{"report_id":"fdd76fb0-c2e6-4fdc-97da-a7e8b317a83d","version":0,"status":"done","tags":[],"date":"2026-09-03T19:27:38Z","url":{"schema":"http","addr":"coinbase-referral.com/","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"coinbase-referral.com/","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"title":"Coinbase – Get $10 for signing up","dom":{"size":32693,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9291)","md5":"b72917c40b98a388962378fe246c9731","sha1":"004abae5d9ec458aff3dba7aa4e40b5a482886ed","sha256":"4c65df57a1b132ed227bd123febce406cc2b224e61ff4dffd589aa9a9b9f1ec6","sha512":"664f4f277ce755116308c3df9672dc3a9ec42e854c9ff06e6068e09d74a5d67639098fbd54d382c21595e8eb5dcca40cd34e1560107c5d96ad9ccc3891cf0199","ssdeep":"384:9z2WdNJ6Ih7a4r/ZdSZUaAhHkW9OZ+xFH2H2RbyTleZ2TFtQgtxvwJ+ME0vWCJBA:YWDZdypa9U2xrypftQgtxoJ+b0vLBA","tlshash":"86e2d732e16410167b1f87beb1f1b368e568b201db06ab79f0f921ac4a84ef6157770d","dom_hash":"domhashd71d3f05ba9b9816f0ac739f1f1ce737","first_seen":"2026-09-03T19:27:41.442755Z","last_seen":"2026-09-03T19:27:41.442755Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinbase-referral.com/","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T19:27:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinbase-referral.com","ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2017-12-16","domain_rank":0,"first_seen":"2021-03-12T08:16:19Z","last_seen":"2023-04-25T12:39:10Z","alert_count":39,"request_count":13,"received_data":734443,"sent_data":6578,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":1,"received_data":23853,"sent_data":557,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":3678,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-04T00:44:56.352913Z","times_seen":956464,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.13.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78f792b41dfe4097675e09e805529455","sha1":"57cc1e04e0235d54bc197945b9d0f167d9454244","sha256":"ebf0e8c538ae3047cf5056253a32daa65d23d8fb531ea05b0f0f28d58f828143","sha512":"a5526098676e24d20b1d237b5248413f75c3268ce12b406ce4990bc670d4fe98010f1297bd92b870f5ce4efe95460376620d57a871e39c97498b6cf211b60cb0","ssdeep":"384:0HFFhp3CyCEB7T+gyV/W1KB/2ZszFmau+u:ktFCEA/EK9Uam","tlshash":"5462970477823372962b209ddaab414e69bb6d1778056850b31ec6c49fb8f0c91eff69","size":15876,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-09-03T19:27:41.462305Z","times_seen":2168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/flatsome-js-js-extra","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6632fcc33d6814c6447d6fb362ff2e91","sha1":"7c59897fcd12e3cbcb601c9f9ac9d68603279d15","sha256":"49c115c8f2998d71c86d4cd75a73ad8bd3e18e93602925f60133c27dba47810c","sha512":"67a7a965daaf16e4bd393523937a5d4a877f17b248a3589f919a1bddf4b58b0bc0e753382c31627211748e3bd114c5d2d8c569bb18a668dce8da807f0eccdff8","ssdeep":"","tlshash":"b9116625e21cd92da1574131ff30fe3e1a293012ead97014aebe086892a59ad64e765c","size":1016,"data":"","first_seen":"2026-09-03T19:27:41.470402Z","last_seen":"2026-09-03T19:27:41.470402Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d33c970e799778075f778c68f4c2c91","sha1":"126d849e0cefd535b4db92e2547866d49fe3101d","sha256":"4b57f95f03de6126cadd191ceffc6013a11ece9901a900f0937aa282e255ed68","sha512":"75488d797c53a9aab041464358f43bc6c067c4f65362506ded9f011c64400a9149d31354c631b13a0b51546a212d3e49b98d7c5f08e7aca5d552d33207df59b6","ssdeep":"","tlshash":"fb619559eb7938db33fa01f2653a4d4beb614436e784d038c9ae631424b1893c375a1a","size":3285,"data":"","first_seen":"2026-09-03T19:27:41.472538Z","last_seen":"2026-09-03T19:27:41.472538Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-04T00:44:57.738439Z","times_seen":48465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-09-04T00:38:31.468981Z","times_seen":50696,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b471740ff41d543f442880638db4b3fb","sha1":"76b8de690f1e466fc828f5c4c1b9d108a23eec54","sha256":"e58e4e240de4b5772c8f09c7c4bcce4d442346e1f5b19365f1a78bd52e67bffa","sha512":"693e7f26c2517a70dacfe8867aa3238fa51ff3cf233603cebe8b448c37953ebee5916845e1a5cd880eb26721535f4d9d68936b1ff4a1cfd5f047e2207f02585c","ssdeep":"","tlshash":"a2018925b21cd92db1574111ff30ff3d1a2930126ad97014eebe0878d2a59ad64e765c","size":798,"data":"","first_seen":"2026-09-03T19:27:41.474989Z","last_seen":"2026-09-03T19:27:41.474989Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-04T00:44:57.745778Z","times_seen":1045344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-09-04T00:39:41.960774Z","times_seen":90317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.13.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9da4dc3cac95cbcfdcea35bc1f9b916e","sha1":"ab1be13f2b56bd6c3960543e6d79eddc456e13f7","sha256":"4c2679ba71cd1e1cde5921cc43c8ffbaa524a86a907dd46c08e3b2d394511c49","sha512":"1999e3aa86e190a72c10f5b962502cb0b8530183ecf14d1d1bb8901cd551b3c3a3172e5f7f797027e172508e19e3001060e617f6666578087ed35f9eb3fb4ff2","ssdeep":"1536:RMsg2dCyAmCQxaLBUxVTVXUgMAvb3Jh2/tty8MAczhP0Ncz9+rhlQwKvEyYNGQ1B:g2QmoW3JiUV6MvE1GUO3jSYK","tlshash":"f0f3f749f251353a42ebb1b6a13f530e72336428640280acb569e8da6dbdd8d3137f7d","size":159505,"data":"","first_seen":"2023-03-07T01:34:31Z","last_seen":"2026-09-03T19:27:41.453148Z","times_seen":231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://coinbase-referral.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.13.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.280Z","timestamp":1788463627280,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.13.1 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 May 2021 20:56:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6091b508-2a3e5\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":173029,"size_decoded":29306,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"acef564189b72d8e5d1782ba4d6890c3","sha1":"9645b0f5f7a716525d7725589857e360d3a6ad89","sha256":"7f9186ede54ef57cdf06abc5d6c8f15829265b2318fddb5283499094ef22e0d8","sha512":"3b1405e8930f162c0804c1c228e4b2556b7775c21658659dd94159fcd709e938d00e1b92562d33d12a1e4d0473e5f493134f916aa5d98d4503e0b5fdb26ae8f0","ssdeep":"3072:0p1ZZXBYHDC8KL1CTXYJsEChrTbHLMchHE3Ls51MHSRnmyTXHLcxbN0AgL6opP4u:hEChrTbHLMchHE3Ls51MHSRnmyTXHLc2","tlshash":"07f3c863a24121086017c708d7c9fbac773dd162e7220afff553aa29c7c76de1166b4a","first_seen":"2023-04-12T02:28:39Z","last_seen":"2026-09-03T19:27:41.446666Z","times_seen":222,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.13.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.497Z","timestamp":1788463627497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=3.13.1 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 May 2021 20:56:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6091b508-26f11\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159505,"size_decoded":43554,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21487)","md5":"9da4dc3cac95cbcfdcea35bc1f9b916e","sha1":"ab1be13f2b56bd6c3960543e6d79eddc456e13f7","sha256":"4c2679ba71cd1e1cde5921cc43c8ffbaa524a86a907dd46c08e3b2d394511c49","sha512":"1999e3aa86e190a72c10f5b962502cb0b8530183ecf14d1d1bb8901cd551b3c3a3172e5f7f797027e172508e19e3001060e617f6666578087ed35f9eb3fb4ff2","ssdeep":"1536:RMsg2dCyAmCQxaLBUxVTVXUgMAvb3Jh2/tty8MAczhP0Ncz9+rhlQwKvEyYNGQ1B:g2QmoW3JiUV6MvE1GUO3jSYK","tlshash":"f0f3f749f251353a42ebb1b6a13f530e72336428640280acb569e8da6dbdd8d3137f7d","first_seen":"2023-03-07T01:34:31Z","last_seen":"2026-09-03T19:27:41.453148Z","times_seen":231,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.676Z","timestamp":1788463627676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://coinbase-referral.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 30 Aug 2026 10:07:35 GMT\r\nexpires: Mon, 30 Aug 2027 10:07:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 379172\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":23853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-04T00:17:14.956704Z","times_seen":190475,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":3,"connect":28,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.879Z","timestamp":1788463627879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Jul 2026 20:01:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a4ffdfc-58e0\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22752,"size_decoded":5336,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-09-04T00:44:57.738439Z","times_seen":48465,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.488Z","timestamp":1788463627488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 09 Nov 2023 01:52:41 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654c3b69-15601\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":29985,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-04T00:44:57.745778Z","times_seen":1045344,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.490Z","timestamp":1788463627490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 10 Aug 2023 04:01:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d46118-3509\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5064,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-04T00:44:56.352913Z","times_seen":956464,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.495Z","timestamp":1788463627495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 May 2022 09:01:21 GMT\r\nvary: Accept-Encoding\r\netag: W/\"628f41e1-5db\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1499,"size_decoded":1055,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-09-04T00:39:41.960774Z","times_seen":90317,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/favicon.ico","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.747Z","timestamp":1788463627747,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 0\r\nlocation: https://coinbase-referral.com/wp-includes/images/w-logo-gray-white-bg.png\r\nx-cache-enabled: True\r\nlink: \u003chttps://coinbase-referral.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-redirect-by: WordPress\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0302 NC:000000 UP:\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-04T00:47:53.856452Z","times_seen":18265356,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.278Z","timestamp":1788463627278,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/fl-icons.css?ver=3.12 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 May 2021 20:56:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6091b508-148\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":328,"size_decoded":514,"mime_type":"text/css","magic":"ASCII text, with very long lines (327)","md5":"8a1c4f5626a521ebb41f5d989f6e2c7f","sha1":"91fa777e0689ff76d0fd41625f04de231b3e0569","sha256":"30fd9ec16112567ac68f1db9d60e71dd610be376f97dd1856ad61ba4265e8fd2","sha512":"596f5711728e3bdce95a57f1b5cff51b9250f55c4bc29840fba40cc68d2324a2088debe43287350501dfe8179ee5f08d9941a814355ffbc4327b2687193ac333","ssdeep":"","tlshash":"50e012224f0e04174352151674ca7f132b0b772ddc10dcd795ca8c9d6ef6d4101a0fb5","first_seen":"2023-04-09T08:14:55Z","last_seen":"2026-09-03T19:27:41.461478Z","times_seen":1515,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.13.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.493Z","timestamp":1788463627493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.13.1 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 May 2021 20:56:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6091b508-3e04\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15876,"size_decoded":5192,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12801)","md5":"78f792b41dfe4097675e09e805529455","sha1":"57cc1e04e0235d54bc197945b9d0f167d9454244","sha256":"ebf0e8c538ae3047cf5056253a32daa65d23d8fb531ea05b0f0f28d58f828143","sha512":"a5526098676e24d20b1d237b5248413f75c3268ce12b406ce4990bc670d4fe98010f1297bd92b870f5ce4efe95460376620d57a871e39c97498b6cf211b60cb0","ssdeep":"384:0HFFhp3CyCEB7T+gyV/W1KB/2ZszFmau+u:ktFCEA/EK9Uam","tlshash":"5462970477823372962b209ddaab414e69bb6d1778056850b31ec6c49fb8f0c91eff69","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-09-03T19:27:41.462305Z","times_seen":2168,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/uploads/2021/05/CoinBase.png","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.778Z","timestamp":1788463627778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/CoinBase.png HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 218646\r\nlast-modified: Tue, 04 May 2021 21:26:38 GMT\r\netag: \"6091bc0e-35616\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":218646,"size_decoded":219020,"mime_type":"image/png","magic":"PNG image data, 2400 x 1200, 8-bit/color RGBA, non-interlaced","md5":"a672126c4c519c1e9cd5dae1d2fd730a","sha1":"c8ad62263a9470b323f746430e12142767a64d65","sha256":"247636478356ab94f2032507111fbd23a198967e2e2c3918a46fc9cb2a7bef8a","sha512":"977e32abc9f3c0a13c9fccd87bd3f560a6c489bbaf4fb06576e896da9b66728668e1b6b003452311a08a2e8e68a8fade4b67a7e37859418757329afcde1e9b23","ssdeep":"6144:GOZRa99o6AxSslOpBI4PdAu+YjjsuEMGHrdx:TjUqji1VAunxnEX","tlshash":"882412d9cc541d82c47974f5b5a9579a34b824cd06be2b0dd63871bdaecb30bb06ac32","first_seen":"2025-12-23T07:30:45.287502Z","last_seen":"2026-09-03T19:27:41.463075Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-includes/images/w-logo-gray-white-bg.png","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:08.140Z","timestamp":1788463628140,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-includes/images/w-logo-gray-white-bg.png HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://coinbase-referral.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 3241\r\nlast-modified: Fri, 21 Aug 2026 05:27:58 GMT\r\netag: \"6a87e1de-ca9\"\r\nexpires: Fri, 03 Sep 2027 19:27:08 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3241,"size_decoded":3611,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"dcab89b8e04bf53fcd7f6a44a8cb4fae","sha1":"c3532d39f298c863a7489a2b4e95bda0676279c1","sha256":"c965a500f698483526faf92ac286047cecd825608cd1d83276de392b30a13a83","sha512":"ff82f2380c8ae37c2103ec466fb929353d3c8437c38ab95253ef97261fc9697c6af673a635e772d68247584d212db929f6c9cc0d5166f6907303ad6574810ee7","ssdeep":"","tlshash":"aa616dec7532920c4035393a729b9d01f7671582f772bf454f5eae634b059c4214d2da","first_seen":"2026-07-02T05:49:04.382065Z","last_seen":"2026-09-04T01:35:11.905411Z","times_seen":717,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/wp-content/themes/flatsome/style.css?ver=3.13.1","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.281Z","timestamp":1788463627281,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET /wp-content/themes/flatsome/style.css?ver=3.13.1 HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 May 2021 20:56:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6091b508-237\"\r\nexpires: Fri, 03 Sep 2027 19:27:07 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":567,"size_decoded":633,"mime_type":"text/css","magic":"ASCII text","md5":"82900b2d91c8239c0a7ee48708644d3b","sha1":"729ab1757b8a770e16afe71cf66fc0b0704d1147","sha256":"2b9436acb85649dc7181f43bad36514757f61cc823c5e8db4f08007a253a0740","sha512":"b4f555bb7c90e8b47ce334d9466184573317dd0925a55f853b6aae200c62e9f9da08beea98626bd02009420c23bd9b0f9fcbeb31aff603912c461b29b5531405","ssdeep":"","tlshash":"09f0240c59250cbd64f986577471e1c9aba8732421c385b8f41e3818436e646a4b073d","first_seen":"2023-04-16T04:59:48Z","last_seen":"2026-09-03T19:27:41.466517Z","times_seen":66,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:regular,700,400,700|Dancing+Script:regular,400\u0026display=swap\u0026ver=3.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://coinbase-referral.com/","date":"2026-09-03T19:27:07.484Z","timestamp":1788463627484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Lato:regular,700,400,700|Dancing+Script:regular,400\u0026display=swap\u0026ver=3.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://coinbase-referral.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 19:27:07 GMT\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2994,"size_decoded":1248,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ca6c0c5c5201f461f43bdc0534fdaa9e","sha1":"082bdf85568b2ad9014e83f24871908eca10c4fa","sha256":"42e869882dd1f836bf9ef53f70aeadfbdf178c0845f31e71ab35192628de810c","sha512":"86dd785ada210a6a0d145339322bebf818e014c24d135066abd6fd3db740dfc5dcc06788dcb7f1eefc2adb8cc0e3ae8a1d959cfbfd9dec5fd3ce2bb86d71e391","ssdeep":"","tlshash":"9951cc91086be504db830cc213cebe36ee0e61516455d939affe18c8fcabc656361b4d","first_seen":"2025-09-20T17:04:02.546002Z","last_seen":"2026-09-03T19:27:41.468252Z","times_seen":1331,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":21,"connect":31,"send":0,"wait":34,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbase-referral.com/","fqdn":"coinbase-referral.com","domain":"coinbase-referral.com","tld":"com"},"ip":{"addr":"35.212.24.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T19:27:06.480Z","timestamp":1788463626480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.coinbase-referral.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Jul 2026 18:13:07 GMT","end":"Wed, 21 Oct 2026 18:13:06 GMT"},"fingerprint":{"sha1":"67:F9:E8:B0:2E:31:97:1F:C7:87:C9:66:44:4A:CC:E9:11:1F:C2:59","sha256":"B5:73:C4:F8:FA:BE:F2:40:70:8B:B6:48:9B:B4:4F:BF:89:3A:5A:D6:25:E9:4B:06:6C:72:DC:25:DC:BC:CB:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbase-referral.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Thu, 03 Sep 2026 19:27:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nx-cache-enabled: True\r\nlink: \u003chttps://coinbase-referral.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://coinbase-referral.com/wp-json/wp/v2/pages/9\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://coinbase-referral.com/\u003e; rel=shortlink\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32689,"size_decoded":8859,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9291)","md5":"9b2196f934439aeee8349a9ef76a9852","sha1":"1c6e34338caea65ad54201c37bcdd03717dc5a27","sha256":"f28f7e91be8901bcea407579d8c48e3bd5584b994c9ce64d5584da0e40b4df4b","sha512":"262212b5a9a2ad91e072386e3e70c389ca08f7fae203fdf823978ed33a247a3d3b1cd020df12ce393ae08ae954f770a3ed893107ed6f52b15cdc53a1f3b61465","ssdeep":"384:R5WdNJ6Ih7a4r/ZdSZUaAhHkW/OZ4FHq2REyEJ7Z2TFtQgtxvwJ+ME0vWCJBe:DWDZdypa9mKxwyEJMtQgtxoJ+b0vLBe","tlshash":"4be2d832f16410263b1f87beb1b5b768e568b201db069b79f0f920ac4a84ef6157770d","first_seen":"2026-09-03T19:27:41.468898Z","last_seen":"2026-09-03T19:27:41.468898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":64,"connect":103,"send":0,"wait":104,"receive":0,"ssl":320},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"coinbase-referral.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"coinbase-referral.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}