{"report_id":"fb92d147-f0be-4504-ad6c-b264244d012e","version":6,"status":"done","tags":[],"date":"2026-04-23T03:29:52Z","url":{"schema":"https","addr":"cobera.app/","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":0,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"cobera.app/currency","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"title":"Cobera","dom":{"size":10675,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"ef538045e3c78057acb687d773e55715","sha1":"36a8b34d87cfcaa0bf428726e9c862da020b0ff7","sha256":"fb473ccd60901ff4c167aa7685b41d0f026a069d5285bf8609ec0e117e68e75b","sha512":"5d7c9606428717722ee657de5ce94fc475ef72baeeb935a5e17e7a1e87023ac5f5f5f363e071ba443c630d027c25e64f8391831cb21b472a147be68fd593b11c","ssdeep":"192:VsH5z5CDpBakr64GxQjiTziw4c+UpeueRoLI2HGPJiH4NcUZTyo:V1qxKifiNUphOwI2HYAucwT7","tlshash":"5422755084e6487b449354e26af28b1f3ee1c2175b16cf083aed15e28fc7ec6cd675a8","dom_hash":"domhasha60119562f656858b100c7ed25f2c5e1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cobera.app/","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":0,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-28T03:29:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-19T22:20:23.925162Z","alert_count":0,"request_count":1,"received_data":8564,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cobera.app","ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-07T07:43:12.495141Z","last_seen":"2026-04-16T11:48:09.233857Z","alert_count":33,"request_count":33,"received_data":851013,"sent_data":16182,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cobera.app/vendor/waves/waves.min.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40b2459118b9fff5fc34373fb44ba48","sha1":"f2f1c21b91c5b6378396fa9d5e646c3a195477a8","sha256":"b1684a7557296db54fbf016124ef52c8bc70b368dee64dc47aa2f6d2ea3bb711","sha512":"1ca3c5d4e4230c4558456c2747acaeb8d481d477e4b787098089e6975ecacffdb255750ec1cec56324e30210aaf151b771363f4e0133876e7ed5a5eee314cd80","ssdeep":"192:68j3rGjHT1kMlTBsfA/zRvx4gjiiGOClLOsGV:6S3qjHnlsfA/zVCEGPvGV","tlshash":"96d1c6bb7245367215d313b952efa641b23e0190b4074cc4a53efc95ea39cdd26a3f98","size":6330,"data":"","first_seen":"2023-03-07T12:43:24Z","last_seen":"2026-04-23T03:38:16.059659Z","times_seen":205,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/js/scripts.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c56e16ad74f483078d96d45be0fc2e50","sha1":"96d1e1d1ddb3293b09c63671b683169ceab76cc6","sha256":"6d2c463c0161238451b5960261b054d599799ceedaf5afa9fb729ee857cd8534","sha512":"7210e54f6897a9638d50e3806a40f58a62178a477d4187e9aebc77623a7d127a9b00af747b7e3331f400416d5270c89bfdfbd444e29b9f410965de8e9cc17564","ssdeep":"","tlshash":"0351ce09f4a5606215b73436437fb4003d7e681fd248ce013a9c1bd91f9a5b5e57668f","size":2485,"data":"","first_seen":"2023-03-07T12:58:02Z","last_seen":"2026-04-23T03:38:16.057266Z","times_seen":157,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/jquery/jquery.min.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","size":88145,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-23T15:20:37.840085Z","times_seen":120327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/validator/validator-init.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8cc973551d4d8431a5f0b8a5f057f70","sha1":"6d11893a460883fc0081172fc6104b46a832b81c","sha256":"ff7527456a5a19ee7da1563612c76d4cf3155cfddb3d1ddd5fc53b1d6cba0f70","sha512":"d251648eba6834fda5a302bb85c184106c3b21600add8a2bb7ebb76ded2bd3daf86ecb310ab35893e060a9b85fe7dfbd4dc39dda21bf444daa6d6cb481c0ea7b","ssdeep":"96:EFLaQtEodjO3kFLaPtEodjx3tFLaejx3sffLah30LaRdjxe:EEQtEodjxEPtEodjTEejymZRdjs","tlshash":"c9a1a3495aeb23af1ab7d3a878991306e512c33f41410d27bdbc51b42fb3b4567c1ea8","size":4646,"data":"","first_seen":"2023-11-28T04:43:41Z","last_seen":"2026-04-23T03:38:16.060614Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/currency","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef3b378e73e97b3a595382f55e61ff68","sha1":"d642ab90d173a8b7b0887073cf7e97aab86374e2","sha256":"86dc75e3c2b7ac48608ff47448ab820eda381764c13d1cf1bba81255cd0d8d9a","sha512":"78351fffbfd0a0564f71b544cba739298370c7be93029c2ee3969a1c4f5243fe71e1ad913dd6ea96e5af551040e78fd476f228e76c12e2fc4b75c875b008a921","ssdeep":"","tlshash":"c711490e356d59945d93703c1e598a523cf444334e18ef48ff6ca1f18fa6e9826ecae8","size":902,"data":"","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T03:38:16.073948Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a454220fc07088bf1fdd19313b6bfd50","sha1":"265a733cb7fbc481fd2510a659a85ad55c93c895","sha256":"7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c","sha512":"4ea980874fec49bc12b9504e0c46a002889421e191a3cbbde5ae35cf29067eae623e43bda227bc20a0a0c7bc80af56df8818d97ae6a98cb80c769f5432909561","ssdeep":"768:59YDXypxHVIg3Xeh2p0NH04UX+TG9qTXAdQ+fZMQnOwkqUNFJUIU7lW0+YVxiM+A:59YeHqTEZChY223CzWpV0ea7In","tlshash":"7273d60a7240b472069fa066907f460fb23b68daa50b815cf56cd8dd1d7cd99326bf7c","size":78635,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-04-23T15:14:48.709477Z","times_seen":10188,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/currency","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b4f11c72bc11304a9f27dec1f4ce4a8","sha1":"8f592ee58fc41b02a4a2f25f54882ee642acfa62","sha256":"1e099b99f5611e4b25576691a6f284f1815d531f4087c391f439c660ef6fdce9","sha512":"869e6253914b1c98418d8fdea4081cda48a5fadc5df0dbd731b1cab0802fd581c3068ed911800629634ef6318f468348ea9e0e5597a3dc84b1ab092ebee24109","ssdeep":"","tlshash":"96e048244c47b49b99520594780fcd1befd589fd2605e70dec2ca12a629b85f06038e9","size":329,"data":"","first_seen":"2023-11-28T04:43:41Z","last_seen":"2026-04-23T03:38:16.074565Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/currency","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"e6504bdf7837901dce00c5cc50e08128","sha1":"934a2382e43b8f41e454a03636331e136dd9c8e2","sha256":"e2d08f27f5bfc5c7a72aad439f5ee4e1bba5d9ff4d8ff85a1e78411f308467d3","sha512":"825c5996dcf76a7dc3bd6f67127f4e00a00e0ac123adee1d3c8caf381238d54b586fd7883811fe5a652135c37bf18eeffb9aff00ad172997f285c5b0fa611749","ssdeep":"","tlshash":"9c31e09b309729b14cb72aba5197828934b281173900ec4c7e9c01b08f58b4ad977bf9","size":1733,"data":"","first_seen":"2026-04-16T11:48:08.632619Z","last_seen":"2026-04-23T03:29:54.189913Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/validator/jquery.validate.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"746c000bbf0a0d525f9b306aad96f30c","sha1":"eb39535f35cff8b894c128f9fd884fb1afc806b3","sha256":"9fc53eb52d30e916cbd3b2512a4e69978938eee3c33d9c2f7519fb725a10d4f5","sha512":"36cac404d2c20277561d15cd7f166b243ecd9e48bdb15f9cfa786a2894fa064bc95f6e0b869f6dbf134deada511513a9f1c58d8e2a596b4329e575bd3bf0cd94","ssdeep":"1536:7jpM/JYVLBJG/tKJ6IQzdZS9lJTCoxXDzx9YQvcya3vE7hB0:77VlZXDWmr0","tlshash":"88633f4e3a5a101a4d3b73feef8b914ef7a6412b410295187cac42901fb5db462e5fec","size":70082,"data":"","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T13:13:41.030682Z","times_seen":219,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cobera.app/currency","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T03:29:32.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /currency HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 2693\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":10682,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b5f0ecaf68f130fd898903d7e289f37e","sha1":"f4ddedb160c19cbc70fe54ddbbc554ef49020850","sha256":"b47a7d131090eb50c22fb489cee0b98a5bf50f2fc012bb087655bbb8f66a78c5","sha512":"2029269ee561bcd3e0697c7c2d44cea945d810e92f2b88928ef5766f53564c2cc8ceabd1daecc3e6be6acba74db53d64ff0b6a4deabb761ae58ffbb75d5f2d67","ssdeep":"192:bJyhAef8AUjgBU1RTIVwinikhY6woFMGom4nAaT1lrr:bDsJcI6iniR6wC9tKAaT1lrr","tlshash":"7122641094c5487b40f396a29aa18b4efee1420b8716df083aed17e35ff3d85cd679a4","first_seen":"2026-04-16T11:48:08.602001Z","last_seen":"2026-04-23T03:29:54.153713Z","times_seen":3,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/us.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/us.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4523\r\nlast-modified: Tue, 02 Mar 2021 16:48:45 GMT\r\netag: \"11ab-5bc9081f23540\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":4523,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8754eddfe66cfeebda8977e08505dfdb","sha1":"c47a7f6534886a7d8e56681e4df2770d1a3b3ffb","sha256":"d2e8ac2079a27fb6f120ab4bc4d29597450bd01a9fedf9b7f5a09ad65e8dd164","sha512":"211714063f6d4d872e8a2bad1e2a9eacb07fc2d13e293d715d70115bc15ad4b4602a65852b8cc36f2c313e00bf3712b33dfc073818c670453e42f247cefa602b","ssdeep":"96:m8Q1phFD+mWBhqJTWTBKWjae1pyWBhjWVWBOLYWBDxp3a4cAw:kwmWBUJTWdKWXgWBNWVWBGYWBlA/","tlshash":"d5913adbb2f10656d5834e6103276bf125ff2db081c0a997a321c3e668a58d9c29fddc","first_seen":"2023-12-03T10:48:30Z","last_seen":"2026-04-23T03:38:16.072369Z","times_seen":129,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/background/bg_icons.jpg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:33.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/background/bg_icons.jpg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/css/style.css\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 154659\r\nlast-modified: Sun, 14 Feb 2021 14:18:41 GMT\r\netag: \"25c23-5bb4c8bce1240\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154659,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1152x568, components 3","md5":"7024668e2ceed3b7e8c52bc494fe89fb","sha1":"12060723f007f9952c2c3fd768a596569c3a8e85","sha256":"6d2c8b22e08a36eb406647a4bd7974abb696d57580b9d5e218abca499c3a845b","sha512":"ef73a7cfc2adac50564e1272e4c16fdd8a7aaf9e137afb89c9c0f0042bb2ea1347d5c151b923b23b4ec2826db90136e9fb1779045646f11784890de703bf074c","ssdeep":"3072:U/DWbXkFdsO0yeL7cWEZSsYgqCU3qgYKBpUL/9amqbPUIzWNRGB/WEP:uDsCeO0+LZVYhTFYiUvAPUTNABOEP","tlshash":"0fe302808859375edf0fa8a38c77c7b9fad328b4b575e7308e5d99d32c40040b9967a2","first_seen":"2023-05-03T01:37:38Z","last_seen":"2026-04-23T03:38:16.064872Z","times_seen":224,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":203,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/favicon.ico","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/","date":"2026-04-23T03:29:32.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/waves/waves.min.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/waves/waves.min.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 1005\r\nlast-modified: Sun, 14 Feb 2021 14:18:42 GMT\r\netag: \"f1b-5bb4c8bdd5480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3867,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3709), with CRLF line terminators","md5":"a61d010a0a59639a441da82e856b31bb","sha1":"822e06152f91108b091491383899d579829f4771","sha256":"73a05ae804a4194a7815704a4843232645008a90ffdb625c3e19948a70f446b8","sha512":"101028b8cf10c98dd658722decdb429bcba0e31babb5b2c6f67269050e533f997a1155d1d52d1db580c4b2dabcfdc127c35dac11a54ab2a7728644c60567394a","ssdeep":"","tlshash":"96817c7841c3220ae023ca9aaac2e55df635c5527723657fa33b3dd19f838ded22d605","first_seen":"2023-05-23T10:28:13Z","last_seen":"2026-04-23T03:38:16.06815Z","times_seen":226,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/cn.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/cn.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 801\r\nlast-modified: Tue, 02 Mar 2021 23:11:14 GMT\r\netag: \"321-5bc95d9d02880\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":801,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02c229de4d98ea1668384d2ed4cc558d","sha1":"a5abb0bbee89e84c16dbdc42703a7992c41ebb41","sha256":"e80d714480a795617992d733d0678e5ad5025f8852b35d20a402a78fce4ccaf8","sha512":"81ec0d03db2938f82864069e4db29910c577dc2cb9243ce248c0cdcbf76cb36f8e6c7206c1f518052f009331e6b9011cf855db63281179dbbd2d51bf5d4137c5","ssdeep":"","tlshash":"2f016b01e549901cc50a6700c2adbe8e5756f0a2436a4447ff71245a8938d1f9dea7c9","first_seen":"2023-05-07T22:07:25Z","last_seen":"2026-04-23T07:50:10.397369Z","times_seen":860,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/jquery/jquery.min.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/jquery/jquery.min.js HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 30677\r\nlast-modified: Sun, 14 Feb 2021 14:18:42 GMT\r\netag: \"15851-5bb4c8bdd5480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88145,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"220afd743d9e9643852e31a135a9f3ae","sha1":"88523924351bac0b5d560fe0c5781e2556e7693d","sha256":"0925e8ad7bd971391a8b1e98be8e87a6971919eb5b60c196485941c3c1df089a","sha512":"6e722fce1e8553be592b1a741972c7f5b7b0cdafce230e9d2d587d20283482881c96660682e4095a5f14df45a96ec193a9b222030c53b1b7bbe8312b2eae440d","ssdeep":"1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe","tlshash":"338319dd72c6706257b761ba00bf540bf236599e6c4d4410f124e8eabc78a4a823bf7d","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-04-23T15:20:37.840085Z","times_seen":120327,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/animate/animate.min.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/animate/animate.min.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/css/style.css\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 4259\r\nlast-modified: Sun, 14 Feb 2021 14:18:41 GMT\r\netag: \"e311-5bb4c8bce1240-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58129,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57919)","md5":"bc1a6a99c43f5ccc97d2d350bde13f74","sha1":"29a6f54569c193ffd6116f03be3eb42359c60eb7","sha256":"3c770e90f98eb21b0c042fafb49755af93306fbaf42e449524f94fae9fc83295","sha512":"76826b0bfa1c53c546551c773bdf7cd7ed9a6149f77ee5955afa8b8b553eb40d8c595cecc3e3552aad4fac4345d3733e4d804ff763e7614957147d595b41692f","ssdeep":"1536:UkZHPqwQ1OAPkWDL32ye5trKem0OTI6j3rwzlr2c:UkZywQ1OAPkWDL32ye5trKem0OTU","tlshash":"de43f8af5891229991270f66c7cc5ea8873dc66314721cde33866c4b8b46fde33ca617","first_seen":"2023-04-06T01:48:05Z","last_seen":"2026-04-23T15:38:30.633436Z","times_seen":11774,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:400,500,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Rubik:400,500,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 23 Apr 2026 03:29:33 GMT\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"d7c384409c3650437f5e94e972d916ed","sha1":"d176f1a5c847829fd049c95b85218fc3a65bfe16","sha256":"f861cc360951df6f24d9e9eb70b4ab700e98db8e00bc10557830b9ebeccd2321","sha512":"7c7fac0f17ca8f0acea0d0e87f3ddc2588bcda9c75f2d6c0927847864dbb05b6ce1d52837d38b3cd7e1305acd60240dc2d2b22077866c6f3fedbfad9be5cc903","ssdeep":"192:BhCl8s0KtAuMhClDsb5uAtWhClls9nkALp:SlHRlg3leD","tlshash":"bff1bbe0481e5040bf472cc263ce6d27ed0e62553490c5299afd1b9aacbbc22336578e","first_seen":"2025-09-12T20:23:23.163861Z","last_seen":"2026-04-23T09:58:02.008176Z","times_seen":703,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":119,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/iconz/cryptocoins/css/cryptocoins.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /iconz/cryptocoins/css/cryptocoins.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/css/style.css\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 1859\r\nlast-modified: Sun, 14 Feb 2021 14:18:40 GMT\r\netag: \"325b-5bb4c8bbed000-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12891,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"24d0845eccc71bef68e9745ec165f50f","sha1":"319839a4d7c28daab7cb8591e7aa5821f88007d4","sha256":"2b3b51a373cdb46bd71ac35930353af741a961821b737d971886e60e561a742b","sha512":"968605f24c4080dced70f640b2953cfa1fbe0387a172a564d59e6f741a103c93614be993c67608a68fc09292acd8898238b96e28d05bf0b1bed7ac5185d812a9","ssdeep":"96:02kOMpY5/TeQN/lRjyAn7xiG3tZDwMQZcFmFw+mXePLe1PF:TupQNDjhn773tZsMsmL","tlshash":"ae4295e081bd5de4d346e4fe3782a620bf0ca2a9981f5dc4c2a37dbda5d4540d992bcc","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T03:38:16.062874Z","times_seen":163,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/gb.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/gb.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 538\r\nlast-modified: Tue, 02 Mar 2021 18:40:48 GMT\r\netag: \"21a-5bc9212ab0c00\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3ddd6025a06a78535b0d432d14905bf","sha1":"2b5148a18b90f933e47bf895c26d61a52d21d9d8","sha256":"825310f9bcc8892559317bfc87fc28d5d7bad06c02d562b5740aafcf4b040803","sha512":"618481c44206c46bf35212f5b2206457c641417ce2bd575867eb6cf43776a7e363ae7aef7ce339d304c4d73a1054b1d5f6c5ebf6f8d8dbf2bdf41d442e2e33ad","ssdeep":"","tlshash":"d2f0c9d8c72c3044c70a97105cacb8e3d4d9a1cd999004eab8e09ae460a9b97dccadd1","first_seen":"2023-04-07T07:31:08Z","last_seen":"2026-04-23T10:54:31.203321Z","times_seen":4325,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/au.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/au.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1546\r\nlast-modified: Tue, 02 Mar 2021 23:10:31 GMT\r\netag: \"60a-5bc95d74007c0\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1546,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"503a3a980ccbc651a8acc57b6f6d2dab","sha1":"88b3a19b6b7a5eddc79e88bdf2653aef987a45f2","sha256":"213bcc5e8c0c7defccd96f191f39e53f873da8129e55d230faafdd683d4168f9","sha512":"89df2bd8b7694322904668bbe2c3d777c16da5b65605d6a8d6579c68da99a57fa1eaf7d871696b97a3ccbe796ae316f3f0c968c0d591dd0efadf93d250da9278","ssdeep":"","tlshash":"0631f554e38cf3786d9643a87b2cf4f475bc00fd6384365d406181b09aa52e749de6c8","first_seen":"2023-05-07T15:42:37Z","last_seen":"2026-04-23T03:38:16.058185Z","times_seen":215,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 22295\r\nlast-modified: Sun, 14 Feb 2021 14:18:41 GMT\r\netag: \"1332b-5bb4c8bce1240-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78635,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65297)","md5":"a454220fc07088bf1fdd19313b6bfd50","sha1":"265a733cb7fbc481fd2510a659a85ad55c93c895","sha256":"7f3145c87d3570154f633975e8a4f8d30aa38603edaba145501e9c90ddbe186c","sha512":"4ea980874fec49bc12b9504e0c46a002889421e191a3cbbde5ae35cf29067eae623e43bda227bc20a0a0c7bc80af56df8818d97ae6a98cb80c769f5432909561","ssdeep":"768:59YDXypxHVIg3Xeh2p0NH04UX+TG9qTXAdQ+fZMQnOwkqUNFJUIU7lW0+YVxiM+A:59YeHqTEZChY223CzWpV0ea7In","tlshash":"7273d60a7240b472069fa066907f460fb23b68daa50b815cf56cd8dd1d7cd99326bf7c","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-04-23T15:14:48.709477Z","times_seen":10188,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/waves/waves.min.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/waves/waves.min.js HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 2319\r\nlast-modified: Sun, 14 Feb 2021 14:18:42 GMT\r\netag: \"18ba-5bb4c8bdd5480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":6330,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6291), with CRLF line terminators","md5":"e40b2459118b9fff5fc34373fb44ba48","sha1":"f2f1c21b91c5b6378396fa9d5e646c3a195477a8","sha256":"b1684a7557296db54fbf016124ef52c8bc70b368dee64dc47aa2f6d2ea3bb711","sha512":"1ca3c5d4e4230c4558456c2747acaeb8d481d477e4b787098089e6975ecacffdb255750ec1cec56324e30210aaf151b771363f4e0133876e7ed5a5eee314cd80","ssdeep":"192:68j3rGjHT1kMlTBsfA/zRvx4gjiiGOClLOsGV:6S3qjHnlsfA/zVCEGPvGV","tlshash":"96d1c6bb7245367215d313b952efa641b23e0190b4074cc4a53efc95ea39cdd26a3f98","first_seen":"2023-03-07T12:43:24Z","last_seen":"2026-04-23T03:38:16.059659Z","times_seen":205,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/validator/jquery.validate.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/validator/jquery.validate.js HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 14418\r\nlast-modified: Sun, 14 Feb 2021 14:18:42 GMT\r\netag: \"111c3-5bb4c8bdd5480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70083,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (520), with CRLF line terminators","md5":"746c000bbf0a0d525f9b306aad96f30c","sha1":"eb39535f35cff8b894c128f9fd884fb1afc806b3","sha256":"9fc53eb52d30e916cbd3b2512a4e69978938eee3c33d9c2f7519fb725a10d4f5","sha512":"36cac404d2c20277561d15cd7f166b243ecd9e48bdb15f9cfa786a2894fa064bc95f6e0b869f6dbf134deada511513a9f1c58d8e2a596b4329e575bd3bf0cd94","ssdeep":"1536:7jpM/JYVLBJG/tKJ6IQzdZS9lJTCoxXDzx9YQvcya3vE7hB0:77VlZXDWmr0","tlshash":"88633f4e3a5a101a4d3b73feef8b914ef7a6412b410295187cac42901fb5db462e5fec","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T13:13:41.030682Z","times_seen":219,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/js/scripts.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /js/scripts.js HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 871\r\nlast-modified: Tue, 02 Mar 2021 03:31:41 GMT\r\netag: \"9b5-5bc855f69e140-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2485,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"c56e16ad74f483078d96d45be0fc2e50","sha1":"96d1e1d1ddb3293b09c63671b683169ceab76cc6","sha256":"6d2c463c0161238451b5960261b054d599799ceedaf5afa9fb729ee857cd8534","sha512":"7210e54f6897a9638d50e3806a40f58a62178a477d4187e9aebc77623a7d127a9b00af747b7e3331f400416d5270c89bfdfbd444e29b9f410965de8e9cc17564","ssdeep":"","tlshash":"0351ce09f4a5606215b73436437fb4003d7e681fd248ce013a9c1bd91f9a5b5e57668f","first_seen":"2023-03-07T12:58:02Z","last_seen":"2026-04-23T03:38:16.057266Z","times_seen":157,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-23T03:29:31.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nrefresh: 0; URL=https://cobera.app/currency\r\nset-cookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu; path=/; HttpOnly\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-23T15:09:30.745699Z","times_seen":14107455,"resource_available":true,"data":null}},"time_used":970,"timings":{"blocked":88,"dns":34,"connect":23,"send":0,"wait":790,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/css/style.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 33197\r\nlast-modified: Wed, 31 Mar 2021 03:55:17 GMT\r\netag: \"37ad1-5becd15363340-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":228049,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"40003b5d5e72252fa5ab13eece550c57","sha1":"3e91eeb93ffca07cb5c19c0b466fd3e16c80e552","sha256":"6da85995c288211a3d33bfc4d9171d15bd5e2a46d60e4af9a2d5a4b4d6538f0e","sha512":"5618f21bbf1f58aa7833145cebb22920fb94782caec7e9c8e8b4fe1bcc6e11c9ba7919ba2de8f0b3b47a41b813b9fee7d92781669693667df5afde08a7385616","ssdeep":"6144:FpItUws/zDL4iDF4fDzCSHAQN9Jzm3yEbcbf2sxRj3jsW:kUcDzCSHAQN9Jzm3yEbcbf2sxRj3jsW","tlshash":"52248589fef12504746b92ac6496b7e57b2d4046d60ecd7ab6e23128df8d3c14cb3e48","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T03:38:16.063864Z","times_seen":141,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/th.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/th.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 287\r\nlast-modified: Tue, 02 Mar 2021 23:12:34 GMT\r\netag: \"11f-5bc95de94dc80\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":287,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"76fca72f6d180d3f14a55653b8937b5e","sha1":"1a210bf92d8c0587dc496e2b6c8d41fdb0d847f2","sha256":"4e206b563d27b5a7a3f7cabf944d6d278e6e8640018a72ce7b7ff989f1396df9","sha512":"d4fb2c42983870384ecba145f328f49da74bbef21026ac2f3af411f67cfa56bc69586fc5ec61e37ef8bbc60f96eef6d2bb94f33539d67aeda772cbe9128db1ad","ssdeep":"","tlshash":"90d02bf8c37c74244d4882300f6c72d29556a08a115810c7b4a02da579591f38cc79d2","first_seen":"2023-05-15T20:23:41Z","last_seen":"2026-04-23T03:38:16.060155Z","times_seen":442,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/eu.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/eu.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1127\r\nlast-modified: Tue, 02 Mar 2021 22:49:07 GMT\r\netag: \"467-5bc958ab7bec0\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1127,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7b4534d284b8ca4889f4c4d8b56d1f9c","sha1":"75d55af3c96ea0c63388cd5365b4c1f3ef8eaf1d","sha256":"4535eb2708dbe8f85b7e3bea365f2d62340d73ea8a0552328466e691029837ed","sha512":"a3e5daab0ed73d4f42bc8c4508cca97d52c34d45d883b14bcb6fcca9507a24e9b565be609df5b8f139401831570695d6e30e653a8e1916aa2789465dab207fc6","ssdeep":"","tlshash":"35213705e816405e472977dcd1fd99c8c10ba9474a570c6ff3a16a8f81b662fb75c30e","first_seen":"2023-05-12T15:12:11Z","last_seen":"2026-04-23T03:38:16.06703Z","times_seen":302,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/ch.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/ch.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 297\r\nlast-modified: Tue, 02 Mar 2021 23:10:50 GMT\r\netag: \"129-5bc95d861f280\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":297,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c26f60a63bf575c6b7be3eec11e3043","sha1":"746d6537ee9743ea7706527f599b543aa270768e","sha256":"4e94e5c3a524345e7c24f3807ab2ca812225ea6ccdb59ec67125b0ea3ed02cd5","sha512":"33252c059d5cc08b8192301cd46622cfd126bcbd3b7ff668b967298d14171ee0c9bc6baaf37b8c339b7b2c97721b72fc23c3c2cfa54deb5d4384d605825261aa","ssdeep":"","tlshash":"c3e02ba862be9828552c42309f3c39a15d3550ca53541086f4582db8eb4d6774c935e9","first_seen":"2023-04-27T14:44:32Z","last_seen":"2026-04-23T03:38:16.072945Z","times_seen":491,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/iconz/line-awesome/css/line-awesome.min.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /iconz/line-awesome/css/line-awesome.min.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/css/style.css\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 6306\r\nlast-modified: Thu, 18 Mar 2021 00:32:55 GMT\r\netag: \"84bb-5bdc4bd8e1bc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":33979,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"37ba1b4ab69292ca2dee6f3f071d29fa","sha1":"0ba8bbbb51d833c6f797f16e280b4c3d131534e5","sha256":"24ba857cc4a11d463bb68526ebf11aae278f7ab694512fbf32057403daafbab7","sha512":"d0c49faa2792ed80c1cd004405f1b365f0b2bfa3c0df76947aa5bc061977989501b7f4a0ea51180b8f2114392a025b76e959e67f392244194d627601106b47e9","ssdeep":"768:mA8BD2fJWQGrwI/K8BG7QM9r2qj9vSD65MtF7E6gKKRX3G2Fkx:b8gZSuMtF7E+K13G2e","tlshash":"35e21ae8e1be0880a315e4d173826270fb1de92dac4f6d7cd2e2399db5c1255c2963ed","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T03:38:16.070773Z","times_seen":141,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/iconz/cryptocoins/css/cryptocoins-colors.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /iconz/cryptocoins/css/cryptocoins-colors.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/css/style.css\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 1252\r\nlast-modified: Sun, 14 Feb 2021 14:18:40 GMT\r\netag: \"e3c-5bb4c8bbed000-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3644,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"34dc8bbb5e4c22c441319df3c9e21f0e","sha1":"fcc8b75c56d6a01ee28865ff34df229946de7a6c","sha256":"e1dc628870b03236a9185846d23ae29945270a644ce9f596af01bdfdf75ea6aa","sha512":"e518dda7b1c5737a2fdb6d83b60cb30d299a7893742dc2eb258f1c1d01c88fd17e76a71b5e790d44485b3baf81aa801862dcc21690d37858557aaa196ace9cce","ssdeep":"","tlshash":"d871ac97c3781757215b188c35abd1626ba9b8e21801bb3c7d025609e7bc660fdbccf9","first_seen":"2023-05-14T11:35:37Z","last_seen":"2026-04-23T03:38:16.056212Z","times_seen":158,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/favicon.png","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:33.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/favicon.png HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncontent-type: image/png\r\ncontent-length: 1674\r\nlast-modified: Sun, 14 Feb 2021 14:36:56 GMT\r\netag: \"68a-5bb4ccd127200\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1674,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 17, 8-bit/color RGBA, non-interlaced","md5":"f362a091441f11f2a75a0466b37eb271","sha1":"fda7e3719f5423a98fb08fec04468a9855c9b166","sha256":"9efa136cb3cf711251ccad713e288141c21371a577a30b96f3d6e57c1288529d","sha512":"7f1558a02dfe04e197113f79a66981f817db5b15cbc34d20a7cf6f23870da4722447a20ad81482527ae9d4095918d830d825176500352fd54b967be6699c8787","ssdeep":"","tlshash":"5231b641ae211842919c87c972fe920b4b2348c1eee0d756b84ec202153c1f90999ecf","first_seen":"2023-05-03T01:37:38Z","last_seen":"2026-04-23T03:38:16.071701Z","times_seen":224,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/owlcarousel/css/owl.carousel.min.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/owlcarousel/css/owl.carousel.min.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 1068\r\nlast-modified: Sun, 14 Feb 2021 14:18:42 GMT\r\netag: \"d17-5bb4c8bdd5480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3351,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-04-23T15:14:24.640286Z","times_seen":32254,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":203,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/w3.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /w3.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/css\r\ncontent-length: 5523\r\nlast-modified: Tue, 02 Mar 2021 22:00:23 GMT\r\netag: \"73dc-5bc94dc6f0bc0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29660,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b43ebe1c3fb2ad7996aa02eed8e5f3a7","sha1":"d5608ec66faacecca3451edf7dbfdecc88244e4f","sha256":"75e2455c5b5c1c1c233ea9a49c3b2fcba19b6ee48f21f39a7101086d74a63db5","sha512":"9417e9e48810a561d007114cc51f0d0c24bd98bf8364ed9a5621d710cef809b88a5eeb1509c0888decae90e115636c0c1ca45392a07601d54910e7aa901193ef","ssdeep":"384:3HHLQq5o472PHRFS4V2321vjJKrVj2OzZ/JZNVM2LvQEVLdoBW:3HHhLBHPVM2LvQEVLdoBW","tlshash":"69d20fa9fb470105273e8b35635aab74bf2d03e2df470736bab06739134e4845a29ec4","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T03:38:16.069295Z","times_seen":208,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/jp.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/jp.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 474\r\nlast-modified: Tue, 02 Mar 2021 23:11:39 GMT\r\netag: \"1da-5bc95db4da0c0\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":474,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e72015c537875435192c3b2d832042e","sha1":"b7006b7f32d7699252179429fe53624a51c82577","sha256":"e759dccba5bc383814ab190daba0d12ef591ad9f161502a47222c2eacf770606","sha512":"81594261f09208ff7f130f1615ed9d189e0739d56f70893467f0cd2d128a3d673e6b894337ab0c954632984aa5e187721ab2d3f9eb12c2d6506d1074bd507f8e","ssdeep":"","tlshash":"88f05ca4a6f8881ccf284529cb9d29c5572df0c6438a4489b1941a596f1867716d72f4","first_seen":"2023-05-06T07:31:30Z","last_seen":"2026-04-23T03:38:16.056733Z","times_seen":660,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/ripple.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/ripple.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1124\r\nlast-modified: Tue, 02 Mar 2021 02:41:18 GMT\r\netag: \"464-5bc84ab3a8f80\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":1124,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"56c20d7f1d068169b05304b7f8332c2f","sha1":"fe0f29c2dad7e6fbb5efb3f6073e7a3250c38e88","sha256":"1819634aeb5d0c485ba0c5de75f71f51748357ab08c348c85b253a373ae06b1c","sha512":"ebf5cef755957dd5a9e3292d29b1cd4e7b54719560c94ebe9c2a3e99a544a5220231f0e88664ee4e70fb963924f20d064504e83094ea580848797007980e03b4","ssdeep":"","tlshash":"2821ee39d2014d0e9b598375f35d60042392c1bb420d81d8f8923e37b06ce9b48bf63e","first_seen":"2024-01-26T11:29:06Z","last_seen":"2026-04-23T03:38:16.068729Z","times_seen":137,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/iconz/font-awesome/css/font-awesome.min.css","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /iconz/font-awesome/css/font-awesome.min.css HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/css/style.css\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:33 GMT\r\ncontent-type: text/css\r\ncontent-length: 7296\r\nlast-modified: Tue, 30 Mar 2021 06:40:02 GMT\r\netag: \"91d6-5bebb448ff480-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37334,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"df3efb380ae2ed6daf210a5688916ba3","sha1":"e011892e34af4ac7161be2ab26a7a51b880ec046","sha256":"730ad057d5414b99a7f033a385a046dadc4ae02c84572a88cfb9e373462134df","sha512":"a3b6b6f6063aa2c27796c5f951a939a2f8efb1e9eea2fde1d5d9b8b386f87167174168f5bebc5772babdd9adb1304cdd1542ca6aa762379d6a721943fe1c3e54","ssdeep":"768:B7Mtu+A4CSIDqvnp+YTBrFPvVrJjhiRAiiiL:B4tu+A4GDUp+Y9rpVljhiIiL","tlshash":"38f231ece5bf18804391e0d16386a370bb3dbb2d8d4a6d5cd2a6798cb5c1255d2c23ed","first_seen":"2023-04-06T18:48:12Z","last_seen":"2026-04-23T03:38:16.055621Z","times_seen":141,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/ca.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/ca.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 728\r\nlast-modified: Tue, 02 Mar 2021 23:08:06 GMT\r\netag: \"2d8-5bc95ce9b8180\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":728,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c976442e32a435a0ea72b42d40dbe8ef","sha1":"42203fb32bd243cc45e8dcea884881c9f1889cc4","sha256":"5bda905693ffed32df95f79a8eeac1fbf062630de05f48875e109c35681e2331","sha512":"a87480a43670f7e58c8e65d14197037d4d74c3e1802c504e57d2d7e42ee7a60d2f240e226f9cea7f0d0b9cc5f50e1675698fa38bf98e2a7ade6a413bf7ea4e28","ssdeep":"","tlshash":"1a014480f17dc7f8dc218718cbadb9d0249db05ae5f0d66dfb2144a53b004ec51ca6a9","first_seen":"2023-05-09T11:46:46Z","last_seen":"2026-04-23T03:38:16.064372Z","times_seen":241,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/in.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/in.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1074\r\nlast-modified: Tue, 02 Mar 2021 23:11:27 GMT\r\netag: \"432-5bc95da9685c0\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1074,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e4ab7bd057c6d49f21b3460a1bf914a9","sha1":"50e700ea860843e9996ebf98923925904e0cf1a4","sha256":"cbc15f5fb40df22adf2b3792eb6c1d359e1a7affb44318a5a779943fc7299d45","sha512":"43e543285b70e69146684824685d3b6f81aaef4b8324afbdb66b37bc83f4a16cce8578fba7a3b653a55fbe573e45f916b1a49b30ab79ec6da24bab353399df20","ssdeep":"","tlshash":"0f115954a1fa941c8425e700c7eda98daa1790c713060687f12d3cca5b399f7899b28d","first_seen":"2023-05-08T15:26:00Z","last_seen":"2026-04-23T03:38:16.067549Z","times_seen":376,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/ru.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/ru.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 286\r\nlast-modified: Tue, 02 Mar 2021 23:12:19 GMT\r\netag: \"11e-5bc95ddaffac0\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":286,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0cacf46e6f473fa88781120f370d6107","sha1":"077a34f40e6d166e06180c2e5abd5b322a8de6af","sha256":"5b51b57f63cf58e451abddeaee39a8c7b133cb3d58c6ef1a903883bda7c346b0","sha512":"5a6ac79e3a5284c2ee52a1e680358f4ae8529a3b079a7026709cd1a765c3259671416110b697c37cc937bbd026be5780f3250a5f277a5bd4fc42b312d4c3c1a0","ssdeep":"","tlshash":"f8d02bf89379b818450882304f3c32d3d83a90ca224810c6f8a018b4250d2978cc75d6","first_seen":"2023-04-19T18:56:20Z","last_seen":"2026-04-23T03:38:16.061131Z","times_seen":766,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/images/flags/tr.svg","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /images/flags/tr.svg HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 554\r\nlast-modified: Tue, 02 Mar 2021 23:13:00 GMT\r\netag: \"22a-5bc95e0219700\"\r\naccept-ranges: bytes\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":554,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ed6d5f37779af38911b0b7cb2212e30d","sha1":"49db5e5e46c496be4f3f7b0565bb415982bb6130","sha256":"033a416ecc30a516c54c6a0fac2d212a38fb051e5976cda49eb9d22264814a66","sha512":"7f8f3c732ec2873ea5a32b987563402474ea9a1ac3718f84e3b7cbb56781b4b89dfc91ad59418e89d1767afcc2834e0f864f384f9c42e8649d0ee244dc4dc9ce","ssdeep":"","tlshash":"ccf0c0a573bc42784b1d43aa633c54d0341a79dd049721a9f0a304f07d741b6de86cc9","first_seen":"2023-04-18T21:54:16Z","last_seen":"2026-04-23T03:38:16.061585Z","times_seen":667,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cobera.app/vendor/validator/validator-init.js","fqdn":"cobera.app","domain":"cobera.app","tld":"app"},"ip":{"addr":"193.142.59.10","port":443,"asn":201409,"as":"Hostshield Ltd","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cobera.app/currency","date":"2026-04-23T03:29:32.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cobera.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Apr 2026 13:20:34 GMT","end":"Thu, 02 Jul 2026 13:20:33 GMT"},"fingerprint":{"sha1":"B0:0C:CC:EE:A2:6A:8E:AB:BA:F4:4E:96:76:74:2E:56:3A:9B:FE:48","sha256":"F1:44:FA:10:82:1C:72:AB:E8:37:F3:4C:E3:C0:4E:53:F9:37:20:A0:35:FB:71:02:E6:31:95:CB:2C:5C:C8:0A"}}},"request":{"raw":"GET /vendor/validator/validator-init.js HTTP/1.1\r\nHost: cobera.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cobera.app/currency\r\nCookie: PHPSESSID=f2508nn8mh2p8t2nbj2hn0v4eu\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: openresty\r\ndate: Thu, 23 Apr 2026 03:29:32 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 438\r\nlast-modified: Tue, 14 Nov 2023 15:28:35 GMT\r\netag: \"1226-60a1e709e8ec0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nx-served-by: cobera.app\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4646,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a8cc973551d4d8431a5f0b8a5f057f70","sha1":"6d11893a460883fc0081172fc6104b46a832b81c","sha256":"ff7527456a5a19ee7da1563612c76d4cf3155cfddb3d1ddd5fc53b1d6cba0f70","sha512":"d251648eba6834fda5a302bb85c184106c3b21600add8a2bb7ebb76ded2bd3daf86ecb310ab35893e060a9b85fe7dfbd4dc39dda21bf444daa6d6cb481c0ea7b","ssdeep":"96:EFLaQtEodjO3kFLaPtEodjx3tFLaejx3sffLah30LaRdjxe:EEQtEodjxEPtEodjTEejymZRdjs","tlshash":"c9a1a3495aeb23af1ab7d3a878991306e512c33f41410d27bdbc51b42fb3b4567c1ea8","first_seen":"2023-11-28T04:43:41Z","last_seen":"2026-04-23T03:38:16.060614Z","times_seen":141,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-23","alert":"Sinkholed","trigger":"cobera.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}