{"report_id":"f3365a1f-d954-44f0-b86b-86a7f586c006","version":6,"status":"done","tags":[],"date":"2026-03-08T11:56:47Z","url":{"schema":"http","addr":"coinbase-fakify.net","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"coinbase-fakify.net/","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"title":"Home · Coinbase","dom":{"size":5814,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1746)","md5":"d125fd1993c6b24351ee0556377511aa","sha1":"99eb7cbf02ea6e5217b19cd3f4ac7522a7445c20","sha256":"7f96bdd96f5f152328ee41f95918727b972b3882350231c1827928ca299c9911","sha512":"b38e10055ef6a5e9471a7b882889fe0ed86be57d6cb5700412d9dcc645e60d52da9969c554c044cb2933576da5caea5e33642249c5dd21043b8a22270454b322","ssdeep":"96:YAC/DHRRQIzo0WGMmFq7YAk6SiH+2waJpFA1cgx+M73sQ8egsBZmnN46kQs2VGze:YDHRRQIzo1GRFq7Y96SiH+2waJo1Pmn9","tlshash":"7fc187a9955f085f7103b075f9e27b110135a20fd1e6cca4b79d9a97dfc93c9c862a30","dom_hash":"domhash203718f326c539f7f88abb43d5ea1e2c","first_seen":"2026-03-08T11:56:55.611837Z","last_seen":"2026-03-08T12:26:32.325025Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinbase-fakify.net","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-12T11:56:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinbase-fakify.net","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-08T11:56:48.62708Z","last_seen":"2026-03-08T11:56:48.62708Z","alert_count":9,"request_count":9,"received_data":2119294,"sent_data":5998,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":145664,"sent_data":1831,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":1,"received_data":18547,"sent_data":561,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbase-fakify.net/assets/index-9hxWeo6f.js","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b0cdf16e5b58f59a60891603d542a26b","sha1":"93be62bca3a231977907dcd7b24a8d20795a4e7a","sha256":"a68f93837da25896783d2b41a49022b41dc5a23e4c73f40e1fc7ea2575a8e1e7","sha512":"ff17f1042225f74f1ccf37519d3d1d2cb88212aa96c2cafab08ccf337ef770abc301eeab2e242d59a859b7512fcf21fe739d50c780fcaeb2c0166a0cc5276608","ssdeep":"6144:1LNft+ySPSu75J3KVU//+YuZvhCF+JYX3VhLuL8RKdr/F2:1CVPSbU/WYuZbJYn/08uU","tlshash":"6fa46bd87196b6699be744e0907f4105723a2a11b00d8868f13ceceb3e7144aa57bffd","size":488212,"data":"","first_seen":"2026-03-08T11:56:55.628821Z","last_seen":"2026-03-08T12:26:32.335727Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinbase-fakify.net/","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T11:56:15.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: private, max-age=0\r\ncontent-length: 4175\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 08 Mar 2026 11:56:15 GMT\r\netag: W/\"104f-19cca8e7278\"\r\nexpires: Sun, 08 Mar 2026 11:56:15 GMT\r\nlast-modified: Sat, 07 Mar 2026 23:07:39 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz; expires=Tue, 07-Apr-2026 11:56:15 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 0d651ab1627cfbf1731ef38097b5fea4;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":4175,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1468)","md5":"96c087039bd4d7027b5496c1550bfc06","sha1":"7068fba100882c38c223176387ca08df859cd7b2","sha256":"99092ea99952b7a4e5140a4a45bd105e66952cb25f44e894f2215892fe61e995","sha512":"cbf9e3a3c72f4665c8377cd3cf35ba999d5c59573de1a8012aaa00506bde196408f1ebf9f4ea9791a91c73a0209fc2d0826c8a54f012fd997227f2af1dd42bdf","ssdeep":"96:hOvDHRRQIzo0WGMmFq7YAk6SiH+2waJUgt1jlurF7yn5NTbdsRmqn:gvDHRRQIzo1GRFq7Y96SiH+2waJr1Umg","tlshash":"7f8101da95ab085ab211e035bda07f060115a50b87eacc647b9db54bcfc53c8cca3e54","first_seen":"2026-03-08T11:56:55.618956Z","last_seen":"2026-03-08T12:26:32.3281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":108,"dns":35,"connect":25,"send":0,"wait":218,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026family=Funnel+Display:wght@300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:15.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026family=Funnel+Display:wght@300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 08 Mar 2026 11:56:16 GMT\r\ndate: Sun, 08 Mar 2026 11:56:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144978,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"2f75aab59554985e3b76a5494e064d48","sha1":"d2df939e21f64dd3d296fabef9d9a9403984b808","sha256":"15fc5491154f4535fa44cf4b045e3067e3df15cee10cb8a94e711e50b16b0b53","sha512":"611e26b76300171240a1add7e85790f96e8f600fe8a2addae593eea6d2af99ca3b44aaf96a918f4197e54984ff50f6e75ff3a369e003f932f52bd6d89ab5fe24","ssdeep":"768:CBFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknCiFyg2UfIUk+H00YNRYj7V3Et:dVXPNo6mACNqHvDyWNpQ9","tlshash":"4ce31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2026-03-08T11:56:55.62274Z","last_seen":"2026-03-08T12:26:32.329631Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":82,"dns":1,"connect":16,"send":0,"wait":40,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/assets/index-9hxWeo6f.js","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:15.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /assets/index-9hxWeo6f.js HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 488212\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Sun, 08 Mar 2026 11:56:16 GMT\r\netag: W/\"77314-19cca8e7278\"\r\nlast-modified: Sat, 07 Mar 2026 23:07:39 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 2bdcc365c94c8bd0fa686cf05dbb8685\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":488212,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37621)","md5":"b0cdf16e5b58f59a60891603d542a26b","sha1":"93be62bca3a231977907dcd7b24a8d20795a4e7a","sha256":"a68f93837da25896783d2b41a49022b41dc5a23e4c73f40e1fc7ea2575a8e1e7","sha512":"ff17f1042225f74f1ccf37519d3d1d2cb88212aa96c2cafab08ccf337ef770abc301eeab2e242d59a859b7512fcf21fe739d50c780fcaeb2c0166a0cc5276608","ssdeep":"6144:1LNft+ySPSu75J3KVU//+YuZvhCF+JYX3VhLuL8RKdr/F2:1CVPSbU/WYuZbJYn/08uU","tlshash":"6fa46bd87196b6699be744e0907f4105723a2a11b00d8868f13ceceb3e7144aa57bffd","first_seen":"2026-03-08T11:56:55.628821Z","last_seen":"2026-03-08T12:26:32.335727Z","times_seen":2,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":310,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/assets/index-hIO74Nzp.css","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:15.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /assets/index-hIO74Nzp.css HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 86449\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sun, 08 Mar 2026 11:56:16 GMT\r\netag: W/\"151b1-19cca8e7278\"\r\nlast-modified: Sat, 07 Mar 2026 23:07:39 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 6d58c953ba898af9fa686cf05dbb8678\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":86449,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"277ca6ee4e16d6b4f792788a17a03970","sha1":"b033233c76bd4a688a5a0d93b4a9b6076591e15e","sha256":"3a2c581c8d425d6583257e69e2a198ac7e8360f0e63b5788b6f6767a44f2cf0a","sha512":"884916a8f5b2c29850d75b53425b4c6613f8a76c356397016b0063221939d90e44970680c6cb04c00dfb7a02ce74cc548ab8e54ae15c653a0f0ab6e94392a3d5","ssdeep":"1536:QofhIecuGTQgw8TUcAZzeleGifC378VQZkt5FxPbTBij:QofhIecuGzw8TUcAZzeleGifC378VQZZ","tlshash":"0e83752dba19503e3c6744f5d3ccbaaca10ab0c0de3e45e6bd5a41215ad37f36da7608","first_seen":"2026-03-08T11:56:55.651431Z","last_seen":"2026-03-08T12:26:32.343241Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":206,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/assets/Untitled_Artwork_1772916324632-BzeFk31f.jpg","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:16.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /assets/Untitled_Artwork_1772916324632-BzeFk31f.jpg HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 377243\r\ncontent-type: image/jpeg\r\ndate: Sun, 08 Mar 2026 11:56:16 GMT\r\netag: W/\"5c19b-19cca8e7278\"\r\nlast-modified: Sat, 07 Mar 2026 23:07:39 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 08ac16a8f6731d09fa686cf05dbb868d\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":377243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 132x132, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, PhotometricInterpretation=RGB, name=Untitled Artwork, xresolution=104, yresolution=112, resolutionunit=2], baseline, precision 8, 4096x1714, components 3","md5":"da0f5cf579b094492c2b69a4d31d6123","sha1":"08cc47aad7944cf93784218fb1d73ccab405fd10","sha256":"d366f57c979d1539a4981870c938210deae1c4ba4e23b397b9f6e41dc5cec44b","sha512":"2ad76631f0e8d29fe6fe5d09483f706c64cdcd209b912e35959370ac8025145791c0c56c77ce43fd41eff801a9af0d649fcd74ecb0b053c99b64f089f25f96d0","ssdeep":"6144:fAF/6FK2DZ27ArhA35nObX7rNuQu7PdzsYlUKwf1MBPUA661q/9jWsKKAcXbFKLB:fAsK2ECwwL7rNk7PlsoUKTl7D16SsPXE","tlshash":"d884bf039c09d782952d92e4bd030eac2e07a75de9913dea356e0dcf7f612625cce46e","first_seen":"2026-03-08T11:56:55.655465Z","last_seen":"2026-03-08T12:26:32.351984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":403,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/api/user","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:16.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /api/user HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://coinbase-fakify.net/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ncontent-length: 31\r\ncontent-type: application/json; charset=utf-8\r\ndate: Sun, 08 Mar 2026 11:56:16 GMT\r\netag: W/\"1f-+6QzNnV5epxAIN04tcijgCAz6Yw\"\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 2a246abd55d1bb57fa686cf05dbb832b\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":31,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"95be97568fee69e29acf9a225a14c078","sha1":"fba4333675797a9c4020dd38b5c8a3802033e98c","sha256":"7368628fac9988517cf84c8623899a1be9ff9c00d3c5cc043057eed59c8d0bcb","sha512":"f4af81d0c29a3fb408b80cda34723853aa3211133d8bd54fa81bd756f2ce1276bd4cd4475706e5208e3f1a668db718a71c7962ad09e99e5e4f41dbe37820c683","ssdeep":"","tlshash":"37800020c2802c2ac303c2e2b208208002822aa800e028028028280a820888e80ba2c2","first_seen":"2025-02-16T23:17:47.175672Z","last_seen":"2026-08-08T09:51:54.802269Z","times_seen":260,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/assets/Untitled_design_(2)_1772916488618-0GfRvcO7.png","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:16.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /assets/Untitled_design_(2)_1772916488618-0GfRvcO7.png HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T16:53:52.226617Z","times_seen":17858133,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/favicon.png","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:17.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 412498\r\ncontent-type: image/png\r\ndate: Sun, 08 Mar 2026 11:56:17 GMT\r\netag: W/\"64b52-19cca8e7278\"\r\nlast-modified: Sat, 07 Mar 2026 23:07:39 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 28fb91d30bced17afa686cf05dbb8584\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":412498,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"2b80b0086cd94ffc72f12d4504c1a403","sha1":"4de119065d260d6c88f9d86c31febcbed3fbee21","sha256":"dd5653a50220518901feb635b05eebc68029fe5a7dfab0153cdad1a229a78bb6","sha512":"309e8eaff537c6488c235d23c2532d68707ba6c8ca315ef92d3ba744060978d8361602be5640ad614dec655b88ce3979de1f44d5ae418a92e8bf2344a88a595b","ssdeep":"6144:kDR2Chik4sHToRvduYql+mtGWs2+kiohbn1R1LDEqZoQebCWW9DtZ6F6ThQG:kDR2ChijR1uYqVe2+ki6x7fXPeTWzZ4i","tlshash":"0b94ad05508b9a55d9b7c63cd3f5032292fddae869ee3bec4336b4d4f8a45a4e80470b","first_seen":"2026-03-08T11:56:55.660341Z","last_seen":"2026-03-08T12:26:32.368572Z","times_seen":2,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/coinbase-logo.png","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:15.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /coinbase-logo.png HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 616519\r\ncontent-type: image/png\r\ndate: Sun, 08 Mar 2026 11:56:16 GMT\r\netag: W/\"96847-19cca8e7278\"\r\nlast-modified: Sat, 07 Mar 2026 23:07:39 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 5aa7857743025ba6fa686cf05dbb800f\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":616519,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"4e7a46dec06f172d086a72a2d46fa357","sha1":"80716a0332282d89d3bcf95dd35de8f38793c157","sha256":"2e6bce66b20a15be9e74db27d3f44efea21f9d41033b5435b983eb8b6cf27ddf","sha512":"f3d533af58b994de38f4a31fda2c0a0814b6d8cbec294da24f13dc0f2707b08fd9b5e4fab48ca867e720acee051792f8b4c1f178f98a4c46bf4bb8757453ed45","ssdeep":"12288:FHe0cScGZqAx2hRArpi4iP68q7S/hS5NKnRpSOFpEcgUFHA5T8gkl:A0c1wqp0NXiip7ahS5knPFKcHA5+","tlshash":"9dd402d8c9e20e5bdf8a80768a4b1f91dbf2543345be01492224b0055fd237a7a97f5f","first_seen":"2026-03-08T11:56:55.66259Z","last_seen":"2026-03-08T12:26:32.34148Z","times_seen":2,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":588,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-fakify.net/assets/Untitled_design_(2)_1772916488618-0GfRvcO7.png","fqdn":"coinbase-fakify.net","domain":"coinbase-fakify.net","tld":"net"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:16.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase-fakify.net","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sat, 07 Mar 2026 22:11:54 GMT","end":"Fri, 05 Jun 2026 22:11:53 GMT"},"fingerprint":{"sha1":"77:23:8C:DC:D8:F4:BD:0A:04:A3:02:44:95:5C:10:C3:A9:95:89:D0","sha256":"FE:28:F0:C2:FC:EC:63:3B:30:E9:3E:75:C0:77:6B:7A:97:92:3C:72:1C:D2:04:AC:6A:91:FD:A6:9D:EC:9F:83"}}},"request":{"raw":"GET /assets/Untitled_design_(2)_1772916488618-0GfRvcO7.png HTTP/1.1\r\nHost: coinbase-fakify.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-fakify.net/\r\nCookie: GAESA=CpgBMDBkYTZjZDJjNDM3MDZlOTdiNjhlMWFkZDZjYzNhODJjZGZlNzVkOGIzMTliZjU0YWIwYWEyZGNkOWYwM2IwMjYyMDliODQ0NDYzYjdjMDRkNDcwOWRmYjAyOTRhMGRhMzhlODUyMjNiNDdkNzc2ZDE3ZmNkMGIyZjkzYmFmZmRjMmUxOWYxMjRlZjVhZDZhYTc4ZmViM2IQ3MO46swz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 130017\r\ncontent-type: image/png\r\ndate: Sun, 08 Mar 2026 11:56:16 GMT\r\netag: W/\"1fbe1-19cca8e7278\"\r\nlast-modified: Sat, 07 Mar 2026 23:07:39 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: ac9d5fe49662db9afa686cf05dbb81bf\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":130017,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1500 x 1500, 8-bit/color RGBA, non-interlaced","md5":"7af82988d1d188f681dc0a30e5ff1718","sha1":"db313fb2f2c83ad484e133fe21448a44f014db46","sha256":"15106a2f5755be1fdea318d7cb73a5c0643d807a9c6a77b102cbdd65dfdcc54f","sha512":"203e1aaa3364dab35a0cfe96110dbb5459afdaaf31e00f9f12206e8236abc2e51b9a8c8193dea699836c9c83c6f665bec3ab6273b34e10c365a099f2a8a0e945","ssdeep":"3072:zdqLPqtGPPdB9SrMV030iwjcFn0NWYXK9D99H5H8xLQ:zdq8iF6rMukNgYXGO0","tlshash":"d2d30258a46704e0f99d20bac8137f7493f54b0958a483e99b6bf8440ce29daf533fd6","first_seen":"2026-03-08T11:56:55.665057Z","last_seen":"2026-03-08T12:26:32.364611Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"coinbase-fakify.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/funneldisplay/v3/B50WF7FGv37QNVWgE0ga--4Pbb6dDYs0hHHBE4E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.38.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbase-fakify.net/","date":"2026-03-08T11:56:16.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/funneldisplay/v3/B50WF7FGv37QNVWgE0ga--4Pbb6dDYs0hHHBE4E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinbase-fakify.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 12:23:47 GMT\r\nexpires: Fri, 05 Mar 2027 12:23:47 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 19:03:12 GMT\r\ncontent-type: font/woff2\r\nage: 257549\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17712, version 1.0","md5":"26cb78b7734f74db1d31e921c9c6d4cf","sha1":"b783b769e636464bc60433706cc23a2f74311f7c","sha256":"47bc087d15ec4084645e09ed9b24316f70a998132da15fa0f9eef373ad10b320","sha512":"34914f3fab1696dc332117d3d90b591286ce8ba36091f120d99eb46fbc7e14d10fabaa565ff42e062b78531c1ccd4f2d28b8817f13dfe46d65a11e4921d3c476","ssdeep":"384:5W369zfhvBOOy+/Ru8q0usnKF1EdNiEWK7etc0ICEddrv7Ej:5WGpJPR/Ru8q0usnK49W5IBdrTm","tlshash":"9282d19b702bdcc40e776a75399f8fe201cc4a72688563f98017258ddaf37a6e012d4c","first_seen":"2025-09-12T22:08:56.817268Z","last_seen":"2026-08-06T17:57:26.766634Z","times_seen":166,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":72,"dns":1,"connect":7,"send":0,"wait":8,"receive":2,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}