{"report_id":"d8a89a3e-63d8-4119-8796-dfb315e362f0","version":6,"status":"done","tags":[],"date":"2026-03-09T06:06:08Z","url":{"schema":"http","addr":"991772coinbase.com","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":0,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"title":"Coinbase","dom":{"size":24950,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (24950), with no line terminators","md5":"f9c41e4230cf02e70df1dbcf5f06a401","sha1":"fc15f9df2eb395da3211fc1574fceb1762dbd147","sha256":"b6aa4fc188a235bb56d4c02d7f5ba88cb43d48946b39301df689b85e0d23126b","sha512":"794fe6a978d6bb54c9007f6f09f3d954d86ff69c74cb82dbff2bd8dd9e1a95a6452ed1973ac4f96cde5b9814cdaa98e93bff6a01b135040fe40c3fc620afe3bc","ssdeep":"384:yjRiNue5ktOx05nrGPKJgg8T4xksc64Jysq7voNl06zK:yjRiNue5k20rGV4xksc64Jysq7vgq","tlshash":"dbb29744b80cd2645c3bbe099afd9f3c8014f8639f618875a14d8c8ad5d2ff63ae5e85","dom_hash":"domhashf8aa958e8f43b44f6b1afd95ce539307","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"991772coinbase.com","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":0,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T06:06:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-09T06:05:48Z","timestamp":1773036348,"ip_dst":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":47242,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)","source":"{\"timestamp\":\"2026-03-09T06:05:48.489557+0000\",\"flow_id\":1692905974310878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.47\",\"src_port\":47242,\"dest_ip\":\"34.117.59.81\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2025331,\"rev\":5,\"signature\":\"ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)\",\"category\":\"Device Retrieving External IP Address Detected\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Linux\",\"Mac_OSX\",\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2018_02_07\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0043\"],\"mitre_tactic_name\":[\"Reconnaissance\"],\"mitre_technique_id\":[\"T1590\"],\"mitre_technique_name\":[\"Gather_Victim_Network_Information\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2024_09_19\"]}},\"tls\":{\"sni\":\"ipinfo.io\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":911,\"bytes_toclient\":3424,\"start\":\"2026-03-09T06:05:48.436190+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ipinfo.io","ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2013-04-23","domain_rank":1327,"first_seen":"2013-12-16T07:25:53Z","last_seen":"2026-03-04T14:55:22.270427Z","alert_count":0,"request_count":1,"received_data":572,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"991772coinbase.com","ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":20,"received_data":1463877,"sent_data":9423,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-24T15:50:36.058143Z","times_seen":200813,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d918cd34fac4ed75ae8505b359d57fa","sha1":"2bf1fc4596d9d6eba43118233740e11ebd273764","sha256":"60d1ddb176dc72842c8730071da2a879bd59c93354e048f55cfd5aaf2f96c306","sha512":"e62626ede373553415acd290fd30908f9ace318399282381bf868a2c3b4770b67b60b3746b912549a78b106c9592e460e977f79034dde6af508064ffaf40abf1","ssdeep":"","tlshash":"5231d216f40bfcd1bc71dd0f293a4f759ce4fe3a9071a4c8b29dcac805628661399996","size":1447,"data":"","first_seen":"2026-03-09T06:06:17.569749Z","last_seen":"2026-03-09T06:11:02.767352Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/53825db899214909.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d8824ee9fa35686d33a88b8699dc45","sha1":"4f88e5b70755cdf0d7153b14e7a2b0ceccddb328","sha256":"9a1dc1cfbc8b9f32088f3d86a4c14a3a07a7195446e881a8e9ebed8842ab8296","sha512":"c62ee9721db99556c9b05148dd883844a162c8eb9ebf128054bfdd5fb88a6ba87ec6ff237a21c9088c2c7814ff0389a6877c151050dab8eead82add107f48696","ssdeep":"96:1YQIOeE3WE38KmsK6i0NwqHUPxMzRJkZgbH5uEzZldjuuSVgd5Pb2ZEe9AEwsvH:kOJ3x3ZmZIIx6JkZsHPdyuSVw5KW4rw2","tlshash":"5ac1b3c4504b6f1892db290d3816c04c3cae2fec9d4ed851fdac8cba4931694b063fea","size":5611,"data":"","first_seen":"2026-03-09T06:06:17.548383Z","last_seen":"2026-03-09T06:11:02.754377Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/1e49c519472a323f.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a695ad457b84a86d345b69c11279a65b","sha1":"96f5606ef7eb5fae96a54c5ba446b61135215ff6","sha256":"b2f481f8deb553cce557fd958b821b66e4223c62980731161354491301449cf5","sha512":"8c1ef215a1576d97fdcceb37ccb88a84e5e50721b01c707ce5cd0c712e7853b72d369ae6371f3340cb21c0b0ad75ce1536908f5cd0d70380277b9a3b30b4d6e4","ssdeep":"6144:IojpsCkvP1WXJvexWDuZkz8NP/gfPYMxX5exuDx2W:PzwZ6","tlshash":"97140844b144baecf76b0590657ec40db13f7aacde0ec4a8b1bc783628864d43957fa9","size":204860,"data":"","first_seen":"2026-03-09T06:06:17.520991Z","last_seen":"2026-03-09T06:11:02.751028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/03c999d1ffa4053a.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e18d8b96344f0f4e1686c2e84e4d0f9d","sha1":"ff2327b924f4ec4f4e9d01dee88b2fc1d3e6ac97","sha256":"90f9c59aa163ffb7334a2eeea7bcdea4c5b26687371c27bc65e300b33f702e40","sha512":"be8c3533c7f599d7573df2e4849b0959d568cada74ec203f9b7edfa4352ea69f38f767f61a6cb00c87f896920592e62f14347769d0aa0e1380c835c2e3eff85f","ssdeep":"3072:6RQBSnj1NqIHwLNznwXDt0RCwx5wftyF9x5WNU2HZlTCkT:66BSn5NRwLNzi0RCwxGftyuNU2HZtCkT","tlshash":"b7243d06096d4f7986ec12e015f63dc401794e0adadc3cbfb9ada2479a15bd2e0c27de","size":212571,"data":"","first_seen":"2026-01-06T13:51:19.679559Z","last_seen":"2026-03-09T06:11:02.746804Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/turbopack-cb72284e65fc3881.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ac6d24d37e7d8930fcfd7ccc5229052","sha1":"1863566826811b7a35c340f7baa662bcd30160ae","sha256":"2e0ea774bd350fad640b6ef245936850a227b75198dbf4345c69ea42130b474c","sha512":"79a87b60fd8b4f58710f25efefe66e1590cd67637edefc69ed7601aad05815f04f14d4ccd02c66b7211e44eeffdf6cc1373da28fe666d3d28a4108229ff39d8c","ssdeep":"192:U74eFn8/Esp1U91EG5T1uCO9ledFMhMJg4W9PZcxkUk1IsS:U74e2OvO9len6JZZQl","tlshash":"5722d6da33a6f0b743afa5e6907f4044f17954a8141d581c93aca8fb383946e49e3f27","size":10232,"data":"","first_seen":"2026-03-09T06:06:17.516339Z","last_seen":"2026-03-11T19:47:26.530453Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/53786b99ab491dd8.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8272185febd13e0a483be90f8dfa221d","sha1":"1dab4dea4a38dc1d185135d85e647dd6fbbe0373","sha256":"17dc0aa74b68ec4cae543928aa4229298b1bdf3abb0b30c98cb4ea2ffa78cc78","sha512":"9a34f13479d1bcefce03c8b1d28afc047906cab206054ee5aefc41d9f2d859f8de9d9ce8b86ea9cb5298a54cb8d078f1e40ed90d1bdc2982c5f292d69582e56b","ssdeep":"","tlshash":"4b41a8329e04d11d0a6ba08c4c0f851c55bc3669564cc400f19ed87949aae75fcb3bac","size":2391,"data":"","first_seen":"2026-03-09T06:06:17.47913Z","last_seen":"2026-03-11T19:47:26.536726Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/e6dd030cd2ef21f5.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5b195064bfef963a528eafc2035a562","sha1":"a72a6b45f14bd59f0b19382e07b5f9f480a83684","sha256":"7de6e1814a55ce0013c871c02053c787e203d50cff9f3a4f8f85f66de8903e37","sha512":"450411e214dc2110961fe1deb9647432cfae970cff6943b4593356e7e4c77d49f6351735b1ffc58c4b0766ea5227cbdd12359e3f8c3918436c8b84e8a7ba1e81","ssdeep":"1536:Qo9JPBQR6zwFrzj0rF93M/ckRvtOsf5bPtziiqxGffFg:1E6cljuFdM7tOsxBhqOFg","tlshash":"8fb308f935d5f48207ab40a6c03f0006f32d4d37189e68a0a3e5ddda756499de1b3faa","size":116942,"data":"","first_seen":"2026-02-22T10:38:38.937239Z","last_seen":"2026-07-24T02:49:02.937448Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/2f236954d6a65e12.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ad400137e66886150ae9691abc2413e","sha1":"171b8c43f4cbe22d32d2dd5624fbfc5f2f4534dc","sha256":"de98aefbea0cffbf2c3d5d266dfeabef219e5d805208e63bccf1fb65a875b012","sha512":"32c447c597c6d23588744f15c5e5cdaa44fda00c65cc0ef2c2d92163b672e52c37afba5bdb56212ba3317c9fc03c8951045a5904fa08a6235eab871e399de48d","ssdeep":"384:P35z75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNxErV:P5z9BX0ZMOx3ErV","tlshash":"32d2e8717395f9a352db85d9d02a0015f2290d3530ae24b0b395dcef368dc89a1fafa9","size":30849,"data":"","first_seen":"2026-01-18T17:30:29.32199Z","last_seen":"2026-07-24T10:14:28.678699Z","times_seen":838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/266bb80f12a9b9de.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"08c5c9e658b13d3b6b3b7abb0e3f9464","sha1":"10882a5c3a12cc835a324abef2f79dcb5266f186","sha256":"b30a384bbcec1d7c3589d408c80cb6cea0b7980f1b7a556ec1f7fb2097997801","sha512":"5040e5b0fc4e4c5c195b6d5aae4f1bf9d5ea5263fddfbf0787d6f19b935d24f6fb1ddbd34624b6d5758e3814165bb47eeda0c35299dec28c1707db7e08fbd4ad","ssdeep":"192:TUQB9k84OONbcjEhTRbkFYAPiKk1uQUJcAi5LfL5hULhC12eI+HjVprP:T27vBK6bkwLPKcjfLqhC12eIGb","tlshash":"9b72d6ae7195f0911fa36465803f500bf23929b6286d90a0a3a2dcf5b8f416ed133f5e","size":16869,"data":"","first_seen":"2026-03-09T06:06:17.541194Z","last_seen":"2026-05-22T03:26:40.884663Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/1627bf2f54f2038d.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad6e58ce96948e3ae54f99e13ae9fc3c","sha1":"3c13e470f7bb9c7f8108e06e301f1804959b6f62","sha256":"c6b4ef1bc5293e866d6884599ed14f40b2271f59f754693da6822ab4704deec8","sha512":"db71bc1d7dfd74ba89c1999b3d6180289059b2dd9460acf7d6c293a6bafb8de866c75a40b4abcdfb5c5e9e2fc1ba46001af2a93a7b232c9b4fc6a8113d585d9a","ssdeep":"384:k7/l+N/8JUoLgG4AYH9cseDowerMbKzLc1Jn2h4vyRwHOz4ihkDbqH8mlkfGNiZo:0lWNon2+HW9kDbqH8mieUZRYqrM","tlshash":"bc13a5b572d5faa2129340f0c43f1016f23d4c7521acb4a0a7e4ccdbb99458da6bafd9","size":41496,"data":"","first_seen":"2026-01-18T17:30:29.293395Z","last_seen":"2026-07-24T02:49:02.931111Z","times_seen":441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/f2f58a7e93290fbb.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"af01c8dd2154054c88fad74fd49fe184","sha1":"0b8416263a9d33c387231708c003e56e00da6f1d","sha256":"3ac39d9680be8f072f8dc0e5e316d4e1c455efe5cdd7e9215b74c570915a7b62","sha512":"c98c6e32c9eb6db9801ed88631adb9963db0d64b2f9f722152b3bae47aea5461b8c97bbc90cd459ed21381899f637c70f22c12d269cd23c35d4cf89a7b845d70","ssdeep":"3072:AVhLHlPuSSY2UzBRaWcG8TP36kNAHTjWmN6ZXtb96U+pB:AVhLHxuSSY2Uz9rH3FSXtb96U+pB","tlshash":"fc241be83955f6626ab302a710af1803733c292b280d4d60a351fdddb57845eb17bf9e","size":224636,"data":"","first_seen":"2026-01-28T14:00:50.724318Z","last_seen":"2026-07-24T10:14:28.639049Z","times_seen":2159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/a4b41d9645f30d6c.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"58128d983e6cf9c8972dbd77549b219c","sha1":"0ed68ef19b79db5f0b498d5f4c1a7819eb6349fa","sha256":"560e9b7873ec7e34b1352bf3e2b28aa317e4ebddd964aa91d20c30b1a900af59","sha512":"83d60e1634d132cc66d56dfd1fe422337050f1d9da9952b32c3fb5e5e8fad367f2d40db5d134458db7602125c53f7ec1b2e3f0ca3ed6b0c001c6a69be73df595","ssdeep":"768:70kSTBpcWVd0rGV4xksc64Jysq7vk731uGg+1npNKXjq7j2:xSTYWVdebx/c64Jysq7vk731Hl1pNKX1","tlshash":"14f219c0f408a1385c2b61149cde522ce139bb12a9635435b28d4c9ef6d2fda3dfaf65","size":35901,"data":"","first_seen":"2026-03-09T06:06:17.488529Z","last_seen":"2026-03-11T19:47:26.531077Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/71bd0c3bf64797bd.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"440af51c851dc875eb217a0058463d63","sha1":"6af21e1d687297286bbc439f3a93c5426377791f","sha256":"98dd12fde5abac318cb4c91ceb736f88ba905f9520af69b756a8e43674595b2f","sha512":"dc34fe7b841fbcf0a7ea5d373a58a861afbb9847c063bee831ae7d4ac25037e76f5fc5e361f4505e32fbceb7d951cfa3cc58ce6fb731ea93b082628ce779622d","ssdeep":"768:f0V8hm1hNgqOW+Gy8Q33F7GwamoUL8IAo1EKbBrDQ7c:f0V8hm1kqOW+pj33F71amN8ORDQ7c","tlshash":"7d030ac5b321606243d6919380b50203f32da599580a455cbb7ceefba97cec9b2f6f71","size":40939,"data":"","first_seen":"2026-03-01T19:41:26.455455Z","last_seen":"2026-03-09T06:11:02.755124Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/e8fc6704c0405e27.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f5527c70c01aad92184c33acedc13a0","sha1":"4401caaa9cd5fdf0bef2e2f8eae1d11ddd029fbd","sha256":"a00f5202639a701c2ce8c77c671ef18f85a84f4a28ab3e862b247c1e7b1da4a8","sha512":"aca177dd2a201261b11b1e855f6cd0236a1ac94d5f1298b920444b70e8f7cf525ff317b85d192eda6b8db73081363ed6981f62802275215217960492e1879181","ssdeep":"6144:GZxK6lQTn6di4iLjaXH3Qwzso4x4Pfoib8nMS8a+9FnMxMeiRH:GZxK68CgLk3Qwzso4x4PgMtTnb","tlshash":"73444ce673527571d3df419ac06f8604b33a1994200e443cb27e8deb2661989a2f7f7e","size":255989,"data":"","first_seen":"2026-03-09T06:06:17.566073Z","last_seen":"2026-03-09T06:11:02.757847Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"78a159d6f4fb6b31aa167cbd4fc159f1","sha1":"3e764e5ff802e20e891c11eb4a600da84288dcdb","sha256":"ecc14d1129973d61b0e66ea50ac21e2934451237cacb97db94d8025d67ee8330","sha512":"1d34f9925cd45926d64654b8d9dc030c2adf954f4930d3bab7f6e326311f8fe252b7ae6b4e6f02363872716a1d99c6f97d395941f5cd4420609317b1f72c847f","ssdeep":"","tlshash":"5b81ac2e7809de4bec7d7c6d123e9d3b50cc897b87a0cdb8829dce050a464b927e59c0","size":3917,"data":"","first_seen":"2026-03-09T06:06:17.571531Z","last_seen":"2026-03-09T06:11:02.769429Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"227524e39a7422672de1cbbb6f5cc6d8","sha1":"020ea6bfde7a61d5532fc489b4a945ed4bdd0ab3","sha256":"61f40608266a7257dc036f59652d3dbc4eaad078bdd07249f68478e1b6af2314","sha512":"bfc7a6facbf892d528ffbfebf84ed2a96d078426fe108db7c4bea6a70b1f4e445f88c7e3bef450abccad26686e697934c84a3a123eb5eb56997294b2b3d0bb54","ssdeep":"","tlshash":"e6b09b74e005fda555a505616525e445226f544d195414602113919516099191717dc0","size":112,"data":"","first_seen":"2025-11-01T20:55:10.866828Z","last_seen":"2026-07-24T11:46:18.846103Z","times_seen":2691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"46f772db12bc1b33f0ff6c7c53633796","sha1":"eb8afa04e0dd4fb1dbe189b17b292b947cc3e787","sha256":"b67ef17b56c2915cd30f8e4902e71d6eab5f1e6574ba30e19ff716a1553986c8","sha512":"a30df2d7f36835745d21cec4a4d974852eab3c7b70bff09b97394ce457e85360ffbf5a774580a513e6ba0cfc80318ce6622731faf68411f65ac34c3257f0d2eb","ssdeep":"","tlshash":"c7c08090cc42cc1dc6660f261c3a1c3521dcc97417455546ddd5d9281985b3105b5d89","size":177,"data":"","first_seen":"2023-08-13T00:55:19Z","last_seen":"2026-07-24T14:26:57.692854Z","times_seen":12304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"f279fab539226f07667787eff983c2f0","sha1":"736474c940533a77c7d2f45cf5c0a07a1b0fd07b","sha256":"da1941ff20984c148e0d6b6f00b365250ab9f51733a31eecec65834b2a84306d","sha512":"33017d359f344c09589122e7395ec70d9f4cb16e923235f28a8dc2ba37a8540d2a6cb191bdf031f8375f10224bb66f44f54f7e5a81736db67c5bb22003094c76","ssdeep":"","tlshash":"0af0c601fc0aec07df159c5a15fe2c68c1ccc37d19b06d6691c9ccc001b2c713e91a91","size":561,"data":"","first_seen":"2026-03-01T00:30:49.043522Z","last_seen":"2026-03-09T06:11:02.774155Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/1627bf2f54f2038d.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/1627bf2f54f2038d.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"a218-19cbb4c87ce\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":41496,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27784)","md5":"ad6e58ce96948e3ae54f99e13ae9fc3c","sha1":"3c13e470f7bb9c7f8108e06e301f1804959b6f62","sha256":"c6b4ef1bc5293e866d6884599ed14f40b2271f59f754693da6822ab4704deec8","sha512":"db71bc1d7dfd74ba89c1999b3d6180289059b2dd9460acf7d6c293a6bafb8de866c75a40b4abcdfb5c5e9e2fc1ba46001af2a93a7b232c9b4fc6a8113d585d9a","ssdeep":"384:k7/l+N/8JUoLgG4AYH9cseDowerMbKzLc1Jn2h4vyRwHOz4ihkDbqH8mlkfGNiZo:0lWNon2+HW9kDbqH8mieUZRYqrM","tlshash":"bc13a5b572d5faa2129340f0c43f1016f23d4c7521acb4a0a7e4ccdbb99458da6bafd9","first_seen":"2026-01-18T17:30:29.293395Z","last_seen":"2026-07-24T02:49:02.931111Z","times_seen":441,"resource_available":true,"data":null}},"time_used":804,"timings":{"blocked":315,"dns":1,"connect":160,"send":0,"wait":156,"receive":1,"ssl":166},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/f2f58a7e93290fbb.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/f2f58a7e93290fbb.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"36d7c-19cbb4c87ca\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":224636,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"af01c8dd2154054c88fad74fd49fe184","sha1":"0b8416263a9d33c387231708c003e56e00da6f1d","sha256":"3ac39d9680be8f072f8dc0e5e316d4e1c455efe5cdd7e9215b74c570915a7b62","sha512":"c98c6e32c9eb6db9801ed88631adb9963db0d64b2f9f722152b3bae47aea5461b8c97bbc90cd459ed21381899f637c70f22c12d269cd23c35d4cf89a7b845d70","ssdeep":"3072:AVhLHlPuSSY2UzBRaWcG8TP36kNAHTjWmN6ZXtb96U+pB:AVhLHxuSSY2Uz9rH3FSXtb96U+pB","tlshash":"fc241be83955f6626ab302a710af1803733c292b280d4d60a351fdddb57845eb17bf9e","first_seen":"2026-01-28T14:00:50.724318Z","last_seen":"2026-07-24T10:14:28.639049Z","times_seen":2159,"resource_available":true,"data":null}},"time_used":612,"timings":{"blocked":298,"dns":0,"connect":0,"send":0,"wait":157,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/53786b99ab491dd8.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/53786b99ab491dd8.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"957-19cbb4c87d7\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2391), with no line terminators","md5":"8272185febd13e0a483be90f8dfa221d","sha1":"1dab4dea4a38dc1d185135d85e647dd6fbbe0373","sha256":"17dc0aa74b68ec4cae543928aa4229298b1bdf3abb0b30c98cb4ea2ffa78cc78","sha512":"9a34f13479d1bcefce03c8b1d28afc047906cab206054ee5aefc41d9f2d859f8de9d9ce8b86ea9cb5298a54cb8d078f1e40ed90d1bdc2982c5f292d69582e56b","ssdeep":"","tlshash":"4b41a8329e04d11d0a6ba08c4c0f851c55bc3669564cc400f19ed87949aae75fcb3bac","first_seen":"2026-03-09T06:06:17.47913Z","last_seen":"2026-03-11T19:47:26.536726Z","times_seen":3,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":610,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/a4b41d9645f30d6c.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/a4b41d9645f30d6c.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"8c3d-19cbb4c87d1\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35901,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (35901), with no line terminators","md5":"58128d983e6cf9c8972dbd77549b219c","sha1":"0ed68ef19b79db5f0b498d5f4c1a7819eb6349fa","sha256":"560e9b7873ec7e34b1352bf3e2b28aa317e4ebddd964aa91d20c30b1a900af59","sha512":"83d60e1634d132cc66d56dfd1fe422337050f1d9da9952b32c3fb5e5e8fad367f2d40db5d134458db7602125c53f7ec1b2e3f0ca3ed6b0c001c6a69be73df595","ssdeep":"768:70kSTBpcWVd0rGV4xksc64Jysq7vk731uGg+1npNKXjq7j2:xSTYWVdebx/c64Jysq7vk731Hl1pNKX1","tlshash":"14f219c0f408a1385c2b61149cde522ce139bb12a9635435b28d4c9ef6d2fda3dfaf65","first_seen":"2026-03-09T06:06:17.488529Z","last_seen":"2026-03-11T19:47:26.531077Z","times_seen":3,"resource_available":true,"data":null}},"time_used":775,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/71bd0c3bf64797bd.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/71bd0c3bf64797bd.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:48 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"9feb-19cbb4c87d3\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40939,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40939), with no line terminators","md5":"440af51c851dc875eb217a0058463d63","sha1":"6af21e1d687297286bbc439f3a93c5426377791f","sha256":"98dd12fde5abac318cb4c91ceb736f88ba905f9520af69b756a8e43674595b2f","sha512":"dc34fe7b841fbcf0a7ea5d373a58a861afbb9847c063bee831ae7d4ac25037e76f5fc5e361f4505e32fbceb7d951cfa3cc58ce6fb731ea93b082628ce779622d","ssdeep":"768:f0V8hm1hNgqOW+Gy8Q33F7GwamoUL8IAo1EKbBrDQ7c:f0V8hm1kqOW+pj33F71amN8ORDQ7c","tlshash":"7d030ac5b321606243d6919380b50203f32da599580a455cbb7ceefba97cec9b2f6f71","first_seen":"2026-03-01T19:41:26.455455Z","last_seen":"2026-03-09T06:11:02.755124Z","times_seen":3,"resource_available":true,"data":null}},"time_used":920,"timings":{"blocked":767,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipinfo.io/json","fqdn":"ipinfo.io","domain":"ipinfo.io","tld":"io"},"ip":{"addr":"34.117.59.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:48.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipinfo.io","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 18:32:48 GMT","end":"Sun, 03 May 2026 18:32:47 GMT"},"fingerprint":{"sha1":"D6:C6:99:F0:9D:3C:4D:DB:17:CC:F6:1F:9E:10:27:32:82:1E:E4:32","sha256":"B0:81:7B:00:5F:B0:92:5F:B1:AD:D8:F3:12:C4:48:25:52:CA:DD:E7:15:32:9A:C9:8C:DD:BE:10:4C:2C:63:DE"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipinfo.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://991772coinbase.com/\r\nOrigin: https://991772coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\ndate: Mon, 09 Mar 2026 06:05:48 GMT\r\nvary: accept-encoding\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":280,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"adf22d9a8ca3a97a9ff78909b8702358","sha1":"f5046826566a7e98d6b5e5c7b0a65677c3bde708","sha256":"756edd1454b049c1370e83c864bc93dfdd82f44d8f9752b3068e5a11867a5de3","sha512":"182391c8c01e54481853a09aa4cf8072496850e45863b198721d0d572e3aa93d8fe11a90bfb24cf97fa64cc132f1594c379474db65db5a1d2207694f770443b9","ssdeep":"","tlshash":"c3d02b6621341b37aeed455c8406960622656e1f1642369f0fe72b0c100c87334f03ae","first_seen":"2023-04-17T17:28:07Z","last_seen":"2026-06-07T07:46:18.554959Z","times_seen":58786,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":74,"dns":15,"connect":25,"send":0,"wait":150,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"991772coinbase.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:48.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://991772coinbase.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 4q+GOkX9gsq/lYhxjseTgA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:48 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: TptsXThE6VlKu+mmc5GEcg54H60=\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T15:50:58.365581Z","times_seen":17506136,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":1,"connect":152,"send":0,"wait":153,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/media/CoinbaseSans2BOLD-s.p.9dae3515.woff2","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/media/CoinbaseSans2BOLD-s.p.9dae3515.woff2 HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://991772coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40016\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"9c50-19cbb4c87e2\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40016, version 1.2097","md5":"b54c6aeed882bdf66df4e5fac9c2340e","sha1":"b483fbe25190262b648b390c11e6bdf9fea33edb","sha256":"81368223143520415fe7fbdc3792d2d52ad7e422d8b214661ff932afe577b779","sha512":"3afc93e98b6a5a756a0e0adfc5d04da8258cbf9065fe4a90673d3193baefce1fb9867fc235dd953a4dce5a2b033b3d1f4280f20270db913baa0f72a3a73bf804","ssdeep":"768:acqYNePjaM2LJWNjCEa18ryDLCIZJFxucAMXM9tcrYecoNj46FSc3Xy6mjLk:a2NePjaMG3CIVxu3cMj1ebx4aSc3Xnm0","tlshash":"8603f1e3a36799e3dfaf54a575c21eac1a1044d765a3afa9d5f2024730d2d0d54031ec","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-07-21T20:21:16.389712Z","times_seen":1495,"resource_available":false,"data":null}},"time_used":945,"timings":{"blocked":312,"dns":1,"connect":150,"send":0,"wait":296,"receive":13,"ssl":166},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/e6dd030cd2ef21f5.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/e6dd030cd2ef21f5.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"1c8ce-19cbb4c87cb\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":116942,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b5b195064bfef963a528eafc2035a562","sha1":"a72a6b45f14bd59f0b19382e07b5f9f480a83684","sha256":"7de6e1814a55ce0013c871c02053c787e203d50cff9f3a4f8f85f66de8903e37","sha512":"450411e214dc2110961fe1deb9647432cfae970cff6943b4593356e7e4c77d49f6351735b1ffc58c4b0766ea5227cbdd12359e3f8c3918436c8b84e8a7ba1e81","ssdeep":"1536:Qo9JPBQR6zwFrzj0rF93M/ckRvtOsf5bPtziiqxGffFg:1E6cljuFdM7tOsxBhqOFg","tlshash":"8fb308f935d5f48207ab40a6c03f0006f32d4d37189e68a0a3e5ddda756499de1b3faa","first_seen":"2026-02-22T10:38:38.937239Z","last_seen":"2026-07-24T02:49:02.937448Z","times_seen":17,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":156,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/turbopack-cb72284e65fc3881.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-cb72284e65fc3881.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"27f8-19cbb4c87cc\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10232,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6402)","md5":"9ac6d24d37e7d8930fcfd7ccc5229052","sha1":"1863566826811b7a35c340f7baa662bcd30160ae","sha256":"2e0ea774bd350fad640b6ef245936850a227b75198dbf4345c69ea42130b474c","sha512":"79a87b60fd8b4f58710f25efefe66e1590cd67637edefc69ed7601aad05815f04f14d4ccd02c66b7211e44eeffdf6cc1373da28fe666d3d28a4108229ff39d8c","ssdeep":"192:U74eFn8/Esp1U91EG5T1uCO9ledFMhMJg4W9PZcxkUk1IsS:U74e2OvO9len6JZZQl","tlshash":"5722d6da33a6f0b743afa5e6907f4044f17954a8141d581c93aca8fb383946e49e3f27","first_seen":"2026-03-09T06:06:17.516339Z","last_seen":"2026-03-11T19:47:26.530453Z","times_seen":3,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":468,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/1e49c519472a323f.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.203Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/1e49c519472a323f.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:48 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"3203c-19cbb4c87cd\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":204860,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65522), with no line terminators","md5":"a695ad457b84a86d345b69c11279a65b","sha1":"96f5606ef7eb5fae96a54c5ba446b61135215ff6","sha256":"b2f481f8deb553cce557fd958b821b66e4223c62980731161354491301449cf5","sha512":"8c1ef215a1576d97fdcceb37ccb88a84e5e50721b01c707ce5cd0c712e7853b72d369ae6371f3340cb21c0b0ad75ce1536908f5cd0d70380277b9a3b30b4d6e4","ssdeep":"6144:IojpsCkvP1WXJvexWDuZkz8NP/gfPYMxX5exuDx2W:PzwZ6","tlshash":"97140844b144baecf76b0590657ec40db13f7aacde0ec4a8b1bc783628864d43957fa9","first_seen":"2026-03-09T06:06:17.520991Z","last_seen":"2026-03-09T06:11:02.751028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":938,"timings":{"blocked":770,"dns":0,"connect":0,"send":0,"wait":158,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/03c999d1ffa4053a.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/03c999d1ffa4053a.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:48 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"33e5b-19cbb4c87ce\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":212571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (45012), with no line terminators","md5":"e18d8b96344f0f4e1686c2e84e4d0f9d","sha1":"ff2327b924f4ec4f4e9d01dee88b2fc1d3e6ac97","sha256":"90f9c59aa163ffb7334a2eeea7bcdea4c5b26687371c27bc65e300b33f702e40","sha512":"be8c3533c7f599d7573df2e4849b0959d568cada74ec203f9b7edfa4352ea69f38f767f61a6cb00c87f896920592e62f14347769d0aa0e1380c835c2e3eff85f","ssdeep":"3072:6RQBSnj1NqIHwLNznwXDt0RCwx5wftyF9x5WNU2HZlTCkT:66BSn5NRwLNzi0RCwxGftyuNU2HZtCkT","tlshash":"b7243d06096d4f7986ec12e015f63dc401794e0adadc3cbfb9ada2479a15bd2e0c27de","first_seen":"2026-01-06T13:51:19.679559Z","last_seen":"2026-03-09T06:11:02.746804Z","times_seen":6,"resource_available":true,"data":null}},"time_used":1075,"timings":{"blocked":768,"dns":0,"connect":0,"send":0,"wait":157,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T06:05:46.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:46 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1, 1\r\nx-nextjs-stale-time: 300\r\nX-Powered-By: Next.js\r\nCache-Control: s-maxage=31536000\r\nETag: \"nghrv57z2d6y0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":9000,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (9000), with no line terminators","md5":"a0a7d6115f0105e26f1f9845c775bc39","sha1":"71ed2ce0f1b5a53bab44ec2418874b303ed1cb2d","sha256":"a3dd5e5bdfe119e10de6ed715a5b19ecf4eecea8f427d0d91c540697c856530a","sha512":"5f325145d17cccbc8bb1f13d49e1c7d10b51e4592a7b18479148ad7d8b87b55a5550f5b5bdcf7b88752de27c7384dadb57ecbe01383ad96fd0b629f3b64d093f","ssdeep":"192:Ag2TbUOjKCnvnAVzKJgnqzcpm6UgaD6zG:Ag2TIO2uv0l06zG","tlshash":"cb02531abc09ee46ec75bc5e103e9e3a44dddd3b8a70ccac92ddce480a5167a1b95cc1","first_seen":"2026-03-09T06:06:17.526941Z","last_seen":"2026-03-09T06:11:02.747626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":813,"timings":{"blocked":328,"dns":10,"connect":154,"send":0,"wait":156,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/media/CoinbaseSans2-s.p.0fddb851.woff2","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/media/CoinbaseSans2-s.p.0fddb851.woff2 HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://991772coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40632\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"9eb8-19cbb4c87e0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40632,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40632, version 1.2097","md5":"62bf1b795c1ad225811afd9715abdc90","sha1":"0ddcce99464162ee676d81ac4bba9dcb001aa40f","sha256":"881387e5619f45f03a99e2fa88a752237343c0bef2414425c3219031653ce45f","sha512":"f59286ca8381ea5f1c29ce03b2d6baf862adb0c0b124dcfd9363fbe214da7e739f86c863a104f3b37942359c45a9a039d6b759c3f47a9745f7caa489ac2cecaa","ssdeep":"768:7ULSNCQzC5hiA5z9A2Y76nwuLRhVGviFiqSbi7cpR:j0iAZO2nwuswiEM","tlshash":"c703f1c427b02afe5e86347ab4c351497bea1814914b8b79405546feb07eca157abc33","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-07-20T07:47:23.286433Z","times_seen":422,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/266bb80f12a9b9de.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/266bb80f12a9b9de.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"41e5-19cbb4c87cb\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16869,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16869), with no line terminators","md5":"08c5c9e658b13d3b6b3b7abb0e3f9464","sha1":"10882a5c3a12cc835a324abef2f79dcb5266f186","sha256":"b30a384bbcec1d7c3589d408c80cb6cea0b7980f1b7a556ec1f7fb2097997801","sha512":"5040e5b0fc4e4c5c195b6d5aae4f1bf9d5ea5263fddfbf0787d6f19b935d24f6fb1ddbd34624b6d5758e3814165bb47eeda0c35299dec28c1707db7e08fbd4ad","ssdeep":"192:TUQB9k84OONbcjEhTRbkFYAPiKk1uQUJcAi5LfL5hULhC12eI+HjVprP:T27vBK6bkwLPKcjfLqhC12eIGb","tlshash":"9b72d6ae7195f0911fa36465803f500bf23929b6286d90a0a3a2dcf5b8f416ed133f5e","first_seen":"2026-03-09T06:06:17.541194Z","last_seen":"2026-05-22T03:26:40.884663Z","times_seen":4,"resource_available":true,"data":null}},"time_used":782,"timings":{"blocked":305,"dns":0,"connect":152,"send":0,"wait":153,"receive":1,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/53825db899214909.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/53825db899214909.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"15eb-19cbb4c87d2\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5611,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5611), with no line terminators","md5":"14d8824ee9fa35686d33a88b8699dc45","sha1":"4f88e5b70755cdf0d7153b14e7a2b0ceccddb328","sha256":"9a1dc1cfbc8b9f32088f3d86a4c14a3a07a7195446e881a8e9ebed8842ab8296","sha512":"c62ee9721db99556c9b05148dd883844a162c8eb9ebf128054bfdd5fb88a6ba87ec6ff237a21c9088c2c7814ff0389a6877c151050dab8eead82add107f48696","ssdeep":"96:1YQIOeE3WE38KmsK6i0NwqHUPxMzRJkZgbH5uEzZldjuuSVgd5Pb2ZEe9AEwsvH:kOJ3x3ZmZIIx6JkZsHPdyuSVw5KW4rw2","tlshash":"5ac1b3c4504b6f1892db290d3816c04c3cae2fec9d4ed851fdac8cba4931694b063fea","first_seen":"2026-03-09T06:06:17.548383Z","last_seen":"2026-03-09T06:11:02.754377Z","times_seen":2,"resource_available":true,"data":null}},"time_used":773,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/favicon.ico","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:48.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:48 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":557,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"52bad1d125e93b0235a76b87996a82d0","sha1":"b2a650a251ddb79c24160958c649de3209ee2f1c","sha256":"b90cdcbe9e842bf371d9c5e7dd13359fde26879a4642ad6f752e86a65fab4fb5","sha512":"2dff26e6083fc1fa70283e407e205201d5694de361a925f4e64360cce56d2f94b690bcb075ca6f02b9b380b7e9e1f2c2d0da6f606e6a4380fc981f4ec55ef0f0","ssdeep":"","tlshash":"9df020d74e609b5c5c5e6b3e53ae882482510d9c1c14694fc442781a3c3429d05f6316","first_seen":"2023-05-01T23:35:47Z","last_seen":"2026-07-21T20:21:16.381764Z","times_seen":699,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/media/CoinbaseSans2_Medium-s.p.0fddb851.woff2","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.189Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/media/CoinbaseSans2_Medium-s.p.0fddb851.woff2 HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://991772coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40632\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"9eb8-19cbb4c87e0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40632,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40632, version 1.2097","md5":"62bf1b795c1ad225811afd9715abdc90","sha1":"0ddcce99464162ee676d81ac4bba9dcb001aa40f","sha256":"881387e5619f45f03a99e2fa88a752237343c0bef2414425c3219031653ce45f","sha512":"f59286ca8381ea5f1c29ce03b2d6baf862adb0c0b124dcfd9363fbe214da7e739f86c863a104f3b37942359c45a9a039d6b759c3f47a9745f7caa489ac2cecaa","ssdeep":"768:7ULSNCQzC5hiA5z9A2Y76nwuLRhVGviFiqSbi7cpR:j0iAZO2nwuswiEM","tlshash":"c703f1c427b02afe5e86347ab4c351497bea1814914b8b79405546feb07eca157abc33","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-07-20T07:47:23.286433Z","times_seen":422,"resource_available":false,"data":null}},"time_used":1116,"timings":{"blocked":317,"dns":1,"connect":156,"send":0,"wait":301,"receive":165,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/e3f2d7cb3e431953.css","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/e3f2d7cb3e431953.css HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"1edc6-19cbb4c87d5\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126406,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (64754)","md5":"4d7bbba3b67bdfe7c252ee270405b0c1","sha1":"1cd2723a8d10dce0502afb8b2ba6233c3dd75226","sha256":"39c8bc74b1535db5ecc0b14ec3390ff691a05116fa7cf3adb69f9cbccfc9da72","sha512":"38615548b8fc8934f8733964f27e840a6e6155a9ccc0442828ec7a35396c9bfdc1bbc9f0e046ce6aba6eb6855e8146cc930eb1272e13b43d33313188c5ca6368","ssdeep":"3072:S5bkJTFhjPggkhso0+U3kaMN2/M5jmfSNWpNp:SkJTFhjPggkhso0+U3kab/M51NWZ","tlshash":"48c39460b225e93fbd27a8bd639cf84c6109b181de6657edfa11722253c3bf62873504","first_seen":"2026-03-09T06:06:17.557974Z","last_seen":"2026-03-09T06:11:02.756428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":959,"timings":{"blocked":317,"dns":1,"connect":161,"send":0,"wait":306,"receive":3,"ssl":167},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/2f236954d6a65e12.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/2f236954d6a65e12.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:47 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"7881-19cbb4c87c4\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":30849,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30847), with no line terminators","md5":"4ad400137e66886150ae9691abc2413e","sha1":"171b8c43f4cbe22d32d2dd5624fbfc5f2f4534dc","sha256":"de98aefbea0cffbf2c3d5d266dfeabef219e5d805208e63bccf1fb65a875b012","sha512":"32c447c597c6d23588744f15c5e5cdaa44fda00c65cc0ef2c2d92163b672e52c37afba5bdb56212ba3317c9fc03c8951045a5904fa08a6235eab871e399de48d","ssdeep":"384:P35z75Bq9E0m1YmRDQ0cJ3tn79Fg/Ag8qWtOPSNxErV:P5z9BX0ZMOx3ErV","tlshash":"32d2e8717395f9a352db85d9d02a0015f2290d3530ae24b0b395dcef368dc89a1fafa9","first_seen":"2026-01-18T17:30:29.32199Z","last_seen":"2026-07-24T10:14:28.678699Z","times_seen":838,"resource_available":true,"data":null}},"time_used":772,"timings":{"blocked":608,"dns":0,"connect":0,"send":0,"wait":163,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"991772coinbase.com/_next/static/chunks/e8fc6704c0405e27.js","fqdn":"991772coinbase.com","domain":"991772coinbase.com","tld":"com"},"ip":{"addr":"5.175.234.203","port":443,"asn":12586,"as":"GHOSTnet GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://991772coinbase.com/","date":"2026-03-09T06:05:47.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"991772coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 22:36:12 GMT","end":"Sat, 06 Jun 2026 22:36:11 GMT"},"fingerprint":{"sha1":"69:7F:4C:2B:7E:82:DE:CC:68:D3:2C:59:88:4B:FC:3E:76:15:22:44","sha256":"B5:D5:A3:82:78:ED:EA:18:97:F3:F0:E9:12:17:84:5F:31:E0:27:A3:82:1D:BF:06:EC:17:74:F7:83:F2:5E:42"}}},"request":{"raw":"GET /_next/static/chunks/e8fc6704c0405e27.js HTTP/1.1\r\nHost: 991772coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://991772coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Mon, 09 Mar 2026 06:05:48 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 05 Mar 2026 00:01:20 GMT\r\nETag: W/\"3e7f5-19cbb4c87d6\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":255989,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8f5527c70c01aad92184c33acedc13a0","sha1":"4401caaa9cd5fdf0bef2e2f8eae1d11ddd029fbd","sha256":"a00f5202639a701c2ce8c77c671ef18f85a84f4a28ab3e862b247c1e7b1da4a8","sha512":"aca177dd2a201261b11b1e855f6cd0236a1ac94d5f1298b920444b70e8f7cf525ff317b85d192eda6b8db73081363ed6981f62802275215217960492e1879181","ssdeep":"6144:GZxK6lQTn6di4iLjaXH3Qwzso4x4Pfoib8nMS8a+9FnMxMeiRH:GZxK68CgLk3Qwzso4x4PgMtTnb","tlshash":"73444ce673527571d3df419ac06f8604b33a1994200e443cb27e8deb2661989a2f7f7e","first_seen":"2026-03-09T06:06:17.566073Z","last_seen":"2026-03-09T06:11:02.757847Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1079,"timings":{"blocked":769,"dns":0,"connect":0,"send":0,"wait":157,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"991772coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}