{"report_id":"413b66e5-4d7a-48f5-9f72-b0a28724ecc7","version":6,"status":"done","tags":[],"date":"2026-05-06T10:51:26Z","url":{"schema":"http","addr":"webmail.desk-coinbase.com","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"104.21.84.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"title":"Cenometar.rs — Cene nekretnina u Novom Sadu i Zrenjaninu","dom":{"size":34080,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33638)","md5":"fd7ef2b4335e53321544bd90f8b7b050","sha1":"cc19bbcffffea2d0ad2494d4608f19868bed3dbe","sha256":"8bff9c284293d6e1c9c41afc5f2383f82ac7ff788bdba83e6a535535cb8f9199","sha512":"78e48b0216f36ff41b586515ea2505ad50c29a3c070f9c1b853d513d9746f188cf8f9137f079fa8303069ab6a70bde3840e998c515b2a269f07e90e4475ce57c","ssdeep":"768:Yhu3v1FoFuwTHhho1/ViijvqWwq8f25nfeZw1BSG4KL9nXjOd7GDMMcj0WrjLdKQ:ft8uwQCl","tlshash":"70e23038b442ce5ef85b6d59203d9e39508ed66fc257ce29e2ecd65103c3c79ab91ac0","dom_hash":"domhash0fb4599bae9663d92172871496b2c7bd","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"webmail.desk-coinbase.com","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"104.21.84.114","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-10T10:51:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-03T22:25:11.554838Z","alert_count":0,"request_count":1,"received_data":473008,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"webmail.desk-coinbase.com","ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-14","domain_rank":0,"first_seen":"2026-05-06T10:51:28.631061Z","last_seen":"2026-05-06T10:51:28.631061Z","alert_count":98,"request_count":49,"received_data":2545390,"sent_data":24785,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/c0de0ef8a17cefdc.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b832963632cc0a95ee4fff6a34514fec","sha1":"c98a0585723ae1b89e195f048051f513a76f3602","sha256":"62be7129ce910c306ddb0371c13dd806d3744c07ef2896f987aa4a8e888cc713","sha512":"8bf7f61860af688e51a497ea821b3128e8faa0ffc59ea2edc2a60273b4301ebc4a7a157ff1e8d6189212fd785b182a32b0b10e016d8a59f44976c9f7a4516247","ssdeep":"384:GjCDGGRg4RfrTfIVZ/X+0o3NkOG4+Z47aMSwTSGFJl:4Of/8Z/X+0o3KZzZ47aYF","tlshash":"1ae2c6b572d4faa2139340f0c83f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","size":33297,"data":"","first_seen":"2026-05-06T10:51:33.854532Z","last_seen":"2026-05-06T10:51:33.854532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/a788f517f12da095.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd38bf6c9cfe94fea683729dc5d1e5b4","sha1":"40d66615f0ae638ec256e51e9c781ab61a51eea0","sha256":"33d12bf07329291038b0a855fa93f9c5d45eca388da983c440186586d1ff1af0","sha512":"3d8eb8cb68d44bb105a4ee965d1ee8270a49043c85bb12b6469cf5e3320633f1f27813b3da2887b69098d58c5cd9f45064dcc420d69fb629b1735f54ed5fa67a","ssdeep":"1536:iPt9I3dPBQ8aJaRr1jOvMvZq5iOWIoP4Ljt/zYdjo:i29akfjoM+iOWQt/gjo","tlshash":"f1b318f935d1f4820ba744a6c03f0006f32c5d37189e68a0a3e5edda756459de1b3faa","size":114965,"data":"","first_seen":"2026-05-06T10:51:33.881064Z","last_seen":"2026-05-06T10:51:33.881064Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/b6c063c6d3a97cc4.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6414cca3507eb32ffff6f8c334a881a2","sha1":"581f51af62f2069c7a3562c20765cb19873f603d","sha256":"869bbf5122a9fd4e5f34be01ae7243b61f6c52b6b3500c17e2ee9397e3c24867","sha512":"ad960b4ed2313fef76985857c361e514beb09424d97e1207f6d63c24508af41f4853c2118b39bbe455b8ecca762f76d2a08a2aaf15217a0991de9e77fd538d8b","ssdeep":"768:WmCGRHlktLps9HhXHBcxRjfd4TU7MRtnO9uwCACAw:WwHMs9BXH6RdeUha","tlshash":"02e22bb572d5fcd6429b8184843f400df3791d75642eb094b3f98cea666098ce1b2fba","size":31141,"data":"","first_seen":"2026-05-06T10:51:33.882011Z","last_seen":"2026-05-06T10:51:33.882011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4V0X484FCS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e758d549029138020e60eb2906b53d7d","sha1":"3012ff2de3c257c8fdee7c2b6208bfc4d986a03f","sha256":"e87428f2611663bce36adf8f0a9f05a35dceae1ed5bf28871f5b4f4b7c84d647","sha512":"ce9b884e573c08401b0e8b96a1499ce72012bc87d6d7204773bdc0e8e1abe22fb9391d0d91c722fd9a86a82e9c79ac9fc5c37713ff3b280b3a5aa9990b8fb241","ssdeep":"6144:36ps1lRxSFzY/JI+AEpjDCer6F5gjbzDfS5RNncjw:PRx2Y/JIobvDq6w","tlshash":"5ca4e8ceb3d674625396f478903f018ba57b29a2b44cc899f189cce42e7465a4237f7c","size":472404,"data":"","first_seen":"2026-05-06T10:51:33.871516Z","last_seen":"2026-05-06T10:51:33.871516Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-05-17T14:14:52.059748Z","times_seen":130551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"49065b8b9989efab0740bee1d0c63c49","sha1":"1a472c2cf3d9f7139b2b76b3cbdb6317d045faba","sha256":"557107044a23e6450b17a314df51c2eebd95e26ad5cb26f47bea7fa1ea502c0b","sha512":"b59d344ea7f78a028eb477e8e4061f9a540c92aa28c26a1db7a445954cb42c16c6a78083e7f13d328bb711c0767e18d9ccdf5d99f4e4634ca81fd1a3d05dc2e3","ssdeep":"","tlshash":"ab31a64bf54ff9902929ce2f541b2f7548c0ed76807840aeb24fdbc80167e6603989eb","size":1469,"data":"","first_seen":"2026-05-06T10:51:33.887083Z","last_seen":"2026-05-06T10:51:33.887083Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eda065b2c2e7338c6bfa61cb98bf0219","sha1":"6a1da82f0b51bf5085f590bfe315e2a41144d86b","sha256":"ab2608b8fb5806222a2a5e4514fde8e797b3c2c31287e45b96288d59ad728475","sha512":"f616fad50c9751b7467b163f29b74f18d58e109517dac89939878f0148b6aef069dfe1e2097dc49c9d9c2bc20c170d9ec1244fb2da3f59fe81b9b66ec01cecb7","ssdeep":"96:LgrRZC7cg1xqzc/xmWewlxkoE4NJhQC+9+N9l45Y0:krXgnqzcpmUy4KL9d5v","tlshash":"e2b1fc3c700ace5dfc5a3d55123e9d39208d866f8786de74d69cde11078207e7b929c0","size":5423,"data":"","first_seen":"2026-05-06T10:51:33.887799Z","last_seen":"2026-05-06T10:51:33.887799Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/b021b6d8e3f82e0d.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0d64843ef004a7a6d1ba33ad5c7e6a5","sha1":"51f5c581489846440748e7bb79a29a42298f3c4e","sha256":"5e171ff80071dd7415a46f1d67ed0105b36f397f889fe2f8dce34380ce101342","sha512":"8dc49f7ae3849f6ef416c4536758aa965cfb7c5d8ba09a66bd8464529bf205d88a7853ac1bf2846d636221c078b904d82d623a89ce1d46c4315067c0aed1020c","ssdeep":"","tlshash":"5d41f14de059a7dd782924d1c86f940c751f5ebdc64fd8b6e8bbb8441924ce83703b89","size":2369,"data":"","first_seen":"2026-05-06T10:51:33.843529Z","last_seen":"2026-05-06T10:51:33.843529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/a6c9df0c73e64660.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"104.21.84.114","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14b013f96bdbaf22f2dcc03cfb91ee53","sha1":"2f716a74865521c822787ea8684136a4359af302","sha256":"7f19666ddbe6ef22f3204d1305cea968716c6355edb3af7a4c47ea2180e318e3","sha512":"15840a192239726897c5e52a247e8218a6747cb61dcb7230429bc9d7bcc700d29738e35322da8f43f3cc85139076563350ed8b344821d01d6b4dcf075dcba87e","ssdeep":"384:fWP5z75Bq9E0miXmRR0cJ3uf79Fg/CKs8qWtOPSNRXpV:E5z9BX0xM5x7XpV","tlshash":"24d2d8b17395f9b252db85d9d02a0005f2290c3530ae24b0b395dcef365dd8992fafb9","size":30677,"data":"","first_seen":"2026-05-06T10:51:33.848363Z","last_seen":"2026-05-06T10:51:33.848363Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/92567dbbe761973b.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"645e4cbdf45429854ab70b823d3b52b1","sha1":"6c6433ee7992076d0abe16afa4258a590be0f85c","sha256":"4dad7a60a32781000635ddf7eb28372faa6d7536bf19c42fc032bcba39070eb3","sha512":"c3e9bae7525868b1c73aed5802b92142dcfdd427df5e2e2ab4a4a4561ce35021a4b9d0e74cc9f1328a99d479b9dce7bd3af516bfbcb940e54ce20b19537b74c1","ssdeep":"3072:JPXLIl5FnVcmpJPMdq38TgVtiREsTMVmL6Cst19pKPcl:JPXLI3FnVcmpOws42xst19pKPcl","tlshash":"9d240be83955f6626eb302a710af1803733c252b280d4d60a611fddeb57845eb17bf9e","size":223450,"data":"","first_seen":"2026-05-06T10:51:33.855347Z","last_seen":"2026-05-06T10:51:33.855347Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"df9529f062a8b42c34f80ed2bb8b0fea","sha1":"3f8c29ccb2061435993841b6095bdbcbc903ba53","sha256":"5d63db4344fa3dc0816341e02a1dc5c71f6a2d7c5e2e4ad62273434e75f1c423","sha512":"2823aa50f5569a93548c6489792f9f95bfe1c631a716355088f2e9422c825dbd79127bbbcaf26de3a3b7ca1adf088c294c4e8da2990b87ed1daca548a59f3dcc","ssdeep":"","tlshash":"f54104b2fc05dd06ea6e7d491c7e6f7420cdc2674144da5a92dccf204983eb86bb1ac4","size":2398,"data":"","first_seen":"2026-05-06T10:51:33.888641Z","last_seen":"2026-05-06T10:51:33.888641Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/turbopack-c8a207bbc6725f25.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52210d00d419e0b4d1b5e286ae204b4b","sha1":"dd4656197734e847c3f56cbc687ac92778cd59bf","sha256":"40225364cd4341a4bd9e91e094a32b5646143bc5632fa1b54f333a9856277fa5","sha512":"805c5b63e137c7bb47fcc8e2e898b55e09e3d7198e91889ce58ee6832b2400edaaa3e20558fe9cc602b6ab95c42bbad9a768f26e366da53942b0e134018dbae2","ssdeep":"192:q7iSFn8/Esp1Uj5EG5T1uCO9ledFMhMrg4W9PZcxkUk1IsS:q7iS2gvO9lenkJZZQl","tlshash":"4f22e7da33a6f0b743afa4e6907f4044f17944a8141d581c93aca8fb383946e49e3f67","size":10232,"data":"","first_seen":"2026-05-06T10:51:33.870621Z","last_seen":"2026-05-06T10:51:33.870621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/e916b0b9639833d8.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d274c4e0f63fd46f677e8e0f395503","sha1":"8241b887dc17342ef6d0b979f58c4d2641bbe2eb","sha256":"054befd9f5573c27105d9cf8cf448a0fb56bc1dedd5fd304f0e484c484b06499","sha512":"7b77a375f63246a924930f181447648b9f7666423e6e4ea762343984fbae7ca331dd9f4b3de8cd503735e57428e263d3385caeda53b0a4cfbdd4b481c364d9c0","ssdeep":"","tlshash":"dbd02b702254fcd44086a0cc8836424bf569247266fe7495d7ae8cf16574f0d51e1955","size":282,"data":"","first_seen":"2026-03-28T03:34:31.710253Z","last_seen":"2026-05-06T10:51:33.856196Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b19f9e6a5705ac47c6df5b6f156ca6bf","sha1":"ed1a1f34ea5fd8f249df66e1a513bd34992056ed","sha256":"b76bc23a2c0125d697858f4d6f48180964440bb3d4cc35db9ae016cf07e54d05","sha512":"54ca25cd9106cd06d4a948b910471d561a9216c66a589fc4e33d8db0de50ad3de75fc5aeff7dfdf32077fc7fea273d8ec4523b561dab0681b889a86936fa71e3","ssdeep":"","tlshash":"c7d08c8c210b1cb142b72a450b6fa200b0063213989099213e1eb3045f20e07d748854","size":202,"data":"","first_seen":"2026-05-06T10:51:33.889444Z","last_seen":"2026-05-06T10:51:33.889444Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/f676ed52c020cfc9.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55986b75850a7864061e3805028ea0df","sha1":"a1eb5ec5fcabb35edce59743a5a52570d87a29d4","sha256":"a629d2edb6347127b3f888995ee8b9b2fb44fcdd77d113fd48692a7b01dc4a90","sha512":"6da70b19bc77b8e153fd65270d86444835b667d0ac06c108dca2c3fbacdca3ca5f9f5df97ac7a71a909be2c2a88b52a57afe613e5efa1ca8fbbac5c6d5784df5","ssdeep":"384:sYC48rnwvNO8eWzJ6mtgKniYfPG2urHej6Z1MX+YjYve/5RwaxrRpkZLNvEFgw/x:BC484ODUGMX+qB5R5RpWN8/1nUS","tlshash":"49d2b6a971d4f8a117a354e4803f500bf23e0d7a246db0b4e3a2ddea79a054dd133f9a","size":28350,"data":"","first_seen":"2026-05-06T10:51:33.842621Z","last_seen":"2026-05-06T10:51:33.842621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfdb90fbc889fe624a9180e648c63acf","sha1":"e8597332b5a026a65fc50ad1df7f5d2c3643a6c9","sha256":"44aa21e5de7bc2f1c4cf4ce20fac09832763288261d2752184061b08baad5b6b","sha512":"d0060a1fac2003fe3f7bcd12239973e9f69f25afd4f2b2b33d96f07604806366e524366b9069e77c98776274ad5ffaa0c1ffc275239f37660b01c1f9571142d5","ssdeep":"96:LxBb9vo3Gootw+83Htw+qVmItw+Sk1tw+5eID9pmgHgpINrbpX7bINygXW6INrT:3227iEDMjeJWi","tlshash":"88a137287056de9cfd9b3d64243e9c3a614dd35fca8bcf75c1e8d82146c6839ab926c0","size":4804,"data":"","first_seen":"2026-05-06T10:51:33.890369Z","last_seen":"2026-05-06T10:51:33.890369Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbf393fe9c6228cafca2b5457d8f4c3b","sha1":"ccd193a8bdd1d5f39da834beb34c95044d240474","sha256":"21bfa4874ea9222b1af45a718bee89fbab5731ace8aa1f53bf7107d741e42d76","sha512":"b0efa39b8fcd6659e59a31f8e134d9d7a60eade6a49aad34388fcf8097fc0d1f5665f6c01f898714ee2081851889541c7ce22239898fd9b9bacadeeec923c2e8","ssdeep":"","tlshash":"7a4134387052cf9cfc877d15203e9c3a618ee75fc65ace2ac0ace9114286479bbd26c0","size":2364,"data":"","first_seen":"2026-05-06T10:51:33.891532Z","last_seen":"2026-05-06T10:51:33.891532Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ebec48d55c3700cbb293d970bb805d6","sha1":"1b11a1dc8d87263427b50b77258fbea69c195891","sha256":"a7027645df91bfe6e29143ccc45143b0808f1259b758c77deb22f1b031b519ee","sha512":"cc3fbde379922173a36404209a5ac454e9cffa496d257a69a9a331975fef3e6affd070124f9a50654067957def3269aa27c1f24ffb0ac74b2020155c173d3bd9","ssdeep":"","tlshash":"ed6127347055ca9dfcca7d05143e9c3a618ee38fca57ce79d1a8e920468347dabd2ac0","size":3467,"data":"","first_seen":"2026-05-06T10:51:33.89241Z","last_seen":"2026-05-06T10:51:33.89241Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.965Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6EvLr8rnA0wfP%2BqpqlSYChaDlgwZLcqvKe0Yg1JhVSvlfPR94X1lub76MWDbnZlsDhGuf%2FLThEq43yNYK04YIXCpHdZTGdmcJlyPi5QWOp40AHrFY%2FkA4Iv%2BfLjiryNyukaQUkFtRNFYqdZ\"}]}\r\nCF-RAY: 9f776d694e1a7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"61bf2b24b8ba806e12ca9421396df2d2","sha1":"895b45518f2022b32129c32b6b85b150161717d0","sha256":"d4ab92caad98bdb23d70ed51e005ed055ee20399b97b97eb892d3da93f9a3537","sha512":"5da55871f154d7017b65a57eb3460a4d4198829150a497f2c45e4bcee57082d1bb153f10bea6e411b8f81d22fc945f10eb24800d430229654e36418e135b3765","ssdeep":"","tlshash":"a5d017234d4a14bb0bff10e0852d86021a89ce3f339964f0c0511d1f3b7222683db555","first_seen":"2026-05-06T10:51:33.83588Z","last_seen":"2026-05-06T10:51:33.83588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/podbara?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.492Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/podbara?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jc9%2BbIS096sKNAEIaV3b2E0epg9yrUY5XiuRd6%2FskLKDvbCJwaD1uXpDgHODzTyqWZo6%2FKiSfHjDD3uHc3qs7qTdlqA1VOchn4vUkQbQPuC9Is4Ab6vzlkY1M4wv6fF3r2vs3TRxrGGfZB28\"}]}\r\nCF-RAY: 9f776d6c98e50883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2033,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1018)","md5":"7fe65f4cd35881bc6505cf4bd6852b68","sha1":"1b97fa83778d901ad8f84d4a371938aea96a7261","sha256":"4b6d599792ad4f46ec29f5c71444f67a43a7573bddd2b03e8240454a6afc31d3","sha512":"893034becd47ef8a7935c898685870e415cd37b31c43a6d8d04b5145d222d05ae541d376e8e3ed1fb350dda8031ffb93b6b35d8f9c1ce78b5705e43321a4726c","ssdeep":"","tlshash":"ce41d07fbf00dc2aa7afc889189fa306169d577b83181477818e9c2c06c7ba52a74355","first_seen":"2026-05-06T10:51:33.83678Z","last_seen":"2026-05-06T10:51:33.83678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/liman-ii?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.606Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/liman-ii?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z92ajWdnyPTa9ecVCGKk%2FFyY8qZfM%2FgjZ5d0TJ%2BdRgFArBp2TVEKtpDnXRTquiQ7PXMpGF%2F6sAREjcFQotuzR30V%2BwfgVQ5XVhf52ubjTr%2FuxDQnXegS2ZCzVOs7sjoTfJHnP9ERogVyo1%2Bh\"}]}\r\nCF-RAY: 9f776d6d4afa7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (339)","md5":"852f33b4a29644cb1d708f0977ebe909","sha1":"35e92612e285346818aa0b286bd3b3e7cf7c1afc","sha256":"90a966dc14c2e33efdf00560f31940e3cdbd8df634ed6dfce505f925a3e41a92","sha512":"902b28b83cbbd65cc7890b0e7132ff8c0b0422707dea3262c4f20cd3e74fe46b7353ad35f4e8e03dfde5a9fe6a6739b0b83bda5c9428ed7ce87fede621359606","ssdeep":"","tlshash":"5ce092231d1a14b71abf10f0852d9946298dcd3b239869f0c0501d1f3fb632683cb555","first_seen":"2026-05-06T10:51:33.837956Z","last_seen":"2026-05-06T10:51:33.837956Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/klisa?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.960Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/klisa?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=caSaI2HoxjDXUz7bNQ0PsiVlRNRPQB4YOOl4yb0icoS265eZHlVOvdmHSE0rl9eDDcymxAcYLtS%2BvmFSD6Sp2fAu8DwZ2I2iNCuT89evAoWu3rTrx5J21CZmy5Qz%2F9VpXRCbydINAS%2Bxc18d\"}]}\r\nCF-RAY: 9f776d693e130883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (350)","md5":"8847e9950b2d510838f926452f63c3cd","sha1":"445bd917de63443e01dfa0283d6f469da3270775","sha256":"af204808d51acd69eaa6e9ceacc3e7112b99823510a94b66aa9b43f052d5adda","sha512":"00dbff1a36d452abc1307c88e114b2a13bc464f685428f0ec6ae19d9c9751081f40f973edb1bf3903801d5155675d26f8b542ea2c29d930b351c696a9d23acad","ssdeep":"","tlshash":"98e012235e4a14b71bbf10e0852d96021989dd3f739869f0c0400d1f3f7222683db545","first_seen":"2026-05-06T10:51:33.838778Z","last_seen":"2026-05-06T10:51:33.838778Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":123,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/statistika?_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.508Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /statistika?_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zNWdXG5%2BjElLAfm%2F2PbzOoBOWvXucv04dQ1HIz3t61lWeq6EaKUTb4Hlk91HM9uaRCIsUtxwIqFXIBDIiqIp4jIjIjgWRc%2B6%2Bj6ypqRXpsPqUaRgUBqr3u1kN%2F0sKLy%2BFLHp18os1q7pvsHi\"}]}\r\nCF-RAY: 9f776d6ca9730883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1233)","md5":"213de91108a01ceb3ef72a2d4cab7d98","sha1":"9e7fb4d5e2ad6be739020734e59220caa731111f","sha256":"9f9e41da07cc4f77e9be3666964051386757ceeed22be9ecb3fc87bec0965183","sha512":"aeb696511d5350f428b3af7346f28b578881ee3d413bc22d4af0216102d3ee871abd86352a6f97de3966217768cdd46cf59232e979de0b39bb81409374149cb3","ssdeep":"","tlshash":"da41323fbf01dc46afbfcc88184f6319629e473b131415ab918dcd2a03db6961b253a5","first_seen":"2026-05-06T10:51:33.839868Z","last_seen":"2026-05-06T10:51:33.839868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/puls-trzista?_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.537Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /puls-trzista?_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w2ljp11zMOZKiTVUs7qBNiBNjcya7XEI%2BH5axdbmnQbCkORUHjfEM9KxEaDinpFtJIUf2Fsme4ytWZnaacy2bRmU6n9nAq%2BWxss1MLxHcmyVpmr1%2BF3Lix7TdalIhrfj1nBf7ZEO2BL5z8eP\"}]}\r\nCF-RAY: 9f776d6cda537127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2124,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1175)","md5":"1a33e468bdc8ff5dee8d72966e142920","sha1":"ecbd436d427ca9fcc3760c3c5b6783491a0f2a45","sha256":"af469a21a7a43e45c38f480fdc835f934b0ff41e10400013211d5e725710b39b","sha512":"bef609841257fb804b4b21093128998d8ad3c2c11ce2fd3df8fdd6f0c723b3a952f1485a3510d2f8d6d01cba8ad9b04ed3a6c495fb43bfe86e8b2d53ec703960","ssdeep":"","tlshash":"5541123bae02cc5b57af8dca1c1b270a66cc033b83645477d18dce2402c77665a623a6","first_seen":"2026-05-06T10:51:33.840724Z","last_seen":"2026-05-06T10:51:33.840724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/bdcd77ba4d0191dd.css","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.488Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/bdcd77ba4d0191dd.css HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"62be-19de370383f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPA8K25y3w%2FPb4qZO0Ir%2FTd8WAnbFguzjMXXc2czIjyl9IG2yNjhjiCOtCKWr8FsHJnlhGUIxdMKNNx3Di9q6QC4W%2BmmqI7ZRoum47R14ZoVid%2FFrc5%2FliMzUiankd82efDR4WYEk%2FwoEXps\"}]}\r\nCF-RAY: 9f776d663c670883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25278,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (23279)","md5":"93b9a0941ee9f61fcbf6a3844378dd2d","sha1":"95168d475829beb59e020bd8ac1a5a03f4efca2d","sha256":"6463befd38aec90bc66cc7af16d4b4d3f123c82db058535a986247a81ae9a6e1","sha512":"1c9d46ec810bb185390dcc402199b99d0782b9b098a807175efad93f64536387adcc69404993b37c699b2e67f4a15440e51f3c2397aa0264c1c306835b3b5c13","ssdeep":"384:LONjkNHG2xYVlxeZuAVtunTs6uWoRJFrJPGbyjS5D22fAR:8Z2SeZuAVtunTs6uWoDVjyDo","tlshash":"0fb26464f336de7fec7358ba679cf81c6104a447ce2267d9ff0222029acb6f20956615","first_seen":"2026-05-06T10:51:33.841702Z","last_seen":"2026-05-06T10:51:33.841702Z","times_seen":1,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/f676ed52c020cfc9.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.490Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/f676ed52c020cfc9.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"6ebe-19de3703846\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BtwOb4dU%2B7ETeUlZCksTCa%2BEdA5ymyol0HmdqiY9hAFcTVIV6%2BF%2FrMltJgxXUoc1isIzJAjmQpGpEe0Tc%2FSumbEXKo6CPfeQRplxnMiUOsVnvOY6EokltQd00CxLDSV%2BfBmd15qvgGEgOpGp\"}]}\r\nCF-RAY: 9f776d663c6d0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28350,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (28350), with no line terminators","md5":"55986b75850a7864061e3805028ea0df","sha1":"a1eb5ec5fcabb35edce59743a5a52570d87a29d4","sha256":"a629d2edb6347127b3f888995ee8b9b2fb44fcdd77d113fd48692a7b01dc4a90","sha512":"6da70b19bc77b8e153fd65270d86444835b667d0ac06c108dca2c3fbacdca3ca5f9f5df97ac7a71a909be2c2a88b52a57afe613e5efa1ca8fbbac5c6d5784df5","ssdeep":"384:sYC48rnwvNO8eWzJ6mtgKniYfPG2urHej6Z1MX+YjYve/5RwaxrRpkZLNvEFgw/x:BC484ODUGMX+qB5R5RpWN8/1nUS","tlshash":"49d2b6a971d4f8a117a354e4803f500bf23e0d7a246db0b4e3a2ddea79a054dd133f9a","first_seen":"2026-05-06T10:51:33.842621Z","last_seen":"2026-05-06T10:51:33.842621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/b021b6d8e3f82e0d.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.506Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/b021b6d8e3f82e0d.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"941-19de3703840\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6IndGowHQTg4nGe8eWsJXyp%2FYHkOrByoPm1A2vGV5BxWI0gHtOwudcGHkEZak%2FaiVuHWmqD96GwqoMHGI8dhW%2Fw6I6InNnFPmmAkD07DqYIGiXQ6sJR23eNkvmk7ugvuHdctTejgbGY%2FNp%2B\"}]}\r\nCF-RAY: 9f776d67dc6e7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2369,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2354), with no line terminators","md5":"c0d64843ef004a7a6d1ba33ad5c7e6a5","sha1":"51f5c581489846440748e7bb79a29a42298f3c4e","sha256":"5e171ff80071dd7415a46f1d67ed0105b36f397f889fe2f8dce34380ce101342","sha512":"8dc49f7ae3849f6ef416c4536758aa965cfb7c5d8ba09a66bd8464529bf205d88a7853ac1bf2846d636221c078b904d82d623a89ce1d46c4315067c0aed1020c","ssdeep":"","tlshash":"5d41f14de059a7dd782924d1c86f940c751f5ebdc64fd8b6e8bbb8441924ce83703b89","first_seen":"2026-05-06T10:51:33.843529Z","last_seen":"2026-05-06T10:51:33.843529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":342,"timings":{"blocked":225,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.890Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 48432\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"bd30-19de370384b\"\r\nAge: 0\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fLJHeolXIEgC0XD5PPabhrBCUMEwKcz46QQOuf1YVhSxHeAydfclYx5zDflKk6TEnNO2eYswQylKKTyvhw%2FQzWA5D%2BsfDsd6OwSL%2BjftMaKBtfXRUVg43J7VmKF9N0avaJKo1Xl%2FrNIWv9ac\"}]}\r\nCF-RAY: 9f776d68cd927127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-05-17T14:19:40.323241Z","times_seen":53831,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/futog?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.963Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/futog?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NGNg6Vg02ya7sMoO%2BVJkKVU%2FA6IBSxHXSo9ZBy1oCsqs%2BhlpryDij0BRIGI1Didz4pCptPAxCB0hHOYnvpYSuL8NLtGdkSv5pn6wtFGikY3OMwRHy5LHFeCVpMoLC5pZCNsPEsil2rKbVtHm\"}]}\r\nCF-RAY: 9f776d694e177127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (350)","md5":"042abc24ee09598b31fd4f77eb15ea3e","sha1":"8a7cd5dc6bcf0ee96ca2fbbd6cb98c3a140c00e6","sha256":"e73b8fea11b53f66f709ce5a3f1800e279f3eed74bdb8f53ff4691a859613c17","sha512":"9d042bf8cd983b0caf9d8ce577c69a8b9974a69ed1f1ab960c1457601ffa03733b47797fc2b4c29f847a8cb1dd88d84ddf6b6eb14f6a41f264a92026aaa30a27","ssdeep":"","tlshash":"94e012235d0a14b71bbf20e0852d9a06298dce3b33a868f1c0410e2f3f7222683db555","first_seen":"2026-05-06T10:51:33.844958Z","last_seen":"2026-05-06T10:51:33.844958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/liman-ii?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.966Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/liman-ii?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dUDj0zThDdC7EoB0HKJ4p5FHIcB%2BPQy9no06gnb%2BzlZ6GBOnRLciwTo7TDa3K9c2dh6PunVaf3%2Bbn3qkw6IwItwSz9nRehn%2Fv6qGZfz%2BMU5y2sFuHGNJ0ySZ42oneJIG7TPQ1jwrPeP5YyY7\"}]}\r\nCF-RAY: 9f776d694e390883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (353)","md5":"5ee99f03ec53a06c175b82759a59d613","sha1":"726c0a70e8624ca5909e750d04d7bb8bd27a7a79","sha256":"01239a7da33ca551fbe9a203a3c5c04997ccfbc791f8cb9c6f0046ebbe3341bf","sha512":"2a2f162a23229242a37d13871d486cab217f3d43a9360edfa70fa8645d941e1f610515ee8690736411142548e6aaaf5b158bc0be73e370424853d3c1ed8ebd44","ssdeep":"","tlshash":"b2e012235d1a14b71bbf10f0852d9602298dcd3b3398a9f0c0500e1f3f7232683db551","first_seen":"2026-05-06T10:51:33.845905Z","last_seen":"2026-05-06T10:51:33.845905Z","times_seen":1,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/liman-iii?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.206Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/liman-iii?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lRzwn8LUkRpFOPg0JH2QST5tdZl1zpxqFsnzhUxRKKKoG7h6gcFuNLwb4GjL%2FAFHLYbRe%2Bty9wDtxFGgfhKYBApdtTbeDg1l4C8lvwcvgnis3zZXR%2BDQzoAVJMgdOgHJ9gnmolwe3tW%2BN2bA\"}]}\r\nCF-RAY: 9f776d6abfe67127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (354)","md5":"615f06e0a87b5231d9e5b0e0c3b5e982","sha1":"67f3b5ef558ecb4ed71a8f9ffc3527786eb65ada","sha256":"98e3ad9bf04bcedfd951698f547e2d7d59fe54823f79c1c89ec7b93e27c63f2a","sha512":"a0ce9bdce66266414201fb4c46eb97fbe37a5fbe7dfa2fadbe2f3f968ec6aa02b50f871d956dd2cc6f346fd5f85cd70798ee51994fabafbec01621705ce2940e","ssdeep":"","tlshash":"2ee0ee235d1a14b71abf10e0852d96022989cd3b2398a9f0c0510e1f3b7622683db551","first_seen":"2026-05-06T10:51:33.846673Z","last_seen":"2026-05-06T10:51:33.846673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/?_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.572Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlxV4i5I%2FS2fe%2Fx1%2BoucjOdxjs1bkXHqJ6OxOfbeAbbUgHgVuAXsn8Bw86%2BxlMmcMr5IO7R9mOV1LImjtj%2Fs3uKJAztTWtlvAqMx7MGGckaLqYoHiP0V%2BE94hKY8%2FMaPiNubr3IkMV1NWm5W\"}]}\r\nCF-RAY: 9f776d6d1aab7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2088,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1174)","md5":"9fa65cfd3888b7fec88856f7dfdf07ac","sha1":"b0b7babaa723d03120c3e703956fb4f7efd9087c","sha256":"51cdea69e5141fb38cf388c446dcfdb2a2ca3e815842d2b1fa2628244159ce5c","sha512":"dd71dc1a2704a7483df2a80cebfd4278ce8e5dc2f313e188e722ef0e0322cf0b0927a5c26e1ac7ff3cc82a4e50d19d263ba453adff5862ffd31aa47710d8810c","ssdeep":"","tlshash":"3541327bbe01cc1a637f8c89184f5304659d433b43185a7bd18c8f2806d7baa5f243a4","first_seen":"2026-05-06T10:51:33.84751Z","last_seen":"2026-05-06T10:51:33.84751Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/a6c9df0c73e64660.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"104.21.84.114","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.503Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/a6c9df0c73e64660.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"77d5-19de3703842\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbxfG4%2BPqrkHVCOMJYigshnKeVvcpRSIO9FrWYC%2FSS5z9gnoof2P6l1T0JVeJaIvVCkJf%2Ff8t%2B%2BKpd6RrQa2UT2DGXQcXkpFmr3wRvi168NJGYN1kIXZ1bdfQYOM9lhIxpqyt%2BbMF8kXAHS2\"}]}\r\nCF-RAY: 9f776d67afdb1ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30677,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30675), with no line terminators","md5":"14b013f96bdbaf22f2dcc03cfb91ee53","sha1":"2f716a74865521c822787ea8684136a4359af302","sha256":"7f19666ddbe6ef22f3204d1305cea968716c6355edb3af7a4c47ea2180e318e3","sha512":"15840a192239726897c5e52a247e8218a6747cb61dcb7230429bc9d7bcc700d29738e35322da8f43f3cc85139076563350ed8b344821d01d6b4dcf075dcba87e","ssdeep":"384:fWP5z75Bq9E0miXmRR0cJ3uf79Fg/CKs8qWtOPSNRXpV:E5z9BX0xM5x7XpV","tlshash":"24d2d8b17395f9b252db85d9d02a0005f2290c3530ae24b0b395dcef365dd8992fafb9","first_seen":"2026-05-06T10:51:33.848363Z","last_seen":"2026-05-06T10:51:33.848363Z","times_seen":1,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.335Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kbXy3lO5Iw8drcbdGj82Ku6AE4R98PjfODGoorJizjr0YEklEtjWdSJHNocL7fvc1uEmCUsM8JbeEkcoRI%2B0GUe7xngcRSSP7f7dIhRYstywLrb9W2ovOshULns2OOlsAE78Q41lP6zmBMig\"}]}\r\nCF-RAY: 9f776d6b98cd7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2137,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1164)","md5":"5530fb036e6b510ac59aa657fc743a3d","sha1":"08d4e331f5f17833d6f959b3076b40d42e696cf8","sha256":"860f33d2a7101a99863bfd312545b93f571cbaea138dd3ac892843b1546143a1","sha512":"33b8870def9ba5c16e7c6564a4ca5258759549a68fee03d46a67b8fd512c6a3f9900da1a55e6a678c80383a55f396411840b8933452a9e1da620070870cb3538","ssdeep":"","tlshash":"ba41117bbf01cc1797afc8896c5fa306568d037b831425a7818ddd2c02c7fba5a652a5","first_seen":"2026-05-06T10:51:33.849026Z","last_seen":"2026-05-06T10:51:33.849026Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/rotkvarija?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.390Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/rotkvarija?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6e8MDSsZVVnZ32Nlk6w3ZmBBU5vZfiyY3Gk%2BrrN1npmcocfEc1vPaXaQxLZ9svAXse%2BvgDxvV87%2F6h%2Fqf8yBNvJ2PJazvhix01mfsEgSTJ%2BuhEswCaaTd%2BOqmaebUm7RdBzOuBT8CSCs6S9n\"}]}\r\nCF-RAY: 9f776d6be9367127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2057,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1039)","md5":"212e1cb467aa683bb8f0f198fae968ef","sha1":"393d130a29f1ddcc80f5f55cce467d5494590f55","sha256":"3439a7a42dcaa6ce67c960e4d04b881b90dcdd8d3909cdc04089882941d8c9a6","sha512":"b9d4ac46d417a7403c9351fd724c3c1528c239ac211a6f6b83b89ce1ffab6e4dffaf52d0a86a8071675ca82af3d256f432ffd57148d57b6c984d4472a1eedf6c","ssdeep":"","tlshash":"be41037bbf00de19a6bbc985285fa30a668c577f831c1c77818d8e1c02cbbe55a64365","first_seen":"2026-05-06T10:51:33.849939Z","last_seen":"2026-05-06T10:51:33.849939Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/liman-iii?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.450Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/liman-iii?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xkp7BP4DnArirqOYoiVkS%2FZdz25yN4Hct79fNiOVhcw7w7JDFET7A0tEZRmrDdVXAaAOcyOyTCAyf1QGpgaVbBfbrAbpNz61RoOh8VGh4oxkaqWDgmgefugr9hk1pnMJy3m9lHPUBTA4BDp4\"}]}\r\nCF-RAY: 9f776d6c49b17127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2049,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1032)","md5":"2ba910b48aeaf20ec27d96a92162ef67","sha1":"993a7ed5fc797b7d6579cc7f3a178c9305fdb955","sha256":"89881abfbd0cfb3b1db61ab40d48833479e86c401ddc949c6d30ddc8cb04d9d2","sha512":"9f6099c97f6037fdb09a5a7253d27ced7c98756576935e28ba9b54afaec969fe26294189eccf4b2588b7299125be98c6cb2c4ca12e4f51efbf100c8a517ce065","ssdeep":"","tlshash":"2841d4bbbe00cc5aa6bbc885285fb306268c537b831855b6918d8d2803c7ba52f65365","first_seen":"2026-05-06T10:51:33.850744Z","last_seen":"2026-05-06T10:51:33.850744Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/rotkvarija?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.641Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/rotkvarija?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Mbpb8aJ6%2BQ8QusUWbn9NbSSQ%2BmSOfrjozlYo2h7Egk4VRGDOIwsPS9WtMleJro0gBIQbmBlicxp6yK%2FUKnSVYtpJ%2B6gE5nJQcEmdVY1CTLw68raiy8JTGwPHZ%2FF7jF812TFUYKjq8eamikx\"}]}\r\nCF-RAY: 9f776d6d8b407127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":342,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (341)","md5":"d0628cbc3765b1e2b481ad1924783f67","sha1":"20cb1e635574d2ed4816b46c842ad923492df1ac","sha256":"8d9dcc4891acc8906330fa79b3a61e941f3895e64f27f3893001ca2694b6caae","sha512":"77400cf652fb3f4e3b471807f56338798d9b249ce994b76de0c9b29f59e68af1e2acc862c538df441479bb044f28e3dd07d3b22c2f2eb4ecfa2652b201f3da78","ssdeep":"","tlshash":"60e092231d0e15bb1abf10e0852d99061989cd3b239869f0c0505e1f3fb222683cb545","first_seen":"2026-05-06T10:51:33.851584Z","last_seen":"2026-05-06T10:51:33.851584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/grbavica?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.653Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/grbavica?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XaU5zOsMafH4QGvnjZaW7mU5VO97VTR9bD2g7FFPDrNiktESX7hnF%2BIMLKu8bExLOsL%2BhePZNLoEZsu8kTaM8TDuE7bXyow1E8TWKHjgZVfGn8UfDVeo37hZMVfG4de3DLajsv0tWbRPU04T\"}]}\r\nCF-RAY: 9f776d6d9c4c0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (339)","md5":"70a86978a6601853e4e0d9be4226c03f","sha1":"c06f58309c051a1093df9d1b4af6d043495e69fc","sha256":"16a9dcdbd78f977ef3ed2de1cceda3ab81782774e78591d380ad04627e7b7184","sha512":"a65042c476af3a83d571effcf51c540be2db17c13e5fd88cf4c2e6e5b370a4721829d69b1b1dc464afca175b46146fe9ecb71b91829cb22dcc70f53952cd6dc0","ssdeep":"","tlshash":"bbe092271d0e14b71abf10e0852d99461989cd3b239869f0c0501d1f3fb222683df585","first_seen":"2026-05-06T10:51:33.852455Z","last_seen":"2026-05-06T10:51:33.852455Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/liman-iii?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.684Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/liman-iii?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cDagpDFzsPvo3LiuQpE26Pj17qlzvQp2RS9R%2FbhFqATWgQW7eTTzXG6guDVE2RnmoTjconrYxAsmpdysLad9uh4zsSr5RWNIsD%2F3EN4ePod9uXTdUWm0%2FZnnsS%2BIXsKkH62iVn2EyhOQDOdB\"}]}\r\nCF-RAY: 9f776d6dcceb0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (340)","md5":"d1722f37e6f1e06162504c08a5c588e5","sha1":"185562bb5f22a8f8665e2e4fc7664bb8c672831d","sha256":"504874ac1230b957ba07b7acbbab8d2756a682d4c3a30b5b76da08f0378feeae","sha512":"9c9ed446bb735b501334d3b0b5596ffb112a04ced8ad769928d3347adc338861d271b6490373694b1982005373689afd94954965ed5a028e0f26967356654a1d","ssdeep":"","tlshash":"33e099272e1a14bb1abf10f0852d9946299ecd3b2398a9f0c0511d1f3fb632683cf695","first_seen":"2026-05-06T10:51:33.85327Z","last_seen":"2026-05-06T10:51:33.85327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/c0de0ef8a17cefdc.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.494Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/c0de0ef8a17cefdc.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"8211-19de3703847\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoxSDKnxKfipyTscd8BNgolLAZKU0QJ9lMIv00%2BROZHYio5MyiYNtkseUc6ffHiUN%2FYGvBX9sDCrkG4Eq%2BLyPfKKY49qtFZLTshf0RdEy3L0XsQ7UBtc6Gp5Qz5G60Zb8qI6JTcZDeJVE9bs\"}]}\r\nCF-RAY: 9f776d663c820883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33297,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19586)","md5":"b832963632cc0a95ee4fff6a34514fec","sha1":"c98a0585723ae1b89e195f048051f513a76f3602","sha256":"62be7129ce910c306ddb0371c13dd806d3744c07ef2896f987aa4a8e888cc713","sha512":"8bf7f61860af688e51a497ea821b3128e8faa0ffc59ea2edc2a60273b4301ebc4a7a157ff1e8d6189212fd785b182a32b0b10e016d8a59f44976c9f7a4516247","ssdeep":"384:GjCDGGRg4RfrTfIVZ/X+0o3NkOG4+Z47aMSwTSGFJl:4Of/8Z/X+0o3KZzZ47aYF","tlshash":"1ae2c6b572d4faa2139340f0c83f2017f2684c7521ad7470a7e4cc9b765888da6bafd9","first_seen":"2026-05-06T10:51:33.854532Z","last_seen":"2026-05-06T10:51:33.854532Z","times_seen":1,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":125,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/92567dbbe761973b.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.497Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/92567dbbe761973b.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"368da-19de3703841\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a64d0iBXfX6ek9CwcTNFFWWSMxmHAiekKi9gAySOijvB3EKeeYHP%2FaeCf61T85%2FxH75uVNKKihZe1u6jsh9I1NLqQOaUub%2BA7s1auaPlO%2FV8bdurRRIC2K8tklk3Dp5e4xgVRU7FQ3rCUY67\"}]}\r\nCF-RAY: 9f776d670f0b0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223450,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"645e4cbdf45429854ab70b823d3b52b1","sha1":"6c6433ee7992076d0abe16afa4258a590be0f85c","sha256":"4dad7a60a32781000635ddf7eb28372faa6d7536bf19c42fc032bcba39070eb3","sha512":"c3e9bae7525868b1c73aed5802b92142dcfdd427df5e2e2ab4a4a4561ce35021a4b9d0e74cc9f1328a99d479b9dce7bd3af516bfbcb940e54ce20b19537b74c1","ssdeep":"3072:JPXLIl5FnVcmpJPMdq38TgVtiREsTMVmL6Cst19pKPcl:JPXLI3FnVcmpOws42xst19pKPcl","tlshash":"9d240be83955f6626eb302a710af1803733c252b280d4d60a611fddeb57845eb17bf9e","first_seen":"2026-05-06T10:51:33.855347Z","last_seen":"2026-05-06T10:51:33.855347Z","times_seen":1,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":110,"dns":0,"connect":0,"send":0,"wait":129,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/e916b0b9639833d8.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.502Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/e916b0b9639833d8.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2jMylsOqQItvWF0m4iHex5HkDwu8zEYmbumOeydmSqKfZW1O4GlwWUHvZ1M63ILGlkw3DTaBT%2B%2BqAiYiGaqhDz7zm5GHpohGLQnK1V17SDwvP%2F1RuL4jpNyXlqDTU6bTeHFepbf5Onx1eDFv\"}]}\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"11a-19de3703845\"\r\nVary: Accept-Encoding\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 9f776d678c1c7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"70d274c4e0f63fd46f677e8e0f395503","sha1":"8241b887dc17342ef6d0b979f58c4d2641bbe2eb","sha256":"054befd9f5573c27105d9cf8cf448a0fb56bc1dedd5fd304f0e484c484b06499","sha512":"7b77a375f63246a924930f181447648b9f7666423e6e4ea762343984fbae7ca331dd9f4b3de8cd503735e57428e263d3385caeda53b0a4cfbdd4b481c364d9c0","ssdeep":"","tlshash":"dbd02b702254fcd44086a0cc8836424bf569247266fe7495d7ae8cf16574f0d51e1955","first_seen":"2026-03-28T03:34:31.710253Z","last_seen":"2026-05-06T10:51:33.856196Z","times_seen":2,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":188,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/podbara?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.213Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/podbara?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vksEsCXvYEsGpnMd%2FYGnDcfB5S%2BJtNPL0zttIE9jJKpAoclrvm0iIT%2BQ8xhAH%2FsleVqbm8OnS04toMd%2B2CXydiUWetUVbgxb26TrorN5eIN%2BqkDwiK9CZuiesmmHfRlsEb8aE83NOAR0UQ8H\"}]}\r\nCF-RAY: 9f776d6abfec7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":353,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (352)","md5":"d32036328b3f67e2a6ab5c0ffe1af1cd","sha1":"78123f86a77add55869df2e080d848644b94d9ea","sha256":"0a1bf31322b2ba310f800f49e269514ca769f185405346beeccc63bc1fbce656","sha512":"d215792935a6b97d765fed7ed24cc7333a37d4cf64d5739684a32190c4e33a84ea200645c5d1ca441a68da52854abfbfbb78cc73e7dc168ad068ae648047db00","ssdeep":"","tlshash":"52e012236d0a15b71bbf10e0852d96061989cd3b33a968f0c0511e1f3fb222683db541","first_seen":"2026-05-06T10:51:33.860945Z","last_seen":"2026-05-06T10:51:33.860945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/puls-trzista?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.264Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /puls-trzista?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZL99SkWcJjx7tZLZrdBqfiL0EDImemtYW6TFdZN7BFix66bm4NiGP5wZSdLHKEOnHOThe9A2Hwe8aytAZc33oe%2BDdiUcuhA77Pcc1VsYdKaM5Jll%2B6CcciObNGF2f1z25rHcEatnwHAUzgQb\"}]}\r\nCF-RAY: 9f776d6b28537127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":268,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"1eab721ffa924a112eb4340ff943ab5b","sha1":"8ac57a731dc262121d8a9e847862b307c868f743","sha256":"905eaf89cc9213d08808fdf0e4d2cac16822eef910b0e0056dcd791ff576a956","sha512":"8907a11ad9299c6556a0897d42b7fbe5d610e1415ee46384f4d8d701d606803945e8d684dbbf727b1d485a3c0f1591de94f2fe123df5c2188716dd9fb1ed2691","ssdeep":"","tlshash":"51d017230e0e18bb1aff10e0842d5906158dcd3f339864f0c0515c1f3b7226683cb559","first_seen":"2026-05-06T10:51:33.86224Z","last_seen":"2026-05-06T10:51:33.86224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/grbavica?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.446Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/grbavica?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xf8BmdWFrJMndXQ4D6lSbWfXoywsTre9nX9kYRIzRDPFCGF9dHeCtfB8U7PsYdNVBwylxXacfGCXoGujzgHOmfF4VgEdfbOGh0fnkBCWbYeZ5jqyl23%2BRTlcdVjIFlTXt%2BKZTsxaFmclyuCD\"}]}\r\nCF-RAY: 9f776d6c3fba0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1025)","md5":"a55eab6e109e70078a4fde6228df3e2f","sha1":"8d09508f582921df3d6ff5cd24e6590c1c24bd0f","sha256":"771ca24eebffb8533362b124371bb66b13e663e9b757d31797f4c38acd160fd0","sha512":"2dae4fb314974daca6c54a19dec31d50b64f5d1d24761409882be5cb5084bd9cf15e8c5dca79982b50ad8400c9de428cf18f7d11d19fbf8c3bc96d892fa5e491","ssdeep":"","tlshash":"6341f77bbf00dd1966bb98c5185fa306a68c533fc7181977418dcc2907c7bb52e68396","first_seen":"2026-05-06T10:51:33.863868Z","last_seen":"2026-05-06T10:51:33.863868Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene?_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.494Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene?_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k7SWWjX%2Bjtr9GoXlyr1pN%2FteeoNwwkyjZ4lCCNwmcXIGo5U%2FJB3VGuYmJwF167oCRIYVqFRBqVrXmCtBKN2xV0Bhygmhp%2FqiVIo4UpEMJz%2ByGjo0EZBB5P%2BZk2EFw8jT5qnYPyHmLGjcYqB4\"}]}\r\nCF-RAY: 9f776d6c99f17127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2099,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1164)","md5":"4ddcdbc36c63fac70a4c6ec691f81bd1","sha1":"19edca905d1e7a697aae6b03fc1406a421aa688a","sha256":"ff3fbcef6f1e18ea9091dd4a24e66506edf5289148a3a01fca21f497c9aecded","sha512":"689cfb22e3d6bcfe76be6b377f71cc4998057e4ae456188dd82bbe2733a6c3a5d52c01d5220d52dfc85387080a223450f275508d82c196522600027816eeb7bd","ssdeep":"","tlshash":"9541223bbe01cc1796afc5c96c4b6305968d033b831815a7818d9d2803c7bba1e253a5","first_seen":"2026-05-06T10:51:33.864774Z","last_seen":"2026-05-06T10:51:33.864774Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/favicon.svg","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.756Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: image/svg+xml\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIfBxMDMrGVaQrrTXabpPs3uwaMwPkMrACaKAyZqR%2F7mIg216e8xEZPQN5LGt5PxLOtEcXmMoE9BI%2BUwxhvXZ3UujAmSor13uLxIq3rxos6ZbHSWs4CU42tslve%2F8gJOGDBJNVceJJWzPyxM\"}]}\r\nCache-Control: public, max-age=14400\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"f2-19de3703832\"\r\nVary: Accept-Encoding\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 9f776d6e3e7e0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":242,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b9a59eb279ddd983b8eff3b19cc19384","sha1":"b5a463acbdc7bbec3c96093843010e4c25843098","sha256":"b7468c71beba439ad23d1cd540cb5112a4c8a1171315a7751ad4d3b7615e63dc","sha512":"5a8671f5fa35ae6e7183d2a7daa86c9622f54f0036649e84616cb91017831e97e522ad82cef8a790615f0951c86335dd0b2e6b057d4d0364694024d3c14dd8b3","ssdeep":"","tlshash":"71d097b0808c9408c30c4e163b0e3126200ed9c6ee848818f2c04636e0c68a379ca35c","first_seen":"2026-05-06T10:51:33.865633Z","last_seen":"2026-05-06T10:51:33.865633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.486Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2 HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 48432\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"bd30-19de370384b\"\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2BWlpZLs%2B%2BI5p%2FgyfAB%2FcwuEn8MI4HcRxvoOFYYMAy15cafW1Og9uasf8cS8DRN4JPFrxXomJjyPzGQ2Rv1PS0ocMO5YNlFwp6f3CKhoFV1YBd2pOPKUdW92Woe0bepCdl1d5cMgUwvgVJFi\"}]}\r\nCF-RAY: 9f776d663a7f7127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-05-17T14:19:40.323241Z","times_seen":53831,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":156,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.268Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpwgGVyjooCN%2FpzHJ5e3ikJia7MNjQJUOX5W%2FfN%2FSh0uOPk3NV0xgw9KxRC5DmuMJLjt8SqmS7qS5cXO8CxEmkg82OIzayWcmbToQT0tduI1%2FerWw00BHoHS4Gu9Hy1KTChccq2xe5T7chmu\"}]}\r\nCF-RAY: 9f776d6b28657127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"e1a44b26b26f19cd94f3c70abbc72982","sha1":"6a107d635ac7780ffaaeaacc778dbf02ba91855d","sha256":"fc90004832a8f5bf2e8ab7469da740dfab0d32d9192057e335e21820941e44cb","sha512":"b024e1d91cd50cb04234a3d1548986289b1a521ceb11e77e24db684fa9de305be17fef448da424938ffe329fe050b811d4355db929ac0cdaab5d6ac2ff472588","ssdeep":"","tlshash":"68d0ca27094a18ba0abf20e0842d49061a9dce3b2398a8f0c0915c0a3bb226683db819","first_seen":"2026-05-06T10:51:33.86642Z","last_seen":"2026-05-06T10:51:33.86642Z","times_seen":1,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/futog?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.332Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/futog?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4wwVx2nSojsj0TxTrR3xJ%2FTShmjxLTxMkBojkbfsZetN2ipAUEzu9hSsKwm9WDx7WfEkMwmmZuOXXr6Ms8LSLLOIMzbEcDNLXGpSGHoX8Q9RENi7txPot9QBRFKacwkn6IbVbRV%2B7X9tBYo%2B\"}]}\r\nCF-RAY: 9f776d6b9dbb0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1004)","md5":"8fef493023d772f6cbf23c42b7fcde13","sha1":"85f3dc953c928bc23f83b66e2ad8f14de0dc7df2","sha256":"305f64225bf88239ee4ff7c43736f4ba61ce2d0aa16ebf7fa49e18dbcc66147a","sha512":"d9ea27bee036c9f3ed645f4f99a2af1503a8d88d9aa1eb33c90faad88ecca83df6dbfd1680db294d02494615ee51178ba4e3a24571085c7d258f2e0ee7a84c07","ssdeep":"","tlshash":"a841027bbf00cd1a66fbc8851c5fa306268c537b83181577918e9c2802c7ba92b653a1","first_seen":"2026-05-06T10:51:33.86723Z","last_seen":"2026-05-06T10:51:33.86723Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/liman-ii?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.387Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/liman-ii?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g6aIpC3PNcD%2FZBiP5g6gZdimNHSENqCStG4U0s2hJns21DJs%2BE6IwYOS4LfGu9Lkv0wpwmY4sH0ZEr1NBwt61M%2F8YPivgBY7bRrU7GvE1JdX%2BGbPd37hW%2FUhIKvjAv33IHGTMKsK90g4tHBn\"}]}\r\nCF-RAY: 9f776d6beec00883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1025)","md5":"fa921fa3e07e1318c502285995a3ebfd","sha1":"9f1ff166d0b7560db66eefe0d69f568d1e187d79","sha256":"4236e80bc8bfba50f74e892639d94982ab27d9a8d680d72f96406a512bdb759f","sha512":"40af601e55caaf40a86c45e91d085b8b39a10ec8fc6bcaa12a61a3af2ebc513323384b380204909a9519c9a65f996943c1ca173bc7eb81b6aa2c83e57b05806f","ssdeep":"","tlshash":"2741e3bbbf00cc1a67bfc885186ff30a268c537b83581576918d9d2803c7ba52f65395","first_seen":"2026-05-06T10:51:33.868195Z","last_seen":"2026-05-06T10:51:33.868195Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T10:51:00.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"desk-coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 19:38:42 GMT","end":"Fri, 12 Jun 2026 19:38:41 GMT"},"fingerprint":{"sha1":"BC:FC:FD:D9:52:83:35:AD:DE:4D:ED:86:0D:0E:88:2A:95:DF:7F:2C","sha256":"98:8B:95:76:E1:FC:AC:5A:23:7E:1A:64:6D:14:A8:22:54:45:08:CE:5E:B5:61:A2:51:94:B8:46:48:51:2A:C9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 521 No Reason Phrase\r\ndate: Wed, 06 May 2026 10:51:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7040\r\nretry-after: 120\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 9f776d633ab5569a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"No Reason Phrase","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7040,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"ce3d8d02568709f7fa5852e19cae9566","sha1":"14eee12c011d0833426e17dc599284b3367c14da","sha256":"8e0db56f118d2e93c2503336d6bfd94aec862648b0b01a66fbff7fc867a00164","sha512":"dd95ca9fc010a83f00b009cb81fd69a2e08e36179ea2816e9486298e8fc098866f33b5a81e690faa973285a518d45015232f63d2d67e73d30d9c10ca38bbb91d","ssdeep":"96:1j9jwIjYjeDK/D9KUuhG4Fh8/G4FEU424Fdj+skKmk2OLwmNnwL517RLl2aQxP:1j9jhjYjqK/BqheabVO/Q85171lReP","tlshash":"27e17771f1b5167a10a381a236a5eb1a79e0c613cbff5594b3dcc6632f9ee81e903190","first_seen":"2026-05-06T10:51:33.869045Z","last_seen":"2026-05-06T10:51:33.869045Z","times_seen":1,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":68,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/media/1bffadaabf893a1e-s.p.7cd81963.woff2","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"104.21.84.114","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.484Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/1bffadaabf893a1e-s.p.7cd81963.woff2 HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 85272\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"14d18-19de370384a\"\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8Xz2B9fyWT%2Bs8JcdAKGvoMN%2BZh3HbbJec%2F0MKv%2BhzIb6ym0uxjc4erSMNZZUomcdiaa1YdeH5dHPxi1PBySQjn9AndpqzPmMJFrFOiUrEjv0i%2F9AD40Q0%2FEZTEhRuCOfIUBhZg4u18%2B6Lbt\"}]}\r\nCF-RAY: 9f776d663e6b1ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85272,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 85272, version 1.0","md5":"01ba6c2a184b8cba08b0d57167664d75","sha1":"521e24d1741e0c74388a84286150f8a927265597","sha256":"a28eb6d3ccb534ae0c94ca999371df024aab60b08c3c8a5720ee9e32fa0faaa2","sha512":"8a84cb76807f518c2ad3afc0382d94520a00b63dd0b1875012ea4f518068e3cfb971cafa4ee57daeadc7e7f466d4c206e66a992fa709ed527c1ebea592766c79","ssdeep":"1536:/+FNImycTVyrkJtpc/jISuC7eZGc67MTni3dq3OoRNJzJEXCDClBgzG2Hpj:EImyc0rknpc7tuC7vAmAeoMXUCIzG2H5","tlshash":"82831291a60b9dd0866bf8783b494e20827d95fdfb714ebe53a5a3d1410109a3f5c52c","first_seen":"2025-05-31T16:35:19.663912Z","last_seen":"2026-05-17T12:40:08.622527Z","times_seen":4675,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/turbopack-c8a207bbc6725f25.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.499Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/turbopack-c8a207bbc6725f25.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"27f8-19de3703848\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BKfHBfiTcIvSjwInhMxsqoCr1swVoGkIG477%2BpyK9qaxaAFGWbSN64b%2F4PmAi7GmCO9XOT%2FXirP8mHOqXigRMcyjX8yhpwEzys2ScuEvYMhaC4MoGKD5QNFx2dB%2BhapJysvsFEnOlcKTdLw5\"}]}\r\nCF-RAY: 9f776d671f2a0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10232,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6402)","md5":"52210d00d419e0b4d1b5e286ae204b4b","sha1":"dd4656197734e847c3f56cbc687ac92778cd59bf","sha256":"40225364cd4341a4bd9e91e094a32b5646143bc5632fa1b54f333a9856277fa5","sha512":"805c5b63e137c7bb47fcc8e2e898b55e09e3d7198e91889ce58ee6832b2400edaaa3e20558fe9cc602b6ab95c42bbad9a768f26e366da53942b0e134018dbae2","ssdeep":"192:q7iSFn8/Esp1Uj5EG5T1uCO9ledFMhMrg4W9PZcxkUk1IsS:q7iS2gvO9lenkJZZQl","tlshash":"4f22e7da33a6f0b743afa4e6907f4044f17944a8141d581c93aca8fb383946e49e3f67","first_seen":"2026-05-06T10:51:33.870621Z","last_seen":"2026-05-06T10:51:33.870621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":113,"dns":0,"connect":0,"send":0,"wait":116,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-4V0X484FCS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:12 GMT","end":"Mon, 13 Jul 2026 08:35:11 GMT"},"fingerprint":{"sha1":"C1:06:F0:EB:DD:ED:20:02:C7:45:F1:99:5E:AB:32:47:13:1F:0F:7E","sha256":"E9:90:FC:6D:DD:F3:01:23:5D:A0:C4:C1:0F:BA:7E:57:43:3A:2B:34:C7:84:5E:53:F4:B2:A2:A6:63:4F:7E:CF"}}},"request":{"raw":"GET /gtag/js?id=G-4V0X484FCS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 06 May 2026 10:51:01 GMT\r\nexpires: Wed, 06 May 2026 10:51:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 156465\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472404,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e758d549029138020e60eb2906b53d7d","sha1":"3012ff2de3c257c8fdee7c2b6208bfc4d986a03f","sha256":"e87428f2611663bce36adf8f0a9f05a35dceae1ed5bf28871f5b4f4b7c84d647","sha512":"ce9b884e573c08401b0e8b96a1499ce72012bc87d6d7204773bdc0e8e1abe22fb9391d0d91c722fd9a86a82e9c79ac9fc5c37713ff3b280b3a5aa9990b8fb241","ssdeep":"6144:36ps1lRxSFzY/JI+AEpjDCer6F5gjbzDfS5RNncjw:PRx2Y/JIobvDq6w","tlshash":"5ca4e8ceb3d674625396f478903f018ba57b29a2b44cc899f189cce42e7465a4237f7c","first_seen":"2026-05-06T10:51:33.871516Z","last_seen":"2026-05-06T10:51:33.871516Z","times_seen":1,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":114,"dns":0,"connect":29,"send":0,"wait":61,"receive":85,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/media/1bffadaabf893a1e-s.p.7cd81963.woff2","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.889Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/media/1bffadaabf893a1e-s.p.7cd81963.woff2 HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 85272\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"14d18-19de370384a\"\r\nAge: 0\r\ncf-cache-status: HIT\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bkorJ45r7%2Fl95veDfhoDkwoS1iwRnb4j5xFHztDfGyqenFoYpEd4seOZXqOtg0SMmE89DYPwRAptmyThPGQUwQMXsLZsehxEcJ2plIts2ITMg0kfMx2N1muesm%2BGW5tIaq2PEy%2FYXU%2FY3u3X\"}]}\r\nCF-RAY: 9f776d68cc940883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85272,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 85272, version 1.0","md5":"01ba6c2a184b8cba08b0d57167664d75","sha1":"521e24d1741e0c74388a84286150f8a927265597","sha256":"a28eb6d3ccb534ae0c94ca999371df024aab60b08c3c8a5720ee9e32fa0faaa2","sha512":"8a84cb76807f518c2ad3afc0382d94520a00b63dd0b1875012ea4f518068e3cfb971cafa4ee57daeadc7e7f466d4c206e66a992fa709ed527c1ebea592766c79","ssdeep":"1536:/+FNImycTVyrkJtpc/jISuC7eZGc67MTni3dq3OoRNJzJEXCDClBgzG2Hpj:EImyc0rknpc7tuC7vAmAeoMXUCIzG2H5","tlshash":"82831291a60b9dd0866bf8783b494e20827d95fdfb714ebe53a5a3d1410109a3f5c52c","first_seen":"2025-05-31T16:35:19.663912Z","last_seen":"2026-05-17T12:40:08.622527Z","times_seen":4675,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/statistika?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.256Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /statistika?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lH83nBk662RO0LLLe9%2FpZeU14RBadDzbiNiWjaIoVSXvR5OZ1nx8fgBBOSlUYbsbFv7%2FptV1AvOmXgdRB7lwlNTjdc2FG23xIPEwB8ZEFDaYdf7YlrReHHDpj9nQpYR%2B9bmc5DQAa5AvR3dn\"}]}\r\nCF-RAY: 9f776d6b1c130883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"a0dde6c7ab205db65cb14b2b2f1ad565","sha1":"c58bcdc236615754ba0896c4511508f41bd14889","sha256":"cfc357e5b6d7b72d0b2a390b24aadfe6c5dbf670e5c88ffc1a09819117905c67","sha512":"e821bd67277c5311ce44c411fc67c27583ffa9898e1e1effc738d6d72d78f61ee4de64be3b6f500e77dbcec7a42ea6121713a3e779cee3753ded3555978a2761","ssdeep":"","tlshash":"ded017230d0a14bb0aff10e0842d49061689cd3b239864f0c0505c1f3b7226683cf545","first_seen":"2026-05-06T10:51:33.872255Z","last_seen":"2026-05-06T10:51:33.872255Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/klisa?grad=novi-sad\u0026_rsc=p37cr","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.313Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/klisa?grad=novi-sad\u0026_rsc=p37cr HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuNl67IwEF54UgnRwvMAtF%2FysmNXG25z0iMh7NQ4CYyVFFFN%2FISb4c20LJArUniqyL5UqUDQStQEqVt53GCMBe8qAJs6d2io6MWt0NuI6DD6Ff4xVUoNs%2FE1u55MU%2Fc74EE6GP8l4tKGslfu\"}]}\r\nCF-RAY: 9f776d6b7d530883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2017,"size_decoded":0,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1004)","md5":"e4d81fd9b5d0be91ef3eee9eb31b9219","sha1":"c509ee35bb1ecb2efef5d1f37e87f6f7f4eb68bb","sha256":"bb767f7fc6024aec6c199bbca9b79197c2607a4b7d154db1de661f4707f181a6","sha512":"d16825d4f185d24fa63579247548fe13e53a9bc11df049e7662c1f42a39ec076d738c03b19d4e8e4179bd19376effa9cbc42c017c9564102fa8ae786a1941517","ssdeep":"","tlshash":"1841d57bbf01dd19a7bb8889185fa306678c937b831815b7818d9c1c03c77ad2e65365","first_seen":"2026-05-06T10:51:33.873383Z","last_seen":"2026-05-06T10:51:33.873383Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/futog?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.594Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/futog?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFApm%2B2Chd9IrY3oCyvgAb5VTdFeDhZ5bGZLR2yYz40rx95SQGpIxgHqfWWCi7XCaqO1fn1yhSc1AW%2B9AXyPD%2FIgssNvHZZhCaNx%2FHNM6Axvl85JDGhsLa6eO%2FxrYdOw8tWoFgWC4vEYKtX4\"}]}\r\nCF-RAY: 9f776d6d3b1e0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (336)","md5":"7eb41ec0d1e6b7bc738188fb57b0bd53","sha1":"776a0fd16ce4a4db11682b9fada0c787b1432a3b","sha256":"92db4c27c7f3499d343cdf5128d34e2c8b1558ead067c9f60d4e93355a282fd3","sha512":"c4724b3b26ec59509cdc0a8847afe3476b1a697bff78e064815ada5528cf6ad80f8039097f8b499274c0a170a1df0f4320df49bccca9a5b6026583de050744d7","ssdeep":"","tlshash":"23e092231d0a14b71abf20e0852d9946299dcd3b339869f1c0515d2f3fb222693cb555","first_seen":"2026-05-06T10:51:33.874636Z","last_seen":"2026-05-06T10:51:33.874636Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"104.21.84.114","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-06T10:51:01.152Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/1bffadaabf893a1e-s.p.7cd81963.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/83afe278b6a6bb3c-s.p.3a6ba036.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/chunks/bdcd77ba4d0191dd.css\u003e; rel=preload; as=\"style\"\r\nX-Powered-By: Next.js\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1%2BJTC2foHLBwMEWjW2OU9R00zDd3BZwDDFGyonoXHG93txUG8tnRd%2FBJ%2BAxxDylrMDkoFhzlSQzeocnlDxewyAKyDuhJew9ar%2FR4QJUDBIC5gvW7jt%2F74qAYbcEl6LoD%2FP27uCXgIujN94Oi\"}]}\r\ncf-cache-status: DYNAMIC\r\nContent-Encoding: gzip\r\nCF-RAY: 9f776d643b941ae6-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}],"data":{"size":33411,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33267), with no line terminators","md5":"2438734c84f6adbf6a110c6336573722","sha1":"ebb97bd0a91bd9e51dbe3706fe9744dc45575f5b","sha256":"bd0c9128ba5cc61dcf7af999bee52d98bd8b162127045ff36a36b1e23609a273","sha512":"9c88bac2c54390f5ab0516ce25bf9a84e9172ccbedf173f47830a349cc9f1aeab4f36fdeb30f928070e3647e4a1ba6ff589951bcf1ba513363b29200ffa04027","ssdeep":"768:/cO7O5BuJfHhho1/ViijvqWwq8Y25nfeZw1BSG4KL9nXjOd7GDMMcj0WrjLdKZ1o:zqBuJ3CX","tlshash":"4ae22038b442ce5ef85b6d99203d9e3950ced65fc257ce29e2acd65103c3c79ab91ac0","first_seen":"2026-05-06T10:51:33.875761Z","last_seen":"2026-05-06T10:51:33.875761Z","times_seen":1,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":248,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/rotkvarija?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.172Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/rotkvarija?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BhU2KmbY%2FKT13EN%2BFCy7gu52HgCYmLtDhPCmWZVC6YKw1emTit5yBiX9nrWivwMsJKWKf4SXynlJgm23FOk8RT0xZGJF4p8mmeOg4iwrZQWLktNrIyJA7bWFza3HqTb6p87Kjb7F%2BQuLgfJi\"}]}\r\nCF-RAY: 9f776d6a8a770883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (355)","md5":"99699e68366c59bbf469423bfd677987","sha1":"e05cc116151169654f8eb4cca6b64c9930b8b9df","sha256":"bb97a149b2cab77f3ad70749d30dbbe20d52bb5a735a2c23af1563175fcfef4a","sha512":"81208f77f7ba6f280111a04e1de0d726d167d91f87e6f00a9753b07c8e22a4d4533947c98010dc8fd22d9e99d6aef43330f8aff0ef77ca913a84e49aa554edf4","ssdeep":"","tlshash":"61e012235d0e15bb1bbf10e0852d96061989cd3b339968f0c0400e1f3f7222683db545","first_seen":"2026-05-06T10:51:33.876985Z","last_seen":"2026-05-06T10:51:33.876985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/grbavica?grad=novi-sad\u0026_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.191Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/grbavica?grad=novi-sad\u0026_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w6mOLZeAh8N7CVGsbwfCVU4vff05Sd%2BWn0nqDeSqfeswpkbILZ0%2BRYJjT2bOIvyjO6M%2FZLpcHakbYfGPeQpF%2BPK4clG2Iepow4Rz%2FinXYe6eScw99D16%2F9cTs7NosZbfIugyS%2By7YpKoK44o\"}]}\r\nCF-RAY: 9f776d6aaabc0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":354,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (353)","md5":"2f340cf8b334afe19cc51e9b83269254","sha1":"f71ec9f6faf24a57c56b48fa65fd73ad488f474e","sha256":"73fd09f6fbbb4510e6d1c81df158741f765877786e0517910bc6e5ed712db228","sha512":"9c2e2b83b5f5d0149a849a7cdbc3cf25f41d04468b77bd2951f097a5657ed949780083d5eb79cd7c49e0f6a8a7512d7bb613613c9fb361d6411fc6cecd96383e","ssdeep":"","tlshash":"d6e012235d0e14b71bbf10e0852d96021989cd3b739868f0c0400d1f3f7222683ef581","first_seen":"2026-05-06T10:51:33.877754Z","last_seen":"2026-05-06T10:51:33.877754Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.246Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BW5f%2FaRM2M%2FEDW3YfvEyt5dUxA9ynsFC1bUxaTzpm7IkIBgrojS6pesv%2BgvgFS24Yd3o7u0G3BJgwUzhGsVVTg0JsREXIEgKDjKcbQw4ZR4IvkTJqTdmESJRlhDqquJLMnccqsQfXl%2FpThpQ\"}]}\r\nCF-RAY: 9f776d6b0bdb0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text","md5":"8d62c718adbfa75cac9105339d34f3ea","sha1":"057da037b737b36714fdb311af937447bb3730a7","sha256":"3de3f0e6ce36243936fb886860776f303d0162f8ef782806be7fbcf99e4b4e8a","sha512":"13b36eaf3cf49a0576460949239211d64232be416f795256588b6e8144df1d954733580ae0b1291044ebf21dbd70b58c0272f922e75b12aac49439cccbe84c06","ssdeep":"","tlshash":"39d06c271d4a18bb1aff10e0852d99061a99ce3b239868f0c0555c1f7bb226683db555","first_seen":"2026-05-06T10:51:33.878512Z","last_seen":"2026-05-06T10:51:33.878512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/klisa?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.584Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/klisa?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zs%2FR4r5NKZkmfFju6naJ1331VcHyIVdH%2Ba%2BbtAIhtm%2FFi%2BtejG2GAVxLVgrR%2FpQZbQpANkNb6yK1mESBkbBkLiozaiQ6F%2FXgdciAVoZKWdjed0Y0uDup5pg3rLb6ZQ23Ck78k%2FH8A8ocVL77\"}]}\r\nCF-RAY: 9f776d6d2ae90883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":337,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (336)","md5":"5872413afd0e0dbc1944a9271de35bea","sha1":"486f601bc06bb3b02102f0378b305c76c49c6f49","sha256":"839244721434b45cca2cf4e39fcf7b0b15a80ff54453bcbb8b3effc4cfb0ac75","sha512":"e6406f9c239ae76c8d41adec65009be83673405668d257c27480438f62fc68ff54dec6dfcfc95b60f29bab583eac88cdbfae42cfc934074134e3bd86a16943b8","ssdeep":"","tlshash":"a6e092231e4a14b71abf10e0852d99061989cd3b239869f0c0505d1f3fb222683cb545","first_seen":"2026-05-06T10:51:33.879341Z","last_seen":"2026-05-06T10:51:33.879341Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/cene/podbara?_rsc=1r34m","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:02.694Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cene/podbara?_rsc=1r34m HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_4V0X484FCS=GS2.1.s1778064662$o1$g0$t1778064662$j60$l0$h0; _ga=GA1.1.1786517406.1778064662\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:02 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQOBstmIdf1fM2JHKyxp6UpS5EYOiiwS9VjVvgIMoPCUCJmIqpqMLeYxQ%2BFCdvCOFLvke%2FOL4ik6MKrThBemMkJ1BYUq2MugerINI74dBu%2BEE2ZCuJo0I4g6OXFDquxOyPNKlohJYIwbldhG\"}]}\r\nCF-RAY: 9f776d6dcb987127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":339,"size_decoded":0,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (338)","md5":"dedfd9f22347226c5245b9c79d5863c7","sha1":"67a3990f48f3e5d8d1f10bf050a067576bff5782","sha256":"199c3f251544c0a2a44d79f15e90902634599d82256af125b281fa8e4199318e","sha512":"47df2df265b38b6915f5df6bb6efe384800a4e97e405787c06c1390b2e1cb6cefa911dacc06b1a1e9092734416965531a75ddfd3e4773cc421f9c788fb3cd0e7","ssdeep":"","tlshash":"22e092232d0a15b71abf10e0852d99061989cd3b239869f0c0511d1f3fb222683db545","first_seen":"2026-05-06T10:51:33.880191Z","last_seen":"2026-05-06T10:51:33.880191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/a788f517f12da095.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.495Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/a788f517f12da095.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"1c115-19de3703847\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vKVH1Xs2DgaYaGV6OZ1LsOHcfeFHAr26q1Fx%2FccIC7f%2FlzBv9zfKUTiJIOYFLEKiMiAXzoAY0v7IroMPY%2BpvHVv8a7bcQv6%2BvpiEONXLkxiHEpIyujnNAYdXKg2WqdfjMRxP%2FQp9i2qtKTwV\"}]}\r\nCF-RAY: 9f776d664a897127-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114965,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fd38bf6c9cfe94fea683729dc5d1e5b4","sha1":"40d66615f0ae638ec256e51e9c781ab61a51eea0","sha256":"33d12bf07329291038b0a855fa93f9c5d45eca388da983c440186586d1ff1af0","sha512":"3d8eb8cb68d44bb105a4ee965d1ee8270a49043c85bb12b6469cf5e3320633f1f27813b3da2887b69098d58c5cd9f45064dcc420d69fb629b1735f54ed5fa67a","ssdeep":"1536:iPt9I3dPBQ8aJaRr1jOvMvZq5iOWIoP4Ljt/zYdjo:i29akfjoM+iOWQt/gjo","tlshash":"f1b318f935d1f4820ba744a6c03f0006f32c5d37189e68a0a3e5edda756459de1b3faa","first_seen":"2026-05-06T10:51:33.881064Z","last_seen":"2026-05-06T10:51:33.881064Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":151,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/static/chunks/b6c063c6d3a97cc4.js","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.500Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/static/chunks/b6c063c6d3a97cc4.js HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Fri, 01 May 2026 12:07:55 GMT\r\nETag: W/\"79a5-19de3703849\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9OduQ4OHqVBNtT4YiNnWA4rg5eNyPVOeVShyHu3hdHLtgkZYZrgT2yAFNRFyTjiOBu%2B1JL7wRyMGZIA%2FAmlTkNn0awDw2ACgu37gVEIfvB9f0UfTNi3SJyYFUA3BGlzA0rMTkie2GDtFB9r\"}]}\r\nCF-RAY: 9f776d671f2b0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31141,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16828)","md5":"6414cca3507eb32ffff6f8c334a881a2","sha1":"581f51af62f2069c7a3562c20765cb19873f603d","sha256":"869bbf5122a9fd4e5f34be01ae7243b61f6c52b6b3500c17e2ee9397e3c24867","sha512":"ad960b4ed2313fef76985857c361e514beb09424d97e1207f6d63c24508af41f4853c2118b39bbe455b8ecca762f76d2a08a2aaf15217a0991de9e77fd538d8b","ssdeep":"768:WmCGRHlktLps9HhXHBcxRjfd4TU7MRtnO9uwCACAw:WwHMs9BXH6RdeUha","tlshash":"02e22bb572d5fcd6429b8184843f400df3791d75642eb094b3f98cea666098ce1b2fba","first_seen":"2026-05-06T10:51:33.882011Z","last_seen":"2026-05-06T10:51:33.882011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":112,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"webmail.desk-coinbase.com/_next/image?url=%2Flogo.png\u0026w=384\u0026q=75","fqdn":"webmail.desk-coinbase.com","domain":"desk-coinbase.com","tld":"com"},"ip":{"addr":"172.67.191.145","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"http://webmail.desk-coinbase.com/","date":"2026-05-06T10:51:01.508Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /_next/image?url=%2Flogo.png\u0026w=384\u0026q=75 HTTP/1.1\r\nHost: webmail.desk-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://webmail.desk-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 May 2026 10:51:01 GMT\r\nContent-Type: image/png\r\nContent-Length: 1658835\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nX-Content-Type-Options: nosniff\r\nX-Frame-Options: DENY\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nX-DNS-Prefetch-Control: on\r\nPermissions-Policy: camera=(), microphone=(), geolocation=()\r\nVary: Accept\r\nCache-Control: public, max-age=14400, must-revalidate\r\nETag: Vy8iMTk0ZmQzLTE5ZGUzNzAzODNjIg\r\nContent-Disposition: attachment; filename=\"logo.png\"\r\nContent-Security-Policy: script-src 'none'; frame-src 'none'; sandbox;\r\nX-Nextjs-Cache: STALE\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rOhFDSISMjBTKK5zNL06nvwu4dHQbOk%2FBF1hW%2BO6S9Qc%2FPBM0RzNjwMW53o1%2F6pYmaDRHDu8Mld1esK4J67DNoxV1ybbjo%2F466k7N%2BbCxngZ471aU5%2BwAF5PIPGby%2BpV2dSUWHSAzySAgNfE\"}]}\r\nCF-RAY: 9f776d67d99f0883-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1658835,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2813 x 600, 8-bit/color RGBA, non-interlaced","md5":"b8587381d399331fb9597a58e2abdfab","sha1":"1d56662c8ceccaff9220dc67c8a92ee377bfa58b","sha256":"244663fd55c6405afc64d5ccfe49f40c6942454468c604ed64b141948f19ed48","sha512":"a120842530a4b47651c77fb431fd94050ef6584c3feaf47c85a99ba8c1199458fac26b4f62bcf058553fef6a87e01a6862e323f78457b164c00328e2deb99730","ssdeep":"24576:RLGbECjRfRSwoxVZdVmLMf3XE6EZGap37sp2TE:MbrzSwofZdYLMc1kcS","tlshash":"fa25332577862c732f1981507b9144a44350feb3b37348c3a5add9ca69fc608ad26ffa","first_seen":"2026-05-06T10:51:33.882957Z","last_seen":"2026-05-06T10:51:33.882957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":662,"timings":{"blocked":226,"dns":0,"connect":0,"send":0,"wait":61,"receive":375,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-06","alert":"Sinkholed","trigger":"webmail.desk-coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}