WEBSITE ANALYSIS REPORT

http://coinbase-pro-tax.pages.dev/

20 Oct 2026 · 08:46:30.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:46:02.321 GET 403 document 4.4 KB 39 ms 4 alerts

08:46:02.480 GET 403 document 4.4 KB 3187 ms 4 alerts

08:46:05.978 GET 200 stylesheet 23.5 KB 24 ms 4 alerts

08:46:05.980 GET 302 script 0 B 15 ms —

08:46:06.028 GET 200 img 452 B 20 ms 4 alerts

08:46:06.053 GET 301 img 0 B 32 ms 4 alerts

08:46:06.074 GET 200 script 84.7 KB 7 ms —

08:46:06.122 GET 200 img 3.8 KB 46 ms 4 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://coinbase-pro-tax.pages.dev/favicon.ico

IP / ASN

172.66.47.85

AS13335 · CLOUDFLARENET

Requested by: http://coinbase-pro-tax.pages.dev/

Resource information

File type: MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with - PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel
MIME type: image/x-icon
First seen (UTC): 12 Apr 2023 · 20:45:07.000 UTC
Last seen (UTC): 21 Oct 2026 · 22:15:49.068 UTC
Times seen: 12427

Size: 3.8 KB (3870 bytes)
MD5: c92b85a5b907c70211f4ec25e29a8c4a
SHA1: 1120538c77ad1f28a89243b4b53fe2ac16cc3bc6
SHA256: 3d10f7da6c603178340081668c4ac5b3ae9743ca9a262ab0fcd312fbb9f48bdd

Certificate information

Issuer: Google Trust Services · WE1
Subject: coinbase-pro-tax.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 63:AF:29:6A:AD:28:7A:A7:70:A0:EF:DB:36:5C:50:09:4E:C1:C3:5E
Valid from: Mon, 19 Oct 2026 10:37:26 GMT
Valid until: Sun, 17 Jan 2027 11:31:57 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: coinbase-pro-tax.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Tue, 20 Oct 2026 08:46:06 GMT
content-type: image/vnd.microsoft.icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZqE5QmfxqZAoomXb87y%2BtVTS%2B0pVkDsMVgDRJ6NH7vo7Be0kR9utVLb8Ff7uennFxJVnPGJMqMaGgxMYJ%2FMinWE%2BAu6T5SuhXarscjASSqn4pmyJENgMYxWKvDillCEeoKXb7wlgt%2Fx7iR8vaA%3D%3D"}]}
etag: W/"aa92c013eff7a7976ff11896c5a643bf"
content-encoding: br
server: cloudflare
cf-ray: a4d6c0085d4523eb-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

http://coinbase-pro-tax.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://coinbase-pro-tax.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://coinbase-pro-tax.pages.dev/

Domain graph

Network requests