{"report_id":"e09f3485-bd27-4df4-a44a-2a824749385f","version":0,"status":"done","tags":[],"date":"2026-10-13T15:49:36Z","url":{"schema":"http","addr":"liveness-coinbase.com/","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":0,"asn":202412,"as":"Omegatech LTD","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"http","addr":"liveness-coinbase.com/","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"title":"Coinbase Vault","dom":{"size":97133,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64703)","md5":"1ba1a1a8ba21aa22bd848e043b0f1de7","sha1":"a7283e3564ac4a47628957dbc3defc2ccff7a923","sha256":"0d038b668e8910c7acc7d44621f8433176d27b1990d5845af55319b0fe6c2313","sha512":"66e3bc99838582a21243c3e6edba6c2b2be30292896f1c93d6717ede4217e83c2f3bc11ffb80733a1c08a1ad09e765a9c5a792e8feb3ffb4130e45e05888353c","ssdeep":"1536:AKoxoAlcC30xcdayrkrWkhAW87hPsrRET6kjOWDW3dt:/94c80adayQrW9mdz","tlshash":"92933a9cf391b13943b75074e52f2502733f1a45e849c4a8e26aebc52db58ce5623f3a","dom_hash":"domhash6777dcdb20417ac486ffd6aca6eb41ba","first_seen":"2026-10-13T15:49:44.232195Z","last_seen":"2026-10-13T15:49:44.232195Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"liveness-coinbase.com/","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":0,"asn":202412,"as":"Omegatech LTD","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T15:49:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"liveness-coinbase.com","ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-10-12","domain_rank":0,"first_seen":"2026-10-13T15:49:39.327849Z","last_seen":"2026-10-13T15:49:39.327849Z","alert_count":20,"request_count":20,"received_data":1543717,"sent_data":9751,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-10-11T22:47:21.405407Z","alert_count":0,"request_count":6,"received_data":16595,"sent_data":3207,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/index.CaMxIkfN.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d43131ac8b16fa5e43afb7594f30e71","sha1":"74e5ca903e88e6fafc007773255d50d514962068","sha256":"6c7b4d6f1666915fff7f7676a64c9e64acb19a70df872eda86a3c6ae6c0930b5","sha512":"930558c00ad6b3b6e4a50d6ad18d8581ca65b306543e236a2e1a9ac9e4e5627c73595beee3e3ee4c2bae8f30ad8626ff48ac0825c60d0476f8a4e91041674562","ssdeep":"12288:/FWqZQZqgiqW466zV2Fzc187mTlRlflIu4w8dWy1bR/QuX5R4myxX:/F7mqHCxntI9w8dWy1bRVcX","tlshash":"e4c43b943661f0614bf715e6107b1007f338ad1d740d84a8b668eceb7db9889a27bf39","size":586003,"data":"","first_seen":"2026-10-13T15:49:44.281731Z","last_seen":"2026-10-13T15:49:44.281731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/live-chat.IMCub9Ip.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"215580f99d5957dfd7ee6c6fab5b2518","sha1":"673a515b06e126272ffae66549cc3ace9de48502","sha256":"2b3c1dec969b8e9ef1d42b3ab27d5d380e80c5f9e96c869c12b12fd384526fd7","sha512":"4e50cc89f632db55eb0971c5a87aa7c919c80f03cfe51e90d92b094b9f9f5e79311dd0f8294caef22a1dfa28b25bee832ba701d3eef044afde06acf4ea246e17","ssdeep":"192:MbaMZW1eugMOFTc69EhzYsSyOnvYHQvzYLW6hd39u7t/AiGLVNaxmYoUcN:mahc3O6WhUlyygwrI/hd9u7tBGLVi1U","tlshash":"9f42fa91e216eabdea9744b5692fb015312f1b20fd1bc8e8f33d2471191c4c6b6617ec","size":13054,"data":"","first_seen":"2026-10-13T15:49:44.238411Z","last_seen":"2026-10-13T15:49:44.238411Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/hooks.module.ByJ2_6FA.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d01f0c6cdf4bc0d18fe4a5bcb6c870cf","sha1":"55ffa93ea2d0512dce9804d2c7f2fd0dadde4fc9","sha256":"5fd7e8c719ea912d836ff460a49e12fb6e42da9d99ad2509ab3ee50ad22ebca2","sha512":"b521d847f24a6cb56e814639e1460518b1994be529bd036865414f749dd6e41a38bf0d3fbc04418918c8eb996c209438e63c8534b3ecfb2a079648369b5021b7","ssdeep":"384:bSYCafue5ufJ2lALCvyHtYEguiYUqhbndEtO1wAi62zMzQ:bSYQWgguZUqhbB2zMc","tlshash":"2262d4f87c60f0201af77562607f1d2bb379140eb849d8d0a60af8ea2db850d6557f9d","size":15236,"data":"","first_seen":"2026-09-18T14:30:15.934892Z","last_seen":"2026-10-13T15:49:44.268013Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/VaultFlow.ubZL3F5e.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"933dc1fbc7516cc7dd6dc30dbafe8ccf","sha1":"5e25018123ae7900e49692545c5cd9696635fd6c","sha256":"81872b1992f41a499e8d22760912d8a9e6212d1fe228a6f72943edd98e088c1c","sha512":"957c649ec5acc9a8021d619ddb9dc1a4e14374934345043ada9d21947b12e3c06cd5d6c9f13fb8955fbd13024f58983d4f54bec98027c7e4006cd6f31c264c25","ssdeep":"1536:HeTFHx9kpXdZnMF4u/JMvAD+4Ob3dbWgIqaynoRrkk9vitlURU4hGfGRpeDCTP9i:YxaptZMThMtb8gInWlUROfGRfl1h6z","tlshash":"64246c00f101ea7eff6705e599bf5005b02e6b54e91fc898f17c48b227a86c57a0b7ac","size":223529,"data":"","first_seen":"2026-10-13T15:49:44.285341Z","last_seen":"2026-10-13T15:49:44.285341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/index.B2HEl39Z.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9e263f4b52f5543b84a6930d9d9fece","sha1":"810deaa4777b557a69bea38fad0c2d9b5dd58acd","sha256":"0dd2c5f913a4fdab44c7df5644d4330f6a732ec35f938d68f199b072b1b776bf","sha512":"83ab519bbf1f0be2c2f52d7d2e4051e4598c5ed4389e9657aab5d98e70de32c7380e4cd33cec0efc5e7e21da4eb0e7d19fe6da9a11dd3606f7552f48f690b24d","ssdeep":"6144:2QweUIvpzIkrlj9+X6xreDtwggqIdred/bo+JIqk8ru5:2Q8X6V2NJIau","tlshash":"f4347d84f391b038cea714a5e0373206e2397905b4cd84a4f7e89ad62dec58d6657f3e","size":238591,"data":"","first_seen":"2026-10-13T15:49:44.241428Z","last_seen":"2026-10-13T15:49:44.241428Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/index.BMcaB7w5.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da9e19687d19aa8d069deecae10e9a3","sha1":"6390109f8878e87e02af55d3158c45868cad432a","sha256":"a2f110af8396148a93b1d43d77338f55fd4c23006925e0542d5ebd767db36462","sha512":"423838fe1a7abffcc943a4f809e389d8170b61f16fce85c98bacb74e4b32aa31e538cd83689aefd472951c9b7c83565b2bddfbbd957bbd81712c9b87635ca2bf","ssdeep":"3072:ISgFVNBLxpx+NhYjWY5vuX3kV/HXpKetkaZGC1WbJa+d4Zd4nd4Dd4Dd4c1pG9gY:ISKVNOOjW0uX36pKetZMJ11pGKCdYOT","tlshash":"05242b84b665b0e54ee679e554671000f134ed91b04d8091b3acdcbb3eaec8d87eaf2d","size":209592,"data":"","first_seen":"2026-10-13T15:49:44.245921Z","last_seen":"2026-10-13T15:49:44.245921Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe939cf3f0791aa4393c2e098237378a","sha1":"45a838d73a4c606d484413fc4cd18f297f525b78","sha256":"373bcdaea9398c1f586404f0a39045e09a11949d361ec9c58a46ca5e010f75a4","sha512":"b37d1247e638dc4a9390521e286cb785b14762697361c79d70d05afad9cf8b920e149817aa036b409f55b7ab888684589b5fb98bab250946a3e15d01ee8e9a74","ssdeep":"1536:vKoxoAlcC30xcdayrkrWkhAW87hPsrRET6kjOWDWX:y94c80adayQrW9mdX","tlshash":"d883289cf385b23543f75075e52f2602773b1e09e849c4a4e166eac52cb94ce6223b7e","size":83300,"data":"","first_seen":"2025-07-30T09:26:14.123327Z","last_seen":"2026-10-13T15:55:36.935949Z","times_seen":2508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/live-chat.IMCub9Ip.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.375Z","timestamp":1791906545375,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/live-chat.IMCub9Ip.js HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 13054\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-32fe\"\r\nExpires: Wed, 13 Oct 2027 15:49:05 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13054,"size_decoded":13409,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13053)","md5":"215580f99d5957dfd7ee6c6fab5b2518","sha1":"673a515b06e126272ffae66549cc3ace9de48502","sha256":"2b3c1dec969b8e9ef1d42b3ab27d5d380e80c5f9e96c869c12b12fd384526fd7","sha512":"4e50cc89f632db55eb0971c5a87aa7c919c80f03cfe51e90d92b094b9f9f5e79311dd0f8294caef22a1dfa28b25bee832ba701d3eef044afde06acf4ea246e17","ssdeep":"192:MbaMZW1eugMOFTc69EhzYsSyOnvYHQvzYLW6hd39u7t/AiGLVNaxmYoUcN:mahc3O6WhUlyygwrI/hd9u7tBGLVi1U","tlshash":"9f42fa91e216eabdea9744b5692fb015312f1b20fd1bc8e8f33d2471191c4c6b6617ec","first_seen":"2026-10-13T15:49:44.238411Z","last_seen":"2026-10-13T15:49:44.238411Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/index.B2HEl39Z.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.412Z","timestamp":1791906545412,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index.B2HEl39Z.js HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 238591\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-3a3ff\"\r\nExpires: Wed, 13 Oct 2027 15:49:05 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":238591,"size_decoded":238948,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e9e263f4b52f5543b84a6930d9d9fece","sha1":"810deaa4777b557a69bea38fad0c2d9b5dd58acd","sha256":"0dd2c5f913a4fdab44c7df5644d4330f6a732ec35f938d68f199b072b1b776bf","sha512":"83ab519bbf1f0be2c2f52d7d2e4051e4598c5ed4389e9657aab5d98e70de32c7380e4cd33cec0efc5e7e21da4eb0e7d19fe6da9a11dd3606f7552f48f690b24d","ssdeep":"6144:2QweUIvpzIkrlj9+X6xreDtwggqIdred/bo+JIqk8ru5:2Q8X6V2NJIau","tlshash":"f4347d84f391b038cea714a5e0373206e2397905b4cd84a4f7e89ad62dec58d6657f3e","first_seen":"2026-10-13T15:49:44.241428Z","last_seen":"2026-10-13T15:49:44.241428Z","times_seen":1,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":302,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/index.Azru0Q4p.css","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.184Z","timestamp":1791906544184,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index.Azru0Q4p.css HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:04 GMT\r\nContent-Type: text/css\r\nContent-Length: 83052\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-1446c\"\r\nExpires: Wed, 13 Oct 2027 15:49:04 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":83052,"size_decoded":83394,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4c90886e8a1d48a85a66666559df5cf2","sha1":"8d279f9e714a34e22a72003619a0e386c2c99512","sha256":"d492d1db94feeb5bbc3d651d0513dbc8638e086f372f0b5bba1f1ba3c0bd1dd8","sha512":"49660fbcf62a7a1ceb7bba37b5e00f645ee3a73972874fd96d53b571c680b823a87a65b5f4b86f44bd993084be999a5ca0db711b558448cb09b27f60230ebd6b","ssdeep":"1536:AZTHHRcH1d4SeyUh+Gwv6eOnObWriWxnL2eZKA4V:AZTRcH1d4SeyUh+Gwv6eOnfxnL2eZKA+","tlshash":"f583861d6636503f3d2784f49198ab99b20e70d0ef3916e6f98611215bc23fb2ef7618","first_seen":"2026-10-13T15:49:44.242948Z","last_seen":"2026-10-13T15:49:44.242948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":86,"send":0,"wait":75,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.744Z","timestamp":1791906544744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter:wght@700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:49:04 GMT\r\ndate: Tue, 13 Oct 2026 15:49:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2591,"size_decoded":1318,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f5ba2acac276231c0dede0e26228bc11","sha1":"e4049fee9aaaab6ffba2bacd4dcee165ee5c0ef2","sha256":"6780f937f03d534d1105a9a8dd50a3787ba6b4e066271caac95b6d8531dfeabd","sha512":"152d9415d9567960eb47396f87e281c9f72f34e6a60ea20606a9d47f218274b14d42e80913791b7ed7ddff3460f860a4c525b532e6743d9d56fa2284964f96d1","ssdeep":"","tlshash":"cc51ac91006b95009b4b1dd263cf3f36aece21482085c5bd5bfe0dc59ceae264369b8e","first_seen":"2026-10-06T18:30:55.442287Z","last_seen":"2026-10-13T15:49:44.244587Z","times_seen":17,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":32,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/index.BMcaB7w5.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.416Z","timestamp":1791906545416,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index.BMcaB7w5.js HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 209592\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-332b8\"\r\nExpires: Wed, 13 Oct 2027 15:49:05 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":209592,"size_decoded":209949,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (59559)","md5":"8da9e19687d19aa8d069deecae10e9a3","sha1":"6390109f8878e87e02af55d3158c45868cad432a","sha256":"a2f110af8396148a93b1d43d77338f55fd4c23006925e0542d5ebd767db36462","sha512":"423838fe1a7abffcc943a4f809e389d8170b61f16fce85c98bacb74e4b32aa31e538cd83689aefd472951c9b7c83565b2bddfbbd957bbd81712c9b87635ca2bf","ssdeep":"3072:ISgFVNBLxpx+NhYjWY5vuX3kV/HXpKetkaZGC1WbJa+d4Zd4nd4Dd4Dd4c1pG9gY:ISKVNOOjW0uX36pKetZMJ11pGKCdYOT","tlshash":"05242b84b665b0e54ee679e554671000f134ed91b04d8091b3acdcbb3eaec8d87eaf2d","first_seen":"2026-10-13T15:49:44.245921Z","last_seen":"2026-10-13T15:49:44.245921Z","times_seen":1,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":301,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/api/vault/session-info","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.657Z","timestamp":1791906545657,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/vault/session-info HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nCross-Origin-Resource-Policy: cross-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: on\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 0\r\nETag: W/\"8db-9++TNNZ8FX4iryoKs9I45ViNUbM\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2267,"size_decoded":1553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"82f7ba2b60261eeee0482841ac9fbe11","sha1":"f7ef9334d67c157e22af2a0ab3d238e5588d51b3","sha256":"b04b93794589e261d37f9b92b48afb2a51a3d26abce8841665d3157673028ab2","sha512":"2b9b17c09bbeebf728426463a8a397020a2240b717f953301560d1f1213c7382012779c9c276a31ad10ca90bb8bf28fd5dd6a1f6cd59a0b4f9c2e0329442b5d6","ssdeep":"","tlshash":"3f41128713f30419b953d8646f6173442a54e113964bcd783eeda2b8cf89559a8f378c","first_seen":"2026-10-13T15:49:44.248223Z","last_seen":"2026-10-13T15:49:44.248223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/favicon.svg","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.822Z","timestamp":1791906545822,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 502\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-1f6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":502,"size_decoded":753,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0edbf219ff502b5710ff9a89458365b8","sha1":"6441d789d82c85aa7d3a7df399945c8bc5f791ed","sha256":"cc83c09e5b0c96020b10d8b858271de53a56e9c3828fb3bee95bd34633d61995","sha512":"1850fa9d9d5938066950ec7f6617877fb69074a1b34fd0c3ebc0708a2aec0c298bfc8dab23850fb5b50171378081ff6f7bee390abe79a36c8daae778f246b645","ssdeep":"","tlshash":"4ff050c56308868c105047fe6f7c258617dbb0bc3379a745ae4c16d53013669e7d59a8","first_seen":"2026-10-13T15:49:44.251549Z","last_seen":"2026-10-13T15:49:44.251549Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/Coinbase-Sans/Coinbase_Sans-Medium-web-1.32.woff2","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.179Z","timestamp":1791906544179,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Coinbase-Sans/Coinbase_Sans-Medium-web-1.32.woff2 HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:04 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40016\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-9c50\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40016,"size_decoded":40267,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40016, version 1.2097","md5":"b54c6aeed882bdf66df4e5fac9c2340e","sha1":"b483fbe25190262b648b390c11e6bdf9fea33edb","sha256":"81368223143520415fe7fbdc3792d2d52ad7e422d8b214661ff932afe577b779","sha512":"3afc93e98b6a5a756a0e0adfc5d04da8258cbf9065fe4a90673d3193baefce1fb9867fc235dd953a4dce5a2b033b3d1f4280f20270db913baa0f72a3a73bf804","ssdeep":"768:acqYNePjaM2LJWNjCEa18ryDLCIZJFxucAMXM9tcrYecoNj46FSc3Xy6mjLk:a2NePjaMG3CIVxu3cMj1ebx4aSc3Xnm0","tlshash":"8603f1e3a36799e3dfaf54a575c21eac1a1044d765a3afa9d5f2024730d2d0d54031ec","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-10-13T15:49:44.256316Z","times_seen":1527,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":75,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz@0,9..40;1,9..40\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.745Z","timestamp":1791906544745,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz@0,9..40;1,9..40\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:49:04 GMT\r\ndate: Tue, 13 Oct 2026 15:49:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1779,"size_decoded":1153,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1ff52f8a8b86223655088c4f54004d66","sha1":"0357ad8c048924d43a036a37f740df4595760e3b","sha256":"f8ffe5afddb66653aedf41a7d43a1087329b2dc8d4e17616dff5522ae0cb3a5d","sha512":"96e010f3006c3609f1f00d1a992e27be3d3663d0a184bc1e5d6b8f6d4b1db922861373428f437fdd83f3588bb34876ef4724437d8ccce62282fbd4081e1fc2fd","ssdeep":"","tlshash":"6f31e381043ba114e7872dc571debd32ef1f92506444a9746bfe1888fc9ac6e5371b4c","first_seen":"2026-10-09T10:11:08.772469Z","last_seen":"2026-10-13T15:49:44.258391Z","times_seen":2,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,700;1,9..40,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.747Z","timestamp":1791906544747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,700;1,9..40,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:49:04 GMT\r\ndate: Tue, 13 Oct 2026 15:49:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1779,"size_decoded":1153,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c6a8287e07b63ca7077225951c6cc04c","sha1":"3ce182605289bf274599d451a3129e5193e8b6c2","sha256":"27b05ea6f6db7d6b05a76df97f1fcb75a099e1ca285bfa2a75a186f19359dcef","sha512":"e383f96f2d5cd2a19afc1fce553e3273553c439d2043d7102a9735389cc5505ea6ceb0a2628d4f69835c0411522b94d7ac29401428e4b17c8237db8422d8e9ca","ssdeep":"","tlshash":"6131ce81043ba114eb871dc122de7d33ff1f919564549934abfe1888fcaac2e536174c","first_seen":"2026-10-09T10:11:08.718581Z","last_seen":"2026-10-13T15:49:44.264178Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Oxanium:wght@200..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.749Z","timestamp":1791906544749,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Oxanium:wght@200..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:49:04 GMT\r\ndate: Tue, 13 Oct 2026 15:49:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":846,"size_decoded":1069,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"429166a6cea4d8da6187f18beb6bd990","sha1":"b5e35e780020de855e9f9c40c429cbd1a0d37bfa","sha256":"e1be33737a00aab3501ba2a7a5fff90f19cf233be428dcfa44060ef80037761f","sha512":"436166602b737a94f318238e01c2923041901d8d1d70ddf521164aceaf8326d2b526ac1352e74cf483972ccd878b01300e3c039f8f195bcdb24422c30b793356","ssdeep":"","tlshash":"d001ef81082ba504db830dc012cf7e32ee0e619064049da4aefd1488ac9bc5a5361f1c","first_seen":"2026-10-09T10:11:08.775777Z","last_seen":"2026-10-13T15:49:44.266946Z","times_seen":4,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":34,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/hooks.module.ByJ2_6FA.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.414Z","timestamp":1791906545414,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/hooks.module.ByJ2_6FA.js HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 15236\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-3b84\"\r\nExpires: Wed, 13 Oct 2027 15:49:05 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15236,"size_decoded":15591,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15235)","md5":"d01f0c6cdf4bc0d18fe4a5bcb6c870cf","sha1":"55ffa93ea2d0512dce9804d2c7f2fd0dadde4fc9","sha256":"5fd7e8c719ea912d836ff460a49e12fb6e42da9d99ad2509ab3ee50ad22ebca2","sha512":"b521d847f24a6cb56e814639e1460518b1994be529bd036865414f749dd6e41a38bf0d3fbc04418918c8eb996c209438e63c8534b3ecfb2a079648369b5021b7","ssdeep":"384:bSYCafue5ufJ2lALCvyHtYEguiYUqhbndEtO1wAi62zMzQ:bSYQWgguZUqhbB2zMc","tlshash":"2262d4f87c60f0201af77562607f1d2bb379140eb849d8d0a60af8ea2db850d6557f9d","first_seen":"2026-09-18T14:30:15.934892Z","last_seen":"2026-10-13T15:49:44.268013Z","times_seen":2,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.832Z","timestamp":1791906545832,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"HEAD / HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: W/\"6acd7034-40c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":230,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/api/vault/update-progress","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:07.680Z","timestamp":1791906547680,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /api/vault/update-progress HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: http://liveness-coinbase.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"step\":\"welcome\"}"}},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nCross-Origin-Resource-Policy: cross-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: on\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 0\r\nETag: W/\"8db-9++TNNZ8FX4iryoKs9I45ViNUbM\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2267,"size_decoded":1553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"82f7ba2b60261eeee0482841ac9fbe11","sha1":"f7ef9334d67c157e22af2a0ab3d238e5588d51b3","sha256":"b04b93794589e261d37f9b92b48afb2a51a3d26abce8841665d3157673028ab2","sha512":"2b9b17c09bbeebf728426463a8a397020a2240b717f953301560d1f1213c7382012779c9c276a31ad10ca90bb8bf28fd5dd6a1f6cd59a0b4f9c2e0329442b5d6","ssdeep":"","tlshash":"3f41128713f30419b953d8646f6173442a54e113964bcd783eeda2b8cf89559a8f378c","first_seen":"2026-10-13T15:49:44.248223Z","last_seen":"2026-10-13T15:49:44.248223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/api/vault/audit","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:07.830Z","timestamp":1791906547830,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /api/vault/audit HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/json\r\nReferer: http://liveness-coinbase.com/\r\nContent-Length: 231\r\nOrigin: http://liveness-coinbase.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":231,"data":"{\"events\":[{\"category\":\"navigation\",\"action\":\"step_transition\",\"target\":\"welcome\",\"details\":{\"from\":\"loading\"},\"timestamp\":1791906547651},{\"category\":\"navigation\",\"action\":\"step_view\",\"target\":\"welcome\",\"timestamp\":1791906547677}]}"}},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nCross-Origin-Resource-Policy: cross-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: on\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 0\r\nETag: W/\"8db-9++TNNZ8FX4iryoKs9I45ViNUbM\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2267,"size_decoded":1553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"82f7ba2b60261eeee0482841ac9fbe11","sha1":"f7ef9334d67c157e22af2a0ab3d238e5588d51b3","sha256":"b04b93794589e261d37f9b92b48afb2a51a3d26abce8841665d3157673028ab2","sha512":"2b9b17c09bbeebf728426463a8a397020a2240b717f953301560d1f1213c7382012779c9c276a31ad10ca90bb8bf28fd5dd6a1f6cd59a0b4f9c2e0329442b5d6","ssdeep":"","tlshash":"3f41128713f30419b953d8646f6173442a54e113964bcd783eeda2b8cf89559a8f378c","first_seen":"2026-10-13T15:49:44.248223Z","last_seen":"2026-10-13T15:49:44.248223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T15:49:03.918Z","timestamp":1791906543918,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:04 GMT\r\nContent-Type: text/html\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6acd7034-40c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1036,"size_decoded":693,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f20976b1737a3e5514411437e0254b89","sha1":"57d63a79bde4ac9a93b817d2f0269ff45aca61e4","sha256":"26c721d7f5c7ca260729ae58598e0c0f43c817c0b59360d068cf5c164468d741","sha512":"2d9ac141479f0b14eea7f479355d6073fcfdadda53fca76eda71e624bed44f53fa535135e645134ae73f438df0f235a7f11e5c592ccfa010b165e9a6b349eb7d","ssdeep":"","tlshash":"79117b0574e1d89822388b65eed0b5108c42a60b5f59d88670af11fa8fc5f869cd779e","first_seen":"2026-10-13T15:49:44.27246Z","last_seen":"2026-10-13T15:49:44.27246Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":4,"connect":79,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.742Z","timestamp":1791906544742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Inter\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:49:04 GMT\r\ndate: Tue, 13 Oct 2026 15:49:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2591,"size_decoded":1318,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"87f42933c2e10dc2c08783f8025839e9","sha1":"7517958ce74ec525625ee7ee13d5ea6bf8a8c89b","sha256":"d47b907dca0e2d0b7f0ddaed9b08c31687fe75dd554f1d0b656419d4fb78c335","sha512":"5013bea75c0981081f2edb867680ae3be863e629fffc9456672dcfa4a6e546d3553dbcc81e022e8c62536cc82f95524fe89956572e3fed3f5ea2c10f3d513e3b","ssdeep":"","tlshash":"5851ae91002b9500da4b1dc623cf3f35aece22842085d5b95ffe0dc5acdad264369b8e","first_seen":"2026-10-05T18:00:22.549192Z","last_seen":"2026-10-13T17:20:52.111392Z","times_seen":82,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":33,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/api/vault/session-info","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.653Z","timestamp":1791906545653,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/vault/session-info HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nCross-Origin-Resource-Policy: cross-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: on\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 0\r\nETag: W/\"8db-9++TNNZ8FX4iryoKs9I45ViNUbM\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2267,"size_decoded":1553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"82f7ba2b60261eeee0482841ac9fbe11","sha1":"f7ef9334d67c157e22af2a0ab3d238e5588d51b3","sha256":"b04b93794589e261d37f9b92b48afb2a51a3d26abce8841665d3157673028ab2","sha512":"2b9b17c09bbeebf728426463a8a397020a2240b717f953301560d1f1213c7382012779c9c276a31ad10ca90bb8bf28fd5dd6a1f6cd59a0b4f9c2e0329442b5d6","ssdeep":"","tlshash":"3f41128713f30419b953d8646f6173442a54e113964bcd783eeda2b8cf89559a8f378c","first_seen":"2026-10-13T15:49:44.248223Z","last_seen":"2026-10-13T15:49:44.248223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/api/vault/verify-session?module=coinbase_vault","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.655Z","timestamp":1791906545655,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/vault/verify-session?module=coinbase_vault HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 503 Service Unavailable\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nCross-Origin-Resource-Policy: cross-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: on\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 0\r\nETag: W/\"8db-9++TNNZ8FX4iryoKs9I45ViNUbM\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"503","status_text":"Service Unavailable","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2267,"size_decoded":1553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"82f7ba2b60261eeee0482841ac9fbe11","sha1":"f7ef9334d67c157e22af2a0ab3d238e5588d51b3","sha256":"b04b93794589e261d37f9b92b48afb2a51a3d26abce8841665d3157673028ab2","sha512":"2b9b17c09bbeebf728426463a8a397020a2240b717f953301560d1f1213c7382012779c9c276a31ad10ca90bb8bf28fd5dd6a1f6cd59a0b4f9c2e0329442b5d6","ssdeep":"","tlshash":"3f41128713f30419b953d8646f6173442a54e113964bcd783eeda2b8cf89559a8f378c","first_seen":"2026-10-13T15:49:44.248223Z","last_seen":"2026-10-13T15:49:44.248223Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/Coinbase-Sans/Coinbase_Sans-Bold-web-1.32.woff2","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.670Z","timestamp":1791906545670,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Coinbase-Sans/Coinbase_Sans-Bold-web-1.32.woff2 HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/assets/index.Azru0Q4p.css\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 38440\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-9628\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38440,"size_decoded":38691,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38440, version 1.2097","md5":"1bd2746bf1673d5fd309eb8705387859","sha1":"0d255a9f1c074b1217846987c38b9ba2ba130fca","sha256":"22b89501014be520553106d1c240a32079af8c2c92d6b9c8c4d1881f6213c1dd","sha512":"9ff4ed16fe89207cda5e33e30f4558e2fbce93d8e8f38291c52b0c8f81de1c82f7a13f1d6593b27eae44cb682988c9a30285531ae2f5729fe4310908adf258d2","ssdeep":"768:y20pkypLC6U/9wbvjwH6OpD1Qq40M6W/sAnA7zwmDJMTpIhp0DFGluUWXVxUmLZe:y5pkypLCzIvA6O0p6WSfwmlcCp0pWuU7","tlshash":"1f03f1b51cbfb522c748c034f419d895457af88b5ef0e095b1ed80e7854c7d9b2f9489","first_seen":"2023-08-17T10:59:17Z","last_seen":"2026-10-13T15:49:44.276744Z","times_seen":20,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":75,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"liveness-coinbase.com/","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T15:49:03.737Z","timestamp":1791906543737,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T18:42:33.833148Z","times_seen":19088201,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/Coinbase-Sans/Coinbase_Sans-Regular-web-1.32.woff2","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.177Z","timestamp":1791906544177,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Coinbase-Sans/Coinbase_Sans-Regular-web-1.32.woff2 HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:04 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 40480\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-9e20\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40480,"size_decoded":40731,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.2097","md5":"c9a6e887656f7b1014db3f1a07247ee2","sha1":"371f6e5792cff6d3bf6122392d2403f05f1ca445","sha256":"5db56ddf9ab991fc7a3a5b188b6b0c92331213ec4991b71d9821c36dcbcdb687","sha512":"8544191d90eb82b7ed77b813bebb04c918677dd206f37d151db7ee5f34feef64afee26b0ea94398a64a8aea0d8c6d8613dd1b106eb49142a485235e6e19e2710","ssdeep":"768:Czw/1p285wfUizBtYzRe195L9i980ZzsDTdPALCNVb872CEzwZfkAYl:tI85WBtd195xi980Cn6IbT9ws","tlshash":"810301d9265d774ed88b863709c227308ce889d6720be1872bb4a18371e6ec8c625fd5","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-10-13T15:49:44.278761Z","times_seen":1625,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/Coinbase-Mono/Coinbase_Mono-Regular-web.woff2","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.180Z","timestamp":1791906544180,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /Coinbase-Mono/Coinbase_Mono-Regular-web.woff2 HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://liveness-coinbase.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:04 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 35268\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-89c4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35268,"size_decoded":35519,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35268, version 1.197","md5":"d7894037d2647ae5cfaf2c464fad4096","sha1":"d065233a8aa95ad1d70753de8c40caff51f92572","sha256":"718743b9a883d19a9a315ae3b11413a9a2deb42d9c8f0941cda8f9cc472f9308","sha512":"e4cebc926611479719dba83066341d8cb991fef37d01bece6a7777a6020db7e59198783c29d20453e6b083ef4743d8ba2dc72167cc2188931a345bb24b1e4afa","ssdeep":"768:r6XSCH2LsoVAbbg8GuK0hobBw//lO9s2o7lJk4cIgzuwdDExDg:GXmVAbhGuK0hoiUO2os4cIDwdDExc","tlshash":"8bf2f2b4f3c1f536e22f2d73224491d2aef7b469837889756799c4c5ca44720c50d6ed","first_seen":"2023-08-13T06:38:04Z","last_seen":"2026-10-13T15:49:44.280685Z","times_seen":50,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":89,"send":0,"wait":75,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/index.CaMxIkfN.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.182Z","timestamp":1791906544182,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/index.CaMxIkfN.js HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:04 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 586003\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-8f113\"\r\nExpires: Wed, 13 Oct 2027 15:49:04 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":586003,"size_decoded":586360,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51031)","md5":"4d43131ac8b16fa5e43afb7594f30e71","sha1":"74e5ca903e88e6fafc007773255d50d514962068","sha256":"6c7b4d6f1666915fff7f7676a64c9e64acb19a70df872eda86a3c6ae6c0930b5","sha512":"930558c00ad6b3b6e4a50d6ad18d8581ca65b306543e236a2e1a9ac9e4e5627c73595beee3e3ee4c2bae8f30ad8626ff48ac0825c60d0476f8a4e91041674562","ssdeep":"12288:/FWqZQZqgiqW466zV2Fzc187mTlRlflIu4w8dWy1bR/QuX5R4myxX:/F7mqHCxntI9w8dWy1bRVcX","tlshash":"e4c43b943661f0614bf715e6107b1007f338ad1d740d84a8b668eceb7db9889a27bf39","first_seen":"2026-10-13T15:49:44.281731Z","last_seen":"2026-10-13T15:49:44.281731Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1034,"timings":{"blocked":-1,"dns":0,"connect":87,"send":0,"wait":75,"receive":871,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Sans+Mono:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:04.751Z","timestamp":1791906544751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:01:49 GMT","end":"Fri, 11 Dec 2026 20:01:48 GMT"},"fingerprint":{"sha1":"E3:3D:17:9C:78:F1:DE:68:C7:E6:BB:8F:08:DC:78:F3:9D:DF:F2:43","sha256":"EB:D6:1D:9A:76:0B:5A:3C:08:74:83:6D:AA:A7:F4:B3:0D:17:8F:4F:3E:6B:9C:91:6C:5B:9E:F7:08:1F:00:62"}}},"request":{"raw":"GET /css2?family=Noto+Sans+Mono:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 13 Oct 2026 15:49:04 GMT\r\ndate: Tue, 13 Oct 2026 15:49:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2905,"size_decoded":1352,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4c4385f9415c862da376e83696a83977","sha1":"c69b7f9fa53fd233b172690624ebb2c4a8d83751","sha256":"293faeaebcda87bbb37ea7f8b7ba684b39ea42923c01e073bcc8909f346d858f","sha512":"2d4f3b1805e4b2b6ecdb723947390e3df6d4a443618cbe8ded65e625ada70706d90b5de663a95e3f89dd401c500b26a2bb2e996581b235196ecf7433afb38d26","ssdeep":"","tlshash":"7251eda0041fd068aa079cd263ce3e399d1e50162141c2bd5ffe3894ace6d3b833035e","first_seen":"2026-10-09T10:11:08.690906Z","last_seen":"2026-10-13T15:49:44.283469Z","times_seen":2,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":46,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"liveness-coinbase.com/assets/VaultFlow.ubZL3F5e.js","fqdn":"liveness-coinbase.com","domain":"liveness-coinbase.com","tld":"com"},"ip":{"addr":"178.16.52.29","port":80,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://liveness-coinbase.com/","date":"2026-10-13T15:49:05.372Z","timestamp":1791906545372,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/VaultFlow.ubZL3F5e.js HTTP/1.1\r\nHost: liveness-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://liveness-coinbase.com/\r\nCookie: wagmi.store={\"state\":{\"connections\":{\"__type\":\"Map\",\"value\":[]},\"chainId\":8453,\"current\":null},\"version\":2}\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 13 Oct 2026 15:49:05 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 223529\r\nLast-Modified: Mon, 12 Oct 2026 23:41:40 GMT\r\nConnection: keep-alive\r\nETag: \"6acd7034-36929\"\r\nExpires: Wed, 13 Oct 2027 15:49:05 GMT\r\nCache-Control: max-age=31536000, public, immutable\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":223529,"size_decoded":223886,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50078)","md5":"933dc1fbc7516cc7dd6dc30dbafe8ccf","sha1":"5e25018123ae7900e49692545c5cd9696635fd6c","sha256":"81872b1992f41a499e8d22760912d8a9e6212d1fe228a6f72943edd98e088c1c","sha512":"957c649ec5acc9a8021d619ddb9dc1a4e14374934345043ada9d21947b12e3c06cd5d6c9f13fb8955fbd13024f58983d4f54bec98027c7e4006cd6f31c264c25","ssdeep":"1536:HeTFHx9kpXdZnMF4u/JMvAD+4Ob3dbWgIqaynoRrkk9vitlURU4hGfGRpeDCTP9i:YxaptZMThMtb8gInWlUROfGRfl1h6z","tlshash":"64246c00f101ea7eff6705e599bf5005b02e6b54e91fc898f17c48b227a86c57a0b7ac","first_seen":"2026-10-13T15:49:44.285341Z","last_seen":"2026-10-13T15:49:44.285341Z","times_seen":1,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"liveness-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}