{"report_id":"d7743461-7aa2-42fb-9816-f4df5cb80c21","version":6,"status":"done","tags":[],"date":"2025-11-01T20:27:40Z","url":{"schema":"http","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"title":"404: This page could not be found.","dom":{"size":6128,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6128), with no line terminators","md5":"a34d70383ac687624b774a4232ec0100","sha1":"f5500816aebd00ca8ab20f84516cfde02326f848","sha256":"cc44e25c7dc861e7c07618213146da28dc24147b65b26929aa66f4a9a8cabfa2","sha512":"14e11824ad59c40c99f739e3e39a07c81fb0082cb1caab78a4db87bedbf4f46bd234a5eb13eaa83deac7d84f4800e67a0b974d73c2022cc3e82cb03f191408a1","ssdeep":"96:nGWWZuyot34nBWn4BzHkY0ggacxcawhoJhAS7cg1xqzcfxmK7cg1xqzcfxm2cQ85:GWWZuyot4nBWSzHkpwGwngnqzcJmvgnY","tlshash":"c8c16378a404de0ef8657c0911bebe3a50ce452f47e5cabc97d8df0449820be6b96ec4","dom_hash":"domhash27913300de51d608890ad0937c79ea9e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-06T20:27:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinbase--extension-chrome.typedream.app","ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-01-22","domain_rank":0,"first_seen":"2025-08-03T20:42:09.547199Z","last_seen":"2025-08-12T12:06:11.459618Z","alert_count":45,"request_count":9,"received_data":481963,"sent_data":4443,"comment":"","tags":null,"fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-26T22:16:47.70733Z","alert_count":0,"request_count":1,"received_data":23973,"sent_data":479,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/main-app-03612bcc77c19215.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c67a6ab0165e75f5b3d733e8d9e455b","sha1":"82f63681e756823e94b70c1fef1fa7ce1ff63090","sha256":"43c9555d4cfd69f405e458370c806b608ddcb0d01fb251fe18c860dbfa7c930b","sha512":"17d8fda9c62701e53c532549c8c1b4641b339c290004308c821e9af63eb3807ff0ab053c0d1a47fd8143962079625520ecc28759ba004e4f77fc0dfa662d69aa","ssdeep":"","tlshash":"47f0b4a92a98f67f59276e24fc936d36685f4030b4275c502812dda16c33a68d37144e","size":519,"data":"","first_seen":"2024-02-01T09:20:28Z","last_seen":"2026-05-01T16:09:38.295025Z","times_seen":243,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/webpack-0ec95126fdf2b774.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb5ee0aa2ad883aa08fa2be28398421f","sha1":"60b76362366bdd68ba94fae9a378123f5f2f5156","sha256":"562846f03fffa8619f79c3b2656fda2dc98019c62fd0dfc9ab3125af1a0124ab","sha512":"d2722f7f45be33f7b7f29b3e2c0481d6a1a1792db2834e328335cd6e6e8aeb0246269fe0a3d69621cdb08375c87a23110201da6070f375191a219c9da6e13ad7","ssdeep":"192:lU6PAa9NRRQdYpqpmOZ0ys7E7FIG2ZiaDxfM5XzP5e:lU6J1Rq1zZ0hE7FWDJM5XzP8","tlshash":"ba0274c93794f96736e268d0c42b7235b11fc433781b6890fa25ecd8a8e4959833aa75","size":8480,"data":"","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-05-01T16:09:38.29289Z","times_seen":1687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/1053-3e5d3329fc9e0e34.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8573793629b41d1a37b8cb9c662aebc6","sha1":"fa0ebb7243822d8559f1b5a1808735263e911694","sha256":"9e32968df9bfa0b342699dbcf35428058dfbd4c264b79c0a2c27507fdb4a9dde","sha512":"8bfb0e1789b9ba68de9601748f5f810f201f2f91d0da930fcc8c553e1f371b5e5987f84895f0b5b3608f49ec591eb6904a6c5274c4e45d2d4cfed4f7f655b153","ssdeep":"1536:Wlvw/nvr+hq1I0DvjOL3Ewrf+KJ7FpO+YJztwpapV2+kkO:jxRYslpVskO","tlshash":"c1b3d6b672d0f8e1079744e6843b400af3751c3a106f7490a3e6cdeab9a15ded1a3f5a","size":110877,"data":"","first_seen":"2024-08-22T00:43:51Z","last_seen":"2026-05-01T16:09:38.29429Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/1dd3208c-bcc00219a66c1dae.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f941465f2fe688898243d1f9a4021c","sha1":"86d445d2813c4a46b1c3addbf0a79b29fd586f62","sha256":"33c78f10bad582086bc129e8f0189ca23f999e822f53c6011075c377fbeb5518","sha512":"d8cee480d4c6d0d032d5a75763c15aca538d9dd243ec8fc314953e07e673cd78846b2c89228031c9eac2184068c7094d484e39b7bc1f57ef4e75699821803ac7","ssdeep":"1536:OuTjAVxxSjRF+WJISfMX3Yy3qhiPe+klegZk6QGoXbfptySvmTfRLRdxVD3DC:UVxgjRFe3YZhVJSydLRtdxVHC","tlshash":"a3f3f8ec3d5ae6666eb242e300ef1847737c2527640c4de09140edae65bc46e617bfca","size":163907,"data":"","first_seen":"2024-02-01T09:20:28Z","last_seen":"2026-05-01T16:09:38.29831Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cdc025a72d0b516bd11d9ef0a1776","sha1":"9cd34b30af473b8071638d82dcacef0373194aaf","sha256":"43ef2d3ec8d5b620ec8c5fc2bfc14c3a9836620f75a0a14a0c025ab753cf6f68","sha512":"ffad498a0fda3194476aee567df0b821e3c4886662a0dc72a53e8289c98fc3187b991df3da95f0bc2fe1b238d3478ccfac9d39a23fa2e7928ff3be8461110af9","ssdeep":"","tlshash":"3aa001f190d29c69e43741ab687511161bac490d0109014123a198e91162a098f48e8e","size":72,"data":"","first_seen":"2023-10-09T10:35:22Z","last_seen":"2026-05-01T15:41:38.781855Z","times_seen":84911,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"893cf99afaa7657ee3ef88cb65f5cb35","sha1":"946cefcfceae575fdcd11545efb184e8f9984a0b","sha256":"1ed2d815f1a61d465e07958432745d61fbf66a24e3fa3144e4384134705f0916","sha512":"d8b531681036d580dbbc7a6b7c4d8aec4241114e7e7fad859d0643a125ffde09430dade8ae9991d055f99eac4d15c7b81385b87b74433e6aedde5e083c9238e6","ssdeep":"","tlshash":"4ab0125ce400ac9e51711007256d1d0081bec95c037641d417b8d6855004cb84345c86","size":97,"data":"","first_seen":"2025-06-21T11:21:38.953742Z","last_seen":"2026-05-01T16:09:38.301016Z","times_seen":229,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a2cb21a0e28869c25d3b748273b90baf","sha1":"0ba79bbec19bac358138f3c0accebdb7c5d0ce23","sha256":"99f3ae7ee4756d6f4093de371a2f7fed509c3d8810109a6c0004a070941fcda7","sha512":"a1d01c42255e41cee99fe1f75430736d458b43e57788f32ed9c1985006f02a24a6aea7affd22117542edc5dd4301b48c0e6a68c5f08604dbc63e996d996475f5","ssdeep":"","tlshash":"51b092f0f2c00ac060250b02c2e32c8620d8dc1d41009a002586c20c2039c51c180a88","size":106,"data":"","first_seen":"2025-06-21T11:21:38.95477Z","last_seen":"2026-05-01T16:09:38.301925Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6cf22395c66ab685307481554b0b692e","sha1":"c9793f3e1c78b6ae7c2195b4db23d218ab8cd93c","sha256":"0ff4ea70e3cb0ee316f1c9e91423e070a03e16a4ba735522c8fb1b5f243bfa8d","sha512":"004d57c90ab80556d506eb9bd59d94114faaa3fd00691c10358bbb0a5ddb8d052e0a62e4c038372eb494e2b238923dcecab075b5c6e33fc4a266544f5adddfea","ssdeep":"","tlshash":"f771fb7c3008d94eed997c0912bead3a64ce456b07e99ebc97d4de01498207e7793ec1","size":3766,"data":"","first_seen":"2025-11-01T20:27:42.339534Z","last_seen":"2025-11-01T20:27:42.339534Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0a39804f34fb60fd6bfadc6d7439e92","sha1":"ba0cc49766ef9d352dfd4a995c6ec55bf26adf0f","sha256":"3fca0248dd4e5508aa27f70df62c860bd338ad71dc69c96a5452118a6aeb8705","sha512":"fae00865de06f637225abc1a97ed7cc701e6f87b5d2bcf4fcc311a41e283132c027a696aecc9f8a3b9382bdbeb3ef341d683843f623671b9dc1d18c7312cbc74","ssdeep":"","tlshash":"d6c0c090dc02cc1cc7660f221c3f0c3921ccc6f803055546ddc5ce282981b3105b0dc9","size":185,"data":"","first_seen":"2025-06-21T11:21:38.956818Z","last_seen":"2026-05-01T16:09:38.307838Z","times_seen":230,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-01T20:27:18.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\nx-middleware-rewrite: /coinbase--extension-chrome\r\nx-nextjs-cache: STALE\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding\r\nx-powered-by: Next.js\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FaEdKL8i0zPVNU4qZVPKtduv%2FDHvu6ZkWOyIx4HrHQdACJ38D4Bd4dHU%2F0XRJF6YT1Fb3oNE9n%2Bx%2BNeLVNc6aluzFkz9eTaP5Lk7twmYvNp9Q3Hztr51HB%2FPl5qyyUjv%2BenoYP5ljig%3D\"}]}\r\nx-cloud-trace-context: 6f37a3f5889fca839ac8ff287e812d0f;o=1\r\ndate: Sat, 01 Nov 2025 20:27:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\npriority: u=1,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e21d12b3bb1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":6076,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6076), with no line terminators","md5":"57a299031d1ed661bc78dee9f5cb7942","sha1":"6a7e01a4bd9f664191e016ec8aae3aac005ea1fa","sha256":"dfd154b3deaba9e3482021e8c4bb345fc245ab42aacfd8ab1d2e5cee66ffd126","sha512":"998e2ccb703ac5cc1f7198a85e2c1bdf6b0f70fe2a06f7b9ed48dde6320d9d0956506d47a6fce461eb8f86e169d1507177318932972f7cf6798a8cc214182d54","ssdeep":"96:TmyWMPOLotirnBWn4BzHkY0ggacxcawhoJhAS7cg1xqzcfxmK7cg1xqzcfxm2cQW:LWUOLo4rnBWSzHkpwGwngnqzcJmvgnql","tlshash":"eec17478a404dd0efc657c5911bebe3a50ce452f07e9ca7c97d8de0449820be6b92ec0","first_seen":"2025-11-01T20:27:42.328922Z","last_seen":"2025-11-01T20:27:42.328922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/main-app-03612bcc77c19215.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase--extension-chrome.typedream.app/","date":"2025-11-01T20:27:18.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET /_next/static/chunks/main-app-03612bcc77c19215.js HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase--extension-chrome.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d5vFSo%2F6Qw7fpJYLSeAiqH67XRW1BezVnR7lgh3Zvper2m%2FfMaA7sElqtC0Z5Gd8%2BgoFyXVV1H%2BJQ1fmAkBv3Rcea2bEJi79OdPxv6k0pWCjrWVv3YvK0oqBVC3yY7aXT30FXbk3xfo%3D\"}]}\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"207-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cloud-trace-context: e47265a633768b98aa2d00c177f10cab\r\ndate: Sat, 01 Nov 2025 20:27:19 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e21d31b99b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":519,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (519), with no line terminators","md5":"1c67a6ab0165e75f5b3d733e8d9e455b","sha1":"82f63681e756823e94b70c1fef1fa7ce1ff63090","sha256":"43c9555d4cfd69f405e458370c806b608ddcb0d01fb251fe18c860dbfa7c930b","sha512":"17d8fda9c62701e53c532549c8c1b4641b339c290004308c821e9af63eb3807ff0ab053c0d1a47fd8143962079625520ecc28759ba004e4f77fc0dfa662d69aa","ssdeep":"","tlshash":"47f0b4a92a98f67f59276e24fc936d36685f4030b4275c502812dda16c33a68d37144e","first_seen":"2024-02-01T09:20:28Z","last_seen":"2026-05-01T16:09:38.295025Z","times_seen":243,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/katex@0.16.9/dist/katex.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase--extension-chrome.typedream.app/","date":"2025-11-01T20:27:18.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/katex@0.16.9/dist/katex.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase--extension-chrome.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 0.16.9\r\nx-jsd-version-type: version\r\netag: W/\"5a9c-lO28SQaT2n884EhUbtO3kNiBAkc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 01 Nov 2025 20:27:18 GMT\r\nage: 1362245\r\nx-served-by: cache-fra-etou8220171-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 3464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23196,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23195)","md5":"1612bcd72cc503f18e2f302b3a2addd1","sha1":"94edbc490693da7f3ce048546ed3b790d8810247","sha256":"505d5f829022bb7b4f24dfee0aa1141cd7bba67afe411d1240335f820960b5c3","sha512":"7c7c1a59e6eec00ecd485e5083f69fe14783c7d5ea52962938682e6e8df25aef9bd88411e14790c1b6f8d938bb81502336d56823f23d4c4a187aef689b0702ea","ssdeep":"192:FbM9ll0weFl1zkMPgefBEALkLiqRd2s3cnNlsBRrUco7lcCSjyXR:SckMPgefBEA4LiqRd2s3cnNU5o5Oy","tlshash":"d7a23b0bb39a2b13b95d4d39b09b23f029952a1cf211c553a5ac92618cd2c7f059fbfd","first_seen":"2023-10-23T11:02:36Z","last_seen":"2026-05-01T16:09:38.295789Z","times_seen":706,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":55,"dns":1,"connect":27,"send":0,"wait":27,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-01T20:27:18.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Sat, 01 Nov 2025 20:27:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\nx-middleware-rewrite: /coinbase--extension-chrome\r\nx-nextjs-cache: STALE\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding\r\nx-powered-by: Next.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x81XnIQq%2FUyocYMEen5dSUi4qhDcwzZvuULyW5OkmWXcRMIS8nT5RKM%2F6cJ9VAbtaAtoVey%2FQbozN5PGozjV2EHWXgblRHTEJHVR1EhR%2FVKU7N1OedADrgUesauM%2BTu6sDoQXrwUlhE%3D\"}]}\r\nx-cloud-trace-context: bfe8d1f9f04b794a9ac8ff287e8125f2\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 997e21ce99ca75ab-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":6076,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6076), with no line terminators","md5":"57a299031d1ed661bc78dee9f5cb7942","sha1":"6a7e01a4bd9f664191e016ec8aae3aac005ea1fa","sha256":"dfd154b3deaba9e3482021e8c4bb345fc245ab42aacfd8ab1d2e5cee66ffd126","sha512":"998e2ccb703ac5cc1f7198a85e2c1bdf6b0f70fe2a06f7b9ed48dde6320d9d0956506d47a6fce461eb8f86e169d1507177318932972f7cf6798a8cc214182d54","ssdeep":"96:TmyWMPOLotirnBWn4BzHkY0ggacxcawhoJhAS7cg1xqzcfxmK7cg1xqzcfxm2cQW:LWUOLo4rnBWSzHkpwGwngnqzcJmvgnql","tlshash":"eec17478a404dd0efc657c5911bebe3a50ce452f07e9ca7c97d8de0449820be6b92ec0","first_seen":"2025-11-01T20:27:42.328922Z","last_seen":"2025-11-01T20:27:42.328922Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":28,"dns":6,"connect":1,"send":0,"wait":237,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/css/20029f947622952b.css","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase--extension-chrome.typedream.app/","date":"2025-11-01T20:27:18.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET /_next/static/css/20029f947622952b.css HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase--extension-chrome.typedream.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"286d7-18febb45c68\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 01 Nov 2025 20:27:19 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bHxA%2FQh78YXivQIwVWF03%2BEPcirZdY8%2Bsgj9agWqi0iGnfhwkSGFu%2BEtDhfqhHxs9TA7Sb2SKrRAv07EV6FYYrJON3%2FquSTo7oUt5IvWW1%2FXGqE2eFQrHzEokZmwbYsw9lPWdjFpKkk%3D\"}]}\r\ncf-ray: 997e21d31b94b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":165591,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2d6f6a5c9f6e60d5da3b64454379aa22","sha1":"21fab132e3bf7f5cc5c071291a675105a47172d1","sha256":"58bf9598eb0eb862053df1fd0fe0dc84e205c429bc426d9b318bbfdd427f0fce","sha512":"41c831e2c851da57167315f0944114a36a45cc9fb43a46438ebca51712d187a3b1794e90fad3d67e32a84c60b954bdef72394ecef784098eea17448e13881dd5","ssdeep":"768:qlZ446djfM85NInCWhBYcOvY4kUUuxyORq4SX5zyDhIsvHgewZNUrI1/9PyMnlXj:JFpWhBwk8R05zyDhvoeQ1/9PyMnNlFP","tlshash":"08f39593e9441d6f6c03883e50d0faa8231e58c4db2617bb7967f5d08a497db2937b0b","first_seen":"2024-08-29T17:26:33.20091Z","last_seen":"2026-05-01T16:09:38.292228Z","times_seen":236,"resource_available":false,"data":null}},"time_used":691,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":679,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/webpack-0ec95126fdf2b774.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase--extension-chrome.typedream.app/","date":"2025-11-01T20:27:18.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET /_next/static/chunks/webpack-0ec95126fdf2b774.js HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase--extension-chrome.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"2120-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 01 Nov 2025 20:27:19 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btJaj%2B98sgrCdJOrFdxGfxZcXyHU4RsfiNlRM%2FZPizBSxGT8jtGpsJwtI6sHc01bsuSordLqFjDh%2B%2BDDQhgXHuRsPKSPWDgBUG5jCPTQnq61P%2B1yJgmO1cCTt3G1DGW7SdPzMQMgCNQ%3D\"}]}\r\ncf-ray: 997e21d31b95b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":8480,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8480), with no line terminators","md5":"eb5ee0aa2ad883aa08fa2be28398421f","sha1":"60b76362366bdd68ba94fae9a378123f5f2f5156","sha256":"562846f03fffa8619f79c3b2656fda2dc98019c62fd0dfc9ab3125af1a0124ab","sha512":"d2722f7f45be33f7b7f29b3e2c0481d6a1a1792db2834e328335cd6e6e8aeb0246269fe0a3d69621cdb08375c87a23110201da6070f375191a219c9da6e13ad7","ssdeep":"192:lU6PAa9NRRQdYpqpmOZ0ys7E7FIG2ZiaDxfM5XzP5e:lU6J1Rq1zZ0hE7FWDJM5XzP8","tlshash":"ba0274c93794f96736e268d0c42b7235b11fc433781b6890fa25ecd8a8e4959833aa75","first_seen":"2024-06-18T13:53:23Z","last_seen":"2026-05-01T16:09:38.29289Z","times_seen":1687,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/1dd3208c-bcc00219a66c1dae.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase--extension-chrome.typedream.app/","date":"2025-11-01T20:27:18.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET /_next/static/chunks/1dd3208c-bcc00219a66c1dae.js HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase--extension-chrome.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"28043-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 01 Nov 2025 20:27:19 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7z%2Fc223vlDn2CpsCxKXxh1YCA26MIvzvHbTmBtBKo2ZQKutLPKLeI%2F6VGPVIOHheEP%2FeqoKAlhDpojCVM0PruAC4IoX%2BaqQJ901NbDuqJ0FTVfpRMDpbt%2BB7IjMhiKawBGdRsEoyYrw%3D\"}]}\r\ncf-ray: 997e21d31b96b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":163907,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65200)","md5":"71f941465f2fe688898243d1f9a4021c","sha1":"86d445d2813c4a46b1c3addbf0a79b29fd586f62","sha256":"33c78f10bad582086bc129e8f0189ca23f999e822f53c6011075c377fbeb5518","sha512":"d8cee480d4c6d0d032d5a75763c15aca538d9dd243ec8fc314953e07e673cd78846b2c89228031c9eac2184068c7094d484e39b7bc1f57ef4e75699821803ac7","ssdeep":"1536:OuTjAVxxSjRF+WJISfMX3Yy3qhiPe+klegZk6QGoXbfptySvmTfRLRdxVD3DC:UVxgjRFe3YZhVJSydLRtdxVHC","tlshash":"a3f3f8ec3d5ae6666eb242e300ef1847737c2527640c4de09140edae65bc46e617bfca","first_seen":"2024-02-01T09:20:28Z","last_seen":"2026-05-01T16:09:38.29831Z","times_seen":246,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/_next/static/chunks/1053-3e5d3329fc9e0e34.js","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase--extension-chrome.typedream.app/","date":"2025-11-01T20:27:18.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET /_next/static/chunks/1053-3e5d3329fc9e0e34.js HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase--extension-chrome.typedream.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 06 Jun 2024 04:00:17 GMT\r\netag: W/\"1b11d-18febb45c68\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Sat, 01 Nov 2025 20:27:19 GMT\r\nserver: cloudflare\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2w7l9WL%2BmJo06WZ1o47FLSWhAGJh%2Fu9bwL5hc%2Foj908eOYtUR4HLWw0UYcNH77HmPyIbaiTFsTSIFboE2SuEpyD7fchqQDjF23U6R%2B3%2FDbNXvkwp%2BXrTMtPDv%2BXdtONMRlaSlTBjZ1g%3D\"}]}\r\ncf-ray: 997e21d31b97b1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":110877,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8573793629b41d1a37b8cb9c662aebc6","sha1":"fa0ebb7243822d8559f1b5a1808735263e911694","sha256":"9e32968df9bfa0b342699dbcf35428058dfbd4c264b79c0a2c27507fdb4a9dde","sha512":"8bfb0e1789b9ba68de9601748f5f810f201f2f91d0da930fcc8c553e1f371b5e5987f84895f0b5b3608f49ec591eb6904a6c5274c4e45d2d4cfed4f7f655b153","ssdeep":"1536:Wlvw/nvr+hq1I0DvjOL3Ewrf+KJ7FpO+YJztwpapV2+kkO:jxRYslpVskO","tlshash":"c1b3d6b672d0f8e1079744e6843b400af3751c3a106f7490a3e6cdeab9a15ded1a3f5a","first_seen":"2024-08-22T00:43:51Z","last_seen":"2026-05-01T16:09:38.29429Z","times_seen":242,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase--extension-chrome.typedream.app/favicon.ico","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase--extension-chrome.typedream.app/","date":"2025-11-01T20:27:19.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typedream.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 03 Oct 2025 20:41:09 GMT","end":"Thu, 01 Jan 2026 21:39:51 GMT"},"fingerprint":{"sha1":"D9:39:15:BA:69:E4:A6:7A:9F:BE:78:A5:E4:D3:E4:68:32:FE:38:7F","sha256":"83:46:CB:34:9A:EA:59:7A:D2:B9:58:58:F3:FF:E8:9F:B1:26:06:A8:18:54:FE:7E:76:C7:67:46:C2:A1:74:9E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase--extension-chrome.typedream.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nx-td-version: 0.116.0\r\nx-nextjs-cache: STALE\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Url, Accept-Encoding\r\nx-powered-by: Next.js\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zbkdqygTCosJ8k0WeRNyweYFzFxRoyXqIGFiI5%2B3dnGCCSV%2BZfIgcXx6ktnRwIjVI3b9hs07HjJe1J88J6lqLgs1K47%2BuSQefuq9jVHFe4ESSIGXxO%2Bn73iDPB25scfumNyq0jMwOKc%3D\"}]}\r\nx-cloud-trace-context: 6c1ad3f584780601b0153ddeb7456e9e\r\ndate: Sat, 01 Nov 2025 20:27:20 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: BYPASS\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997e21d7dd8db1b8-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}],"data":{"size":6057,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (6057), with no line terminators","md5":"795acbbc73fe7ad9d92f31cb376327ad","sha1":"46a62471092c80406a78ae87d6358dde23a40105","sha256":"87130259a571a757ed569ceb091de1d057c91a5df37f516d02ff80bb77a43da6","sha512":"44fcba676d60f750099fcdbedcbe2649bd9a47b45dbe1bcae8df632f153aae460e486229dcaadb2e6ab5fba448495d00571ea55ae849941c4295333aa751699e","ssdeep":"96:TmyWMPOLotirnBWn4BzHkY0ggacxc8whoJhAS7cg1xqzcfxmK7cg1xqzcfxmjcQW:LWUOLo4rnBWSzHknwGwngnqzcJmvgnqc","tlshash":"4bc17378a804dd0eec657c5911bebe3a50ce456f07e5ca7c97d8de0449810be6b92ec4","first_seen":"2024-06-19T07:42:31Z","last_seen":"2026-05-01T16:09:38.299001Z","times_seen":1529,"resource_available":false,"data":null}},"time_used":690,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":689,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"coinbase--extension-chrome.typedream.app/","fqdn":"coinbase--extension-chrome.typedream.app","domain":"typedream.app","tld":"app"},"ip":{"addr":"172.67.206.36","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-01T20:27:18.564Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbase--extension-chrome.typedream.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Sat, 01 Nov 2025 20:27:18 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nLocation: https://coinbase--extension-chrome.typedream.app/\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hsqgQ4jlB5erTPd9DwHtPnkUTYRq27pvesswH6VpDm36PhaRPInIhHK2Z5bl4BGwD8CzQZ%2FxE05XTVdZZ23DCufDEs5H07Gu7RRNxwW7jC86YiajA8LXdKZPteC0KLrMLutyRWfl\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 997e21d10a18712d-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6076,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-01T15:39:35.508929Z","times_seen":14478573,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-01","alert":"Phishing Block","trigger":"coinbase--extension-chrome.typedream.app","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-01","alert":"Sinkholed","trigger":"coinbase--extension-chrome.typedream.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}