{"report_id":"f7517c59-e4cc-4d3e-8ff7-1abef18a3ae5","version":6,"status":"done","tags":[],"date":"2026-02-10T13:26:44Z","url":{"schema":"http","addr":"offcoin.one","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"172.67.133.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"offcoin.one/","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"title":"Ryan Air Airdrop","dom":{"size":34507,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27626)","md5":"959fb79406f65c79da53b4122f71d7ea","sha1":"f118bb3d9aceac11d3b603459229a829b0539466","sha256":"bf8dbabb1339784114fe65cef9926555a325fa9a905894e6968acbb9fca980db","sha512":"3b02d0d8a5ad3eb5f6225e1cc2759931c5a377d091cd8aa7ab08e0a8fde0db8c7e43426e06f634915036e6d5e72f49c5ed1a58dfc3d132c3240a616aa5c0707a","ssdeep":"768:uhzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwcQ:UzqyrYdqbG+OWB","tlshash":"52f23e70f480593b360b22ef5ad5df5d76a2302689676a08b3fc85c2ebc2db38da1415","dom_hash":"domhashe69537c21df89f2526e68120b670106a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"offcoin.one","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"172.67.133.16","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-17T13:26:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"offcoin.one","ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-10","domain_rank":0,"first_seen":"2026-02-10T13:12:57.610254Z","last_seen":"2026-02-10T13:12:57.610254Z","alert_count":20,"request_count":20,"received_data":2072533,"sent_data":8947,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lite-api.jup.ag","ip":{"addr":"52.84.50.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-02-09T01:16:16.651241Z","alert_count":0,"request_count":1,"received_data":2981,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"offcoin.one/","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"02922ff8fa3f386eee5b4da97db13950","sha1":"861b38ea37afd129df449b587a815b03d65f2ba5","sha256":"e8e411d36637c9276071c21c8a111e729131c1aae71b04b52ed17a27af440908","sha512":"c77b9c88a8bdf2ed4c5389bcbede75480b6337cfa466821f0a9ec9c72c0a284fda980f6ced057e2ae90ac7113125a96d6290ca66c1b42b081d1a365296247c27","ssdeep":"","tlshash":"44c08c300020e355d228800606567384315293b14b9006603fafea85eb9120bc2e9f8d","size":161,"data":"","first_seen":"2026-02-10T13:13:08.906915Z","last_seen":"2026-02-10T13:26:46.557868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/_nuxt/assets/index.js?gw5mp2c","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9ea43315aa620ff0edd6e22ad301592","sha1":"abf79913d832a9c229c0a61966b48782c37bb5e7","sha256":"c527b431e1d7259b8babb2cea385d4f55e1046cd61f384e4b6c4fcc8f31f1d17","sha512":"134ff11fcc10b7219ad44a89d26a1888a92215315c1daf92f67511431c6e5df928d2b2ca48956a18550ef2beaa89e104a5ad43fd9bf8ccb7718a39ffda50608e","ssdeep":"12288:pmj5eP5jZLrfPXG595HQyHEG5/sDVXPrwA0:pmj56jZLrPSHgfsA0","tlshash":"49e4d59aa042589f1d926da498b55cba0fd4f0d8e70d0c6492cdee7c4290cfad3fde61","size":678475,"data":"","first_seen":"2026-02-09T23:14:21.982141Z","last_seen":"2026-02-10T15:24:42.844105Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6b63179c03d66dc59adafab143debb37","sha1":"35f76ffbbb725ff7980e4b8e876c030047c597e6","sha256":"b0e530322b26a35bfdfa41091dcd9db0e906b27ce94168d233d46e0b5a475373","sha512":"b75b5c6a0664e00fd4b838115e4e988591bc463acf9e33a9a6a7e94a2d10c1b60297ba92cc95851f3b4773e25d4371ed2b653295cdc666c666f6e77aa888e984","ssdeep":"6144:7GnXmXVko+/QxCcbQEDZsu//q9kIeT+iP9PYDB0yo50/ZsiH01vz7WA+Wjk:KLnhcdDZNpPY/ZTH6vz7Zk","tlshash":"01d4d69ca186189f0de719e49caa85ca0fc4e1d9d7cd0c54a2dca77c4290cfad2fde61","size":651885,"data":"","first_seen":"2026-02-09T23:14:21.995591Z","last_seen":"2026-02-10T15:24:42.844746Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/jt8e3.js?lj7toyb","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8d7a924579371d6c53697937ec530b3","sha1":"8b5e362205582840c5b6074e0c7c68316d58ac59","sha256":"da1be1bd3c184dbdd11e0c90ac0f92888ca4944b3cf2afcfaf701451ddc7ff58","sha512":"eda863dfd3796013733d30e94faad51490b18dea1ac1fc2ec370d6e7bb8db48e24dda1465995ddaedc008f669ececdcc1ec02cc1fa7bd776712e2f25de44a9a2","ssdeep":"96:C5S8nzSc/psUyZ9TI6d/ItvZ9g8oCzc7clELmocte6TimmmvJEwomNM1:CHntnSTI6NItvvglCz2cnzYmvJKmNM1","tlshash":"4c91b7b07180d031021b26e5a9b61bb92d3eece07d440074f9ac4d677b265caecf5f66","size":4552,"data":"","first_seen":"2026-02-10T13:13:08.889773Z","last_seen":"2026-02-10T13:26:46.551408Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"offcoin.one/_nuxt/assets/index.js?gw5mp2c","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /_nuxt/assets/index.js?gw5mp2c HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Mon, 09 Feb 2026 15:03:56 GMT\r\netag: \"6989f75c-a5fa7\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EEP6gjq6B1yBPMb5cciK8HydpgfGNyY9TF0%2FgMIdgI4IjCpW0LbUxMa5zLYwaQROyUfXOVUG1aDL5%2BG5RWOtSbyOQbpAV5i%2F4fSJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf017a9044c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":679847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (55888), with no line terminators","md5":"622249ffd34c16907fda1e321b662034","sha1":"dcd25c4b25b8c65286d6ce92a5a3d0bf08b3e0b3","sha256":"cb0354ea5c615d6a0225af3f2c22271bcc4223e1e5abf97922389cd8165749b0","sha512":"b6156205f63d484517d4d6f7d2ee2dbd8e2244b69094e3b99158717df11606acb38c99986567b48fec340f1f1e0c2381c888b4aba7e9308671417c597db026d0","ssdeep":"6144:mQmjroDQHcEKNEOkPGNpqmNiYHPPzHzbf9yz/q9kIMjT+iP3PXi1Q5go7E59kaCN:pmj5ePHbwrfPXG59ka6VAv5yBh5oeSQ","tlshash":"4bf4d4c6e3cb979b1ca56de45ce95c750ed4a4e6db4e0c6473cee86c02508b983abd30","first_seen":"2026-02-10T13:26:46.504385Z","last_seen":"2026-02-10T13:26:46.504385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/intro.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/intro.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6KQMHUBkQA81v47wdVNsTlcB2WsJJSnMekf6izQ8FAqRiiP00RUXKGk3MAnqLzOxuvUYQlywx3xzcp0bD4%2Fsa5nCNVzhGSBz5pV\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-51a1\"\r\ncf-ray: 9cbbf017a9064c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20897,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d7ef4535721511aabbc4fc04a0e16d03","sha1":"67f81c2f9c67811f43260c050d6d0ca968734fd1","sha256":"acf5f349380f52503a7b184b0555fc87db27d670de8909ae74983557dbb8c61b","sha512":"51c3de2f87824328e6581632251f46f07c8bf6693b4b323955cf69c1317b250dc043a0b1720e56ea6ed7f2646773049aac640f8c273ad151bf6c9fecaf62a40d","ssdeep":"192:/4a4fqUw/0T7NXETLYGBoND5PBNObpq+ztB5Pjr/Eur+j:wa4fqpO9rGBu5PBSq+zz5PY","tlshash":"b59246f1d359982fb88249ecd2a948811e1d1277f1a441cdbd9c175ee0bbec2e86f358","first_seen":"2026-02-10T13:13:08.902098Z","last_seen":"2026-02-10T13:26:46.509146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/intro_info_about.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/intro_info_about.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtFmWieUZhcP6LXei4h5n3zzhiOcIVlTFLYG7ftO0LhBySxcykYbFpL8WkK6VyykjOxzEognawaty4U7%2BWaC4oNrVtP9FuleCJ7v\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-c1d\"\r\ncf-ray: 9cbbf017b9094c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"07dc331fd1e6ae2a57d4305a8e4dff0d","sha1":"c5549c2a4f93ff3486ef1ba926b4fb14eca3a5d0","sha256":"8d8ad262aea8bd842c5ab223bf88a68672de2aa827396653dcb5f100825e266e","sha512":"2a44760859090325a0215dec6e45a4dfdc0b8f198d6de5619cce223bf26eb74c34248916ac15d71cfa3dfe6561b15e5d1ff56fc11f3d36401c288730903dbbc7","ssdeep":"","tlshash":"825135d032acd3e4a410e7bc832d99d2752339e8b9575a94f7f21c1ab85065d0c64fd7","first_seen":"2026-02-10T13:13:08.903987Z","last_seen":"2026-02-10T13:26:46.511158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/intro_info_rules.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/intro_info_rules.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7mO%2FVhGaG88VNMh5K1MLvBUXYfgWED%2FZBxGySNVUsASXQYS8t4T477Bd7UFwFdQ7ofTz5AdFTvGDWsuTnYaMzTUvyiFuvniZvWX\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-5d3\"\r\ncf-ray: 9cbbf017b90a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7a43a782ea14433c070e76b08ae27c5e","sha1":"92f6871c82dc1eaa572ce002096fb4b98e9e7f7d","sha256":"0051f4fd3b1d9b8a1c0ab9f0df331a4abfaacc156b30425077e44bb7cea1be89","sha512":"c08f7452c9c25fff6a5e5caf53952f332608b0117bd9db6514755674c2e96316f60bf0533bcdb882524b190a070328b85e9bf4df63c5bd5eac03c9c9d3fc5d15","ssdeep":"","tlshash":"c03112a47325c3fce400b4e9454bb86d417a16d7aa7af0b1c392760a38890dca820fe3","first_seen":"2026-02-10T13:13:08.905603Z","last_seen":"2026-02-10T13:26:46.513033Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/intro_alert.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/intro_alert.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2LxtODd4lFyELYZtcVHFIxSEjB2TB8fJ37h%2BET0XZTSNlal9bBl7yjL%2FqfUyrc5aLCIU5N5FF6kEnyFw%2Fkp2IZUHNYQGzNa%2FZtOw\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-3fa\"\r\ncf-ray: 9cbbf017b90b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1614a2c2fa977a66252f8563b10e88b7","sha1":"e4c0430921b86f9e420efa3e499c702fd8ad6798","sha256":"08c42708347296486598d04d57950320a3f1be626e757940f147214f10401d5c","sha512":"39488d58ed8085bb9431cd2901d7b75d202b3d4e738b8b7a9e7c805d647c2a1049ca7e9e5b507addb6bea187ad5cd5e41737e85a33644896f1c27f154fef6b97","ssdeep":"","tlshash":"b71102f03048c5d58d07abfdec1758a25c1fdcf6afd82198839054b0313a265cc24ea5","first_seen":"2026-01-22T22:37:41.021424Z","last_seen":"2026-07-22T11:03:33.274341Z","times_seen":125,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/rules_waiting.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/rules_waiting.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppc7K6kSxko7vIsL2CRvOJpXD5UUZS2hd11ljiu5IGXa4VB0hFUt%2BmZQscxDWLIPOXW9iKT3lEI3DVG8RbHv7dgGDigr9JHgodGk\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-9e2\"\r\ncf-ray: 9cbbf017b90c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d30e3070beaacbf11a935b172598240d","sha1":"88e102d4b750e7c72f3a49b74de9593dec66a656","sha256":"1ba6112f10fbf43014329ed5bc2e6a6688d61fa5b64d4a6499ba519e70bb2307","sha512":"b20e451465018573acaad52f182caf0ac8bcacef377abe7ffde17f09d146ad6b93aae6cd0ec0538354152d2147235db9f417486030f20d4fb2e3edf36db80bf5","ssdeep":"","tlshash":"d151deeda3dc83f4c9029bd9dd0fe934295731f2a605d6c443509ba87606a7fcc8e588","first_seen":"2026-02-10T13:13:08.894381Z","last_seen":"2026-02-10T13:26:46.518894Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/eba507615e5b42a7.png","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:23.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /eba507615e5b42a7.png HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:23 GMT\r\ncontent-type: image/png\r\ncontent-length: 136828\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\netag: \"696fc16d-2167c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 828\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qPxzkmQOkTVFMtqsEhxTdcMddTiVOiIvjaqvzWoSg0WF8Dc7lgE3GMigOEpoudk%2FU9QK7Y5OQHv827iOFU%2FkEi1F%2FAGCCeaMDt4Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf01d2a014c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136828,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 718x683, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b22609c455134995568f5de6ee3f69aa","sha1":"7557a03584a239dc7f7e5a564230ff6b00b7e93f","sha256":"bd4582ec15c0eef02800f329ac8de08791b1d4e99ca491408c5bd222d1966c8b","sha512":"d9e369708e4b29cbe3fdb39116cc0ddd754479e4a29dc72cfe19a4d3b2786ea9fada39877434ba1325fbc57cf477db9252a467592a45fc9bcc28ec712b90e486","ssdeep":"3072:yPas/O+KgjNgLEujo4OIZRw/xXWPVZdvZ1Tzpe0D0yTkA8VrrK:+as2+KghuxsZXkZJvpexHAl","tlshash":"56d3127f3fb5fea2f4c25d0e60112629e434181adba4d43942f24d49c5f074de2a9bab","first_seen":"2026-02-10T13:13:08.891296Z","last_seen":"2026-02-10T13:26:46.520552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/api/config","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:23.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://offcoin.one/\r\ncontent-language: en-US,q=0.8;en\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:24 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LSWVLmrbqVsotqSTpUqZb7GQYgD14CX3OI25wlVfyyvw4q%2FveB2bPw%2FWqazNACfbJ3Us1tVryHt0oMUt72xrgjGiHuzUreb%2FawBa\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf01fda744c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"7c874a52d242772f9c9e57d284ae4256","sha1":"9dcf13c4dfd76169448fa2ec7016636fbd148108","sha256":"ef24286ec783d5bbc20b4e96ad76d8d25b3af497ac1140fca6b5de0a23c764de","sha512":"566c925ce5e21d7787dfbef15df2174dcf8c2fee6c5f76df820ca7cc775675a4f3ebd2f9069420e73f2299d9fb3b245822e3d6fa99adc89b9ac6101958ad311e","ssdeep":"","tlshash":"1bd09584df1734608d105567535c1d81fc76a31cb14d90c333341dc51fdb555071c1d2","first_seen":"2026-02-10T13:26:46.52249Z","last_seen":"2026-02-10T13:26:46.52249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/intro_background.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/intro_background.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TjMi3y%2BcjmJKBt%2FhC1bjQzmy1Xl8Y8ydEV1jOFYH8AaI0BQYzLUIPEiLpvaVnT7OSwguEu5FKZlX5%2B%2BQFXVNcaqzUazAtIagfZ1Y\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-24e8\"\r\ncf-ray: 9cbbf017a9054c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9448,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"46ed97ea8bcdf3f98d36fcf1ac0f510c","sha1":"dc6bec18464c432df7e096d7707dd3d177f03b3a","sha256":"75da5ed03f5b9f93b6aa98e5d5cd10129e017788472ac968c2b0bb5a880edf4a","sha512":"73d138b9046b7ab64f9c419b497e57d3c3b9114d4989bab8f3e4fded6c9cef09945130d7b8df73ca2407e6a94afbe5d7cf9c47bd356f8e070590c8b95658bcb0","ssdeep":"48:cywAu/4l/p9t1s25JBSLBpYLnxLc+HJRz/iZf8t2vlVrLJM26C29tb9YLX8m7gxb:Rw9QNF9z3iCcOd8c8ZmoCB","tlshash":"68123a3b7fc8c635f91f2052d2bdb895096d81f25249b27948325a4dc2355beec3b18b","first_seen":"2026-02-10T13:13:08.876381Z","last_seen":"2026-02-10T13:26:46.524995Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/eba507615e5b42a7.png","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /eba507615e5b42a7.png HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 136828\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\netag: \"696fc16d-2167c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 827\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eucn2DZvzJeJPkBwgN4Hc1PuEKTZxlOfsvO0BWrw8KV6VUabDU8bge9OzWlzn%2B%2B8Ls1lKMiILq3GCDDVxp3t8wOxqARljp%2F%2FMUVl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf017a9074c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136828,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 718x683, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b22609c455134995568f5de6ee3f69aa","sha1":"7557a03584a239dc7f7e5a564230ff6b00b7e93f","sha256":"bd4582ec15c0eef02800f329ac8de08791b1d4e99ca491408c5bd222d1966c8b","sha512":"d9e369708e4b29cbe3fdb39116cc0ddd754479e4a29dc72cfe19a4d3b2786ea9fada39877434ba1325fbc57cf477db9252a467592a45fc9bcc28ec712b90e486","ssdeep":"3072:yPas/O+KgjNgLEujo4OIZRw/xXWPVZdvZ1Tzpe0D0yTkA8VrrK:+as2+KghuxsZXkZJvpexHAl","tlshash":"56d3127f3fb5fea2f4c25d0e60112629e434181adba4d43942f24d49c5f074de2a9bab","first_seen":"2026-02-10T13:13:08.891296Z","last_seen":"2026-02-10T13:26:46.520552Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/intro_info_car.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/intro_info_car.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cbs1%2BPhqGOq0zL2EeuyMzLQngdtVIw7MoggGVHRj%2FQVTB1mxm6gjOhV%2FnjgeWudlk8tMl9O%2F5UhfjLK5Fk%2B7ocBdjBUlRYWn0a9C\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-75ebb\"\r\ncf-ray: 9cbbf017b90d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483003,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81ea26d02a1785fdc902d26a06e7ba77","sha1":"4b56f43307fea7c4a7b574d275bea9afbe057e41","sha256":"edbb191df1128acb16f602a9acabdf623c43fd9731a81c3daa1a01fd730e558b","sha512":"507698db37b2349f6eee9c40b4fa42b26cd30c476778c5d1fc2ee49afcfc3cca66dcfb7c621eff7d53eac71d33119031c5263d7241b66a6105fe848204670a4e","ssdeep":"1536:bbMbwyG8FbTN0llyq32bP1E2o+1kOg4TBK93rjHw/0UEGR7LYBpcZ37u/RNSmwhB:kW4ENaJ","tlshash":"5fa43ffc2bb11cd5cdccc7c7bf0191bd342792bb99958a08c22c5b582999d6ee815bc2","first_seen":"2026-02-10T13:13:08.892938Z","last_seen":"2026-02-10T13:26:46.526819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/api/visit","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:24.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://offcoin.one/\r\nOrigin: https://offcoin.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:24 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=resaGIbyEYPKLnMdL2EdxWkBPevr3MVTnTuP5dMRE5hnIvhhyFx8%2FbVx48QXPoW%2BQgd1jH79W4ZFXPmZyylTKaJavyzUkHyV8hGv\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf0213ac34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-29T17:17:57.279704Z","times_seen":443582,"resource_available":true,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-10T13:26:22.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tUS40eLVTNP00mue4Trqkf0z8cLUFI0gjTXkWvpR9Qp0yqfIT3nupROhyqBfudK8Mt02e0PJShkvMykMAoytgD9m1ih6WlXQgA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cbbf014aae7568e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":14834,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12328)","md5":"959a09d481fe93ca14053f25d0f3ac8a","sha1":"1a1967efbc36fb956950f1ce5600d2df447cb5d4","sha256":"2513a79d71e1c61d3ebe5a26e1a4561b9364524ec14b20e43baf36a6837c8f02","sha512":"636143f56fea5b73b01b3a9e50fe5a0e67e986f28644adeddc641799c677f4711402888716147dba84442183a3e6e06bece0971b2d5a574f02946e3f386a0e66","ssdeep":"384:QtnFiY2mWjYKxiHaLBWjgq/LsaGF4v+6FjkcFIzeGJnQkAOs1Gc9o463nHIapJH1:5YKwHaLBWUq/Lsanv+6FjkcFIzeenQdy","tlshash":"59621e3260942537012b0acb6e316b1e35f3b23ecabb1a00b7f89bc0dbe6d55da51417","first_seen":"2026-02-10T13:13:08.899671Z","last_seen":"2026-02-10T13:26:46.53497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":32,"dns":14,"connect":1,"send":0,"wait":263,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/p40oo.css?c5miugt","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /p40oo.css?c5miugt HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\netag: W/\"696fc16d-7c5e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 827\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trrKsyqbmQQKBLwtJhFq50gz4UJqNoLhCgKq%2FPIlBwzPcBbiTT2%2BPrlNyMfeotRF9r77SU3yAA1AUb%2FXBfKJ4AUGKn6Nd8qu%2B6gS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf017a9024c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31838,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"016b50775c2a3bcf52edc73b27e376a5","sha1":"9cab0b2f2a6c41e119924dc5d58845912b73c948","sha256":"3ba2f3eb3ac590ad376ef441a68d1d35f8f365a2dc8088a6039262573a3e36fd","sha512":"724c8e3b4c95b9ff736f374fcc9c88ca0bc3e637ab16390c49603ac9247862a3e9f87b7c7f53092966ebaff1eb40ef5d29583435031d63f6d583106b54d23e5b","ssdeep":"384:ZTFJF932R0IkyMS/HPOWe5XrH4pzau0e951JAhO+hQW5k:lFJF9g0fy1e4pR0EKJl5k","tlshash":"22e213cb2bb16900b457b8a52fe64b5573598403d10fcdba7ae0207ccf891d9a6b3b4d","first_seen":"2026-02-10T13:13:08.883484Z","last_seen":"2026-02-10T13:26:46.541698Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/SFUIDisplay-Medium.ttf","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/SFUIDisplay-Medium.ttf HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/p40oo.css?c5miugt\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 179924\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\netag: \"696fc16d-2bed4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 827\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQ%2B2PGFbxeJeW8IAQhh7rJY5jq%2FG9Sqy3foZx1UxnwAVORJwmVxLwyeMe4oIfRVT%2FS7S1FhcKxawNxSbgp9QMAJ7SAQGPRZ23byx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf018592b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":179924,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", 32 names, Macintosh","md5":"a03732f2919ecd0a4a6e774070fbb72b","sha1":"7c0225fc6227fe9a963bd4caf256cae461d0018d","sha256":"4751b1a82a3399f8d4544fbdc140b66107d67bb5f926aee632503d82f208f018","sha512":"f0f7ebd1fa661e441dd4ade7095a53c9e7fdc3ab5f566c912f8a56880258053dee237681d881c2d7e0c82ea92967979918e9db775b0487bf0b7bb490b785e3ba","ssdeep":"1536:WkmsN+ElqYmc1/Twp3g9+dDzrqZO+OzggBfLtSTTPEsxMaGAh9gdeJpUGk+pA:WkmC+nUEFdvOLyA5xMfAoUCz","tlshash":"06047d1ff3c7cd67d191be396d11f331a26bfd319faaa38a7408d154904a8e41ba0a53","first_seen":"2025-11-01T13:49:52.014178Z","last_seen":"2026-07-22T11:03:33.276128Z","times_seen":121,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/SFUIDisplay-Regular.ttf","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/SFUIDisplay-Regular.ttf HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/p40oo.css?c5miugt\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 170404\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\netag: \"696fc16d-299a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 827\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I00CYQApSEXTF%2FE000mLe9PjrNmPr%2BgwtlckCRNrbByrs06QjagZJ1KUSQuydhRGHN0qnOIlGnAan6GqzcX9A8IKr8IoofBLV%2FdX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf01859384c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170404,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", 32 names, Macintosh","md5":"b8d6156c471232f96b10f3e36a54748f","sha1":"33b913d00a63f3d21a82428f02c4b5d7b6a5aae7","sha256":"ce43ea3e3e3bcea43a3aa5080c9aebabe95ae6fdc3a7a9f15ef5cf5fc1bcd424","sha512":"d23e42ad1e26434eb65fc4197ce9f8f784f20df0c40b44139c8f96de2e5624ffca705fd28726e0a2fb2b6a26b101fb3c5b91339f0f2de515c51c0c219e07706b","ssdeep":"1536:UQeW3LcpLTJPTG7BibKztrn7qICRQwpV7GXNPvTfJxjMMg/PE4p7QcuZfhYdTTRa:vL2ys5MGfxM60","tlshash":"91f37d3ff38bcd79d6629a3e4922f3322926fd315eb6934e758c95bc444606148e4f82","first_seen":"2025-09-13T12:14:24.912467Z","last_seen":"2026-07-22T11:03:33.256331Z","times_seen":120,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/SFUIDisplay-Semibold.ttf","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/SFUIDisplay-Semibold.ttf HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/p40oo.css?c5miugt\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 181492\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\netag: \"696fc16d-2c4f4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 827\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3q6d7%2F4mYXrv%2FxzigVG4Bergee1MGhZXr6HhIzFMFgPW0HBMC7gW4pxCo4gi7Zfqm%2BhJSl%2BDGv%2BznVttsEP8KF2cq0mkAqYprA8i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf018793d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181492,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", 32 names, Macintosh","md5":"1557c49bc9b4bc705f42cea044392d8e","sha1":"719ff7ba22966534e63bd764f61e5ad2df655513","sha256":"9c8cc4fb7d2dc26e2820fa8011f99de5a6bddc933d826f2fecbc1ca1e9085b6c","sha512":"11f3055ab8ef99a3059ce2d474eff0af8e68516433f0fad9680424df151a1a851823572f130044ba14d783a474d0dd3fc25d3c33c17357f58a1792a40f315177","ssdeep":"3072:N5AI7eka35AzYzo14v/pPD6XbhozDrcefR9xMx59As:NaiZapAETvRPD6XbqFtMx5R","tlshash":"f4047b57f3c3de22c21379386a91e6355237fd260fa2d38eb08929f2d5865920dd4b4e","first_seen":"2026-01-22T22:37:41.005986Z","last_seen":"2026-07-22T11:03:33.277017Z","times_seen":121,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":12,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:23.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 08:38:20 GMT","end":"Mon, 13 Apr 2026 08:38:19 GMT"},"fingerprint":{"sha1":"62:20:97:37:86:22:13:0B:BF:38:69:D4:17:18:8A:EA:43:CD:45:29","sha256":"89:3F:DC:64:16:F6:2F:76:F1:04:F1:32:86:F3:B0:4D:A5:74:BE:7C:20:89:75:B7:00:70:9C:E6:A1:2E:CE:69"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 10 Feb 2026 13:26:24 GMT\r\ndate: Tue, 10 Feb 2026 13:26:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-07-29T17:12:17.088821Z","times_seen":38468,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":87,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/api/is-banned","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:23.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://offcoin.one/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:24 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SqWLgGF2oXsC8HoSv8%2FgomESAxkjRvCi%2B7d80dl%2BF%2Fx7DRNo25FkZ8tG2RDhSItXn2FiVQvWpQ6i7424RaHgZgWxnLz84e0WVIQC\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf01fda734c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-07-29T14:29:09.380482Z","times_seen":118405,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/jt8e3.js?lj7toyb","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /jt8e3.js?lj7toyb HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\netag: W/\"696fc16d-11c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 827\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wd2tnMYPa9XhXyMS8auZc1eQCh25wp6b7kTHXshuhOHQZE%2BDbZ3j%2F0eEOV%2F4P8156ATniZ6%2BUXhre6tbF6X%2Fa4UlZjF%2B2HAj%2FIAk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cbbf017a9034c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4552,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4552), with no line terminators","md5":"e8d7a924579371d6c53697937ec530b3","sha1":"8b5e362205582840c5b6074e0c7c68316d58ac59","sha256":"da1be1bd3c184dbdd11e0c90ac0f92888ca4944b3cf2afcfaf701451ddc7ff58","sha512":"eda863dfd3796013733d30e94faad51490b18dea1ac1fc2ec370d6e7bb8db48e24dda1465995ddaedc008f669ececdcc1ec02cc1fa7bd776712e2f25de44a9a2","ssdeep":"96:C5S8nzSc/psUyZ9TI6d/ItvZ9g8oCzc7clELmocte6TimmmvJEwomNM1:CHntnSTI6NItvvglCz2cnzYmvJKmNM1","tlshash":"4c91b7b07180d031021b26e5a9b61bb92d3eece07d440074f9ac4d677b265caecf5f66","first_seen":"2026-02-10T13:13:08.889773Z","last_seen":"2026-02-10T13:26:46.551408Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offcoin.one/assets/live.svg","fqdn":"offcoin.one","domain":"offcoin.one","tld":"one"},"ip":{"addr":"104.21.13.189","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:22.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"offcoin.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 10 Jan 2026 07:15:17 GMT","end":"Fri, 10 Apr 2026 08:13:54 GMT"},"fingerprint":{"sha1":"36:8C:2E:6C:73:DB:CD:EF:34:C6:67:CD:82:08:6A:16:AB:D7:D9:98","sha256":"B6:C2:39:7E:9E:C6:35:90:98:A8:12:B3:A2:EE:EA:52:01:40:6E:C5:60:85:33:37:D1:FD:43:86:B0:D5:B9:14"}}},"request":{"raw":"GET /assets/live.svg HTTP/1.1\r\nHost: offcoin.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://offcoin.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 10 Feb 2026 13:26:22 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TJ6E3J6K2g%2FAdiRnp5iSLR23uJ1WQ0ohivuoBvB5Sy29yacD1Gtoq63HFQYCJSaalPrH8f7DQxGzFwlXSSyXXf9p2MMRYCoTD142\"}]}\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 20 Jan 2026 17:54:53 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: br\r\nage: 827\r\ncf-cache-status: HIT\r\netag: W/\"696fc16d-f1\"\r\ncf-ray: 9cbbf017b9084c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9c0344d6a956f1ef38e38df84e84a0a","sha1":"7ae7095ebfc089addc3337a9098cd621a838d78a","sha256":"6fef218f2eb84fa9105e0424ed9e311ee7e476e4118b1d19d9ff26056c5fc23e","sha512":"c5032ca98f6019cf003a203143bb203dcba28507bb1a7176b502892937754a6515471d534ee4aeb24b723030ebd2779011179e1604dafcaf8b0bb8b81522743e","ssdeep":"","tlshash":"a4d0c725621cdb3e555b8054d42fe1d620d640fd524d82a550511d5eb107af7b5733b8","first_seen":"2026-02-10T13:13:08.87766Z","last_seen":"2026-02-10T13:26:46.553055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-10","alert":"Sinkholed","trigger":"offcoin.one","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lite-api.jup.ag/tokens/v2/search?query=9R4zqfeasqeEKCEQxX89gbK5dXvkYegNxHmnZWjTpJWY","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"52.84.50.2","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://offcoin.one/","date":"2026-02-10T13:26:23.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Thu, 30 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:C1:1A:55:81:46:51:60:92:8E:23:71:EC:0D:F5:22:E2:77:CC:B6","sha256":"9B:2C:9B:3C:A9:B9:32:F1:2E:E7:12:53:C3:E5:39:A9:B1:D1:92:0F:BD:83:0D:8B:73:33:20:78:3D:B0:C8:E7"}}},"request":{"raw":"GET /tokens/v2/search?query=9R4zqfeasqeEKCEQxX89gbK5dXvkYegNxHmnZWjTpJWY HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://offcoin.one/\r\nOrigin: https://offcoin.one\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Tue, 10 Feb 2026 13:26:24 GMT\r\nserver: cloudflare\r\ncf-ray: 9cbbf0200b3a7127-OSL\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://offcoin.one\r\ncache-control: public, max-age=10\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 62e740a3ccdabe7c6d3d19052f330dca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: oHoSYXrFUO1p2TIHK3_ARLbYxhjigBVOBV8gxGswejpkcdM6y5EjwQ==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"02acb01b29b73b6fd9f6161ffa15e120","sha1":"f333245002f327eadf733c91ebc41860c082620f","sha256":"060ccbf5c9d3bca237174cbafcde80d9b0db8d4ee78a8f16a270a82bbae01637","sha512":"82140f33e53b586f6039c21c7b42bd46147c3cfb6fde179b78c57059ce4e0b5e3c0f399a180e253ef6527df20c4a4082b2373688739e1b816e1198322266965f","ssdeep":"","tlshash":"384163f55a1564e4879ad383c8da3f4112d331d18b5118c3babcc5dd85ea26a760cd0e","first_seen":"2026-02-10T13:26:46.55509Z","last_seen":"2026-02-10T13:26:46.55509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":31,"dns":22,"connect":1,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}