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1103,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T17:18:09.314369Z","times_seen":18239468,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"www.64unagpw3t-g0kj7y7mbf.cfd","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase.dabaikf5.xyz/assets/index-D-Uk6pHS.js","fqdn":"coinbase.dabaikf5.xyz","domain":"dabaikf5.xyz","tld":"xyz"},"ip":{"addr":"134.122.205.110","port":443,"asn":152194,"as":"CTG Server Limited","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:21.165Z","timestamp":1788361041165,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.dabaikf5.xyz","organization":""},"issuer":{"commonName":"LiteSSL RSA CA 2025","organization":"TrustAsia Technologies, Inc."},"validity":{"start":"Tue, 01 Sep 2026 09:00:00 GMT","end":"Mon, 30 Nov 2026 08:59:59 GMT"},"fingerprint":{"sha1":"42:DB:97:58:4A:30:34:8E:37:AA:81:CE:FA:C2:96:DD:1D:15:F6:4E","sha256":"01:8E:6F:31:8A:11:AA:9A:96:C7:37:68:B4:26:DC:EE:71:6A:12:AB:E0:1A:C1:D5:96:52:05:94:C1:54:F8:AB"}}},"request":{"raw":"GET /assets/index-D-Uk6pHS.js HTTP/1.1\r\nHost: coinbase.dabaikf5.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 02 Sep 2026 14:57:21 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 01 Sep 2026 15:39:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a96f19d-31b7b\"\r\nexpires: Thu, 03 Sep 2026 02:57:21 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: quic=\":443\"; h3=\":443\"; h3-29=\":443\"; h3-27=\":443\";h3-25=\":443\"; h3-T050=\":443\"; h3-Q050=\":443\";h3-Q049=\":443\";h3-Q048=\":443\"; h3-Q046=\":443\"; h3-Q043=\":443\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":203643,"size_decoded":64474,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43370)","md5":"850f6c9d6fbf7bf0bcde2396698579de","sha1":"08d7477fe7c26c091ca2faa51be32eddca52fc22","sha256":"1f347ea6cef52b6d236a9a0a7f198bcd52757aaf078150aced7fd20f30a81ef6","sha512":"41024906027162a6ff54f35e3fcdecebfb5d0d53f4daca14b0edf2f62ccd28af663c787da2c9adadd81c99b2837984e45ae5c8901ed67c8171f5f3b4e6aa2418","ssdeep":"3072:aoUQguYlooaBtHINXntU6oKIimFU60Av0cQE5dQ:aoFvkDaTHIN3GHKhmFP0Av0cQEg","tlshash":"8a143cdc31a9b6626fa356b1006f1a07733924236c4d4860b120fdae7bf548561bbfed","first_seen":"2026-09-02T14:58:04.399283Z","last_seen":"2026-09-02T14:58:33.189746Z","times_seen":2,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"share.9-0xy07vfb39dus-c.live/9ff9aa425f49080f5c822e41ee13962f/foxtimes.html","fqdn":"share.9-0xy07vfb39dus-c.live","domain":"9-0xy07vfb39dus-c.live","tld":"live"},"ip":{"addr":"172.67.156.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://coinbase.dabaikf5.xyz/","date":"2026-09-02T14:57:22.007Z","timestamp":1788361042007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"9-0xy07vfb39dus-c.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 16 Aug 2026 15:24:32 GMT","end":"Sat, 14 Nov 2026 16:23:19 GMT"},"fingerprint":{"sha1":"52:DE:FF:50:80:38:7D:07:01:2C:5F:1A:20:19:8E:87:B2:22:7F:A0","sha256":"95:9E:E2:10:C8:49:32:8D:6E:05:04:3D:AA:44:89:A4:F3:66:81:7A:9E:AF:22:C6:D8:26:D5:0E:19:B8:F8:65"}}},"request":{"raw":"GET /9ff9aa425f49080f5c822e41ee13962f/foxtimes.html HTTP/1.1\r\nHost: share.9-0xy07vfb39dus-c.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase.dabaikf5.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 02 Sep 2026 14:57:22 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\nlast-modified: Sun, 19 Jul 2026 11:14:50 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjXlC7u4ZPtYLirv%2FRY%2BzSO2QsDIGPzMoklY%2Fd1pqaPdSSQxFRzM3zJPZxz%2F6gdOZT29KxvFP0HhyVhE%2BKjBkimddtlwTPpxmZ%2BoG%2BOwe0MebulR4AmkMDVwGLpKPjzpnNOOmqp40EL5QPm3ezsN\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: frame-ancestors *\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS\r\naccess-control-allow-headers: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a34d5de0b96cb4fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":347,"size_decoded":1066,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"251bad3c7b26844fe335fb2d9d8a871d","sha1":"bd4cab3770b2738c1af053bc090ec6fd20639429","sha256":"5a2cb99ec70f84b7621035005d494110adfdbe9237bfd27130767a77968e740a","sha512":"e3f7c52de96d97562b33c7a83ffa6838475fc5c765011f5af086e7117927359c7c47fd83236036b66b59bb725c809959b639cb7eba706f766564e84531cc881a","ssdeep":"","tlshash":"e3e02677bc01863a4d3247e066ebba01d1995c4362904c50e2a5d4efd8e0f59ce871fa","first_seen":"2026-08-01T20:34:10.431074Z","last_seen":"2026-09-02T15:58:05.25067Z","times_seen":9,"resource_available":false,"data":null}},"time_used":648,"timings":{"blocked":0,"dns":0,"connect":23,"send":0,"wait":625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-02","alert":"Sinkholed","trigger":"share.9-0xy07vfb39dus-c.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}