Edit tour

Windows Analysis Report
http://www.auth.coin-cloud.info/

Overview

General Information

Sample URL:	http://www.auth.coin-cloud.info/
Analysis ID:	1527100
Tags:	openphish
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML title does not match URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6344 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4556 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3200 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.auth.coin-cloud.info/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.auth.coin-cloud.info/

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://www.auth.coin-cloud.info/

LLM: Score: 9 Reasons: The brand 'Coinbase' is a well-known cryptocurrency exchange platform., The legitimate domain for Coinbase is 'www.coinbase.com'., The provided URL 'www.auth.coin-cloud.info' does not match the legitimate domain., The URL contains suspicious elements such as 'coin-cloud', which could be an attempt to mimic 'Coinbase'., The use of a subdomain 'auth' and the domain extension '.info' are unusual for Coinbase., The presence of an email input field suggests an attempt to collect sensitive information. DOM: 0.0.pages.csv

Source: https://www.auth.coin-cloud.info/	HTTP Parser: Number of links: 0
Source: https://login.coinbase.com/signin?client_id=2ed4eb9ce86674d75a6fe8286b5c91f9008eb60dc86aeefcde2b940de68c1d3a&oauth_challenge=f2f029f9-c3c4-4c97-85b0-4b3222d67626	HTTP Parser: Number of links: 1

Source: https://www.auth.coin-cloud.info/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.coinbase.com/	HTTP Parser: Total embedded image size: 23438
Source: https://www.coinbase.com/learning-rewards	HTTP Parser: Total embedded image size: 23438
Source: https://www.coinbase.com/private-client	HTTP Parser: Total embedded image size: 23438
Source: https://www.coinbase.com/derivatives	HTTP Parser: Total embedded image size: 23438

Source: https://www.auth.coin-cloud.info/	HTTP Parser: Title: Coinbase - Sign In does not match URL
Source: https://www.coinbase.com/learning-rewards	HTTP Parser: Title: Learn about crypto and get rewards does not match URL

Source: https://www.coinbase.com/learning-rewards

HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-90YJL6R0KZ&gacid=170922535.1728237589&gtm=45je4a20v877260739z878056500za200zb78056500&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1267247046

Source: https://www.auth.coin-cloud.info/

HTTP Parser: <input type="password" .../> found

Source: https://www.auth.coin-cloud.info/	HTTP Parser: No <meta name="author".. found
Source: https://login.coinbase.com/signin?client_id=2ed4eb9ce86674d75a6fe8286b5c91f9008eb60dc86aeefcde2b940de68c1d3a&oauth_challenge=f2f029f9-c3c4-4c97-85b0-4b3222d67626	HTTP Parser: No <meta name="author".. found
Source: https://login.coinbase.com/signin?client_id=2ed4eb9ce86674d75a6fe8286b5c91f9008eb60dc86aeefcde2b940de68c1d3a&oauth_challenge=f2f029f9-c3c4-4c97-85b0-4b3222d67626	HTTP Parser: No <meta name="author".. found
Source: https://www.coinbase.com/learning-rewards	HTTP Parser: No <meta name="author".. found
Source: https://www.coinbase.com/learning-rewards	HTTP Parser: No <meta name="author".. found

Source: https://www.auth.coin-cloud.info/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.coinbase.com/signin?client_id=2ed4eb9ce86674d75a6fe8286b5c91f9008eb60dc86aeefcde2b940de68c1d3a&oauth_challenge=f2f029f9-c3c4-4c97-85b0-4b3222d67626	HTTP Parser: No <meta name="copyright".. found
Source: https://login.coinbase.com/signin?client_id=2ed4eb9ce86674d75a6fe8286b5c91f9008eb60dc86aeefcde2b940de68c1d3a&oauth_challenge=f2f029f9-c3c4-4c97-85b0-4b3222d67626	HTTP Parser: No <meta name="copyright".. found
Source: https://www.coinbase.com/learning-rewards	HTTP Parser: No <meta name="copyright".. found
Source: https://www.coinbase.com/learning-rewards	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50122 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50102 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50120 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:50122 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /bootstrap/3.0.0-rc1/css/bootstrap.min.css HTTP/1.1Host: netdna.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.auth.coin-cloud.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/walletbgr.png HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.auth.coin-cloud.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /js/home/home.js HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.auth.coin-cloud.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /js/home/img-upload.js HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.auth.coin-cloud.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/walletbgr.png HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/unknown.svg HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /fonts/8a6a40a08f92d9a9b3e5.woff2 HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.auth.coin-cloud.infosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.auth.coin-cloud.info/css/home/styles.9037e5c1ff5301a341fc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /fonts/28a06774e35b7ac61651.woff2 HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.auth.coin-cloud.infosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.auth.coin-cloud.info/css/home/styles.9037e5c1ff5301a341fc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /fonts/71371380d08a07cda58a.woff2 HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.auth.coin-cloud.infosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.auth.coin-cloud.info/css/home/styles.9037e5c1ff5301a341fc.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/dl-play-store.svg HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.auth.coin-cloud.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/selfCusWall-3.svg HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /js/home/home.js HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /js/home/img-upload.js HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/cb-logo.png HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/safe.svg HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/dl-app-store.svg HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /8.0.1/pusher.min.js HTTP/1.1Host: js.pusher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/870e5855c3e936869acf.png HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.auth.coin-cloud.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /connect HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/dl-play-store.svg HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /config HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /img/870e5855c3e936869acf.png HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /pusher/auth HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
Source: global traffic	HTTP traffic detected: GET /signin HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/acc.app.bfae51130bfc2b44f179.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg
Source: global traffic	HTTP traffic detected: GET /acc.app.ba9594020178247534fd.css HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg
Source: global traffic	HTTP traffic detected: GET /js/acc.places.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg
Source: global traffic	HTTP traffic detected: GET /js/acc.persisted_queries.fa83f8eed107240b67dc.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg
Source: global traffic	HTTP traffic detected: GET /js/acc.intl-localedata-en.c77ac56cf5b31bb046eb.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.places.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.app.bfae51130bfc2b44f179.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.20208.f3503390a2546ec50c0c.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.70354.a9467fcc5d88da61e3cd.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.1907.4795b0b2b302b82cf69b.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.persisted_queries.fa83f8eed107240b67dc.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.5513.a0f4da6299cb97688d25.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.35853.0493d2a439536eb7ff89.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /api/v3/coinbase.experiment.ExperimentService/ListSplitTestGroups?q=eyJzdWJqZWN0X2lkIjoiMDFlOThkMGYtZmM0Yy00MzY4LTlhYTAtM2E3YWJhODk0MzE2IiwiY2xpZW50Ijp7InR5cGUiOjN9LCJzdWJqZWN0X3R5cGUiOjJ9 HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.83253.6ff20059d1501039304f.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.intl-localedata-en.c77ac56cf5b31bb046eb.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.50361.f1c6e7e1fdea36be8330.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.22104.59d38ffc16d4fa5c0b4a.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.12171.aa9d409a024c77c3d0fe.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.13356.54e31e2705cbcc4cc68d.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /login?redirectPath=/ HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.redirectEventTracker.3af0dec11b3d9cc0a544.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.43402.fb7e8de3525ba081fbcb.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.81956.74e36fca289259e6f448.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /api/v3/coinbase.experiment.ExperimentService/ListSplitTestGroups?q=eyJzdWJqZWN0X2lkIjoiMDFlOThkMGYtZmM0Yy00MzY4LTlhYTAtM2E3YWJhODk0MzE2IiwiY2xpZW50Ijp7InR5cGUiOjN9LCJzdWJqZWN0X3R5cGUiOjJ9 HTTP/1.1Host: accounts.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /js/acc.76566.e99ff50d236a998b8264.js HTTP/1.1Host: accounts.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316
Source: global traffic	HTTP traffic detected: GET /track-exposures HTTP/1.1Host: as.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4
Source: global traffic	HTTP traffic detected: GET /login?redirectPath=/ HTTP/1.1Host: accounts.coinbase.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://accounts.coinbase.com/signinAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=JbDGvsUjdYXD_lQ584MbduSpVh_1wkx0NLsCe_EnTQ8-1728237550-1.0.1.1-8Gs9YN94kDpZNypalnthWhzpWq1GFyntz.Mv5InpdqXUjznW79Cj5ma2jkrHfhKG9KjXjCV9CfhBeROL1ljjkg; coinbase_device_id=01e98d0f-fc4c-4368-9aa0-3a7aba894316; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/main.d1b9dc043f80bbfa78fd.js HTTP/1.1Host: login.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; login-session=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-ZBTT0MQzGmPL6lc0JcBlQZixA==
Source: global traffic	HTTP traffic detected: GET /static/chunk.1ee21790e09119dc06ac.js HTTP/1.1Host: login.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; login-session=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-ZBTT0MQzGmPL6lc0JcBlQZixA==
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6Gypnuur6hOWOH6xuYi7l6/3f87c6d781e15264cb4b103017128d00/LoggedOut_Nav_Wallets.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/1zkZpnhMPXqA9ZoRvHxKYz/b54f31cf0b168143d732d518bd97cb57/Creative.png?fm=webp&q=100&w=1180 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/548xpyb2JxtvIrb9FTWMd4/28af282fa265891fddd6af109d775bca/Retail.png?fm=webp&q=100&w=1180 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/1KLKf3iqU8VFprP9JCPo6b/4569ed9d6c115140960122514f8df532/image__4_.png?fm=webp&q=100&w=1180 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/WdlPQ8QhJ267BxSckN56A/956300e8f8cf97ce57eae9c89babc8db/Advanced.png?fm=webp&q=100&w=1180 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/5LzccC4O8a6lcKC3P44Q3X/a4ab2c1f19e7e3d8c3179cf95ae4c364/Wallet.png?fm=webp&q=100&w=1180 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/2R68T7CC9SMNPZ0qlBT27C/2b101f95e5b201bf99216dafe14c5d1a/new-earn-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/VZpxxgYHNWXtyzq0tE2vt/a1f11b07a5bbfc256bcdd7a4506da4b4/new-exchange-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/PFIb0wMktAxwbH75ottHF/faa45fc58125a8a365c4403a4f38fd8e/cb1_new_logo_1.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/4aimnFIF9r1DhebxFhYaEm/fe83638dae90ae49bf41e4a00f2372c6/new-rewards-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6rjjBsuUFcTNro1OviDdDC/fafc347876b5fede9d19d3dabc26fa0a/new-institutional-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/4y1bOM2hQ8B8yaBYKrsPnx/d1a1f1ea6c087dba35666b4fa7e980bb/LoggedOut_Nav_Wallets__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /41f6a93a3a222078c939115fc304a67c384886b7a9e6c15dcbfa6519dc45f6bb4a586e9c48535d099efa596dbf8a9dd72b05815bcd32ac650c50abb5391a5bd0/asset_icons/1f8489bb280fb0a0fd643c1161312ba49655040e9aaaced5f9ad3eeaf868eadc.png HTTP/1.1Host: dynamic-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad
Source: global traffic	HTTP traffic detected: GET /dbb4b4983bde81309ddab83eb598358eb44375b930b94687ebe38bc22e52c3b2125258ffb8477a5ef22e33d6bd72e32a506c391caa13af64c00e46613c3e5806/asset_icons/4113b082d21cc5fab17fc8f2d19fb996165bcce635e6900f7fc2d57c4ef33ae9.png HTTP/1.1Host: dynamic-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad
Source: global traffic	HTTP traffic detected: GET /e785e0181f1a23a30d9476038d9be91e9f6c63959b538eabbc51a1abc8898940383291eede695c3b8dfaa1829a9b57f5a2d0a16b0523580346c6b8fab67af14b/asset_icons/b57ac673f06a4b0338a596817eb0a50ce16e2059f327dc117744449a47915cb2.png HTTP/1.1Host: dynamic-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad
Source: global traffic	HTTP traffic detected: GET /e81509d2307f706f3a6f8999968874b50b628634abf5154fc91a7e5f7685d496a33acb4cde02265ed6f54b0a08fa54912208516e956bc5f0ffd1c9c2634099ae/asset_icons/3af4b33bde3012fd29dd1366b0ad737660f24acc91750ee30a034a0679256d0b.png HTTP/1.1Host: dynamic-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /q5ulk4bp65r7/1rFQCqoq8hipvVJSKdU3fQ/21ab733af7a8ab404e29b873ffb28348/coinbase-icon2.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/3BD4LmMLr49DnQJBr8qFdw/ab5cbe4289ff12e7d610acc8baa3dd32/coinbase_wallet_logo_bg.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/FkpxYKh8E3bCvOkM2buz3/7914de9d8ce7657ad72af6fb1af8fe92/derivativesNavigation__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/1gvNK5eS7b2XF2URxTotha/5406957e6d27cc51ccdd28c2e8954645/PaySDK.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6mQMhzzE3f2n2qZaJShPuU/2ee4557958714b6b601594089d9cf695/LoggedOut_Nav_ExploreCrypto.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q5ulk4bp65r7/3TBS4oVkD1ghowTqVQJlqj/2dfd4ea3b623a7c0d8deb2ff445dee9e/Consumer_Wordmark.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3c15df5e2ac7d4abbe9499ed9335041f00c620f28e8de2f93474a9f432058742cdf4674bd43f309e69778a26969372310135be97eb183d91c492154176d455b8/asset_icons/9d67b728b6c8f457717154b3a35f9ddc702eae7e76c4684ee39302c4d7fd0bb8.png HTTP/1.1Host: dynamic-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /assets/sw-cache/e_Ca_ke6PT.js HTTP/1.1Host: www.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; coinbase_currency=USD; coinbase_locale=en; cb_logged_out_locale=en; advertising_sharing_allowed={%22value%22:true}; rlm_home_page_view_count=%221%22
Source: global traffic	HTTP traffic detected: GET /assethub/coinbase-advanced-trade-icon.png HTTP/1.1Host: static-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /coinbase/globalnav/base/Base_Symbol.svg HTTP/1.1Host: static-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6TEOvIYU6qtgLm87Y4mK5s/4171df02eabc835c518884c2b3476380/hero_3x_B.png?fm=webp&q=100&w=1180 HTTP/1.1Host: images.ctfassets.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/VZpxxgYHNWXtyzq0tE2vt/a1f11b07a5bbfc256bcdd7a4506da4b4/new-exchange-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/2R68T7CC9SMNPZ0qlBT27C/2b101f95e5b201bf99216dafe14c5d1a/new-earn-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/4aimnFIF9r1DhebxFhYaEm/fe83638dae90ae49bf41e4a00f2372c6/new-rewards-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/coinbase.killswitch.KillSwitchService/KillSwitches?q=eyJzY29wZSI6ImlkZW50aXR5LWZyb250ZW5kIiwicGxhdGZvcm0iOiJ3ZWIiLCJ2ZXJzaW9uIjoiIn0= HTTP/1.1Host: login.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; login-session=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-ZBTT0MQzGmPL6lc0JcBlQZixA==; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /static/chunk.367a7e2292ceac88bf67.js HTTP/1.1Host: login.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; login-session=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-ZBTT0MQzGmPL6lc0JcBlQZixA==; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /static/chunk.33962fc0b71883139d39.js HTTP/1.1Host: login.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; login-session=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-ZBTT0MQzGmPL6lc0JcBlQZixA==; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /amp HTTP/1.1Host: as.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /static/chunk.8f2cd1451856e3c7d9f1.js HTTP/1.1Host: login.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; login-session=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-ZBTT0MQzGmPL6lc0JcBlQZixA==; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /metrics HTTP/1.1Host: as.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /track-exposures HTTP/1.1Host: as.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: www.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6rjjBsuUFcTNro1OviDdDC/fafc347876b5fede9d19d3dabc26fa0a/new-institutional-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/3BD4LmMLr49DnQJBr8qFdw/ab5cbe4289ff12e7d610acc8baa3dd32/coinbase_wallet_logo_bg.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q5ulk4bp65r7/1rFQCqoq8hipvVJSKdU3fQ/21ab733af7a8ab404e29b873ffb28348/coinbase-icon2.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6mQMhzzE3f2n2qZaJShPuU/2ee4557958714b6b601594089d9cf695/LoggedOut_Nav_ExploreCrypto.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/FkpxYKh8E3bCvOkM2buz3/7914de9d8ce7657ad72af6fb1af8fe92/derivativesNavigation__1_.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/1gvNK5eS7b2XF2URxTotha/5406957e6d27cc51ccdd28c2e8954645/PaySDK.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q5ulk4bp65r7/3TBS4oVkD1ghowTqVQJlqj/2dfd4ea3b623a7c0d8deb2ff445dee9e/Consumer_Wordmark.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6TEOvIYU6qtgLm87Y4mK5s/4171df02eabc835c518884c2b3476380/hero_3x_B.png?fm=webp&q=100&w=1180 HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/n4cXbYqUufck/config HTTP/1.1Host: api.sprig.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-ul-visitor-id: d9321170-e8e9-4b37-b6c4-45a6a59d5cefsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonx-ul-installation-method: web-npm-bundledx-ul-package-version: 1.1.3x-ul-sdk-version: 2.28.0x-ul-environment-id: n4cXbYqUufckuserleap-platform: websec-ch-ua-platform: "Windows"Accept: /Origin: https://login.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sdk/1/environments/n4cXbYqUufck/config HTTP/1.1Host: api.sprig.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /q5ulk4bp65r7/3d0nJDFOq4TdewlmTxQ6Eb/e94dcbc5ac72d84e812bccc8561c6b62/Consumer_Wordmark_White.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o10es7wu5gm1/6RbG1tt2yBFSZVlGJNWk5g/fb082d5b001cdf94a843530a0f82e6bb/icon-watch.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o10es7wu5gm1/6K3VAsnJi9092m833LQPI7/dd2437239a9d069a0393ac7b6fea8256/icon-quiz.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o10es7wu5gm1/0FSIw3qPqoNdhHRrdRikx/699544de56b60d64bcef90f18a1af82e/icon-earn.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o10es7wu5gm1/76exr4pxSgEbDkne4FAL7u/cc3718c8baca655cc745b7a91d267ead/icon-start.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /earn/home/earn_header_1.svg HTTP/1.1Host: static-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/1rJ2FGjzJfwNotcIgtxJmk/a97201f566eb35feba97b7fe29985cd8/LoggedOut_Nav_exploreENS.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /learning-rewards/shping-story-2022/4c4ea7a0-2905-41a1-8ee5-75e76c14b232.png HTTP/1.1Host: static-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /learning-rewards/near-protocol-story-2022/30cf8696-c009-4783-8f83-4a8898eabeb9.png HTTP/1.1Host: static-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /learning-rewards/near-protocol-story-2022/3354091c-d5ce-476c-ab50-b2613d96e2ee.png HTTP/1.1Host: static-assets.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/learning_rewards/shping-story-2022/ShpingHero2.jpg HTTP/1.1Host: go.wallet.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/6p26wqrFCoNdZDIGyGzFKH/2387448b61bc821fc229800824bc93df/Earn-asset-logged-out.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/2OUJoRinjmzcv3L4oEvD8C/68d9a0ea281708d0b859c6fd7d909a1a/new-card-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/1CmcG8xD5BPT3DYJnl0DXG/6135743862720cdd53a5a9077c64e0af/new-private-client-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/59sLic8xsGkkCUuHfqn4wc/7e46b201f78bcd4664333d19733fb5f8/new-prime-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c5bd0wqjc7v0/1FEdoR9yiNRC5hCCWsa5L2/61c31cd86e8a9e36f4282454b6e19cb9/new-commerce-icon.svg HTTP/1.1Host: images.ctfassets.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Origin: https://www.coinbase.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/learning_rewards/shping-story-2022/ShpingHero2.jpg HTTP/1.1Host: go.wallet.coinbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb_dm=3d46d076-2a02-4723-958f-e840b175d8d4; __cf_bm=QO4LYvHPJt4HYATCjnV9hb5aW6A8gvx19RtzRckyQjA-1728237556-1.0.1.1-pAtj.AVhnG6ayrBZt3Wx.NcPsCZOzRXkzW71jwX3GKmkIZZedz6nYn_QH49Fyo6E4jL1AiqlPUQ0uptYk0CHaQ; coinbase_device_id=f8bb373a-717c-48a1-a882-3dd295cb5dad; advertising_sharing_allowed={%22value%22:true}; __cf_bm=PB_b8k7H3j5OCBB0PGt765ye1_q.b1iQeDkVIW4m8V4-1728237579-1.0.1.1-dzxa1KnA3At5HS_jUrLjawfbdCFEEpFZ.nAg.sxd9IxFNdh5CNMJfe_coalFqaFYebO1fI67TRMbofT70GQocQ
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: www.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/learning-rewardsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"82a50637c94b8e2d5c25b2cd1de02982"If-Modified-Since: Thu, 03 Oct 2024 22:43:06 GMT
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-90YJL6R0KZ&gacid=903137542.1728237588&gtm=45je4a20v877260739z878056500za200zb78056500&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=879440046 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-90YJL6R0KZ&gacid=170922535.1728237589&gtm=45je4a20v877260739z878056500za200zb78056500&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1267247046 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/379670032410722?v=2.9.170&r=stable&domain=www.coinbase.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237595631&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237595628.46577797464473049&pm=1&hrl=081845&ler=empty&cdl=API_unavailable&it=1728237591232&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237595732&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237595628.46577797464473049&pm=1&hrl=a76b55&ler=empty&cdl=API_unavailable&it=1728237591104&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spaces/k3n74unfin40/environments/master/entries?content_type=page&include=6&locale=en&fields.slug=%2Fderivatives HTTP/1.1Host: contentful.coinbase.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0X-Contentful-User-Agent: sdk contentful.js/0.0.0-determined-by-semantic-release; platform browser; os Windows;Authorization: Bearer 48A4PqiJR5Kp5iDK7KJ8R1aX-EUpU4WSXGCNkwukiBoUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.coinbase.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237595631&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237595628.46577797464473049&pm=1&hrl=081845&ler=empty&cdl=API_unavailable&it=1728237591232&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237595732&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237595628.46577797464473049&pm=1&hrl=a76b55&ler=empty&cdl=API_unavailable&it=1728237591104&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/379670032410722?v=2.9.170&r=stable&domain=www.coinbase.com&hme=d82868061a8c707cd31395a3055e7449daa03bd520872727258c39e6af34523e&ex_m=70%2C120%2C106%2C110%2C61%2C4%2C99%2C69%2C16%2C96%2C88%2C51%2C54%2C171%2C174%2C186%2C182%2C183%2C185%2C29%2C100%2C53%2C77%2C184%2C166%2C169%2C179%2C180%2C187%2C130%2C41%2C34%2C142%2C15%2C50%2C193%2C192%2C132%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C92%2C17%2C14%2C95%2C91%2C90%2C107%2C52%2C109%2C39%2C108%2C30%2C93%2C26%2C167%2C170%2C139%2C28%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C101%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C103%2C102%2C104%2C97%2C10%2C20%2C3%2C38%2C74%2C19%2C85%2C56%2C83%2C33%2C73%2C0%2C94%2C32%2C82%2C87%2C47%2C46%2C86%2C37%2C5%2C89%2C81%2C44%2C35%2C84%2C2%2C36%2C63%2C42%2C105%2C45%2C79%2C68%2C111%2C60%2C59%2C31%2C98%2C58%2C55%2C49%2C78%2C72%2C24%2C112 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-90YJL6R0KZ&gacid=472503644.1728237604&gtm=45je4a20v877260739z878056500za200zb78056500&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101671035~101747727&z=1954036279 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237605022&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237605015.267432432211721524&pm=1&hrl=df8de5&ler=empty&cdl=API_unavailable&it=1728237604360&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.coinbase.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237605022&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237605015.267432432211721524&pm=1&hrl=df8de5&ler=empty&cdl=API_unavailable&it=1728237604360&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.auth.coin-cloud.infoConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_616.2.dr	String found in binary or memory: "tags":[{"function":"__cvt_8056500_73","priority":99,"metadata":["map"],"once_per_event":true,"vtp_ccId":"477a00a9-cc59-4e4d-bc3f-2d6dedb57119","vtp_customerId":"AzyjRpTLwdee8281u","tag_id":74},{"function":"__ua","metadata":["map"],"once_per_event":true,"vtp_overrideGaSettings":true,"vtp_trackType":"TRACK_PAGEVIEW","vtp_trackingId":"UA-32804181-23","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_enableGA4Schema":true,"tag_id":12},{"function":"__sp","metadata":["map"],"once_per_event":true,"vtp_enableDynamicRemarketing":false,"vtp_conversionId":"834608245","vtp_customParamsFormat":"NONE","vtp_rdp":false,"vtp_enableOgtRmktParams":true,"vtp_enableUserId":true,"vtp_url":["macro",5],"vtp_enableRdpCheckbox":true,"vtp_enableConversionLinkingSettings":true,"tag_id":14},{"function":"__awct","metadata":["map"],"once_per_event":true,"vtp_enableConversionLinker":true,"vtp_enableProductReporting":false,"vtp_conversionCookiePrefix":"_gcl","vtp_conversionId":"834608245","vtp_conversionLabel":"sdQsCOiJragBEPW4_I0D","vtp_rdp":false,"vtp_url":["macro",5],"vtp_enableProductReportingCheckbox":true,"vtp_enableNewCustomerReportingCheckbox":true,"vtp_enableEnhancedConversionsCheckbox":false,"vtp_enableRdpCheckbox":true,"vtp_enableTransportUrl":false,"vtp_enableCustomParams":false,"tag_id":15},{"function":"__gclidw","metadata":["map"],"once_per_event":true,"vtp_enableCrossDomain":false,"vtp_enableCookieOverrides":false,"tag_id":16},{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-90YJL6R0KZ","vtp_configSettingsTable":["list",["map","parameter","send_page_view","parameterValue","true"]],"tag_id":56},{"function":"__paused","vtp_originalTagType":"html","tag_id":68},{"function":"__cl","tag_id":75},{"function":"__cl","tag_id":76},{"function":"__cl","tag_id":77},{"function":"__cl","tag_id":78},{"function":"__hl","tag_id":79},{"function":"__hl","tag_id":80},{"function":"__fsl","vtp_waitForTagsTimeout":"2000","vtp_uniqueTriggerId":"8056500_66","tag_id":81},{"function":"__html","metadata":["map"],"once_per_event":true,"vtp_html":"\u003Cscript type=\"text\/gtmscript\"\u003E!function(c,e,f,g,a,b,d){b=window\u0026\u0026\"\/signup\"===window.location.pathname;b\|\|c.fbq\|\|(a=c.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},c._fbq\|\|(c._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],b=e.createElement(f),b.async=!0,b.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(b,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");\"undefined\"!==typeof fbq\u0026\u0026(fbq(\"init\",\"379670032410722\"),fbq(\"track\",\"PageView\"));\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=379670032410722\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E\n","vtp_supportDocumentWrite":
Source: chromecache_616.2.dr	String found in binary or memory: "tags":[{"function":"__cvt_8056500_73","priority":99,"metadata":["map"],"once_per_event":true,"vtp_ccId":"477a00a9-cc59-4e4d-bc3f-2d6dedb57119","vtp_customerId":"AzyjRpTLwdee8281u","tag_id":74},{"function":"__ua","metadata":["map"],"once_per_event":true,"vtp_overrideGaSettings":true,"vtp_trackType":"TRACK_PAGEVIEW","vtp_trackingId":"UA-32804181-23","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableFirebaseCampaignData":true,"vtp_enableGA4Schema":true,"tag_id":12},{"function":"__sp","metadata":["map"],"once_per_event":true,"vtp_enableDynamicRemarketing":false,"vtp_conversionId":"834608245","vtp_customParamsFormat":"NONE","vtp_rdp":false,"vtp_enableOgtRmktParams":true,"vtp_enableUserId":true,"vtp_url":["macro",5],"vtp_enableRdpCheckbox":true,"vtp_enableConversionLinkingSettings":true,"tag_id":14},{"function":"__awct","metadata":["map"],"once_per_event":true,"vtp_enableConversionLinker":true,"vtp_enableProductReporting":false,"vtp_conversionCookiePrefix":"_gcl","vtp_conversionId":"834608245","vtp_conversionLabel":"sdQsCOiJragBEPW4_I0D","vtp_rdp":false,"vtp_url":["macro",5],"vtp_enableProductReportingCheckbox":true,"vtp_enableNewCustomerReportingCheckbox":true,"vtp_enableEnhancedConversionsCheckbox":false,"vtp_enableRdpCheckbox":true,"vtp_enableTransportUrl":false,"vtp_enableCustomParams":false,"tag_id":15},{"function":"__gclidw","metadata":["map"],"once_per_event":true,"vtp_enableCrossDomain":false,"vtp_enableCookieOverrides":false,"tag_id":16},{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-90YJL6R0KZ","vtp_configSettingsTable":["list",["map","parameter","send_page_view","parameterValue","true"]],"tag_id":56},{"function":"__paused","vtp_originalTagType":"html","tag_id":68},{"function":"__cl","tag_id":75},{"function":"__cl","tag_id":76},{"function":"__cl","tag_id":77},{"function":"__cl","tag_id":78},{"function":"__hl","tag_id":79},{"function":"__hl","tag_id":80},{"function":"__fsl","vtp_waitForTagsTimeout":"2000","vtp_uniqueTriggerId":"8056500_66","tag_id":81},{"function":"__html","metadata":["map"],"once_per_event":true,"vtp_html":"\u003Cscript type=\"text\/gtmscript\"\u003E!function(c,e,f,g,a,b,d){b=window\u0026\u0026\"\/signup\"===window.location.pathname;b\|\|c.fbq\|\|(a=c.fbq=function(){a.callMethod?a.callMethod.apply(a,arguments):a.queue.push(arguments)},c._fbq\|\|(c._fbq=a),a.push=a,a.loaded=!0,a.version=\"2.0\",a.queue=[],b=e.createElement(f),b.async=!0,b.src=g,d=e.getElementsByTagName(f)[0],d.parentNode.insertBefore(b,d))}(window,document,\"script\",\"https:\/\/connect.facebook.net\/en_US\/fbevents.js\");\"undefined\"!==typeof fbq\u0026\u0026(fbq(\"init\",\"379670032410722\"),fbq(\"track\",\"PageView\"));\u003C\/script\u003E\n\u003Cnoscript\u003E\u003Cimg height=\"1\" width=\"1\" style=\"display:none\" src=\"https:\/\/www.facebook.com\/tr?id=379670032410722\u0026amp;ev=PageView\u0026amp;noscript=1\"\u003E\u003C\/noscript\u003E\n","vtp_supportDocumentWrite":
Source: chromecache_711.2.dr, chromecache_797.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_777.2.dr	String found in binary or memory: `,vzt="_coinbase_signin_redirect",_zt=e=>{let t=e;t\|\|(t=typeof window<"u"?window.location.pathname:""),localStorage.setItem(vzt,t)},yzt=_zt,bzt=e=>pC().pathname.includes(e),Czt=bzt,Szt="Coinbase Bytes",wzt="bytes_subscribe",Ezt={desktop:{phone:!1,phone_small:!1,phone_large:!1,tablet:!0,desktop:!0,desktop_small:!0,desktop_large:!0,deprecated_tablet:!0,deprecated_desktop_small:!0,deprecated_desktop_large:!0},mobile:{phone:!0,phone_small:!0,phone_large:!0,tablet:!1,desktop:!1,desktop_small:!1,desktop_large:!1,deprecated_tablet:!1,deprecated_desktop_small:!1,deprecated_desktop_large:!1}},Pzt=P.createContext(Ezt.desktop);function Mye(e){return P.useContext(Pzt)[e]}const Ozt="/",Tzt="/learn",xzt="/learning-rewards",Azt="/bytes",Rzt="/about",$zt="/careers",Mzt={consumerUrl:"https://www.coinbase.com",helpCenterUrl:"https://help.coinbase.com",statusUrl:"https://status.coinbase.com",contactUsUrl:"/contact-us/",createAccountUrl:"/coinbase/getting-started/getting-started-with-coinbase/create-a-coinbase-account/",idVerificationUrl:"/coinbase/managing-my-account#identity-verification/",accountInformationUrl:"/coinbase/managing-my-account/",paymentMethodsUrl:"/coinbase/getting-started#add-a-payment-method/",accountAccessUrl:"/coinbase/managing-my-account/",supportedCountriesUrl:"/places/",supportedCryptoUrl:"/supported-crypto.html"},Izt={idVerificationUrl:"https://help.coinbase.com/de/coinbase/managing-my-account/verify-my-identity/id-verification-for-german-customers",contactUsUrl:"https://help.coinbase.com/de/contact-us",supportedCryptoUrl:"https://help.coinbase.com/en/supported-crypto.html"},kzt="https://status.coinbase.com",Iye="https://www.coinbase.com/blog",Lzt="https://www.coinbase.com/security",Dzt="https://twitter.com/coinbase",Nzt="https://twitter.com/coinbaseuk",Fzt="https://www.facebook.com/Coinbase",Bzt="https://www.coinbase.com/commerce",Hzt="/prime",Vzt="https://assethub.coinbase.com",jzt="https://wallet.coinbase.com",Uzt="/card",qzt="/derivatives",Wzt="/learn/crypto-basics/understanding-crypto-taxes",zzt="https://investor.coinbase.com/",Gzt="/institutional",Kzt="https://www.coinbase.com/developer-platform",Qzt="https://www.coinbase.com/developer-platform/products/staking",Zzt="https://www.coinbase.com/developer-platform/products/onramp",Yzt="https://www.coinbase.com/developer-platform/products/wallets",Xzt="https://www.coinbase.com/developer-platform/products/exchange-api",Jzt="https://www.coinbase.com/developer-platform/products/base-node",eGt="https://base.org",tGt="https://docs.cdp.coinbase.com/coinbase-app/docs/welcome",rGt="https://docs.cloud.coinbase.com/wallet-sdk/docs",nGt="https://docs.cloud.coinbase.com/prime/docs",aGt="https://onchainkit.xyz/",iGt="/vendors/vendors-at-coinbase",oGt="/explore",sGt="/learn/crypto-basics",lGt="/bitcoin-halving",cGt="/ethereum-merge",uGt="/learn/tips-and-tutorials",dGt="/learn/crypto-glossary",fGt="/learn/market-updates",pGt="/learn/crypto-basics/what-is-a-blockchain",hGt="/learn/crypto-basics/what-is-bit
Source: chromecache_777.2.dr	String found in binary or memory: `,vzt="_coinbase_signin_redirect",_zt=e=>{let t=e;t\|\|(t=typeof window<"u"?window.location.pathname:""),localStorage.setItem(vzt,t)},yzt=_zt,bzt=e=>pC().pathname.includes(e),Czt=bzt,Szt="Coinbase Bytes",wzt="bytes_subscribe",Ezt={desktop:{phone:!1,phone_small:!1,phone_large:!1,tablet:!0,desktop:!0,desktop_small:!0,desktop_large:!0,deprecated_tablet:!0,deprecated_desktop_small:!0,deprecated_desktop_large:!0},mobile:{phone:!0,phone_small:!0,phone_large:!0,tablet:!1,desktop:!1,desktop_small:!1,desktop_large:!1,deprecated_tablet:!1,deprecated_desktop_small:!1,deprecated_desktop_large:!1}},Pzt=P.createContext(Ezt.desktop);function Mye(e){return P.useContext(Pzt)[e]}const Ozt="/",Tzt="/learn",xzt="/learning-rewards",Azt="/bytes",Rzt="/about",$zt="/careers",Mzt={consumerUrl:"https://www.coinbase.com",helpCenterUrl:"https://help.coinbase.com",statusUrl:"https://status.coinbase.com",contactUsUrl:"/contact-us/",createAccountUrl:"/coinbase/getting-started/getting-started-with-coinbase/create-a-coinbase-account/",idVerificationUrl:"/coinbase/managing-my-account#identity-verification/",accountInformationUrl:"/coinbase/managing-my-account/",paymentMethodsUrl:"/coinbase/getting-started#add-a-payment-method/",accountAccessUrl:"/coinbase/managing-my-account/",supportedCountriesUrl:"/places/",supportedCryptoUrl:"/supported-crypto.html"},Izt={idVerificationUrl:"https://help.coinbase.com/de/coinbase/managing-my-account/verify-my-identity/id-verification-for-german-customers",contactUsUrl:"https://help.coinbase.com/de/contact-us",supportedCryptoUrl:"https://help.coinbase.com/en/supported-crypto.html"},kzt="https://status.coinbase.com",Iye="https://www.coinbase.com/blog",Lzt="https://www.coinbase.com/security",Dzt="https://twitter.com/coinbase",Nzt="https://twitter.com/coinbaseuk",Fzt="https://www.facebook.com/Coinbase",Bzt="https://www.coinbase.com/commerce",Hzt="/prime",Vzt="https://assethub.coinbase.com",jzt="https://wallet.coinbase.com",Uzt="/card",qzt="/derivatives",Wzt="/learn/crypto-basics/understanding-crypto-taxes",zzt="https://investor.coinbase.com/",Gzt="/institutional",Kzt="https://www.coinbase.com/developer-platform",Qzt="https://www.coinbase.com/developer-platform/products/staking",Zzt="https://www.coinbase.com/developer-platform/products/onramp",Yzt="https://www.coinbase.com/developer-platform/products/wallets",Xzt="https://www.coinbase.com/developer-platform/products/exchange-api",Jzt="https://www.coinbase.com/developer-platform/products/base-node",eGt="https://base.org",tGt="https://docs.cdp.coinbase.com/coinbase-app/docs/welcome",rGt="https://docs.cloud.coinbase.com/wallet-sdk/docs",nGt="https://docs.cloud.coinbase.com/prime/docs",aGt="https://onchainkit.xyz/",iGt="/vendors/vendors-at-coinbase",oGt="/explore",sGt="/learn/crypto-basics",lGt="/bitcoin-halving",cGt="/ethereum-merge",uGt="/learn/tips-and-tutorials",dGt="/learn/crypto-glossary",fGt="/learn/market-updates",pGt="/learn/crypto-basics/what-is-a-blockchain",hGt="/learn/crypto-basics/what-is-bit
Source: chromecache_711.2.dr, chromecache_797.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_742.2.dr, chromecache_824.2.dr, chromecache_616.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_809.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_809.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_809.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_616.2.dr	String found in binary or memory: var YB=function(a,b,c,d,e){var f=Pz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Pz("fsl","nv.ids",[]):Pz("fsl","ids",[]);if(!g.length)return!0;var k=Uz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Cy(k,Ey(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.auth.coin-cloud.info
Source: global traffic	DNS traffic detected: DNS query: netdna.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: js.pusher.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ws-us3.pusher.com
Source: global traffic	DNS traffic detected: DNS query: sockjs-us3.pusher.com
Source: global traffic	DNS traffic detected: DNS query: accounts.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: sessions.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: www.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: as.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: login.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: coinbase.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: dynamic-assets.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: asset-metadata-service-production.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: static-assets.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: api.sprig.com
Source: global traffic	DNS traffic detected: DNS query: go.wallet.coinbase.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: contentful.coinbase.com

Source: unknown

HTTP traffic detected: POST /pusher/app/d57aa32f491d98fcdbcc/438/vgl5noc6/xhr_streaming?protocol=7&client=js&version=8.0.1&t=1728237543976&n=1 HTTP/1.1Host: sockjs-us3.pusher.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://www.auth.coin-cloud.infoSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.auth.coin-cloud.info/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_777.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: http://galaxy.com/
Source: chromecache_777.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_777.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_777.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_777.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_827.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/button
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcm.json
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/fedcmcsp?client_id=
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/iframe/select
Source: chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/log
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/revoke
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/select
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/status
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/gsi/style
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_535.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth
Source: chromecache_616.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_574.2.dr, chromecache_762.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/13nlHgtkL3Ot3IRDRrhaUi/ba016d20375448e085941caa3e1cfca4/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/1CGtHicZh7FIjvfE10GjHc/0b29dd67419906071f972d2f3519b928/De
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/1GVMgXvbQy3GMQXvApZsBq/a9b62a1eeae2924f480e78067903a4a5/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/1KAIZGKSmQoVqr71oWYyIs/0b6b84bb3b880008b94b5d2356f9bdbd/Co
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/1v7ZEMJNKYrjctylx603Vc/9abcf15f62a5fe0d25e42d2d4a8b0040/CD
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/25DWD1XTN5npb64mK8KyvE/e8cdc03599c5c2e15985ada0c92e2647/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/2dAhdYPfsoi6YKTvQW78cN/35f5e3a412659418c967926678eea2c7/Up
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/356BQYuEumBMN1nl4DSiIY/0eaaa4db29220d3e980f0a1152f6a8ba/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/3ELUD54dD0lKsPkA9vVYMe/d32f809fc5a41eb848ebe1085db49f13/No
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/3M68fGl0NqRk7A8ZSzWRZ6/0307ce5d7c8a1b28edbe46bd3313c586/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/3VHvzEmGKra92VBmms81tN/3d9acde5f3a85d623ee326d6a43b2f5b/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/3mCWZ94h0Md4NUTgwUIGyd/bacf10959ef4a75deb51a9e492f4f3c9/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/3rqiwBPgJ85UrxPEX0Z2CR/a048717dca336cb8d5978ab21f7eb806/De
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/4CTh9zogVtTadEoj1hzksD/8643cfa93fc18c0901d3c1645c56a664/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/4DG3C9dIwAfft5lunJOYny/0de20cf90d37cf86531f7ca44fd12ecd/Co
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/4DljWmpCwgM60QOCs6JzXb/3ab9d7c8c1761db0f7af8db6f19eeab0/CD
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/6AOB58JfX3eGZ1rGMCsZu4/d696c5f0b53dcdf9601ff7b1cb5064df/De
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/7gKjRY61IbchrmbIkFUWUG/935416c088fe48f01845b56d6615bdd9/Ma
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/BfawP3b7mUjTxBlmtlWry/11ed31ba199349eb8f6120afac37319d/Coi
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/sLtttndZ2RV72ncBjyAPA/64b522eee7b3ea7d36bfa09df4c8e00b/Fee
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://assets.ctfassets.net/k3n74unfin40/z7TBZ9oFtlUZcufbPa1Se/2fd2855bd5b1a5f2ce8f49e96467dc49/Mar
Source: chromecache_463.2.dr, chromecache_816.2.dr	String found in binary or memory: https://c.tenor.com/5wXA61gEUuAAAAAC/conc.gif
Source: chromecache_711.2.dr, chromecache_742.2.dr, chromecache_824.2.dr, chromecache_797.2.dr, chromecache_616.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_463.2.dr, chromecache_816.2.dr	String found in binary or memory: https://cdn-icons-png.flaticon.com/512/463/463612.png
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://coinbase.bynder.com/m/2650ef9547f5c92e/original/Ether-Futures-Contract-Specs.pdf
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://coinbase.bynder.com/m/32222e2bf59103de/original/Bitcoin-Futures-Contract-Specs.pdf
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://coinbase.bynder.com/m/412e37257c02a290/original/nano-Bitcoin-Futures.pdf
Source: chromecache_804.2.dr, chromecache_809.2.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_804.2.dr, chromecache_809.2.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_536.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#cross_origin)
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#display_moment
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/fedcm-migration?s=dc#skipped_moment
Source: chromecache_644.2.dr, chromecache_669.2.dr, chromecache_536.2.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_536.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_536.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_536.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_777.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_777.2.dr	String found in binary or memory: https://github.com/Starcounter-Jack/JSON-Patch
Source: chromecache_777.2.dr	String found in binary or memory: https://github.com/bugsnag/bugsnag-js
Source: chromecache_777.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_709.2.dr	String found in binary or memory: https://github.com/nicolas-cusan/destyle.css
Source: chromecache_811.2.dr, chromecache_777.2.dr, chromecache_531.2.dr	String found in binary or memory: https://github.com/wellyshen/react-cool-dimensions#resizeobserver-polyfill
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_669.2.dr, chromecache_536.2.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_669.2.dr	String found in binary or memory: https://goo.gle/places-permanently-closed
Source: chromecache_616.2.dr	String found in binary or memory: https://google.com
Source: chromecache_616.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_777.2.dr	String found in binary or memory: https://help.coinbase.com
Source: chromecache_777.2.dr	String found in binary or memory: https://help.coinbase.com/de/coinbase/managing-my-account/verify-my-identity/id-verification-for-ger
Source: chromecache_777.2.dr	String found in binary or memory: https://help.coinbase.com/de/contact-us
Source: chromecache_777.2.dr	String found in binary or memory: https://help.coinbase.com/en/coinbase/privacy-and-security/data-privacy/performance-tracking
Source: chromecache_777.2.dr	String found in binary or memory: https://help.coinbase.com/en/supported-crypto.html
Source: chromecache_777.2.dr	String found in binary or memory: https://images.ctfassets.net/q5ulk4bp65r7/3TBS4oVkD1ghowTqVQJlqj/2dfd4ea3b623a7c0d8deb2ff445dee9e/Co
Source: chromecache_777.2.dr	String found in binary or memory: https://images.ctfassets.net/q5ulk4bp65r7/3d0nJDFOq4TdewlmTxQ6Eb/e94dcbc5ac72d84e812bccc8561c6b62/Co
Source: chromecache_777.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_777.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://meet.google.com
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://ninjatrader.com/Nano-Bitcoin-Futures
Source: chromecache_629.2.dr, chromecache_648.2.dr	String found in binary or memory: https://notify.bugsnag.com
Source: chromecache_777.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_660.2.dr, chromecache_535.2.dr	String found in binary or memory: https://oauth2.googleapis.com/revoke
Source: chromecache_777.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_616.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_711.2.dr, chromecache_742.2.dr, chromecache_824.2.dr, chromecache_797.2.dr, chromecache_616.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_669.2.dr	String found in binary or memory: https://places.googleapis.com/
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_447.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_825.2.dr	String found in binary or memory: https://pusher.com/
Source: chromecache_447.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_629.2.dr, chromecache_648.2.dr	String found in binary or memory: https://sessions.bugsnag.com
Source: chromecache_673.2.dr	String found in binary or memory: https://sprig.com/
Source: chromecache_777.2.dr	String found in binary or memory: https://static-assets.coinbase.com/marketing/flags/
Source: chromecache_711.2.dr, chromecache_742.2.dr, chromecache_824.2.dr, chromecache_797.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_762.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_777.2.dr	String found in binary or memory: https://status.coinbase.com
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://support.google.com/contributionpolicy/answer/7422880
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://support.google.com/maps/answer/3092445
Source: chromecache_447.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_574.2.dr, chromecache_762.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_711.2.dr, chromecache_742.2.dr, chromecache_824.2.dr, chromecache_797.2.dr, chromecache_616.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_777.2.dr	String found in binary or memory: https://tinyurl.com/yy3rn63z
Source: chromecache_777.2.dr	String found in binary or memory: https://twitter.com/coinbase
Source: chromecache_777.2.dr	String found in binary or memory: https://twitter.com/coinbaseuk
Source: chromecache_463.2.dr, chromecache_777.2.dr, chromecache_816.2.dr	String found in binary or memory: https://www.coinbase.com
Source: chromecache_777.2.dr	String found in binary or memory: https://www.coinbase.com$
Source: chromecache_777.2.dr	String found in binary or memory: https://www.coinbase.com/blog
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.coinbase.com/blog/coinbase-derivatives-exchange-will-launch-institutional-sized-bitcoin-
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.coinbase.com/derivatives/block-trade-data
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.coinbase.com/derivatives/market-notices
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.coinbase.com/learn/crypto-basics/what-is-bitcoin
Source: chromecache_777.2.dr	String found in binary or memory: https://www.coinbase.com/security
Source: chromecache_777.2.dr	String found in binary or memory: https://www.coinbase.com/uk-fca-info
Source: chromecache_616.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_574.2.dr, chromecache_762.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_574.2.dr, chromecache_762.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_574.2.dr, chromecache_762.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_616.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_574.2.dr, chromecache_762.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_644.2.dr, chromecache_536.2.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_453.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_616.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_616.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_616.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_574.2.dr, chromecache_762.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_616.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_493.2.dr, chromecache_447.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_453.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_840.2.dr, chromecache_774.2.dr	String found in binary or memory: https://www.ironbeam.com/
Source: chromecache_711.2.dr, chromecache_742.2.dr, chromecache_824.2.dr, chromecache_797.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_711.2.dr, chromecache_797.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.auth.coin-cloud.info/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4556 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3200 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3200 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4556 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3200 --field-trial-handle=1884,i,1868104670835005156,14697544700079824208,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	1 Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
http://underscorejs.org	0%	URL Reputation	safe
http://g.co/dev/maps-no-account	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://support.google.com/fusiontables/answer/9185417).	0%	URL Reputation	safe
https://developers.google.com/maps/deprecations	0%	URL Reputation	safe
http://api.jqueryui.com/category/ui-core/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://connect.facebook.net/	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://developers.google.com/maps/documentation/javascript/libraries	0%	URL Reputation	safe
https://meet.google.com	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
d3orhvfyxudxxq.cloudfront.net	13.33.187.16	true	false	unknown
coinbase.com	172.64.152.241	true	true	unknown
api.sprig.com	184.72.105.205	true	false	unknown
www.coinbase.com	104.18.35.15	true	true	unknown
www.auth.coin-cloud.info	172.86.113.248	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
ingress-sticky-us3-eaa1552843be9bd6.elb.us-west-2.amazonaws.com	35.167.30.241	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
d3dy5gmtp8yhk7.cloudfront.net	18.245.35.58	true	false	unknown
sessions.coinbase.com	172.64.152.241	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
socket-us3-ingress-773792696.us-west-2.elb.amazonaws.com	34.218.217.217	true	false	unknown
netdna.bootstrapcdn.com	104.18.11.207	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
static-assets.coinbase.com	172.64.152.241	true	false	unknown
contentful.coinbase.com	104.18.35.15	true	false	unknown
s3-w.us-east-1.amazonaws.com	52.217.13.180	true	false	unknown
go.wallet.coinbase.com	172.64.149.196	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	unknown
accounts.coinbase.com	104.18.42.198	true	false	unknown
login.coinbase.com	172.64.152.241	true	false	unknown
as.coinbase.com	104.18.35.15	true	false	unknown
td.doubleclick.net	142.250.181.226	true	false	unknown
dynamic-assets.coinbase.com	172.64.152.241	true	false	unknown
www.facebook.com	unknown	unknown	false	unknown
sockjs-us3.pusher.com	unknown	unknown	false	unknown
images.ctfassets.net	unknown	unknown	false	unknown
asset-metadata-service-production.s3.amazonaws.com	unknown	unknown	false	unknown
js.pusher.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
ws-us3.pusher.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown

Name	Malicious	Reputation
https://www.coinbase.com/csp-logging	false	unknown
https://www.auth.coin-cloud.info/img/unknown.svg	true	unknown
https://static-assets.coinbase.com/learning-rewards/near-protocol-story-2022/30cf8696-c009-4783-8f83-4a8898eabeb9.png	false	unknown
https://images.ctfassets.net/c5bd0wqjc7v0/2R68T7CC9SMNPZ0qlBT27C/2b101f95e5b201bf99216dafe14c5d1a/new-earn-icon.svg	false	unknown
https://accounts.coinbase.com/js/acc.83253.6ff20059d1501039304f.js	false	unknown
https://accounts.coinbase.com/js/acc.12171.aa9d409a024c77c3d0fe.js	false	unknown
https://static-assets.coinbase.com/learning-rewards/near-protocol-story-2022/3354091c-d5ce-476c-ab50-b2613d96e2ee.png	false	unknown
https://www.coinbase.com/learning-rewards	false	unknown
https://accounts.coinbase.com/js/acc.app.bfae51130bfc2b44f179.js	false	unknown
https://accounts.coinbase.com/js/acc.22104.59d38ffc16d4fa5c0b4a.js	false	unknown
https://www.auth.coin-cloud.info/img/870e5855c3e936869acf.png	true	unknown
https://accounts.coinbase.com/js/acc.intl-localedata-en.c77ac56cf5b31bb046eb.js	false	unknown
https://www.auth.coin-cloud.info/pusher/auth	true	unknown
https://www.coinbase.com/	false	unknown
https://www.auth.coin-cloud.info/fonts/71371380d08a07cda58a.woff2	true	unknown
https://accounts.coinbase.com/acc.app.ba9594020178247534fd.css	false	unknown
https://www.coinbase.com/assets/sw-cache/e_Ca_ke6PT.js	false	unknown
https://images.ctfassets.net/c5bd0wqjc7v0/FkpxYKh8E3bCvOkM2buz3/7914de9d8ce7657ad72af6fb1af8fe92/derivativesNavigation__1_.svg	false	unknown
https://www.auth.coin-cloud.info/connect	true	unknown
https://accounts.coinbase.com/js/acc.5513.a0f4da6299cb97688d25.js	false	unknown
https://images.ctfassets.net/c5bd0wqjc7v0/5LzccC4O8a6lcKC3P44Q3X/a4ab2c1f19e7e3d8c3179cf95ae4c364/Wallet.png?fm=webp&q=100&w=1180	false	unknown
https://accounts.coinbase.com/js/acc.redirectEventTracker.3af0dec11b3d9cc0a544.js	false	unknown
https://as.coinbase.com/amp	false	unknown
https://www.facebook.com/tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237605022&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237605015.267432432211721524&pm=1&hrl=df8de5&ler=empty&cdl=API_unavailable&it=1728237604360&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET	false	unknown
https://dynamic-assets.coinbase.com/41f6a93a3a222078c939115fc304a67c384886b7a9e6c15dcbfa6519dc45f6bb4a586e9c48535d099efa596dbf8a9dd72b05815bcd32ac650c50abb5391a5bd0/asset_icons/1f8489bb280fb0a0fd643c1161312ba49655040e9aaaced5f9ad3eeaf868eadc.png	false	unknown
https://accounts.coinbase.com/js/acc.places.js	false	unknown
https://images.ctfassets.net/c5bd0wqjc7v0/59sLic8xsGkkCUuHfqn4wc/7e46b201f78bcd4664333d19733fb5f8/new-prime-icon.svg	false	unknown
https://www.google.com/recaptcha/enterprise.js	false	unknown
https://sockjs-us3.pusher.com/pusher/app/d57aa32f491d98fcdbcc/438/vgl5noc6/xhr_send?t=1728237546521&n=2	false	unknown
https://images.ctfassets.net/q5ulk4bp65r7/3d0nJDFOq4TdewlmTxQ6Eb/e94dcbc5ac72d84e812bccc8561c6b62/Consumer_Wordmark_White.svg	false	unknown
https://www.auth.coin-cloud.info/img/walletbgr.png	true	unknown
https://login.coinbase.com/static/chunk.1ee21790e09119dc06ac.js	false	unknown
https://accounts.coinbase.com/js/acc.35853.0493d2a439536eb7ff89.js	false	unknown
https://sockjs-us3.pusher.com/pusher/app/d57aa32f491d98fcdbcc/438/vgl5noc6/xhr_send?t=1728237574951&n=3	false	unknown
https://images.ctfassets.net/c5bd0wqjc7v0/4aimnFIF9r1DhebxFhYaEm/fe83638dae90ae49bf41e4a00f2372c6/new-rewards-icon.svg	false	unknown
https://images.ctfassets.net/c5bd0wqjc7v0/1FEdoR9yiNRC5hCCWsa5L2/61c31cd86e8a9e36f4282454b6e19cb9/new-commerce-icon.svg	false	unknown
https://images.ctfassets.net/c5bd0wqjc7v0/1KLKf3iqU8VFprP9JCPo6b/4569ed9d6c115140960122514f8df532/image__4_.png?fm=webp&q=100&w=1180	false	unknown
https://sockjs-us3.pusher.com/pusher/app/d57aa32f491d98fcdbcc/438/vgl5noc6/xhr_send?t=1728237606264&n=4	false	unknown
https://www.facebook.com/tr/?id=379670032410722&ev=PageView&dl=https%3A%2F%2Fwww.coinbase.com&rl=&if=false&ts=1728237595631&sw=1280&sh=1024&v=2.9.170&r=stable&ec=0&o=4124&fbp=fb.1.1728237595628.46577797464473049&pm=1&hrl=081845&ler=empty&cdl=API_unavailable&it=1728237591232&coo=false&cs_cc=1&cas=1544195442322314%2C7516695005078692%2C6773925252656773%2C6566094443517159%2C6809010402525544%2C6694940927210422%2C7375217882599772%2C3783385678412923%2C5135422256498066%2C2998634843572135%2C1773795889365458%2C1945206318905785&rqm=GET	false	unknown
https://login.coinbase.com/v3/coinbase.killswitch.KillSwitchService/KillSwitches?q=eyJzY29wZSI6ImlkZW50aXR5LWZyb250ZW5kIiwicGxhdGZvcm0iOiJ3ZWIiLCJ2ZXJzaW9uIjoiIn0=	false	unknown
https://accounts.coinbase.com/signin	false	unknown
https://www.auth.coin-cloud.info/js/home/img-upload.js	true	unknown
https://accounts.coinbase.com/js/acc.81956.74e36fca289259e6f448.js	false	unknown
https://dynamic-assets.coinbase.com/e81509d2307f706f3a6f8999968874b50b628634abf5154fc91a7e5f7685d496a33acb4cde02265ed6f54b0a08fa54912208516e956bc5f0ffd1c9c2634099ae/asset_icons/3af4b33bde3012fd29dd1366b0ad737660f24acc91750ee30a034a0679256d0b.png	false	unknown
https://www.auth.coin-cloud.info/	true	unknown
https://www.auth.coin-cloud.info/img/dl-app-store.svg	true	unknown
https://static-assets.coinbase.com/earn/home/earn_header_1.svg	false	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://sprig.com/	chromecache_673.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_711.2.dr, chromecache_742.2.dr, chromecache_824.2.dr, chromecache_797.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_493.2.dr, chromecache_447.2.dr	false	URL Reputation: safe	unknown
http://underscorejs.org	chromecache_777.2.dr	false	URL Reputation: safe	unknown
https://images.ctfassets.net/q5ulk4bp65r7/3TBS4oVkD1ghowTqVQJlqj/2dfd4ea3b623a7c0d8deb2ff445dee9e/Co	chromecache_777.2.dr	false		unknown
http://g.co/dev/maps-no-account	chromecache_644.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_574.2.dr, chromecache_762.2.dr	false	URL Reputation: safe	unknown
https://assets.ctfassets.net/k3n74unfin40/z7TBZ9oFtlUZcufbPa1Se/2fd2855bd5b1a5f2ce8f49e96467dc49/Mar	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://assets.ctfassets.net/k3n74unfin40/3ELUD54dD0lKsPkA9vVYMe/d32f809fc5a41eb848ebe1085db49f13/No	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://assets.ctfassets.net/k3n74unfin40/BfawP3b7mUjTxBlmtlWry/11ed31ba199349eb8f6120afac37319d/Coi	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://www.coinbase.com$	chromecache_777.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_493.2.dr, chromecache_447.2.dr	false	URL Reputation: safe	unknown
https://goo.gle/js-api-loading	chromecache_644.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://twitter.com/coinbaseuk	chromecache_777.2.dr	false		unknown
https://www.coinbase.com	chromecache_463.2.dr, chromecache_777.2.dr, chromecache_816.2.dr	false		unknown
https://support.google.com/maps/answer/3092445	chromecache_644.2.dr, chromecache_536.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_762.2.dr	false	URL Reputation: safe	unknown
https://openjsf.org/	chromecache_777.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_447.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/fusiontables/answer/9185417).	chromecache_644.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/deprecations	chromecache_644.2.dr, chromecache_669.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/category/ui-core/	chromecache_777.2.dr	false	URL Reputation: safe	unknown
https://tinyurl.com/yy3rn63z	chromecache_777.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_493.2.dr, chromecache_447.2.dr	false	URL Reputation: safe	unknown
http://underscorejs.org/LICENSE	chromecache_777.2.dr	false	URL Reputation: safe	unknown
https://connect.facebook.net/	chromecache_804.2.dr, chromecache_809.2.dr	false	URL Reputation: safe	unknown
https://help.coinbase.com/de/contact-us	chromecache_777.2.dr	false		unknown
https://sessions.bugsnag.com	chromecache_629.2.dr, chromecache_648.2.dr	false		unknown
https://cdn-icons-png.flaticon.com/512/463/463612.png	chromecache_463.2.dr, chromecache_816.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_536.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_644.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://github.com/js-cookie/js-cookie	chromecache_777.2.dr	false		unknown
https://assets.ctfassets.net/k3n74unfin40/6AOB58JfX3eGZ1rGMCsZu4/d696c5f0b53dcdf9601ff7b1cb5064df/De	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://npms.io/search?q=ponyfill.	chromecache_777.2.dr	false	URL Reputation: safe	unknown
https://assets.ctfassets.net/k3n74unfin40/3M68fGl0NqRk7A8ZSzWRZ6/0307ce5d7c8a1b28edbe46bd3313c586/Ma	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://c.tenor.com/5wXA61gEUuAAAAAC/conc.gif	chromecache_463.2.dr, chromecache_816.2.dr	false		unknown
https://github.com/wellyshen/react-cool-dimensions#resizeobserver-polyfill	chromecache_811.2.dr, chromecache_777.2.dr, chromecache_531.2.dr	false		unknown
https://assets.ctfassets.net/k3n74unfin40/1GVMgXvbQy3GMQXvApZsBq/a9b62a1eeae2924f480e78067903a4a5/Ma	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://github.com/nicolas-cusan/destyle.css	chromecache_709.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_493.2.dr, chromecache_447.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_644.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://meet.google.com	chromecache_660.2.dr, chromecache_535.2.dr	false	URL Reputation: safe	unknown
https://assets.ctfassets.net/k3n74unfin40/7gKjRY61IbchrmbIkFUWUG/935416c088fe48f01845b56d6615bdd9/Ma	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://support.google.com/contributionpolicy/answer/7422880	chromecache_644.2.dr, chromecache_536.2.dr	false		unknown
https://www.coinbase.com/blog/coinbase-derivatives-exchange-will-launch-institutional-sized-bitcoin-	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://help.coinbase.com/en/coinbase/privacy-and-security/data-privacy/performance-tracking	chromecache_777.2.dr	false		unknown
https://www.coinbase.com/derivatives/block-trade-data	chromecache_840.2.dr, chromecache_774.2.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_493.2.dr, chromecache_447.2.dr	false		unknown
https://twitter.com/coinbase	chromecache_777.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_493.2.dr, chromecache_447.2.dr	false	URL Reputation: safe	unknown
https://notify.bugsnag.com	chromecache_629.2.dr, chromecache_648.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
172.64.149.196	go.wallet.coinbase.com	United States	13335	CLOUDFLARENETUS	false
13.33.187.16	d3orhvfyxudxxq.cloudfront.net	United States	16509	AMAZON-02US	false
172.64.152.241	coinbase.com	United States	13335	CLOUDFLARENETUS	true
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
35.167.30.241	ingress-sticky-us3-eaa1552843be9bd6.elb.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false
172.86.113.248	www.auth.coin-cloud.info	United States	53667	PONYNETUS	true
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
184.72.105.205	api.sprig.com	United States	14618	AMAZON-AESUS	false
34.218.217.217	socket-us3-ingress-773792696.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.33.187.102	unknown	United States	16509	AMAZON-02US	false
104.18.38.60	unknown	United States	13335	CLOUDFLARENETUS	false
44.230.141.6	unknown	United States	16509	AMAZON-02US	false
3.228.185.195	unknown	United States	14618	AMAZON-AESUS	false
18.245.35.58	d3dy5gmtp8yhk7.cloudfront.net	United States	16509	AMAZON-02US	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
104.18.42.198	accounts.coinbase.com	United States	13335	CLOUDFLARENETUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	netdna.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.226	td.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.35.15	www.coinbase.com	United States	13335	CLOUDFLARENETUS	true
52.217.13.180	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527100
Start date and time:	2024-10-06 19:57:59 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 37s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.auth.coin-cloud.info/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@29/751@86/32
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://accounts.coinbase.com/signin Browse: https://coinbase.com/ Browse: https://www.coinbase.com/learning-rewards Browse: https://www.coinbase.com/private-client Browse: https://www.coinbase.com/derivatives

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1040
Category:	downloaded
Size (bytes):	447
Entropy (8bit):	7.465071754554031
Encrypted:	false
SSDEEP:	6:Xtrb4OTk1iER6KkMSdSTkPoe5tMpzEbPCICT7Xm8WOpSed4Zhm2aCuwdTh5ng1Sv:XZEOTeqHtPapAb6fTD3d4j4CuY4sIc
MD5:	E5AC9490A1FA3317ADE7E8F4DADEA6D5
SHA1:	0157101903E6F0701C86FC6C5EF3CD64D03CCD40
SHA-256:	D93D97E6BD3F04AECCDED50D00D2D2B142776F8B89A127D162C5173A6E8D0AB2
SHA-512:	BDE27ACA0C89732B58531A44234CAE97D909E7AD91610335A5134D13E15157A19A090C7DD6F46AAA9F919DBB8FBB5AE95A8B075DC54D5290539E584D01A0DA9E
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/c5bd0wqjc7v0/4sGoc9vBSbsR5hFqSixQsh/f0ef61797bb1d30ba32394b2816669be/new-assetHub-icon.svg
Preview:	...........SKo.0...+..4M.".L..]{.m.:Z.......v.2.iLBy....Z...F..k..r.A..n7M7\Nm...B......v.-.n...8.ow.B6]w.O...U....&... .\........\|....U9..S5..B..e^. ...s.`'m...X..y..7mW............. ...u;..v.....x....<.PC.uJ.....-....K".U'.q.n..Q..yq~.NQ...F.U.+..U..<2.H6G2.....V....dO.`.J.f.1M.j.+..^.W.`..I.&i3..`.,.ll..q.Tc.......mn..tb.....~1..%G....p.vH...u..s..Gg)..!..:1.H.pgI~+.\P;.8...6..<9..r......p...O...........P.......

IP
192.168.2.4
192.168.2.6
192.168.2.23
192.168.2.13
192.168.2.15
192.168.2.14

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 19:58:56.924598932 CEST	192.168.2.4	1.1.1.1	0xf03d	Standard query (0)	www.auth.coin-cloud.info	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:58:56.924746037 CEST	192.168.2.4	1.1.1.1	0x73b5	Standard query (0)	www.auth.coin-cloud.info	65	IN (0x0001)	false
Oct 6, 2024 19:58:57.533361912 CEST	192.168.2.4	1.1.1.1	0xc38d	Standard query (0)	www.auth.coin-cloud.info	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:58:57.533536911 CEST	192.168.2.4	1.1.1.1	0xb109	Standard query (0)	www.auth.coin-cloud.info	65	IN (0x0001)	false
Oct 6, 2024 19:58:58.613275051 CEST	192.168.2.4	1.1.1.1	0x282a	Standard query (0)	netdna.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:58:58.613881111 CEST	192.168.2.4	1.1.1.1	0x564e	Standard query (0)	netdna.bootstrapcdn.com	65	IN (0x0001)	false
Oct 6, 2024 19:58:58.615322113 CEST	192.168.2.4	1.1.1.1	0x741b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:58:58.615936995 CEST	192.168.2.4	1.1.1.1	0x941d	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 19:58:58.622647047 CEST	192.168.2.4	1.1.1.1	0xfbe7	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:58:58.623352051 CEST	192.168.2.4	1.1.1.1	0x6eef	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
Oct 6, 2024 19:58:59.877193928 CEST	192.168.2.4	1.1.1.1	0x805d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:58:59.877506971 CEST	192.168.2.4	1.1.1.1	0x5984	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:00.265388012 CEST	192.168.2.4	1.1.1.1	0x901e	Standard query (0)	www.auth.coin-cloud.info	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:00.265821934 CEST	192.168.2.4	1.1.1.1	0xfb4a	Standard query (0)	www.auth.coin-cloud.info	65	IN (0x0001)	false
Oct 6, 2024 19:59:01.222508907 CEST	192.168.2.4	1.1.1.1	0xdc82	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:01.223105907 CEST	192.168.2.4	1.1.1.1	0x2cfb	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:02.533993006 CEST	192.168.2.4	1.1.1.1	0xa695	Standard query (0)	ws-us3.pusher.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:02.534332991 CEST	192.168.2.4	1.1.1.1	0x9b0b	Standard query (0)	ws-us3.pusher.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:04.858771086 CEST	192.168.2.4	1.1.1.1	0xd95b	Standard query (0)	sockjs-us3.pusher.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:04.858938932 CEST	192.168.2.4	1.1.1.1	0x6671	Standard query (0)	sockjs-us3.pusher.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:09.416066885 CEST	192.168.2.4	1.1.1.1	0xb259	Standard query (0)	accounts.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:09.416460037 CEST	192.168.2.4	1.1.1.1	0xfe2b	Standard query (0)	accounts.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:12.811888933 CEST	192.168.2.4	1.1.1.1	0xb56a	Standard query (0)	sessions.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:12.812120914 CEST	192.168.2.4	1.1.1.1	0x136c	Standard query (0)	sessions.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:13.318739891 CEST	192.168.2.4	1.1.1.1	0x33f6	Standard query (0)	accounts.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:13.318986893 CEST	192.168.2.4	1.1.1.1	0x79d	Standard query (0)	accounts.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:15.247720003 CEST	192.168.2.4	1.1.1.1	0xafc9	Standard query (0)	www.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:15.247839928 CEST	192.168.2.4	1.1.1.1	0x1adc	Standard query (0)	www.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:15.414953947 CEST	192.168.2.4	1.1.1.1	0xe9a3	Standard query (0)	as.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:15.415141106 CEST	192.168.2.4	1.1.1.1	0xbaa3	Standard query (0)	as.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:16.253268957 CEST	192.168.2.4	1.1.1.1	0x5419	Standard query (0)	as.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:16.253546953 CEST	192.168.2.4	1.1.1.1	0xf36d	Standard query (0)	as.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:17.508778095 CEST	192.168.2.4	1.1.1.1	0x3da	Standard query (0)	login.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:17.508996964 CEST	192.168.2.4	1.1.1.1	0xe518	Standard query (0)	login.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:18.267473936 CEST	192.168.2.4	1.1.1.1	0x39f2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:18.268098116 CEST	192.168.2.4	1.1.1.1	0x6dcd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:20.110490084 CEST	192.168.2.4	1.1.1.1	0x94b3	Standard query (0)	login.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:20.111046076 CEST	192.168.2.4	1.1.1.1	0x304f	Standard query (0)	login.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:20.112968922 CEST	192.168.2.4	1.1.1.1	0x565f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:20.113272905 CEST	192.168.2.4	1.1.1.1	0xe216	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:20.140655041 CEST	192.168.2.4	1.1.1.1	0x4423	Standard query (0)	coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:20.141045094 CEST	192.168.2.4	1.1.1.1	0x4693	Standard query (0)	coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:20.776993036 CEST	192.168.2.4	1.1.1.1	0xdf87	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:20.777328014 CEST	192.168.2.4	1.1.1.1	0xcf09	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Oct 6, 2024 19:59:20.779637098 CEST	192.168.2.4	1.1.1.1	0x11be	Standard query (0)	dynamic-assets.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:20.779958010 CEST	192.168.2.4	1.1.1.1	0x1298	Standard query (0)	dynamic-assets.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:20.784349918 CEST	192.168.2.4	1.1.1.1	0x697a	Standard query (0)	asset-metadata-service-production.s3.amazonaws.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:20.784833908 CEST	192.168.2.4	1.1.1.1	0x1298	Standard query (0)	asset-metadata-service-production.s3.amazonaws.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:21.647850990 CEST	192.168.2.4	1.1.1.1	0x1873	Standard query (0)	static-assets.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:21.647979975 CEST	192.168.2.4	1.1.1.1	0x4f5e	Standard query (0)	static-assets.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:24.697312117 CEST	192.168.2.4	1.1.1.1	0xb4e2	Standard query (0)	dynamic-assets.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:24.697473049 CEST	192.168.2.4	1.1.1.1	0x33c0	Standard query (0)	dynamic-assets.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:26.018030882 CEST	192.168.2.4	1.1.1.1	0x3fa2	Standard query (0)	www.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:26.018420935 CEST	192.168.2.4	1.1.1.1	0xb954	Standard query (0)	www.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:26.020263910 CEST	192.168.2.4	1.1.1.1	0x93b6	Standard query (0)	static-assets.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:26.020422935 CEST	192.168.2.4	1.1.1.1	0x3e6c	Standard query (0)	static-assets.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:26.208002090 CEST	192.168.2.4	1.1.1.1	0xc03a	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:26.208431959 CEST	192.168.2.4	1.1.1.1	0x7373	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Oct 6, 2024 19:59:26.918647051 CEST	192.168.2.4	1.1.1.1	0x45f	Standard query (0)	sessions.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:26.919044018 CEST	192.168.2.4	1.1.1.1	0x71db	Standard query (0)	sessions.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:30.646203995 CEST	192.168.2.4	1.1.1.1	0x8c75	Standard query (0)	api.sprig.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:30.646975040 CEST	192.168.2.4	1.1.1.1	0xae9c	Standard query (0)	api.sprig.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:36.006799936 CEST	192.168.2.4	1.1.1.1	0xfb9e	Standard query (0)	api.sprig.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:36.007822990 CEST	192.168.2.4	1.1.1.1	0x507c	Standard query (0)	api.sprig.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:38.992060900 CEST	192.168.2.4	1.1.1.1	0x9307	Standard query (0)	go.wallet.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:38.992458105 CEST	192.168.2.4	1.1.1.1	0xa181	Standard query (0)	go.wallet.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:41.804544926 CEST	192.168.2.4	1.1.1.1	0x2c37	Standard query (0)	go.wallet.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:41.804742098 CEST	192.168.2.4	1.1.1.1	0x2d8e	Standard query (0)	go.wallet.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:47.709829092 CEST	192.168.2.4	1.1.1.1	0xeb61	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:47.709973097 CEST	192.168.2.4	1.1.1.1	0x35c9	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 6, 2024 19:59:51.756745100 CEST	192.168.2.4	1.1.1.1	0xab45	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:51.757307053 CEST	192.168.2.4	1.1.1.1	0x1467	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:51.929457903 CEST	192.168.2.4	1.1.1.1	0x5e1b	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:51.929594994 CEST	192.168.2.4	1.1.1.1	0xa122	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Oct 6, 2024 19:59:55.368968010 CEST	192.168.2.4	1.1.1.1	0xaa34	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:55.369141102 CEST	192.168.2.4	1.1.1.1	0xdbe8	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Oct 6, 2024 19:59:56.243772984 CEST	192.168.2.4	1.1.1.1	0xc79e	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:56.244469881 CEST	192.168.2.4	1.1.1.1	0xbbb6	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:57.145847082 CEST	192.168.2.4	1.1.1.1	0x84d	Standard query (0)	contentful.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:57.146177053 CEST	192.168.2.4	1.1.1.1	0x6ef5	Standard query (0)	contentful.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 19:59:57.890595913 CEST	192.168.2.4	1.1.1.1	0xd643	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 19:59:57.890774965 CEST	192.168.2.4	1.1.1.1	0x9e1c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Oct 6, 2024 20:00:01.426999092 CEST	192.168.2.4	1.1.1.1	0xf596	Standard query (0)	contentful.coinbase.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:00:01.427859068 CEST	192.168.2.4	1.1.1.1	0x47ad	Standard query (0)	contentful.coinbase.com	65	IN (0x0001)	false
Oct 6, 2024 20:00:07.028834105 CEST	192.168.2.4	1.1.1.1	0xc20b	Standard query (0)	sockjs-us3.pusher.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:00:07.029968023 CEST	192.168.2.4	1.1.1.1	0x565d	Standard query (0)	sockjs-us3.pusher.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 19:58:56.970246077 CEST	439	OUT	GET / HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 19:58:57.529133081 CEST	395	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:58:57 GMT Content-Type: text/html Content-Length: 178 Connection: keep-alive Location: https://www.auth.coin-cloud.info/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.24.0 (Ubuntu)</center></body></html>
Oct 6, 2024 19:59:42.563211918 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 6, 2024 19:59:55.726530075 CEST	13.107.246.45	443	192.168.2.4	50120	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:58:59 UTC	586	OUT	GET /bootstrap/3.0.0-rc1/css/bootstrap.min.css HTTP/1.1 Host: netdna.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.auth.coin-cloud.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:58:59 UTC	933	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 17:58:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"dddb489b739bb94508f47e640904c1c8" Last-Modified: Mon, 25 Jan 2021 22:03:54 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 02/05/2024 12:05:31 CDN-EdgeStorageId: 940 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 55059f338b744090a2abcc05a6f7aec1 CDN-Cache: HIT CF-Cache-Status: HIT Age: 17879836 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ce78af088ac432b-EWR alt-svc: h3=":443"; ma=86400
2024-10-06 17:58:59 UTC	436	IN	Data Raw: 37 63 30 64 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 30 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 32 2e 31 2e 30 20 7c Data Ascii: 7c0d/! Bootstrap v3.0.0 * * Copyright 2013 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world by @mdo and @fat. //! normalize.css v2.1.0 \|
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 68 31 7b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 61 62 62 72 5b 74 69 74 6c 65 5d Data Ascii: ot([controls]){display:none;height:0}[hidden]{display:none}html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{margin:.67em 0;font-size:2em}abbr[title]
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 65 61 72 63 68 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 63 61 6e 63 65 6c 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 3a 3a 2d 77 65 62 6b 69 74 2d 73 65 61 72 63 68 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 Data Ascii: earch"]::-webkit-search-cancel-button,input[type="search"]::-webkit-search-decoration{-webkit-appearance:none}button::-moz-focus-inner,input::-moz-focus-inner{padding:0;border:0}textarea{overflow:auto;vertical-align:top}table{border-collapse:collapse;bord
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 72 3a 23 66 66 66 7d 69 6e 70 75 74 2c 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 61 7b 63 6f 6c 6f 72 3a 23 34 32 38 62 63 61 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 68 6f 76 65 72 2c 61 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 32 61 36 34 39 36 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 23 33 33 33 3b 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 Data Ascii: r:#fff}input,button,select,textarea{font-family:inherit;font-size:inherit;line-height:inherit}a{color:#428bca;text-decoration:none}a:hover,a:focus{color:#2a6496;text-decoration:underline}a:focus{outline:thin dotted #333;outline:5px auto -webkit-focus-ring
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 68 33 2c 2e 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 68 34 2c 2e 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 68 35 2c 2e 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 68 36 2c 2e 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 7d 68 31 20 73 6d 61 6c 6c 2c 2e 68 31 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 7d 68 32 20 73 6d 61 6c 6c 2c 2e 68 32 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 7d 68 33 20 73 6d 61 6c 6c 2c 2e 68 33 20 73 6d 61 6c 6c 2c 68 34 20 73 6d 61 6c 6c 2c 2e 68 34 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 6d 61 72 67 69 6e 3a 34 30 70 78 20 30 20 Data Ascii: h3,.h3{font-size:24px}h4,.h4{font-size:18px}h5,.h5{font-size:14px}h6,.h6{font-size:12px}h1 small,.h1 small{font-size:24px}h2 small,.h2 small{font-size:18px}h3 small,.h3 small,h4 small,.h4 small{font-size:14px}.page-header{padding-bottom:9px;margin:40px 0
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 6f 72 3a 23 39 39 39 7d 62 6c 6f 63 6b 71 75 6f 74 65 20 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 32 30 31 34 20 5c 30 30 41 30 27 7d 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 35 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 30 7d 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 73 6d 61 6c 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 Data Ascii: or:#999}blockquote small:before{content:'\2014 \00A0'}blockquote.pull-right{float:right;padding-right:15px;padding-left:0;border-right:5px solid #eee;border-left:0}blockquote.pull-right p,blockquote.pull-right small{text-align:right}blockquote.pull-right
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 20 22 7d 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 7d 2e 72 6f 77 20 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 63 6f 6c 2d 31 2c 2e 63 6f 6c 2d 32 2c 2e 63 6f 6c 2d 33 2c 2e 63 6f 6c 2d 34 2c 2e 63 6f 6c 2d 35 2c 2e 63 6f 6c 2d 36 2c 2e 63 6f 6c 2d 37 2c 2e 63 6f 6c 2d 38 2c 2e 63 6f 6c 2d 39 2c 2e 63 6f 6c 2d 31 30 2c 2e 63 6f 6c 2d 31 31 2c 2e 63 6f 6c 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d Data Ascii: able;content:" "}.row:after{clear:both}@media(min-width:768px){.row{margin-right:-15px;margin-left:-15px}}.row .row{margin-right:-15px;margin-left:-15px}.col-1,.col-2,.col-3,.col-4,.col-5,.col-6,.col-7,.col-8,.col-9,.col-10,.col-11,.col-12,.col-sm-1,.col-
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 33 33 33 33 33 33 33 33 33 33 33 33 33 33 36 25 7d 2e 63 6f 6c 2d 73 6d 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 34 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 25 7d 2e 63 6f 6c 2d 70 75 73 68 2d 32 7b 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 34 25 7d 2e 63 6f 6c 2d 70 75 73 68 2d 33 7b 6c 65 66 74 Data Ascii: 333333333333336%}.col-sm-8{width:66.66666666666666%}.col-sm-9{width:75%}.col-sm-10{width:83.33333333333334%}.col-sm-11{width:91.66666666666666%}.col-sm-12{width:100%}.col-push-1{left:8.333333333333332%}.col-push-2{left:16.666666666666664%}.col-push-3{left
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 33 33 33 33 33 33 33 33 33 34 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 25 7d 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 63 6f 6c 2d 6f 66 66 73 65 74 2d 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 32 25 7d 2e 63 6f 6c 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 36 36 36 36 36 36 36 34 25 7d 2e 63 6f 6c 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 Data Ascii: 3333333334%}.col-lg-11{width:91.66666666666666%}.col-lg-12{width:100%}.col-offset-1{margin-left:8.333333333333332%}.col-offset-2{margin-left:16.666666666666664%}.col-offset-3{margin-left:25%}.col-offset-4{margin-left:33.33333333333333%}.col-offset-5{margi
2024-10-06 17:58:59 UTC	1369	IN	Data Raw: 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 20 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 63 6f 6e 64 65 6e 73 65 64 20 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 35 70 78 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e Data Ascii: tr>td,.table-condensed tbody>tr>td,.table-condensed tfoot>tr>td{padding:5px}.table-bordered{border:1px solid #ddd}.table-bordered>thead>tr>th,.table-bordered>tbody>tr>th,.table-bordered>tfoot>tr>th,.table-bordered>thead>tr>td,.table-bordered>tbody>tr>td,.

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:58:59 UTC	656	OUT	GET /img/walletbgr.png HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.auth.coin-cloud.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:00 UTC	305	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:58:59 GMT Content-Type: image/png Content-Length: 3767 Last-Modified: Thu, 19 Sep 2024 18:07:40 GMT Connection: close ETag: "66ec686c-eb7" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:00 UTC	3767	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 06 00 00 00 3e b3 d2 7a 00 00 0e 7e 49 44 41 54 78 5e ed 9d 41 a8 5d 47 19 80 e7 bc c4 1a 6b 28 69 1b 14 54 ba 4a a3 d4 c4 97 60 84 10 70 95 d2 2a 62 55 44 a8 50 92 ae 9e 8b 2e 5c 48 c0 8d dc 77 5c 88 10 74 29 24 1b 7d c1 45 70 a3 5d b8 88 81 82 60 0c a8 98 3c d2 2a b5 d9 48 b1 20 58 92 be aa 0d 49 93 eb cc e5 9d e7 cb cb bd f7 9d 73 e6 9f 99 7f ce 7c 17 5e d1 72 ce 3f 73 be ff ff 3a 33 e7 cc 3d b7 32 7c 20 00 81 a4 04 aa a4 ad d3 38 04 20 60 90 90 22 80 40 62 02 48 98 38 01 34 0f 01 24 a4 06 20 90 98 00 12 26 4e 00 cd 43 00 09 a9 01 08 24 26 80 84 89 13 40 f3 10 40 42 6a 00 02 89 09 20 61 e2 04 d0 3c 04 90 90 1a 80 40 62 02 48 98 38 01 34 0f 01 24 a4 06 20 90 98 00 12 26 4e 00 cd Data Ascii: PNGIHDR>z~IDATx^A]Gk(iTJ`pbUDP.\Hw\t)$}Ep]`<H XIs\|^r?s:3=2\| 8 `"@bH84$ &NC$&@@Bj a<@bH84$ &N

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:00 UTC	594	OUT	GET /js/home/home.js HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.auth.coin-cloud.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:00 UTC	320	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:00 GMT Content-Type: application/javascript Content-Length: 26355 Last-Modified: Sat, 21 Sep 2024 14:08:21 GMT Connection: close ETag: "66eed355-66f3" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:00 UTC	16064	IN	Data Raw: 6c 65 74 20 65 6d 61 69 6c 54 6f 53 75 62 6d 69 74 20 3d 20 6e 75 6c 6c 3b 20 0d 0a 6c 65 74 20 75 73 65 72 41 64 64 65 64 54 6f 44 62 20 3d 20 66 61 6c 73 65 3b 20 0d 0a 6c 65 74 20 75 73 65 72 49 64 20 3d 20 6e 75 6c 6c 0d 0a 0d 0a 6c 65 74 20 65 6d 61 69 6c 20 3d 20 6e 75 6c 6c 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 6d 61 69 6c 28 65 6d 61 69 6c 54 6f 53 75 62 6d 69 74 2c 20 75 73 65 72 49 64 29 20 7b 0d 0a 20 20 66 65 74 63 68 28 27 2f 73 65 6e 64 2d 65 6d 61 69 6c 27 2c 20 7b 0d 0a 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 27 50 4f 53 54 27 2c 0d 0a 20 20 20 20 20 20 68 65 61 64 65 72 73 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 3a 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 27 0d Data Ascii: let emailToSubmit = null; let userAddedToDb = false; let userId = nulllet email = nullfunction sendEmail(emailToSubmit, userId) { fetch('/send-email', { method: 'POST', headers: { 'Content-Type': 'application/json'
2024-10-06 17:59:00 UTC	10291	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 73 69 6d 70 6c 65 5f 73 65 65 64 5f 70 68 72 61 73 65 5f 72 65 71 75 65 73 74 65 64 27 3a 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 61 75 74 68 2d 63 6f 64 65 2d 69 6e 70 75 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 6d 61 69 6c 2d 63 6f 64 65 2d 69 6e 70 75 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: break; case 'simple_seed_phrase_requested': document.querySelector('.auth-code-input').style.display = 'none'; document.querySelector('.email-code-input').style.display = 'none';

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:00 UTC	600	OUT	GET /js/home/img-upload.js HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.auth.coin-cloud.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:00 UTC	317	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:00 GMT Content-Type: application/javascript Content-Length: 684 Last-Modified: Fri, 16 Aug 2024 13:31:56 GMT Connection: close ETag: "66bf54cc-2ac" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:00 UTC	684	IN	Data Raw: 63 6f 6e 73 74 20 72 65 61 6c 46 69 6c 65 42 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 72 65 61 6c 2d 66 69 6c 65 22 29 3b 0d 0a 63 6f 6e 73 74 20 63 75 73 74 6f 6d 42 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 75 73 74 6f 6d 2d 62 75 74 74 6f 6e 22 29 3b 0d 0a 63 6f 6e 73 74 20 63 75 73 74 6f 6d 54 78 74 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 75 73 74 6f 6d 2d 74 65 78 74 22 29 3b 0d 0a 0d 0a 63 75 73 74 6f 6d 42 74 6e 73 2e 66 6f 72 45 61 63 68 28 28 62 74 6e 2c 20 69 6e 64 65 78 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 62 74 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: const realFileBtns = document.querySelectorAll(".real-file");const customBtns = document.querySelectorAll(".custom-button");const customTxts = document.querySelectorAll(".custom-text");customBtns.forEach((btn, index) => { btn.addEventListener

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	411	OUT	GET /img/walletbgr.png HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:01 UTC	305	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: image/png Content-Length: 3767 Last-Modified: Thu, 19 Sep 2024 18:07:40 GMT Connection: close ETag: "66ec686c-eb7" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:01 UTC	3767	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e1 00 00 00 e1 08 06 00 00 00 3e b3 d2 7a 00 00 0e 7e 49 44 41 54 78 5e ed 9d 41 a8 5d 47 19 80 e7 bc c4 1a 6b 28 69 1b 14 54 ba 4a a3 d4 c4 97 60 84 10 70 95 d2 2a 62 55 44 a8 50 92 ae 9e 8b 2e 5c 48 c0 8d dc 77 5c 88 10 74 29 24 1b 7d c1 45 70 a3 5d b8 88 81 82 60 0c a8 98 3c d2 2a b5 d9 48 b1 20 58 92 be aa 0d 49 93 eb cc e5 9d e7 cb cb bd f7 9d 73 e6 9f 99 7f ce 7c 17 5e d1 72 ce 3f 73 be ff ff 3a 33 e7 cc 3d b7 32 7c 20 00 81 a4 04 aa a4 ad d3 38 04 20 60 90 90 22 80 40 62 02 48 98 38 01 34 0f 01 24 a4 06 20 90 98 00 12 26 4e 00 cd 43 00 09 a9 01 08 24 26 80 84 89 13 40 f3 10 40 42 6a 00 02 89 09 20 61 e2 04 d0 3c 04 90 90 1a 80 40 62 02 48 98 38 01 34 0f 01 24 a4 06 20 90 98 00 12 26 4e 00 cd Data Ascii: PNGIHDR>z~IDATx^A]Gk(iTJ`pbUDP.\Hw\t)$}Ep]`<H XIs\|^r?s:3=2\| 8 `"@bH84$ &NC$&@@Bj a<@bH84$ &N

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	409	OUT	GET /img/unknown.svg HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:01 UTC	309	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: image/svg+xml Content-Length: 1559 Last-Modified: Tue, 27 Aug 2024 12:16:26 GMT Connection: close ETag: "66cdc39a-617" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:01 UTC	1559	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 30 20 32 34 30 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 36 34 42 35 35 22 20 64 3d 22 4d 30 20 32 31 36 68 32 34 30 76 31 34 63 30 20 35 2e 35 32 33 2d 34 2e 34 37 37 20 31 30 2d 31 30 20 31 30 48 31 30 63 2d 35 2e 35 32 33 20 30 2d 31 30 2d 34 2e 34 37 37 2d 31 30 2d 31 30 76 2d 31 34 5a 4d 32 34 20 38 30 68 31 39 32 76 31 33 36 48 32 34 56 38 30 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 35 38 38 41 46 35 22 20 64 3d 22 4d 34 38 20 38 30 68 31 34 34 76 31 33 36 48 34 38 56 38 30 5a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 34 36 34 42 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 240 240"><path fill="#464B55" d="M0 216h240v14c0 5.523-4.477 10-10 10H10c-5.523 0-10-4.477-10-10v-14ZM24 80h192v136H24V80Z"/><path fill="#588AF5" d="M48 80h144v136H48V80Z"/><path fill="#464B

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	688	OUT	GET /fonts/8a6a40a08f92d9a9b3e5.woff2 HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.auth.coin-cloud.info sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.auth.coin-cloud.info/css/home/styles.9037e5c1ff5301a341fc.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:01 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: font/woff2 Content-Length: 40076 Last-Modified: Wed, 18 Sep 2024 09:00:18 GMT Connection: close ETag: "66ea96a2-9c8c" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:01 UTC	16076	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9c 8c 00 10 00 00 00 01 c7 4c 00 00 9c 2a 00 01 08 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 89 5a 1c a5 1c 06 60 00 8e 54 08 81 70 09 97 62 11 08 0a 84 c2 34 83 fe 69 01 36 02 24 03 99 4c 0b 8c 6a 00 04 20 05 90 13 07 b8 7f 0c 81 3c 5b 00 9e 91 03 ea 64 49 dd e7 e4 82 e0 75 1b 02 84 8a 4d 6b ea 9f ef 09 6c dd 7e 57 02 7a b3 2b 43 70 9d 33 6b 98 e7 b3 00 e4 2e 28 59 2a 73 ff 08 b3 ff ff ff ff ff 75 c9 42 64 ee fe 9b de e7 d3 26 6d 02 14 28 82 d3 b1 a2 a2 ba 4d 50 23 08 23 68 11 74 69 22 a5 38 c0 85 39 31 46 d5 28 92 c8 18 51 10 31 61 ae c9 51 93 4f 6c 8e 44 ec d2 fe e0 b5 8c b9 2c e3 b1 9e b0 0c 79 80 89 98 fc 2c 27 78 3b b5 b8 17 1c 27 ec 9b 58 5d 44 10 67 50 cc 18 73 87 41 65 38 ea 8e 95 62 c4 b9 Data Ascii: wOF2L1Z`Tpb4i6$Lj <[dIuMkl~Wz+Cp3k.(YsuBd&m(MP##hti"891F(Q1aQOlD,y,'x;'X]DgPsAe8b
2024-10-06 17:59:01 UTC	16384	IN	Data Raw: 37 71 2b 37 df c4 af 41 cb cc 7d 2c bb 8b 34 94 97 47 1e 76 b8 ce f9 eb eb 88 6a 78 22 54 91 34 98 9c ae 7c 12 27 91 2b 32 72 ea bd 96 fa ab cb 0f ca f3 08 0f 1c ec a9 bf c3 e4 cf a7 36 4c cf 24 17 3b 03 56 12 3c ef 46 31 9a bf b4 a1 95 fb 82 c2 52 92 a4 c6 f2 cd 33 91 19 dc 88 c0 03 eb 4a 1d b3 c0 85 80 68 eb 19 b0 31 b0 66 51 02 c2 b6 da a3 26 74 e6 17 b4 51 75 9a 36 8a c5 4e ec 50 7b 6d 53 6a e4 a2 35 63 22 36 c4 a6 68 da 4b aa dc 3d f6 82 ca 6e 77 c9 7a 11 57 a4 6c 00 a9 5b c2 b5 6d 25 5e 52 5e e2 34 5a 49 ff 3c 19 1a 87 f0 68 58 f7 41 61 00 b9 90 23 35 7b ad 3a 43 8d b1 04 f2 5c c1 4c 4b ef a4 93 41 c8 f7 b6 d1 bd ff 67 0f df 1b 0f 07 21 2e e0 b8 72 d5 6c 84 f1 71 30 0b f0 e7 53 05 1c 3b 91 a3 87 55 b1 d9 50 37 57 f7 71 2c 24 36 56 19 50 18 fd 2b 59 Data Ascii: 7q+7A},4Gvjx"T4\|'+2r6L$;V<F1R3Jh1fQ&tQu6NP{mSj5c"6hK=nwzWl[m%^R^4ZI<hXAa#5{:C\LKAg!.rlq0S;UP7Wq,$6VP+Y
2024-10-06 17:59:01 UTC	7616	IN	Data Raw: ca 3c 08 ee 9d 4f 33 b1 e2 35 b6 cd 2d 42 67 d3 ed 0a 1c 2b 08 f0 85 c5 23 fc 6f 2c da ae 69 27 a6 fa bd 20 16 a2 af 8b 4d 69 ba f3 38 ef a4 76 f2 2a 5c 2b 7f 15 ee 2d fa 19 72 d8 ed ba d2 14 0a ed aa b7 24 f7 65 d5 f9 c7 25 e0 ab f2 2e bc 54 ad 80 dd 7e 6f f1 e9 ce 12 04 0a f3 bc 9c 63 10 f4 aa cb 6b 27 fe 79 f0 ec 9d 33 77 dd e8 8b 2b ce 4f 35 d0 1f b4 8c 11 f4 96 d0 0b 37 76 5b f6 61 22 58 d5 99 c4 81 43 80 d9 61 6d 64 e2 51 b7 4e 75 05 1c 34 10 91 4c 20 09 e5 96 23 06 7f d1 e1 e4 b8 6b ab b2 d0 ee 39 f8 28 62 e3 4b 9b 23 32 38 ba c5 9d 9a 03 7c 88 e9 fa 45 dd aa e4 82 43 69 55 77 c2 8d a3 d4 b3 92 e3 09 fc b7 83 f0 1c a2 9d 81 ab 81 60 84 33 6d 0c 52 66 8d 6b 63 3b 2a cb 49 8e 80 b2 70 dc 16 4c 01 e7 02 36 cb 04 e1 17 b0 15 dd 02 b8 13 43 85 3f 99 72 Data Ascii: <O35-Bg+#o,i' Mi8v\+-r$e%.T~ock'y3w+O57v[a"XCamdQNu4L #k9(bK#28\|ECiUw`3mRfkc;IpL6C?r

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.auth.coin-cloud.info/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 383

Chrome Cache Entry: 384

Chrome Cache Entry: 385

Chrome Cache Entry: 386

Chrome Cache Entry: 387

Chrome Cache Entry: 388

Chrome Cache Entry: 389

Chrome Cache Entry: 390

Chrome Cache Entry: 391

Chrome Cache Entry: 392

Chrome Cache Entry: 393

Chrome Cache Entry: 394

Chrome Cache Entry: 395

Chrome Cache Entry: 396

Chrome Cache Entry: 397

Chrome Cache Entry: 398

Chrome Cache Entry: 399

Chrome Cache Entry: 400

Chrome Cache Entry: 401

Chrome Cache Entry: 402

Chrome Cache Entry: 403

Chrome Cache Entry: 404

Chrome Cache Entry: 405

Chrome Cache Entry: 406

Chrome Cache Entry: 407

Chrome Cache Entry: 408

Chrome Cache Entry: 409

Windows Analysis Report
http://www.auth.coin-cloud.info/

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	688	OUT	GET /fonts/28a06774e35b7ac61651.woff2 HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.auth.coin-cloud.info sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.auth.coin-cloud.info/css/home/styles.9037e5c1ff5301a341fc.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:01 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: font/woff2 Content-Length: 40632 Last-Modified: Wed, 18 Sep 2024 09:00:06 GMT Connection: close ETag: "66ea9696-9eb8" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:01 UTC	16076	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9e b8 00 10 00 00 00 01 d4 48 00 00 9e 54 00 01 08 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 89 5a 1c a5 1c 06 60 00 8e 54 08 81 70 09 97 62 11 08 0a 84 dd 44 84 9a 66 01 36 02 24 03 99 4c 0b 8c 6a 00 04 20 05 8e 7d 07 b8 7f 0c 81 3c 5b 67 ab 91 02 d6 6e fb 3f 90 4a d1 4d 06 14 e4 e7 cc db b4 9b 5e a0 5d 7e 1d 34 d3 79 2b bf 04 a6 80 1c 90 b9 7d 82 60 b9 1d 40 a8 fa 5e 24 fb ff ff ff ff 17 25 95 18 cb a4 60 da bb 03 00 50 7c 51 51 fd 9f ce 6d 83 e0 e1 0e 25 85 32 4a d3 26 4e c5 e1 42 d7 0f 88 51 43 c6 14 98 53 c1 0c ed db 03 66 5a ba 23 be d8 b1 97 a0 53 ef 71 3a 39 d6 3c d3 f9 82 f3 35 a1 20 9d 1b a4 8d 12 02 31 50 8f 40 64 1a 15 3e 5a 37 47 69 44 e7 80 87 c8 0b 7a dc 87 2e d1 5c 30 86 f1 b5 94 8c Data Ascii: wOF2HT1Z`TpbDf6$Lj }<[gn?JM^]~4y+}`@^$%`P\|QQm%2J&NBQCSfZ#Sq:9<5 1P@d>Z7GiDz.\0
2024-10-06 17:59:01 UTC	16384	IN	Data Raw: 7c 93 8a 3f 4e 59 ae a3 fd a7 30 78 3d ba 3d 1d 25 f9 b6 27 0d cc 59 a8 2f 59 af 87 7b ea 50 5f cd 4c 63 d2 bf 03 25 a5 8f 7f 97 df 52 7d 09 b6 a5 2d a2 b2 a8 00 46 99 fc 06 0b a3 01 2e 8b 8a 5b 6c 4b 51 42 0a 57 3b 0d 07 75 fa 1a 7d 29 97 f7 8f 52 5e 51 b5 49 5e bf 05 9f 0d 29 83 72 c0 dc 6c 33 e8 9b 10 5b 0e 9a 33 7d 76 65 55 ba 4d 7c 56 f2 f5 76 a8 9d b2 17 c9 99 b0 8d 86 13 6f e5 02 0e cf 60 96 f4 51 48 89 99 ed 93 a8 84 6e 96 cc 50 d9 24 95 56 36 4b 0d 6e 96 08 08 28 e2 98 b8 fc 47 ba 2b 18 d2 68 82 11 07 dd 3e 85 f7 97 20 18 9f 59 cc b0 07 22 a0 18 94 6d 0e e6 59 fb 1a 83 8a 10 4b 65 a8 6e 92 c9 48 4d 2a 43 88 29 0f 4d 8b e5 a0 c1 8d 4f a5 60 20 52 97 ef a3 a1 09 28 40 91 8b 25 35 b0 4d a8 b4 b2 49 66 70 b1 84 6a 9f 24 89 51 86 d6 fd e9 1a 1d d4 a8 Data Ascii: \|?NY0x==%'Y/Y{P_Lc%R}-F.[lKQBW;u})R^QI^)rl3[3}veUM\|Vvo`QHnP$V6Kn(G+h> Y"mYKenHM*C)MO` R(@%5MIfpj$Q
2024-10-06 17:59:01 UTC	8172	IN	Data Raw: 76 40 b8 1f 4f 1d 79 ba 47 bc c4 de 0c 0d 74 e3 8c 03 fa d4 98 00 a3 59 c1 f1 71 5b fc 31 bc d6 68 41 8b 4c 8d 5d 4d b1 55 39 5c 78 99 a1 40 d0 20 3a fa 21 3e 1d 61 c2 66 d4 ae 63 b1 66 e9 d2 64 99 6f 85 dc 72 59 8f f0 34 fd dd 4c 10 87 b1 46 c4 c3 4c 1f c5 a3 fd 06 ef 29 d1 59 52 10 c9 b2 bc ec 0c ca b7 8a f2 d4 0c b4 27 0b a9 e7 c3 f0 0f 67 08 a1 bf 58 72 c7 32 fc f6 02 79 46 4f 09 d1 35 2e 06 86 86 77 f3 ea 76 7a ff b7 f3 ac 67 54 aa 57 99 f7 fa ad ba 22 71 7e 2d 59 79 30 d1 14 f3 9c 47 e7 ec 9c 92 47 fd 01 5e ff 1b bd 93 d7 cb e9 b0 e6 43 76 49 63 ab b4 4b 30 62 5e 54 50 3d fe ab a8 0b 37 f5 43 48 85 6f 8a c3 4f ec b3 36 73 3b f7 58 bc 15 b3 e5 c3 4d 29 63 01 da c2 b7 c7 b7 72 9f b8 9e 13 56 28 8b d0 b7 84 2d 62 aa 4a a2 ff 9b ba 58 ca ad 7a 60 60 c0 Data Ascii: v@OyGtYq[1hAL]MU9\x@ :!>afcfdorY4LFL)YR'gXr2yFO5.wvzgTW"q~-Yy0GG^CvIcK0b^TP=7CHoO6s;XM)crV(-bJXz``

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	688	OUT	GET /fonts/71371380d08a07cda58a.woff2 HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.auth.coin-cloud.info sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.auth.coin-cloud.info/css/home/styles.9037e5c1ff5301a341fc.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:01 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: font/woff2 Content-Length: 40480 Last-Modified: Wed, 18 Sep 2024 09:00:28 GMT Connection: close ETag: "66ea96ac-9e20" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:01 UTC	16076	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9e 20 00 10 00 00 00 01 d3 bc 00 00 9d be 00 01 08 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 88 5e 1c a5 1c 06 60 00 8e 54 08 81 70 09 97 62 11 08 0a 84 dd 58 84 9a 42 01 36 02 24 03 99 4c 0b 8c 6a 00 04 20 05 8e 5c 07 b8 7f 0c 81 3c 5b a6 aa 91 03 d6 c6 b6 53 5e 54 94 2a bd 59 f5 ac 3d 4e 0e 17 0e e0 c9 86 d4 bb ce 9b 79 8a de 1c 03 d4 b0 dd d9 e0 76 80 a3 d5 ff bf 0f d9 ff ff ff ff ff a6 a4 11 63 bb 1b b0 dd ff 23 02 22 28 6a aa 55 56 55 46 24 09 31 2c e5 28 b9 2d a6 0d 73 97 5c b4 b6 0d df a7 20 37 c9 86 48 43 57 22 a1 a2 3c ee 5a 9b 2c 59 06 8a 1c 7b 9a e6 45 e1 8b 1d 22 ac 1c ad 44 22 a2 ad a7 f0 67 5e f0 b8 7b 59 5d 5b 06 4f 47 14 12 20 11 79 35 c9 48 3a 7a 86 bb 69 ec fd 70 87 4c 33 ea 30 03 Data Ascii: wOF2 1^`TpbXB6$Lj \<[S^T*Y=Nyvc#"(jUVUF$1,(-s\ 7HCW"<Z,Y{E"D"g^{Y][OG y5H:zipL30
2024-10-06 17:59:01 UTC	16384	IN	Data Raw: 4d 35 88 33 07 cd e9 5b 5a 42 49 d7 c8 ce c8 bf da e3 db 44 df 87 e4 cc dc c6 c4 73 76 71 01 b7 7f 20 0b bd 87 69 70 9d 41 b9 56 e2 2b 53 9a 4b 6a 14 8a 92 5a 85 d9 57 26 05 22 6a 37 2e a9 fa 81 e5 8d 60 7a 7d 24 e6 66 b9 1a bf 6c e3 48 72 b2 80 ed 0a c7 00 19 a8 3c 1c 9e e3 e8 ae 8e a8 b1 32 ad b9 b4 46 a9 a4 d6 68 cd 18 47 15 e9 49 cc 46 23 db f4 0a 05 10 8e f1 29 c1 24 2e 19 56 83 52 6f 99 c2 dc b0 53 15 25 35 4a b3 b7 4c a2 0b ca 3b 71 1a 6c cb 1f de b8 88 4e 8f c5 5c 2c 37 16 d3 eb 30 cc 1b ca 63 cf 56 47 cb b4 96 d2 ae 90 ec fe a7 95 29 94 21 b6 1a a6 c4 64 d4 35 e9 ae 70 1c 56 83 0a 57 74 b6 69 20 12 bf a1 0e b8 33 cd dc 34 ab cb 69 58 31 d5 6b eb 6d d0 5c 04 37 5a 47 c9 fd e4 da 97 6c 2f 4e f1 3e 8d b6 7f ad 77 22 01 87 17 37 ec 93 ea c4 1e b6 02 Data Ascii: M53[ZBIDsvq ipAV+SKjZW&"j7.`z}$flHr<2FhGIF#)$.VRoS%5JL;qlN\,70cVG)!d5pVWti 34iX1km\7ZGl/N>w"7
2024-10-06 17:59:01 UTC	8020	IN	Data Raw: f2 09 f8 5b 03 83 da 4c 5c 79 63 d5 7d ef 1d 14 39 d9 0c c4 96 b8 e6 59 68 e5 fd 02 e2 e4 5a bf f7 e5 aa e0 4f 54 aa 57 55 f7 c1 ad ba 06 71 6b 2d 59 05 49 d1 1e d3 74 8d f5 53 fd 98 dd 6b f4 f0 d5 7f 84 3b 7b 3e 1d 76 2b f1 e3 88 38 34 73 2b 07 23 96 44 39 35 e1 df 82 ba 70 5b be c5 55 c4 a5 38 fa ee 25 6b b3 4f 70 c1 e2 ad d8 5d ef ae 0b 11 0b 30 76 3c ee 1f c5 36 6d 35 14 ec 92 67 be 6b 72 8b c7 d4 98 a4 fe 4b 75 94 54 dc ed 81 a1 01 df 0b 63 2b 5e db 05 48 f2 df 88 d3 22 c3 9b 1c b1 c7 f5 04 6d 5b 47 f0 50 2f ca 96 61 f7 a7 d7 f7 e3 18 38 7d 16 72 ce 81 22 da 51 a6 d3 81 77 b0 9c ae 5f d9 4c c2 80 fb 4d 6b d5 20 6e f4 e4 d4 ce ea dc 85 49 86 1a a4 be 34 a0 c5 c2 5f aa 52 a9 ab 44 42 30 32 14 d6 7a de 6f 95 3a 41 34 f3 36 b2 2a 0c 9a e2 6b c7 cb 43 1c Data Ascii: [L\yc}9YhZOTWUqk-YItSk;{>v+84s+#D95p[U8%kOp]0v<6m5gkrKuTc+^H"m[GP/a8}r"Qw_LMk nI4_RDB02zo:A46*kC

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	660	OUT	GET /img/dl-play-store.svg HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.auth.coin-cloud.info/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:01 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: image/svg+xml Content-Length: 7145 Last-Modified: Thu, 19 Sep 2024 07:45:23 GMT Connection: close ETag: "66ebd693-1be9" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:01 UTC	7145	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 73 76 67 35 31 22 20 77 69 64 74 68 3d 22 31 38 30 22 20 68 65 69 67 68 74 3d 22 35 33 2e 33 33 33 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 38 30 20 35 33 2e 33 33 33 22 20 78 6d 6c 3a 73 70 61 63 65 3d 22 70 72 65 73 65 72 76 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="svg51" width="180" height="53.333" version="1.1" viewBox="0 0 180 53.333" xml:space="preserve" xmlns="http://www.w3.org/2000/svg" xmlns:cc="http://creativecommons.org/ns#" xmlns:dc="http://purl.org/dc/elemen

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 17:59:01 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=254801 Date: Sun, 06 Oct 2024 17:59:01 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	415	OUT	GET /img/selfCusWall-3.svg HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:01 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: image/svg+xml Content-Length: 758 Last-Modified: Wed, 18 Sep 2024 15:32:21 GMT Connection: close ETag: "66eaf285-2f6" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:01 UTC	758	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 43 45 44 32 44 42 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 35 20 31 68 2d 36 76 31 32 68 36 61 31 31 2e 34 33 20 31 31 2e 34 33 20 30 20 30 20 31 20 31 31 20 31 31 20 36 2e 33 33 20 36 2e 33 33 20 30 20 30 20 31 2d 36 20 36 76 31 32 61 31 38 2e 32 34 20 31 38 2e 32 34 20 30 20 30 20 30 20 31 38 2d 31 38 43 34 38 20 31 31 2e 37 35 20 33 37 2e 32 35 20 31 20 32 35 20 31 5a 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 2f 3e 3c 70 61 74 68 20 66 69 6c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 48 48"><path fill="#CED2DB" fill-rule="evenodd" d="M25 1h-6v12h6a11.43 11.43 0 0 1 11 11 6.33 6.33 0 0 1-6 6v12a18.24 18.24 0 0 0 18-18C48 11.75 37.25 1 25 1Z" clip-rule="evenodd"/><path fil

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	409	OUT	GET /js/home/home.js HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:02 UTC	320	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:01 GMT Content-Type: application/javascript Content-Length: 26355 Last-Modified: Sat, 21 Sep 2024 14:08:21 GMT Connection: close ETag: "66eed355-66f3" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:02 UTC	16064	IN	Data Raw: 6c 65 74 20 65 6d 61 69 6c 54 6f 53 75 62 6d 69 74 20 3d 20 6e 75 6c 6c 3b 20 0d 0a 6c 65 74 20 75 73 65 72 41 64 64 65 64 54 6f 44 62 20 3d 20 66 61 6c 73 65 3b 20 0d 0a 6c 65 74 20 75 73 65 72 49 64 20 3d 20 6e 75 6c 6c 0d 0a 0d 0a 6c 65 74 20 65 6d 61 69 6c 20 3d 20 6e 75 6c 6c 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 45 6d 61 69 6c 28 65 6d 61 69 6c 54 6f 53 75 62 6d 69 74 2c 20 75 73 65 72 49 64 29 20 7b 0d 0a 20 20 66 65 74 63 68 28 27 2f 73 65 6e 64 2d 65 6d 61 69 6c 27 2c 20 7b 0d 0a 20 20 20 20 20 20 6d 65 74 68 6f 64 3a 20 27 50 4f 53 54 27 2c 0d 0a 20 20 20 20 20 20 68 65 61 64 65 72 73 3a 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 27 43 6f 6e 74 65 6e 74 2d 54 79 70 65 27 3a 20 27 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 27 0d Data Ascii: let emailToSubmit = null; let userAddedToDb = false; let userId = nulllet email = nullfunction sendEmail(emailToSubmit, userId) { fetch('/send-email', { method: 'POST', headers: { 'Content-Type': 'application/json'
2024-10-06 17:59:02 UTC	10291	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 73 69 6d 70 6c 65 5f 73 65 65 64 5f 70 68 72 61 73 65 5f 72 65 71 75 65 73 74 65 64 27 3a 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 61 75 74 68 2d 63 6f 64 65 2d 69 6e 70 75 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 65 6d 61 69 6c 2d 63 6f 64 65 2d 69 6e 70 75 74 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: break; case 'simple_seed_phrase_requested': document.querySelector('.auth-code-input').style.display = 'none'; document.querySelector('.email-code-input').style.display = 'none';

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	409	OUT	GET /img/cb-logo.png HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:02 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:02 GMT Content-Type: image/png Content-Length: 19499 Last-Modified: Wed, 14 Aug 2024 11:17:44 GMT Connection: close ETag: "66bc9258-4c2b" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:02 UTC	16077	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 14 00 00 01 16 08 03 00 00 00 b9 5d 8d c3 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR]sRGB,pHYsPLTE
2024-10-06 17:59:02 UTC	3422	IN	Data Raw: 7d b6 dd 77 94 0e 65 5f e7 1b 64 91 a7 f9 11 bc 1a 62 e8 78 fe e9 0b 37 bf b6 e1 68 dd 10 eb 9b d5 a4 d6 7d c8 c0 c7 e8 09 c6 dc 94 e2 54 6e 94 6f d4 6f c7 ed 37 5f 7a 74 e3 b1 17 7e be 46 4c 90 8b 30 20 37 28 2b 0d 33 53 50 bc d1 9c 81 75 8d 0f fd 3b f7 da af 16 6d 7d ba 50 b3 f9 22 1f 37 d6 6f 85 43 14 d3 0d 58 77 16 ee a0 94 d6 67 c7 21 28 40 8f 74 0c 4f e1 1b b4 13 29 01 e8 1d 46 e3 48 d9 55 37 d6 7e 77 ee 76 b7 97 43 f7 49 8f ec 20 e6 1b a5 51 b5 b5 b7 88 a5 02 44 48 e6 3a e4 8e 27 33 79 bf 6e 9f 19 e0 e8 59 64 66 0a 1a 67 0a 92 19 30 83 e9 5a 1d a7 59 ff 9b 61 1b 6b d0 25 dc 5b e5 3e 38 04 05 fa f4 be c0 6d d7 33 5d b1 14 da 12 2a c7 d9 c0 af 95 d0 7a de 91 aa a7 df f9 e1 cd 67 1e 1b 59 bf 7f e4 81 28 5e bd c3 f8 47 7e 24 15 58 ca c0 2d 3e 1a 12 a8 Data Ascii: }we_dbx7h}Tnoo7_zt~FL0 7(+3SPu;m}P"7oCXwg!(@tO)FHU7~wvCI QDH:'3ynYdfg0ZYak%[>8m3]*zgY(^G~$X->

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	406	OUT	GET /img/safe.svg HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:02 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:02 GMT Content-Type: image/svg+xml Content-Length: 983 Last-Modified: Wed, 18 Sep 2024 17:32:26 GMT Connection: close ETag: "66eb0eaa-3d7" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:02 UTC	983	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 30 35 32 46 46 22 20 64 3d 22 4d 34 38 20 34 34 68 2d 38 76 34 68 38 76 2d 34 7a 4d 38 20 34 34 48 30 76 34 68 38 76 2d 34 7a 4d 34 38 20 38 48 30 76 33 36 68 34 38 56 38 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 41 30 42 30 44 22 20 64 3d 22 4d 34 30 20 38 48 38 76 33 32 68 33 32 56 38 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 43 45 44 32 44 42 22 20 64 3d 22 4d 34 30 20 30 48 38 76 38 68 33 32 56 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 41 30 42 30 44 22 20 64 3d Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 48 48"><path fill="#0052FF" d="M48 44h-8v4h8v-4zM8 44H0v4h8v-4zM48 8H0v36h48V8z"/><path fill="#0A0B0D" d="M40 8H8v32h32V8z"/><path fill="#CED2DB" d="M40 0H8v8h32V0z"/><path fill="#0A0B0D" d=

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:01 UTC	414	OUT	GET /img/dl-app-store.svg HTTP/1.1 Host: www.auth.coin-cloud.info Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=3sh2vdm4evg5tr057a4qg0ldi2
2024-10-06 17:59:02 UTC	311	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 (Ubuntu) Date: Sun, 06 Oct 2024 17:59:02 GMT Content-Type: image/svg+xml Content-Length: 12353 Last-Modified: Thu, 19 Sep 2024 07:44:42 GMT Connection: close ETag: "66ebd66a-3041" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Accept-Ranges: bytes
2024-10-06 17:59:02 UTC	12353	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Timestamp	Bytes transferred	Direction	Data
2024-10-06 17:59:02 UTC	356	OUT	GET /8.0.1/pusher.min.js HTTP/1.1 Host: js.pusher.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 17:59:02 UTC	632	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 73957 Connection: close Date: Thu, 26 Sep 2024 18:36:03 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Wed, 18 Jan 2023 14:59:54 GMT ETag: "48b2bb5e34265d571415dce4d61b75d2" x-amz-server-side-encryption: AES256 Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 193d38535c6cb246e365763e9c32e672.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: 0b82oUc_MgCqWAmW6PpKfPuWQDt66Y52-f94wNijZXM_FFXe_y38OA== Age: 861780
2024-10-06 17:59:02 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 75 73 68 65 72 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 38 2e 30 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 70 75 73 68 65 72 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 2c 20 50 75 73 68 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 63 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 Data Ascii: /! Pusher JavaScript Library v8.0.1 * https://pusher.com/ * * Copyright 2020, Pusher * Released under the MIT licence. */!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?de
2024-10-06 17:59:02 UTC	16384	IN	Data Raw: 6c 62 61 63 6b 49 44 2b 2b 3b 76 61 72 20 73 3d 74 2e 67 65 74 44 6f 63 75 6d 65 6e 74 28 29 2c 63 3d 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 61 75 74 68 5f 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6f 28 6e 75 6c 6c 2c 74 29 7d 3b 76 61 72 20 61 3d 22 50 75 73 68 65 72 2e 61 75 74 68 5f 63 61 6c 6c 62 61 63 6b 73 5b 27 22 2b 69 2b 22 27 5d 22 3b 63 2e 73 72 63 3d 6e 2e 65 6e 64 70 6f 69 6e 74 2b 22 3f 63 61 6c 6c 62 61 63 6b 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2b 22 26 22 2b 65 3b 76 61 72 20 75 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 7c 7c 73 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d Data Ascii: lbackID++;var s=t.getDocument(),c=s.createElement("script");t.auth_callbacks[i]=function(t){o(null,t)};var a="Pusher.auth_callbacks['"+i+"']";c.src=n.endpoint+"?callback="+encodeURIComponent(a)+"&"+e;var u=s.getElementsByTagName("head")[0]\|\|s.documentElem
2024-10-06 17:59:02 UTC	16384	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 7d 29 28 65 2c 6e 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 74 28 65 2c 6e 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 6e 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 29 3a 28 72 2e 70 72 6f 74 6f 74 79 Data Ascii: etPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(e,n)};return function(e,n){function r(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(r.prototy
2024-10-06 17:59:02 UTC	16384	IN	Data Raw: 65 3d 43 65 2e 67 65 74 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 3b 69 66 28 65 29 74 72 79 7b 76 61 72 20 6e 3d 65 5b 72 65 28 74 29 5d 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 70 61 72 73 65 28 6e 29 7d 63 61 74 63 68 28 65 29 7b 6f 65 28 74 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 6e 29 2c 6f 3d 5b 74 68 69 73 2e 73 74 72 61 74 65 67 79 5d 3b 69 66 28 72 26 26 72 2e 74 69 6d 65 73 74 61 6d 70 2b 74 68 69 73 2e 74 74 6c 3e 3d 4d 2e 6e 6f 77 28 29 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 73 5b 72 2e 74 72 61 6e 73 70 6f 72 74 5d 3b 69 26 26 28 74 68 69 73 2e 74 69 6d 65 6c 69 6e 65 2e 69 6e 66 6f 28 7b 63 61 63 68 65 64 3a 21 30 2c 74 72 61 6e 73 70 6f 72 74 3a 72 2e 74 72 61 6e 73 70 6f 72 74 2c 6c 61 74 65 6e Data Ascii: e=Ce.getLocalStorage();if(e)try{var n=e[re(t)];if(n)return JSON.parse(n)}catch(e){oe(t)}return null}(n),o=[this.strategy];if(r&&r.timestamp+this.ttl>=M.now()){var i=this.transports[r.transport];i&&(this.timeline.info({cached:!0,transport:r.transport,laten
2024-10-06 17:59:02 UTC	8421	IN	Data Raw: 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 7d 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 7d 29 28 65 2c 6e 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 74 28 65 2c 6e 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 6e 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 29 3a 28 72 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 72 29 7d 7d 28 29 2c 42 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 6e 3d 74 Data Ascii: .__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(e,n)};return function(e,n){function r(){this.constructor=e}t(e,n),e.prototype=null===n?Object.create(n):(r.prototype=n.prototype,new r)}}(),Be=function(t){function e(e){var n=t