{"report_id":"d7de9e9c-c660-4749-84e4-8f428eec1997","version":0,"status":"done","tags":[],"date":"2026-09-03T18:49:23Z","url":{"schema":"http","addr":"coinbav.com/","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"coinbav.com/","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"title":"CoinBav - Home","dom":{"size":62845,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (365)","md5":"bc30f3ae8a33f7c56303bae94792fd06","sha1":"25f0a711b4a945847b88e44157e4d5c88cb2566d","sha256":"fab230eb0cbdf7b661c04b7d6079d36499a3a786795cf60d66ea074c62f2d7c5","sha512":"c35f4d8f6de9b0d710dd5da75b4b885aa7aafb26c815996fc5ebc3d77897441532c57b942b0914c6c5ab5270097a81a2f23685a39d6505f0b38b8a1d506ac97f","ssdeep":"384:cIrTuubLufnmHgavgpqDq402hlcjSo4wP0idy/ityqtP7WppFmdqJRiXoAijAUwZ:cIrTuuKqCF4D851upxnRN42WjB","tlshash":"0b533351f0f1317b551380c5baa26f0b2ed0e063c29a4927baee4ff41f99d95b84361e","dom_hash":"domhash4523ad136d9d99dbc49aa71ec3baf5cc","first_seen":"2026-09-03T18:49:26.924606Z","last_seen":"2026-09-03T18:49:26.924606Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinbav.com/","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T18:49:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":1,"received_data":35737,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coinbav.com","ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2024-09-20","domain_rank":0,"first_seen":"2026-09-03T18:39:50.719521Z","last_seen":"2026-09-03T18:39:50.719521Z","alert_count":88,"request_count":44,"received_data":1456145,"sent_data":53410,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-31T08:14:24.763257Z","alert_count":0,"request_count":6,"received_data":61712,"sent_data":2907,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-30T23:05:19.421151Z","alert_count":0,"request_count":1,"received_data":66285,"sent_data":480,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":2,"received_data":11501,"sent_data":1043,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":1,"received_data":24106,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"unpkg.com/mouse-follower@1/dist/mouse-follower.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c818593fc1ffb369aeb094a52dea0d2","sha1":"a23a8c96347597311d91d3eecaf24a5f5078a6f5","sha256":"338f68a9febba1af33276fd545cc9db00936071e8fb33f52adcab7fbe54d6f38","sha512":"1e507a3777072ee6e3bba1f2f94b53dde97f720d077b71a5e6bf7e7b74ec66c1e4433a967aea90b4655107cacca3b041553e09c96a3c0d549a31897cbf1a6353","ssdeep":"192:+Lck6kYCOexYlSp529plTwXBH1VwLSqCYy6BKWJ4D+/4s9irArlO0IQju+dD4nhg:+6HlSp528eSqCY1BKXD+/4s9irArlO0L","tlshash":"2522d048b7056f3a45cbc2f5522f011ab531d6e4a405822cb53eefe68924d48b1ebfbd","size":10864,"data":"","first_seen":"2026-09-03T18:39:55.179974Z","last_seen":"2026-09-03T18:49:26.939657Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78080,"data":"","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-09-03T18:49:26.970961Z","times_seen":2780,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/raf-scroll.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d2c46a1d981eb077b0f4ca008c5e553","sha1":"f7665b102cadf5e1bba285c8e4e8a0b715de0179","sha256":"4f60fbc47660f80d25d3488d22e36bf8fbefe21dc9fb4744d5780a70bbd1b460","sha512":"c16b4102decef346861b94e608b4982c68a6cdc00cfc64ab01ad8bbe0ebfff77f7be922a53074010a7c09423936c3d69609a841b2cc1d8297c6a78e171b5f9b9","ssdeep":"","tlshash":"6321401aed6665314023b03a9b2fb30025f700038904e814be6cd9485f37e1bdcfaacd","size":1326,"data":"","first_seen":"2025-08-30T13:19:23.895441Z","last_seen":"2026-09-03T18:49:26.948959Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/owl.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d319b6c049bdf3ea68e0f81ac7374d8","sha1":"09da0eb8194d7445ee96171b90b44a8c7335941c","sha256":"9dd4f2ad81ec31f9e030666d50dd380929b8d1f761245aaff0ba301e43173731","sha512":"6d883e0c72004cc9f306fa124d2be12c18289225b1d00731a10f2d3da137af2437bf5d082665f098e370376e7b38b0e5eb07030e4c004969144f3b5bc995f320","ssdeep":"768:HGNRlFB60spMdpEFTkc7QyP558tg74BPn8EnBYq8p2zBA96ZWb2/+eDS1QKNYQew:mNRPOpMdwllP8Y8owKQKNYlLZh+Qu16s","tlshash":"56532d0aa3f0182b8617b0a55e6f9a067235451fc949ac5d3d6ca2dc8f5c43c06befbd","size":62477,"data":"","first_seen":"2023-03-07T12:08:37Z","last_seen":"2026-09-03T18:49:26.943093Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/js/iziToast.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18481,"data":"","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-09-03T20:27:20.671367Z","times_seen":3501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23364,"data":"","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-09-03T22:47:21.272075Z","times_seen":5696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/rafcounter.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5e981e0e0a326ea27b899960ef755ae","sha1":"dec05a4e5823b24e0d8d7028a3f381bd05745bfb","sha256":"59b8489ea25e53aaff771e92c0b088c01a986f317e0531a76a27aa83ac306689","sha512":"399860c59bf41e1f442b9a5b2148f87556e5a79bbc910c2e35b04b1f892872e7ef6ea9acd26683489bfdb4f570f5c7b3c4650daa8e1c48da16ad97f26eabb9f2","ssdeep":"","tlshash":"436176edb782f4fb43a751bb461f2706753689900029c480c358d8c03d7a49bda537bb","size":3321,"data":"","first_seen":"2023-03-07T14:45:00Z","last_seen":"2026-09-03T18:49:26.962911Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/main.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27aa4cbbb3e22145d6d4a1d162e5fec0","sha1":"2029011e14f1dba795fdbbeafcc4842148596b17","sha256":"444b01eb740c18062b822ac8673e740b203ae1ef82582bec796a5471dd8b1ae7","sha512":"0ace1fd7a5aad58351de0d1f06b10bbdf2949502aaf7b294182c6bc6b69bd14b73781b4fa439c740d218c9936c087f990f5da7b4c919a5f81db9bc3f109de4a8","ssdeep":"96:JDSYu0vR1L8Xye48mGZXcuIvzqEGCqft/VXGhGM4mKVb+ot8DVcX8bu:Jet0XLgnIvzqPCqftODVcX4u","tlshash":"d991df1834b37474143f702b9b6b958836791207424dca11bd6d59ba2f903b4bee2fde","size":4565,"data":"","first_seen":"2025-08-30T13:19:23.86562Z","last_seen":"2026-09-03T18:49:26.929791Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.10.4/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d0519499dac567dc9433d2ed8c746ed","sha1":"45e1c4c20177687b08fec205fd3f6c4584a5ad16","sha256":"1b765b0cbd95391f6db0b565988eeb70ea68aa77bb9f8f7c8a880d96474c2aa8","sha512":"5440637f15943b2ce5d1b03087881d2c4690c8360fbcbad9aa5de9c3589f81be9f844bd997d8830de8701d9f9db0ccc0d097f0c3c5edec239266e27fb25c5ce1","ssdeep":"1536:Je122gp2gcrjeB7FAbulPFNQCmCU6hks36Y:E2us7F0UPFNQCmCU6Os36Y","tlshash":"735309dd3292f42642975161407f0a4bb337e958740f0918f269e4ce7e3c9a9827bf7a","size":65262,"data":"","first_seen":"2023-03-07T14:33:22Z","last_seen":"2026-09-03T18:49:26.944008Z","times_seen":1004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollreveal","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31b453cfacb5dc45d2b96d8cb2eacabf","sha1":"4e56b3ab76df5edfe168a24dcc3b95a0c7b3aa47","sha256":"9950165233dd7f4d3d8cbc26f01991de31105bd4c7bc52dfaed9e5e4d24e3e0d","sha512":"5c980f305ab7d517a7e29295420783fb42530f39f42304b5f34dac73e41365c904eab9f2ec03761cb45eaba61a9b0a5dda115ee672491992ef3d2b5616fe4ac3","ssdeep":"768:9JAXXXYdxxiW+hZDVnV1AoW4bb1TPYg2bFft4oHvhtO3aO5MhydO2lYMNtngdewE:9JAXXXYdjiW+hZ+yb1TPYg2bFl4oPh0X","tlshash":"0313e7dafb5c51378126215e988f22ce793cd267642a4c5abcacd17064f0c3d9376eb8","size":44641,"data":"","first_seen":"2023-03-07T12:21:57Z","last_seen":"2026-09-03T18:49:26.946279Z","times_seen":821,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/js/jquery-3.6.0.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-09-03T20:48:50.357524Z","times_seen":21913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/lightbox.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc435c6e83506e2bd481b613af7942af","sha1":"a1775d68a7289703b9711a5d86b2a3a4cdc4ce0a","sha256":"e0e966d59503e352e01bd6e301b5cd08b8035fc465f4b983d018362b01ed5be7","sha512":"c0d391fb62ff492f2815c4353caa5f0125ade00526837984a4c5cbeae441c15072bacbc44535a39756c429846705038a1ab28e750d8cab9d02b07585508b8670","ssdeep":"","tlshash":"3871946c3225373755cb95ff40aea898733911aaac059525f072dc2d3a2ee89073377a","size":3717,"data":"","first_seen":"2023-03-12T11:43:46Z","last_seen":"2026-09-03T18:49:26.957388Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/64c5e3cfa1e0c1690690511.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.128Z","timestamp":1788461321128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/64c5e3cfa1e0c1690690511.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jul 2023 14:15:10 GMT\r\naccept-ranges: bytes\r\ncontent-length: 20039\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20039,"size_decoded":20356,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"d61986848c9ec4ff331931521775725b","sha1":"4758ff87fc164374a790073f4593baeae41236e5","sha256":"9823c29477a06f6deb0654dc40a536594c9efa178c158c548179176a21d4d18f","sha512":"7b3df005ea32543148375a21d1fba029ac9865e8fc84a8458d9b9659247bd5defa65cbd921b64b49eb70d7e29d66588bc80158c9269452679545e72c722e3df7","ssdeep":"384:gUQUH5NAfupTOKDlrqo4Gs1psTWC1N5rNg/E3TZxNe:g9UH0YzDkEIyN3lNze","tlshash":"7c92d02a00db3df63452097887b35faecbce21c42a54dec556e22d498843607ddea69b","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.927388Z","times_seen":4,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7e0d670a81700691469.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.135Z","timestamp":1788461321135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7e0d670a81700691469.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:17:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15905\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":15905,"size_decoded":16222,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"709b4cd2a1e1c226ff98a24738e0b21a","sha1":"6c1c6a8b08191c54789289dce5fae46708128ca6","sha256":"7c1229b7f1af030d4591895fd2fabc778b6645836734b85a76a585fc1a7168fb","sha512":"5de8bbaf59d6497c9dd32cfe796f247e12d9f9f75bb07a70b36eb3c5880b7e10d1871545b5629198410d143be6c544f5152e9310b86eefda28cc26cf73057166","ssdeep":"384:Twj0H2DoA9A2fcrsrIIgp/n/YVjy0/6znKRd8ZEzqu2:jwfcrs2pYVhyznKgZEQ","tlshash":"30629eaba1345b21ea46f02ee85973442a418d26ff0ddce72b813c946f2d657bb33191","first_seen":"2023-12-05T18:30:02Z","last_seen":"2026-09-03T18:49:26.928341Z","times_seen":4,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/64c5e409780f61690690569.jpg","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.137Z","timestamp":1788461321137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/64c5e409780f61690690569.jpg HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 30 Jul 2023 14:16:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12108\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12108,"size_decoded":12426,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 400x400, components 3","md5":"1553cbdbda9e4eaefb4ffcb75661e4fa","sha1":"30a041d6d1d4d6e7a8c1e2d2b16767dd5a96079c","sha256":"569dcce5acb8ddd75146c7f109ca11c565dff3581e403c3583bd65b251435a27","sha512":"88cb0e54a8b119706633cbd0812aeadd4b2844495d050d91323a1b32f7bee7cdb499edefcf28952f988e768145fcdbe6ed433d49150fc9eb12c1e702ad5687a4","ssdeep":"192:PwREjoq+dG4wPbrUsDn9mUFwA1wQ4craUwEadP1UwPmqTdGmoQv:Pq37gqsAUFGcr4mweqxoQv","tlshash":"e04218b4f3dbd796b30b801d993d3eb743d9aac100d64a6b09c76d908526f70620b93c","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.928893Z","times_seen":4,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/main.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.107Z","timestamp":1788461321107,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/js/main.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1190\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4565,"size_decoded":1478,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"27aa4cbbb3e22145d6d4a1d162e5fec0","sha1":"2029011e14f1dba795fdbbeafcc4842148596b17","sha256":"444b01eb740c18062b822ac8673e740b203ae1ef82582bec796a5471dd8b1ae7","sha512":"0ace1fd7a5aad58351de0d1f06b10bbdf2949502aaf7b294182c6bc6b69bd14b73781b4fa439c740d218c9936c087f990f5da7b4c919a5f81db9bc3f109de4a8","ssdeep":"96:JDSYu0vR1L8Xye48mGZXcuIvzqEGCqft/VXGhGM4mKVb+ot8DVcX8bu:Jet0XLgnIvzqPCqftODVcX4u","tlshash":"d991df1834b37474143f702b9b6b958836791207424dca11bd6d59ba2f903b4bee2fde","first_seen":"2025-08-30T13:19:23.86562Z","last_seen":"2026-09-03T18:49:26.929791Z","times_seen":3,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollreveal","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.111Z","timestamp":1788461321111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /scrollreveal HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 55\r\nlocation: /scrollreveal@4.0.9/dist/scrollreveal.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a356ee18f93e56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T22:47:56.559838Z","times_seen":18263802,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/64c5e3a4055c11690690468.jpg","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.131Z","timestamp":1788461321131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/64c5e3a4055c11690690468.jpg HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 30 Jul 2023 14:14:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18874\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18874,"size_decoded":19192,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 400x400, components 3","md5":"4cd47b89066a77b7334997bd02e47ddd","sha1":"28884d5a46c3f73f31b6baac107fb2c1e327b2b2","sha256":"6bd21f4ed4230d75b9ddce1f9fe757fa7fd0696b777b4516e94706e620337156","sha512":"f6af724b57a8bdc454f8e44062db755301bff3c41d0fadc2c37c2d1b0efe355126f0c0857a54ea4e5073928f59ea85200b5381d3a0bd3bfd612815127cc21655","ssdeep":"384:PrXw+tcVYRvspxpCiPvGKE1xvsgsBjQPVT185vwZ8gu1XW:Pz7c+Rvdi9EDsrjQ9p8xwZ8guBW","tlshash":"e1827b75fbd7e7992397610ea53c7c7b039114c509c1028b4ae32c2a8786f7a35676bc","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.938929Z","times_seen":4,"resource_available":false,"data":null}},"time_used":606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":605,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/mouse-follower@1.2.1/dist/mouse-follower.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.338Z","timestamp":1788461321338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /mouse-follower@1.2.1/dist/mouse-follower.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a356ee1a5be056b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 246021\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 03 Sep 2027 18:48:41 GMT\r\nlast-modified: Mon, 31 Aug 2026 19:49:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:M49oqf67oa8zJ2/VRcydsAk2Bx6Psz9Srcq3++VNbzg=:\r\nfly-request-id: 01M1CM69VSTZ3X3KA0TNHFQVQT-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":10864,"size_decoded":3832,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10816)","md5":"0c818593fc1ffb369aeb094a52dea0d2","sha1":"a23a8c96347597311d91d3eecaf24a5f5078a6f5","sha256":"338f68a9febba1af33276fd545cc9db00936071e8fb33f52adcab7fbe54d6f38","sha512":"1e507a3777072ee6e3bba1f2f94b53dde97f720d077b71a5e6bf7e7b74ec66c1e4433a967aea90b4655107cacca3b041553e09c96a3c0d549a31897cbf1a6353","ssdeep":"192:+Lck6kYCOexYlSp529plTwXBH1VwLSqCYy6BKWJ4D+/4s9irArlO0IQju+dD4nhg:+6HlSp528eSqCY1BKXD+/4s9irArlO0L","tlshash":"2522d048b7056f3a45cbc2f5522f011ab531d6e4a405822cb53eefe68924d48b1ebfbd","first_seen":"2026-09-03T18:39:55.179974Z","last_seen":"2026-09-03T18:49:26.939657Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/fonts/la-solid-900.woff2","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.510Z","timestamp":1788461321510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/fonts/la-solid-900.woff2 HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 96752\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":96752,"size_decoded":97070,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-09-03T18:49:26.940683Z","times_seen":13935,"resource_available":false,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/json/particles.json","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.517Z","timestamp":1788461321517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/json/particles.json HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2521\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2521,"size_decoded":2765,"mime_type":"application/json","magic":"JSON text data","md5":"361c92e77d94721112d92f4cf6eff62a","sha1":"15e1ca4b02581520d0c4640816863a8d7586d003","sha256":"e8a1c034e8c84b14b9e5cfe983bcb1c77cd043ecdc3f4494d7beffdc65b9b868","sha512":"78c5f38d3da2d3d403eb5132e4d88fc0b7879dac2dc5e25e260298cd78fea3bd1a1aadb5e07b54e902077f307d5b4133f8cc833fa8dd164120765a57f6ddd90a","ssdeep":"","tlshash":"a051042de9b41cb3108ab03908be9247b530d55b0d2a3d35b94c859c5f0ee7da2be7e5","first_seen":"2025-08-30T13:19:23.910427Z","last_seen":"2026-09-03T18:49:26.942077Z","times_seen":3,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/owl.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.105Z","timestamp":1788461321105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/js/owl.min.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12600\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":62477,"size_decoded":12889,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (933)","md5":"8d319b6c049bdf3ea68e0f81ac7374d8","sha1":"09da0eb8194d7445ee96171b90b44a8c7335941c","sha256":"9dd4f2ad81ec31f9e030666d50dd380929b8d1f761245aaff0ba301e43173731","sha512":"6d883e0c72004cc9f306fa124d2be12c18289225b1d00731a10f2d3da137af2437bf5d082665f098e370376e7b38b0e5eb07030e4c004969144f3b5bc995f320","ssdeep":"768:HGNRlFB60spMdpEFTkc7QyP558tg74BPn8EnBYq8p2zBA96ZWb2/+eDS1QKNYQew:mNRPOpMdwllP8Y8owKQKNYlLZh+Qu16s","tlshash":"56532d0aa3f0182b8617b0a55e6f9a067235451fc949ac5d3d6ca2dc8f5c43c06befbd","first_seen":"2023-03-07T12:08:37Z","last_seen":"2026-09-03T18:49:26.943093Z","times_seen":147,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":465,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/gsap/3.10.4/gsap.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.113Z","timestamp":1788461321113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/gsap/3.10.4/gsap.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23292\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4348023\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 22 Apr 2022 16:32:30 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pddu4Vz0AtHJ0%2FDb11eoX5t8K5sh%2BuBP2JwXMeS2G8HgVmk26IyuBjDE6J3wLZF3kzLZyWBlaa%2F3IhYCawy4FMF%2B1tD0WniZmvR%2BmfeyC4JMpPE6sYZgMxNXfUFi5Ox1yeNq0Afp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a356ee19183c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65262,"size_decoded":24315,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64964)","md5":"7d0519499dac567dc9433d2ed8c746ed","sha1":"45e1c4c20177687b08fec205fd3f6c4584a5ad16","sha256":"1b765b0cbd95391f6db0b565988eeb70ea68aa77bb9f8f7c8a880d96474c2aa8","sha512":"5440637f15943b2ce5d1b03087881d2c4690c8360fbcbad9aa5de9c3589f81be9f844bd997d8830de8701d9f9db0ccc0d097f0c3c5edec239266e27fb25c5ce1","ssdeep":"1536:Je122gp2gcrjeB7FAbulPFNQCmCU6hks36Y:E2us7F0UPFNQCmCU6Os36Y","tlshash":"735309dd3292f42642975161407f0a4bb337e958740f0918f269e4ce7e3c9a9827bf7a","first_seen":"2023-03-07T14:33:22Z","last_seen":"2026-09-03T18:49:26.944008Z","times_seen":1004,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":7,"connect":13,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/logoIcon/logo.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.123Z","timestamp":1788461321123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Nov 2024 05:37:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30298\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":30298,"size_decoded":30615,"mime_type":"image/png","magic":"PNG image data, 385 x 103, 8-bit/color RGBA, non-interlaced","md5":"957e59b1459cea67db7c460da4cff9c7","sha1":"c78ef4eaecf4c87587714bbed6204e25db1b9d12","sha256":"bab4634cda7c37e393ed4af91d7ed7e58c01dc21f524581c5714a437ff80e544","sha512":"b86980886c0e5bbfd1a5e7ff27eddb0db7c824ef385386dec013a019999a29958aa40eef9a36f3adae5308453c8488e7bec38a6195e73f48e609fe0942cc75a7","ssdeep":"768:zuJoIjlwAIxxwERkE8KV/JCjsJrSytmINRd7ax:CJoXP/RkE8KlfQINnGx","tlshash":"2dd2f15241cc723a79bfb1694e54c71d7a8f3e84c2a7e7313ca244485a7bbe2149393b","first_seen":"2025-08-30T13:19:23.863598Z","last_seen":"2026-09-03T18:49:26.944618Z","times_seen":3,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7fd1d28561700691921.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.145Z","timestamp":1788461321145,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7fd1d28561700691921.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:25:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 28093\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":28093,"size_decoded":28410,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"0650339927126da75dbd02fb737cac8f","sha1":"df3b24f6b8af9588e16195474856bb18f7f18e40","sha256":"916b693fe00dd961ec21dd5a9a937aae333f5b9e4769d65ee91ac73ba3356e85","sha512":"346b8f446bfb68e858257a7e07c9da5b2fe6d954fd31d8fc2c30cf9298e9420a35c43afc357be3df6f9bf9511220094e38e3c5367627e90b0ae25b6c7dcf6a0a","ssdeep":"768:eWAQorN2FzxO17cQny3Qq34tiZulBZ52Al:esoxAk1oQny3UiirgC","tlshash":"34c2d0f8730df8bb76638723d5e959b0265b7cd457f9c9a2020c68337c4898e636271a","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.945586Z","times_seen":4,"resource_available":false,"data":null}},"time_used":762,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":761,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/scrollreveal@4.0.9/dist/scrollreveal.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.233Z","timestamp":1788461321233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /scrollreveal@4.0.9/dist/scrollreveal.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a356ee19baca56b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1815868\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 03 Sep 2027 18:48:41 GMT\r\nlast-modified: Thu, 06 Aug 2026 09:28:57 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:mVAWUjPdf009jLwm8BmR3jEQW9THvFLfrtnl5NJOPg0=:\r\nfly-request-id: 01KT5DY5W9VZ4344EZ5F0GB5TQ-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44641,"size_decoded":12283,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"31b453cfacb5dc45d2b96d8cb2eacabf","sha1":"4e56b3ab76df5edfe168a24dcc3b95a0c7b3aa47","sha256":"9950165233dd7f4d3d8cbc26f01991de31105bd4c7bc52dfaed9e5e4d24e3e0d","sha512":"5c980f305ab7d517a7e29295420783fb42530f39f42304b5f34dac73e41365c904eab9f2ec03761cb45eaba61a9b0a5dda115ee672491992ef3d2b5616fe4ac3","ssdeep":"768:9JAXXXYdxxiW+hZDVnV1AoW4bb1TPYg2bFft4oHvhtO3aO5MhydO2lYMNtngdewE:9JAXXXYdjiW+hZ+yb1TPYg2bFl4oPh0X","tlshash":"0313e7dafb5c51378126215e988f22ce793cd267642a4c5abcacd17064f0c3d9376eb8","first_seen":"2023-03-07T12:21:57Z","last_seen":"2026-09-03T18:49:26.946279Z","times_seen":821,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rajdhani:wght@600;700\u0026family=Roboto\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.427Z","timestamp":1788461321427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Rajdhani:wght@600;700\u0026family=Roboto\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 18:48:41 GMT\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8170,"size_decoded":2361,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a815cb2ccc27fd51af4d8159c8fc0cc0","sha1":"790c62afe5fb15dff54e9e9509c570a7e263b75c","sha256":"7a4c0d66eeefd4f9bbf61fb03d926214881a3a0810155c2da68844c797df119a","sha512":"435b66ca77a4d243e5f992207a9badd3715fd14e12c4d8576a570cdbdc63b81cae866176d71c0cc6f743f680b173cc002fe1abbc12e053c78045c596dec4c930","ssdeep":"192:1OHSVeCBiNsmNRNkNokNEqbN2bqGIwV4BNCNCwNX:4sMHi3XhKqY4XY5X","tlshash":"8bf15f91041b54409b835cd223ce7f36fe1f53106444d0b9ebfd5aaaacebca643a435e","first_seen":"2026-02-23T00:37:53.345034Z","last_seen":"2026-09-03T18:49:26.948389Z","times_seen":7,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/raf-scroll.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.102Z","timestamp":1788461321102,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/js/raf-scroll.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 486\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1326,"size_decoded":773,"mime_type":"text/javascript","magic":"ASCII text","md5":"4d2c46a1d981eb077b0f4ca008c5e553","sha1":"f7665b102cadf5e1bba285c8e4e8a0b715de0179","sha256":"4f60fbc47660f80d25d3488d22e36bf8fbefe21dc9fb4744d5780a70bbd1b460","sha512":"c16b4102decef346861b94e608b4982c68a6cdc00cfc64ab01ad8bbe0ebfff77f7be922a53074010a7c09423936c3d69609a841b2cc1d8297c6a78e171b5f9b9","ssdeep":"","tlshash":"6321401aed6665314023b03a9b2fb30025f700038904e814be6cd9485f37e1bdcfaacd","first_seen":"2025-08-30T13:19:23.895441Z","last_seen":"2026-09-03T18:49:26.948959Z","times_seen":3,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/css/iziToast.min.css","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.108Z","timestamp":1788461321108,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9934\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41515,"size_decoded":10294,"mime_type":"text/css","magic":"ASCII text, with very long lines (41434)","md5":"73911512e5da7810ed395b6470f0b440","sha1":"8448e41d23abac8e9a8b96c97ef00a470cc0b671","sha256":"87a5e9d55944014a04b2b047fbc3689e71880020dc4cf90502697969598c23ca","sha512":"77a1e189337b26e164012a3b036ea595e3e58c9eb2d28b14566dd88f1b4a53562880240f12cecc16190881783dce6b8b165006d02de5cd5f9b79eeae620dee1b","ssdeep":"384:pV5zpPVWahj8Ik/4kYip7pHRxJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:zPVNhlHgppVf1oWQA1","tlshash":"451345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.950063Z","times_seen":4,"resource_available":false,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/64c5e385950131690690437.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.135Z","timestamp":1788461321135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/64c5e385950131690690437.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jul 2023 14:13:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 63169\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":63169,"size_decoded":63486,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"d1ea9c505b9579144d6fb076a7eeead4","sha1":"6c60d03ea0a084831fef33fd3fd25798ed59e3d3","sha256":"b0385e50783e742f0d75223fd9c3a576bcc8feccb6b1883f28e7e0ab50f245e1","sha512":"5516977c158e3fd08c82274ed7792cbc2513451b54a3bc608e53dfe9eecaf73f71dafb21647eaad96232739fdbf1fdc0fa0d1d6ecafaba64cc744524039f2cad","ssdeep":"1536:K3V8gONOthyMVWs2zG7ljxFOQZ/JIou+/XUfx6+frmHby69e:K3V8gONOHl8sguljxxu4UfxffroR9e","tlshash":"395302e5ac3dd1e4421fd88e5c9e8182527173f4bfac842e657d8ea7225f38dc86060d","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.950675Z","times_seen":4,"resource_available":false,"data":null}},"time_used":770,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":600,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7fb8cb2341700691896.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.136Z","timestamp":1788461321136,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7fb8cb2341700691896.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:24:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12669\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12669,"size_decoded":12986,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"24ef90b49f9ca26969bcbbbe35f84ea1","sha1":"60929b6ddd4519d29eb2d3ab544b6fb6ccdf3b39","sha256":"88b23cd644e9cd79435143b3346c30d47c8d56292ea43dc83e7a5f9203bceede","sha512":"6d8855577e693e15124ac25ba40401941d49102b8f8cbbcc3a8b80b0d1fbdac6d76c6d8b23843f7477a03bc743797e1417c347530261643969b24e206b671b04","ssdeep":"384:74M0lFG6U9FXD9OmCprbQQ49I4v1tjbHBpJqHU:7OmR9FA98QII4XHdd","tlshash":"35427dc99c203adce70f6acb040d1eb34572a359b4334ef888176667757ad2b374187a","first_seen":"2026-09-03T18:39:55.271893Z","last_seen":"2026-09-03T18:49:26.951929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":601,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7f5f960011700691807.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.138Z","timestamp":1788461321138,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7f5f960011700691807.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:23:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18242\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18242,"size_decoded":18559,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"dacc4a3f58b0ed16eaad4a92457b9a8c","sha1":"b4105354905e54065645b4e648734367804250be","sha256":"0b19015ec225cf9ece9b492a840e88edfc8e45ca7f1fc3e497f8df40bf7faa3b","sha512":"2e0df4a5f0c84567aff79a4db02a04ff76a03e8c618c3f2f2dad2530b243d1e7618efb6d8aeb3e60694b18e054a230ac83cd759b892d0a1413208c14176f5fad","ssdeep":"384:hK7aBciw+SGeLmTzI/k4EbOYcBghvNrsFD+DyipOpLMO6F5M:hK7hnqzI/k4EbOYcOhlrg+2QO905M","tlshash":"ed82be69c5727fbe392c234ce48fb0b883c0f6a5849022a41d1791a96fedf002dc7ca1","first_seen":"2025-08-30T13:19:23.924001Z","last_seen":"2026-09-03T18:49:26.952578Z","times_seen":3,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7f21692a61700691745.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.142Z","timestamp":1788461321142,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7f21692a61700691745.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:22:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14643\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14643,"size_decoded":14960,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"b2bc0ffc605e7cfb7c3f3bbc773e10de","sha1":"39eccaf1efafb77ec921a4abbca48aad894d87d9","sha256":"34529dd8944e43253206bde08071eb2a853d07dc60ef517e6b845277b44e70af","sha512":"0befd4566fe7e8798e50a50401277341fe05ecc74d48a103972793fe59b180fdd923ef1c60f22fa5ce135f25e092d3603540a1d56c72b5894cc5c1e33eb384c2","ssdeep":"384:Mhb922lmYulAhodIE38MWv4JG0p/XD53QASogsATt5ho8ODd:Mh59ltulAhOIEsMWvEG0FT53QASoRAT+","tlshash":"fa625cdd42fb58bcc905b8957e9a6082f5fd0e186e35bd609a9be44d2c2efc7d480070","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.953223Z","times_seen":3,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7e35e85c21700691509.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.143Z","timestamp":1788461321143,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7e35e85c21700691509.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:18:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7539\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7539,"size_decoded":7855,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"0a549ce3a4747073a7e03c1915fd7417","sha1":"93b408e17dbb898935dc377e6bb7978507e6c80f","sha256":"3c0721e8d81b3b2743c762d5431ba13bad2bc4f37884e39d51881d5a0b81a113","sha512":"9daccdb7a648e6ce37d05298e7df9256c16b7e0d81cf266296bebea0d46e6e524a6bbbadd6b325513cd6a5b46e336ab8652fa68b73ca37ddc8928bbde325b907","ssdeep":"192:Q77s8ektyr8idaG3EK48DQVfxn8PW3jqyT8ImR:g7sAtyoigGzs/nXjqmmR","tlshash":"30f17d515fdcaf076d9f8a4fda5252d1d9c910320dbda39c573acbd8229a84dacc0770","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.953966Z","times_seen":4,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":763,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/64de100c3c7db1692274700.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.144Z","timestamp":1788461321144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/64de100c3c7db1692274700.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 17 Aug 2023 22:18:20 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27580\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":27580,"size_decoded":27897,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"8c4075da147e915ffc12a3c1621b90f0","sha1":"01d50ee08671d722a13dbfa915d2865ca6b0cfee","sha256":"4d4fc353b850b65bf31676dfc78322dc82005916f92efe7bc806f5ff1d1a31a0","sha512":"9a0e8d11141fea11076cde9c73d211d14623939b24c1862a425d157e0e1708dbfcea57b27a00643f963a6175401f456b190d3777496cdbf81ead5559e2231692","ssdeep":"768:9ItqqkVHvsgApPW38noFLaViv1EPLrKvLU5:9+5kVH0p1k9oVivHS","tlshash":"45c2f1d2a3a6b0f1487297b0ff275011a4c2f6eabd7dbd467c3152f102589d8ee30a19","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.954525Z","times_seen":4,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":762,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/mouse-follower@1/dist/mouse-follower.min.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.075Z","timestamp":1788461321075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /mouse-follower@1/dist/mouse-follower.min.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 64\r\nlocation: /mouse-follower@1.2.1/dist/mouse-follower.min.css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a356ee18d90556b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T22:47:56.559838Z","times_seen":18263802,"resource_available":true,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":6,"connect":14,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/css/main.css","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.081Z","timestamp":1788461321081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/css/main.css HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10436\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":65303,"size_decoded":10797,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"87469a6b3b74684c83d81347033c8e89","sha1":"ca3cb0db40b811e61033b3d3bd762dad2832df84","sha256":"9ca1ed808c2205ac09a76e8e106544f523d09f9b2d1731d2cde39b91c5a50f08","sha512":"bc4626956e08a0c245f11a496b30686bfd6f2d2008d0b637c45a705319886a9e7af3879d951847953157dfabdd80ba3456c3a9d71706175873002b09d5e4d090","ssdeep":"1536:siOZvuZnPj7ox03iKhg9RM8muPzO9R/u4mZnLZnDDZiJZn/ZnCZnSgZnu0Zn/pZl:vOZvuZnPj7oxbKhCZnLZn/ZiJZn/ZnCd","tlshash":"b65396637b452888612fa0d9bfd6db94277e1592ee0e0ddeb191397c93883e801b3d4d","first_seen":"2025-08-30T13:19:23.847204Z","last_seen":"2026-09-03T18:49:26.955748Z","times_seen":3,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/js/jquery-3.6.0.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.096Z","timestamp":1788461321096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 30266\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89500,"size_decoded":30555,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-09-03T20:48:50.357524Z","times_seen":21913,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/lightbox.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.100Z","timestamp":1788461321100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/js/lightbox.min.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1362\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3717,"size_decoded":1650,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3717), with no line terminators","md5":"bc435c6e83506e2bd481b613af7942af","sha1":"a1775d68a7289703b9711a5d86b2a3a4cdc4ce0a","sha256":"e0e966d59503e352e01bd6e301b5cd08b8035fc465f4b983d018362b01ed5be7","sha512":"c0d391fb62ff492f2815c4353caa5f0125ade00526837984a4c5cbeae441c15072bacbc44535a39756c429846705038a1ab28e750d8cab9d02b07585508b8670","ssdeep":"","tlshash":"3871946c3225373755cb95ff40aea898733911aaac059525f072dc2d3a2ee89073377a","first_seen":"2023-03-12T11:43:46Z","last_seen":"2026-09-03T18:49:26.957388Z","times_seen":189,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7d514543b1700691281.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.139Z","timestamp":1788461321139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7d514543b1700691281.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:14:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18861\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":18861,"size_decoded":19178,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"231dfcf9cd9d4cb6bf91cf7e65a51b7e","sha1":"0877e9d852de6f2481f062ec9aefe2db05c09542","sha256":"c58ea1577af2caff05b40a16d8e122571fc8771f6d76f38fa8872c9a0a5b1645","sha512":"073489533e1ad75b006045d2103fa5d14387d844d020ce24295cbf56acef6809d94ab2b34437a964567c28f1e13f7a91841e36e84af4443e9c510eb0105b0fd1","ssdeep":"384:GVMce3fjD0pLU6Xbr01+JOLet3AmKSHzZm6ZqQbtm/yhL8xHs+Y:GV3ePjD0pIe03Ct3AmZHzZvtmqyxvY","tlshash":"72828f3a4c8bce0e8b8dada753063b58df30104da5743e92892ce9a6f711cd88fd0765","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.958909Z","times_seen":4,"resource_available":false,"data":null}},"time_used":768,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":766,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/css/owl.min.css","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.076Z","timestamp":1788461321076,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/css/owl.min.css HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1015\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4332,"size_decoded":1375,"mime_type":"text/css","magic":"ASCII text","md5":"8a782e3ae332189cabbf5dde2a4f33e5","sha1":"814c2f0b0c1e90c0137e879aea18ddc2c548106a","sha256":"90ca7abdba42c99c70e1782754f7016dfcebb40e511517785080d05b7c2993ba","sha512":"3d87693e062bb574b39ded0be4d87791fa1e973a447e08fb0b9b8e9b75ed64544a81fb3d9d0de0282c23aab043e1bfdfeb8b0def1db566a192d58794049659f6","ssdeep":"96:A4/0tDNEgg0eskxe3z/Ek1A02Fbyl1JFb05lqYw52j6:F/03EgNeYEk1NIY6lqV2j6","tlshash":"cd91bce42467010e080e53541bed0b2a37fd8493e819da08f6ff570a8f9ae5c919fb5e","first_seen":"2023-04-07T07:16:17Z","last_seen":"2026-09-03T18:49:26.959574Z","times_seen":214,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":328,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/css/color.php?color=f0b90b","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.085Z","timestamp":1788461321085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/css/color.php?color=f0b90b HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/css;charset=UTF-8\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-length: 839\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":2792,"size_decoded":1170,"mime_type":"text/css; charset=UTF-8","magic":"assembler source, ASCII text, with very long lines (369)","md5":"fd5a943dff03409aeea65f5812209c6b","sha1":"c9252cc84e6d7e18cfc59a45100608af07752f9a","sha256":"0a8f09b8faebc4e167cab10d73503225b08a5e4ac1330592da2b0f045b092a41","sha512":"f30a8b872b3d55ebeadff7000a8238611999104d050da7ec6a2200f7e6f2a277af1fcdb8d007b15b8e256fa5e78ac98cca6824c5f056004d11646e5ab2894946","ssdeep":"","tlshash":"5c51eb55e2a6289e322b19fa2565e3b417bc22dee90c0bf8b2367ab007043a51333553","first_seen":"2025-08-30T13:19:23.912067Z","last_seen":"2026-09-03T18:49:26.960793Z","times_seen":3,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.087Z","timestamp":1788461321087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Ubuntu\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 18:48:41 GMT\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1983,"size_decoded":1210,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"73dd84a0f895126b4fcae3c4d97a1a4c","sha1":"972dd8bb117d576a8b3dec2b4aa72d5f141ae010","sha256":"630c353679a0ce1e6b18f8cb4c5cdf498e78686163bcde71a931011293fe681c","sha512":"d8374d692b39da2fea0e80c2b6c50a0088608f6d476983ca39a82a84be8dac799a2667644a8225e82747309adbd50f52267663d675435cff5e7ea5f69075d866","ssdeep":"","tlshash":"5d417aa2145a9400ea934cc223cfbf2aad4f25556049c5ba6bfe1cd89ce6c3a4359f4d","first_seen":"2025-09-03T00:17:11.16488Z","last_seen":"2026-09-03T18:49:26.962221Z","times_seen":1142,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":37,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/js/rafcounter.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.103Z","timestamp":1788461321103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/js/rafcounter.min.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1292\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3321,"size_decoded":1580,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3321), with no line terminators","md5":"b5e981e0e0a326ea27b899960ef755ae","sha1":"dec05a4e5823b24e0d8d7028a3f381bd05745bfb","sha256":"59b8489ea25e53aaff771e92c0b088c01a986f317e0531a76a27aa83ac306689","sha512":"399860c59bf41e1f442b9a5b2148f87556e5a79bbc910c2e35b04b1f892872e7ef6ea9acd26683489bfdb4f570f5c7b3c4650daa8e1c48da16ad97f26eabb9f2","ssdeep":"","tlshash":"436176edb782f4fb43a751bb461f2706753689900029c480c358d8c03d7a49bda537bb","first_seen":"2023-03-07T14:45:00Z","last_seen":"2026-09-03T18:49:26.962911Z","times_seen":66,"resource_available":true,"data":null}},"time_used":467,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7d1862e531700691224.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.133Z","timestamp":1788461321133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7d1862e531700691224.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:13:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 7530\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7530,"size_decoded":7846,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"8991e102ef4dc32db4b3362a02d88c9a","sha1":"5a873e73356f1882f6c9d5a888c2bef568eadf15","sha256":"fad16f88a911b049236e9a580014adfde7783e3342f728f3741f6d42e039ee75","sha512":"769c369ee4987c22e9bffca8d12ad40e88295e2c5909ab76f35352d1f658315586a1919639a80828fa3fa50953d3654e01962c214d21806e0e9d6ff1327537cc","ssdeep":"192:SSfCVddNHUudYe0GRofp96XiMM7RgEumPB0KKjRMxZ:JqVdwuSe0dfL0i/gEuqiKC2Z","tlshash":"eaf1757452b665b2ec1b26bb930357a96cae472c3d864cfb10d88bc935f614c0fe2274","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.963989Z","times_seen":4,"resource_available":false,"data":null}},"time_used":603,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7fa8906b91700691880.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.140Z","timestamp":1788461321140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7fa8906b91700691880.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:24:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14631\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14631,"size_decoded":14948,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"6d864c7debc2ac94d53b1c2dc40fbdd8","sha1":"653dd09e88b2e1c4cd18ae6b4759a02dfdad039e","sha256":"bb4e10897f84611d32ae6a98a2e72b3e1d91de8db2ef69dfed9460b60ed1f1b4","sha512":"8e90c937bfd1bd0b6a91a8d03e19a96d914010ff85ba77b70173c6346522df12eb6c051e75cdd5216e6768fe018e36a392ed6fa911495fe8c2bab2470a711a1f","ssdeep":"192:T36xWBFc9IUYvQeuSpfN4z+wMgDWyDQvTbgFchhmltWyIwjijMqwakhGsE1oFHJm:j6QBFAGvQeuzVDWAybTryIalhGsOmHb8","tlshash":"bf626de81ccba2f79e5623706e126ee8f479422649bd03b46c0d4fb9165102c97f42a9","first_seen":"2025-08-30T13:19:23.886712Z","last_seen":"2026-09-03T18:49:26.964703Z","times_seen":3,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":765,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e8019b789b1700691993.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.146Z","timestamp":1788461321146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e8019b789b1700691993.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:26:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 8655\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8655,"size_decoded":8971,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"d4ee4210de81c53f2540eb3d81a2dff4","sha1":"560ec727c438ca0ebf030532525d5bf86748c3f8","sha256":"b2c5e0dfc03bc95160c34da06652fde98704c3ee5ad43bd24f281a40cceb341a","sha512":"2e9d739441495bde14a7d97e630c59546dae73ae1739ae06a66a9dbf70059fda4f7f7296589271a63cffb564e84f60d162ea2d8c19fd2c1852cf37b4474da70f","ssdeep":"192:DW3oU7UNOvU0SPkw7UFsVZ9FjsZ0OSLy482LEUE+KHR7oaLD:jU7UVhPJ7Uy9RXLWBF","tlshash":"5a02cf0c8aaf1e33d25a8ab610a26705bc8adc2431503fdcde54d3fd1ca16260369ca8","first_seen":"2025-08-30T13:19:23.875471Z","last_seen":"2026-09-03T18:49:26.965414Z","times_seen":3,"resource_available":false,"data":null}},"time_used":760,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":760,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/particles.js/2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.093Z","timestamp":1788461321093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /particles.js/2.0.0/particles.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\netag: W/\"5b44-gBf4sYaQd9tyhXPxykaEoAr2lGI\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nage: 4880395\r\nx-served-by: cache-fra-eddf8230200-FRA, cache-bma-essb1270058-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6197\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23364,"size_decoded":6939,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23002)","md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-09-03T22:47:21.272075Z","times_seen":5696,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":4,"connect":11,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/js/iziToast.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.109Z","timestamp":1788461321109,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4784\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18481,"size_decoded":5072,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398)","md5":"a05a127c793145cec6b721f14fced3e5","sha1":"5d753b1c803de12f4d2217ab0d143d4dcf047010","sha256":"ac860be79a4cfe434ea68f002638f79371d9a85a3b045a1aaf10dc98df551497","sha512":"ee5a4c561a267f7a96635cb529a5e670aebe766289fe358e6b394585db4b76d5df215cad4b358a07425deaada36d4f4e42c06c2c44d9c192f03ac1afeb9bdc64","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"6a82c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T01:10:25Z","last_seen":"2026-09-03T20:27:20.671367Z","times_seen":3501,"resource_available":true,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/64c5e0f4e20d41690689780.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.126Z","timestamp":1788461321126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/64c5e0f4e20d41690689780.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 30 Jul 2023 14:03:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12314\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12314,"size_decoded":12631,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"30a80f0b3d163225d398a0ef2971ae42","sha1":"c0533e0b1f75a408177fd8bc01e98b1ace13da0f","sha256":"1f9cb6eef8ce5e5a20c11268a85ed9809fb2daed22a5f4ab667ad6d14c999b58","sha512":"620ab439ad1c11a6675b4fee486552c2669a2471d5e7747277d258c590e47bcec0b28124d298681cc8c879626d16239b8f0f4772849fabf8f45df2a93c15b15a","ssdeep":"384:18erMrTrBPUF2QdPJNPC5Cb5SA+K7iRi8m:yeEHBc4QtzK5VAn2xm","tlshash":"1142d0ed48ff22dc39fe61b86623794fd821d2270fd5f12d02d4149696392b9aac3790","first_seen":"2023-12-05T18:30:02Z","last_seen":"2026-09-03T18:49:26.967287Z","times_seen":4,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e80a2c94691700692130.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.147Z","timestamp":1788461321147,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e80a2c94691700692130.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:28:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9946\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9946,"size_decoded":10262,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"6a612ff0a1d3f85064640b0274f4d6b3","sha1":"e20bb9979037d0f261ac0c8daae0e747c7471775","sha256":"45a09046dcf88793851afc91b4b1b1d945e9cbbb215037e5b149eb3c9a6ff2d7","sha512":"256da33677465d9fc9b40203ebd5aceb25051b5dc1d56ed46ff60a9fb3ac38d0d41df66dcdab09862059e68c59ce4fee8eba8160a8d0a7bdf6753bfa51952ebd","ssdeep":"192:qgr4V9Quio9rWQcJ79qOMo7yOKOx6T0ehu:5rBdo9rWR79l1KOx6jc","tlshash":"65225aae9c406a1bb4dd1e23ed4e50ea1473023b49355d0ee49edd6830bb949238ffb5","first_seen":"2026-09-03T18:39:55.265098Z","last_seen":"2026-09-03T18:49:26.967912Z","times_seen":2,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7e5ceaac81700691548.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.148Z","timestamp":1788461321148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7e5ceaac81700691548.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:19:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4742\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4742,"size_decoded":5058,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"4e99e0f76f8a4ae148e5f02cd2df2f84","sha1":"88c36eb48a794bdc84acf6178a76949ed0789679","sha256":"0b8be9ecda8ce9719f9d41e581e352135e6c54faa03b0d238411483588939182","sha512":"b60046dad8aacafc0c0d7d1c54bb91a9403e87e50b3c1b702136e798036e543c64aa94a1d4f459b86045bba79b0f9eb1bd0f2eb3a8be5aa664131b35f189abf5","ssdeep":"96:ya161Fp/3kkhGqxKi1AsThsIlw41aHqdgr408I:fwHpvLBK7auIlw4t4b3","tlshash":"74a1c67254306591b788c15309789f96e43bba15e43158c58fe19f3a3a3f1e38e8fab0","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.968545Z","times_seen":4,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":758,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/mouse-follower@1.2.1/dist/mouse-follower.min.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.330Z","timestamp":1788461321330,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /mouse-follower@1.2.1/dist/mouse-follower.min.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a356ee1a4bc056b4-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 251996\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 03 Sep 2027 18:48:41 GMT\r\nlast-modified: Mon, 31 Aug 2026 19:49:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:QXrK/WIJKgqqZLn+RuPlyuGeSOGEqdSnJ0vDzhi08zc=:\r\nfly-request-id: 01M1CM7KQ374JP6K5KQQQMPAKK-cdg\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":2011,"size_decoded":1617,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2010)","md5":"a68040f023ef7a31eb2fea17c13c2639","sha1":"d4af8c3cbc4ecd74305f8b9e5071cf6f70510733","sha256":"417acafd62092a0aaa64b9fe46e3e5cae19e48e184a9d4a7274bc3ce18b4f337","sha512":"064d0dd2ad21e49a2409a6b3b52bedc65a3401445c23f6fbc2627b2e78f05dcb5e679eba7714cf51ec1f7a7b5fa7d0a7d266c1f29dd2a1309d16ef3a83fa2c51","ssdeep":"","tlshash":"7341e6aaad4e19c6c003d27191c246ce417cd3c3ea56cc5efb4a1e4945d20d978e5bd7","first_seen":"2026-09-03T18:39:55.219442Z","last_seen":"2026-09-03T18:49:26.969176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/webfonts/fa-solid-900.woff2","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.509Z","timestamp":1788461321509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78268\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":78268,"size_decoded":78586,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-03T22:41:10.391284Z","times_seen":58928,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":397,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/logoIcon/logo.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:42.077Z","timestamp":1788461322077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/logoIcon/logo.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Nov 2024 05:37:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 30298\r\ndate: Thu, 03 Sep 2026 18:48:42 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":30298,"size_decoded":30615,"mime_type":"image/png","magic":"PNG image data, 385 x 103, 8-bit/color RGBA, non-interlaced","md5":"957e59b1459cea67db7c460da4cff9c7","sha1":"c78ef4eaecf4c87587714bbed6204e25db1b9d12","sha256":"bab4634cda7c37e393ed4af91d7ed7e58c01dc21f524581c5714a437ff80e544","sha512":"b86980886c0e5bbfd1a5e7ff27eddb0db7c824ef385386dec013a019999a29958aa40eef9a36f3adae5308453c8488e7bec38a6195e73f48e609fe0942cc75a7","ssdeep":"768:zuJoIjlwAIxxwERkE8KV/JCjsJrSytmINRd7ax:CJoXP/RkE8KlfQINnGx","tlshash":"2dd2f15241cc723a79bfb1694e54c71d7a8f3e84c2a7e7313ca244485a7bbe2149393b","first_seen":"2025-08-30T13:19:23.863598Z","last_seen":"2026-09-03T18:49:26.944618Z","times_seen":3,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/css/bootstrap.min.css","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.068Z","timestamp":1788461321068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/css/bootstrap.min.css HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21169\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163826,"size_decoded":21530,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65307)","md5":"1477c4cbb0fe5d43e157c84981325db3","sha1":"595aebfa80b5afe20746a0f0af37c3dc3f9b502c","sha256":"8e23c3b3f22abb77e233c65f438c4190a773637c591d1fe15587bfddc6f81e6f","sha512":"bed809b5b97ed858b6a09f474ec37a06768981ebf311fba3b234a1828fe3c56cc2f78c23e326b0f288b17789a6b7f9e232b2474b8a5abc28de49c21e4ed48a50","ssdeep":"1536:At04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fT:At04/0VUpz600I4fT","tlshash":"a2f3b4d7f581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-09T08:56:00Z","last_seen":"2026-09-03T18:49:26.9704Z","times_seen":468,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/js/bootstrap.bundle.min.js","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.098Z","timestamp":1788461321098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22158\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":78080,"size_decoded":22447,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"dfd824922bdcd8afddd7a123029bba09","sha1":"093df67442d6d55091d9278701071d241a3d02ad","sha256":"286fc75be1e7b08b6e8f8c70b4b6f69bf77fcd9bec929694d122b44ecbb4858d","sha512":"71ed1ae8aa3845ee9467b730d2affdd05f33e929e210d1f13c13bde9dced6beea3e7dc232cb21efaa50f7be917b7f1e328c78ce06208de5dce0a3308012965ad","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZ7:T36WJr9ixF","tlshash":"5e73c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T12:08:04Z","last_seen":"2026-09-03T18:49:26.970961Z","times_seen":2780,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":471,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/mouse-follower@1/dist/mouse-follower.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.115Z","timestamp":1788461321115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /mouse-follower@1/dist/mouse-follower.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 63\r\nlocation: /mouse-follower@1.2.1/dist/mouse-follower.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a356ee18f94f56b4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-03T22:47:56.559838Z","times_seen":18263802,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7f46a24121700691782.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.141Z","timestamp":1788461321141,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7f46a24121700691782.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:23:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 16741\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16741,"size_decoded":17058,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"98a115ead03abe53082c4cfc74f974ed","sha1":"9f213f377bec871ff42552c412451470f614d989","sha256":"82284a4bd67bc6d370cc0a4e53bc04e94d2cc5d19bd5191dc115e97478e2a67d","sha512":"35b8e11513d9a363f5b22b793748a2d7a824eb1b08b764693a3b6c8c8097be7df899d0165b8aff6be0ab5816e1b98f729b728cf80a9e6d5791af4ebe7aad6d87","ssdeep":"384:6302m53mnb1XFIecsC5BbMpHOYc+tw4+V6+ablBg96Fbk:63s3mnbXczjAw+tw4+V6DvFo","tlshash":"0e72b074009f09825c9ca345260e77c255c161feada93df50e0d3bac451acbadef705d","first_seen":"2023-12-05T18:30:03Z","last_seen":"2026-09-03T18:49:26.971519Z","times_seen":4,"resource_available":false,"data":null}},"time_used":765,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.508Z","timestamp":1788461321508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/ubuntu/v21/4iCs6KVjbNBYlgoKfw72.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coinbav.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 30 Aug 2026 10:09:18 GMT\r\nexpires: Mon, 30 Aug 2027 10:09:18 GMT\r\ncache-control: public, max-age=31536000\r\nage: 376763\r\nlast-modified: Wed, 27 Aug 2025 19:19:11 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34924,"size_decoded":35737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34924, version 1.0","md5":"4a8b9af22b314f408f66a17f71e28908","sha1":"6b5600d84c178cd28b23b583bbcaa4eb12efff25","sha256":"dabae363ac0ae6c3b2a137a32f7132b42520a8af252f87aa6c2198f2a79cf91c","sha512":"17dbf975ba4d4a818f25bb52dfdec52ff0ad6291c37981bce0313075c13751180a30ec81db40e1b2092a92e9491d275fa253e879e3e62d97ba235295da4ddd74","ssdeep":"768:C4rzLlWA+tpuAdMEUDz1whQjKgz63b6G8tWbxfw6abvdNwGFbML:xz+/uAdMEUDZKYI3bqtMY6WvkGFML","tlshash":"e3f2f1d39beb766c5e3fa89c32b3d2653969580430737119b0a2674842e274c56e6d03","first_seen":"2025-09-02T19:57:23.465236Z","last_seen":"2026-09-03T22:12:12.545217Z","times_seen":22394,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":16,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/fonts/la-brands-400.woff2","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.549Z","timestamp":1788461321549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/fonts/la-brands-400.woff2 HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-length: 84772\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":84772,"size_decoded":85090,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84772, version 1.0","md5":"54b0b4e7de85711c3796882b2b19eb00","sha1":"89f4f0d9ee3a2bde5fa250bbe6dc4a4804e1a863","sha256":"ff70c9bc4650cf5e6b12d1feaa7af29ebf0681993fc0c5ffe3658cea0dbd5403","sha512":"38490f72deaf75fd7a82a23919fe479b5a5a0d0d7279aab96e153dfe413c1ee89f2095111dcccdc58470c17622f6bb44ea4d63a8da6208c973bfea7035a37a21","ssdeep":"1536:5W447cpQ00eKOVGTZUbT3g4SAXjZoUANGBem/V1R6WsMpEEeOWeB:5zSiVGZUwEXjOvGws/WweOhB","tlshash":"e7830284fb35e9e4718ecb30d58432a9d5e9a0f8b91a0456f1c7c07bce2d6fcb196492","first_seen":"2023-04-10T16:26:38Z","last_seen":"2026-09-03T18:49:26.972666Z","times_seen":3361,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":359,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/logoIcon/favicon.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:42.079Z","timestamp":1788461322079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/logoIcon/favicon.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:42 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 09 Nov 2024 05:37:49 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17798\r\ndate: Thu, 03 Sep 2026 18:48:42 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17798,"size_decoded":18115,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"6cb35bcd70e2ff29d8c023c83eeb05c8","sha1":"7ef07af0586edb013d8f300e09ece3d2ada528fe","sha256":"9fb56fb0bf44acca504d5843d86d435eee04bddff660e7f48be377ebb9dc5077","sha512":"db7ce67935daffce6c285269a9ec0dd89ad087472a029bbce4388141e5c11c263f114c301bdc3bc5c687390774bf89a79fa1d26896388b832fb3650b679cbef5","ssdeep":"384:iWxa1kOp2t7ZErcNJA585EbWTSq6SmRixj9eUmfmRS9RtpdRh2B6:i4blWCt5Tbxj9eUma6RJ","tlshash":"3882c0d9b7194ecb789157d0c65a6c50e11c90a514bed84196e03affa31cac71e2a36c","first_seen":"2025-08-30T13:19:23.925192Z","last_seen":"2026-09-03T18:49:26.973231Z","times_seen":3,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T18:48:40.226Z","timestamp":1788461320226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; expires=Thu, 03 Sep 2026 20:48:40 GMT; Max-Age=7200; path=/; samesite=lax; secure\ncoinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D; expires=Thu, 03 Sep 2026 20:48:40 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 6800\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 03 Sep 2026 18:48:40 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-03T20:48:40Z","raw_expires":"Thu, 03 Sep 2026 20:48:40 GMT","max_age":7200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; expires=Thu, 03 Sep 2026 20:48:40 GMT; Max-Age=7200; path=/; samesite=lax; secure"},{"name":"coinbav_session","value":"eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-03T20:48:40Z","raw_expires":"Thu, 03 Sep 2026 20:48:40 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D; expires=Thu, 03 Sep 2026 20:48:40 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59000,"size_decoded":7991,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (365)","md5":"2078257bbe05b81e04d7b60d63c908cd","sha1":"3989921e54d60474d5aee5f4e8e08c06f57c5fb0","sha256":"83e714c592bfb54381009ec03314bf7c037cd3104de099af1d76ffab95f85d6a","sha512":"205a6056942348423fc45dee997fadd3c19ce71b47ff492381dccc5d8400a4075e496ebd64c380d00bcf506995be1d824d723ffae3e8ca14d317bd0f0e071561","ssdeep":"384:XTr2uusRcBYeFyXoAijAUwU69KnupzbVS/SdRu5W42WjMu:XTr2uuIc3E4D85+upzBZR942Wj3","tlshash":"84430161b4f23077261390c12e677f0b6ee18063c29a851572fe0ff92fdadc5a85752a","first_seen":"2026-09-03T18:49:26.973792Z","last_seen":"2026-09-03T18:49:26.973792Z","times_seen":1,"resource_available":false,"data":null}},"time_used":552,"timings":{"blocked":-1,"dns":2,"connect":166,"send":0,"wait":210,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/css/all.min.css","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.070Z","timestamp":1788461321070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/css/all.min.css HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12370\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":59305,"size_decoded":12731,"mime_type":"text/css","magic":"ASCII text, with very long lines (59119)","md5":"ecd507b3125edc4d2a03aa6ae5d07da9","sha1":"a57ee68d11601b0fd8e5037fc241ff65a754473c","sha256":"99464ceb71bc9bbdcc72275faefe44f98eb5cbb6b5d8ee665b87b35376f1a96e","sha512":"d72727e8871a410e34fcc2815b65b84618acfc36c82d4ef80b5bd2acb2710aae7ba3de35626d354b036c38caaf10116572051aeb12e23d8fcd4b947e13aced25","ssdeep":"768:PEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bf7VSzl:PE0PxXE4YXJgndFTfy9lQB","tlshash":"8c43fbb8e54c01cab731c44bef81b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-03-13T09:02:16Z","last_seen":"2026-09-03T21:59:04.995591Z","times_seen":48586,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":333,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/global/css/line-awesome.min.css","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.072Z","timestamp":1788461321072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/global/css/line-awesome.min.css HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 15174\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":89729,"size_decoded":15535,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"73db02545cf13e8c82b51b62782df0d6","sha1":"c1bd14187b6dcb36efad21e51711f8941801de0f","sha256":"ce61a18cf084f15003798340044643f329ac5f90045acb2d9e778368bd799854","sha512":"bde6d4962ab1ad5901cb782e70c842966c903fd3a7fc701641d2835d168095bfc52ae4dbc648cf294caa54ec40706c050e46bbf5e4c5f985f07e47b5877ff07e","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdU6:1b+754u2nOW4xUse1exx7HD9hU6","tlshash":"cd938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-05T07:54:02Z","last_seen":"2026-09-03T18:49:26.975429Z","times_seen":7460,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/templates/basic/css/custom.css","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.083Z","timestamp":1788461321083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/templates/basic/css/custom.css HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 04 Nov 2024 23:09:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1164\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5229,"size_decoded":1524,"mime_type":"text/css","magic":"ASCII text","md5":"3abdd32adfe5795af4dab82b3c2f5b7a","sha1":"83834cc8d323d4937d5f7d0489b696550fafd6cd","sha256":"3f1945e45a86047cb094820f9e4b025f17717f3640930dd91eda252e1acd00eb","sha512":"31dfac1f5c68e009fc2baeae657a6ca494f628f5c7fc4ffe26f9ca4cdf1e59341330a4b7e5340ed3e63011db27e9a379c1fb49fa1dc8df1d70f154bfd58be371","ssdeep":"96:4cPbFy9tgcA7Ce3S8F6FGFoFNFEcW5Qepsbjk13O4gcA7Ce3SSySi9:BbFy9tgcnf8F6FGFoFNFEcW5QI3O4gcr","tlshash":"1fb10f927bb91100350fd56c6ad29ba923388143ba5fcd7db7c1306d5f482cc9a76b8e","first_seen":"2025-08-30T13:19:23.857714Z","last_seen":"2026-09-03T18:49:26.975951Z","times_seen":3,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbav.com/assets/images/crypto_currency/655e7ccdb64e11700691149.png","fqdn":"coinbav.com","domain":"coinbav.com","tld":"com"},"ip":{"addr":"66.29.137.87","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbav.com/","date":"2026-09-03T18:48:41.124Z","timestamp":1788461321124,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbav.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 24 Aug 2025 00:00:00 GMT","end":"Sun, 20 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:46:A5:06:FF:C3:81:AA:EA:FE:C6:D2:B6:45:16:D9:FA:9C:FF:60","sha256":"2B:17:0B:2E:51:0A:E5:59:88:EA:36:64:E7:84:E1:31:16:3A:36:54:F5:35:5C:00:AD:1B:1C:E0:5F:59:EF:53"}}},"request":{"raw":"GET /assets/images/crypto_currency/655e7ccdb64e11700691149.png HTTP/1.1\r\nHost: coinbav.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbav.com/\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNQL2owZHlhTVpPL3J4NkQrMTJzR1E9PSIsInZhbHVlIjoielRpN0Z4U2QwWEh2TW5GSXBkQ1kxeWhxcm9uWjkxRkVXY21aWDluYXJPZU0xRi9zY1lrZ3AxSXRPdEh5NFFXL3owOEN3bnVneTNwSU1xeEJBRmRwZ0VSMmNCR0ZDOVJERXNpTlhUVk5SRjJTTndGd1VrUzYvQzZpTVlMajAyOGgiLCJtYWMiOiI5YTZiYTM4NzA5YzU1Y2I2OGY4NzBhM2IyYmE5NmM5ODhlYjJiNGJlYjJjNzk4ZGRjNmI5MzVmYjIwNGYxOTdmIiwidGFnIjoiIn0%3D; coinbav_session=eyJpdiI6IkFKSnZ1d2JHNDA0c1RQVUlHcTRHZ0E9PSIsInZhbHVlIjoiNlM1eXE5bXBmaU0wVXdKZ3M5SU80QnlwUkNzWk82Rkg2Y3ZoWWpiL2hkVzlUVmVYYzBzWGh2a0FxWWp0bkVuYlpSeG9wQ05mWjIyZjFvZW1tNUVhY3FmVHRLbWJsR2l6Nk1VSTVhTmsvY1hITm5tZ3FVK3JiYmJGT1NqOFNWWCsiLCJtYWMiOiI2MjI3OTBjYzE5ZjliNzYwZmIyZmRiZGI5OTRlMzRkYzgzMGZmMWNhYjA5ZTVlYzAyZDEwNGZlYWU1ZTZhNzQxIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 10 Sep 2026 18:48:41 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 23 Nov 2023 04:12:28 GMT\r\naccept-ranges: bytes\r\ncontent-length: 15821\r\ndate: Thu, 03 Sep 2026 18:48:41 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15821,"size_decoded":16138,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"73e425796ec53e52cbf14de739c1d5b1","sha1":"1388e4d3d18f15b6339ead6d0df9b56d92988c53","sha256":"6b0d3ca328d0e50e7a89a52612a82cd9207a0ccba1e75a8f88daeae9ead5876f","sha512":"11a11570accbeaa0950ff083eb46cc7cba1010e5f772c6d86efc12cacc18cfae3834493631a43f8df72405878e143fdd8d71070c60bb5af00a95afdf9106b651","ssdeep":"384:eRmveomXUJjwCQQnka1ziCVfS5xUVzG8BsyA0vV:iAwCQQNNpVfixUV66t","tlshash":"73628f469b139e9b9e16cf07c10137acb1506e8607fb99d3475e38d93b2152a0abf1f4","first_seen":"2023-12-05T18:30:02Z","last_seen":"2026-09-03T18:49:26.976578Z","times_seen":4,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbav.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}