{"report_id":"4f830855-d816-4f52-95e4-1df20f235a80","version":6,"status":"done","tags":[],"date":"2026-03-09T11:47:44Z","url":{"schema":"http","addr":"mail.coinbases.biz","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":0,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"title":"LWS Webmail :: Welcome to LWS Webmail","dom":{"size":1192,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (501)","md5":"121682ffcc2593839380efe0781c0aae","sha1":"c27596c7ac65d3ac127d60bf21ee650bb187956b","sha256":"0121bf335246824d2f644e8854a87e23b34f5f21e781e19b504ab26d1e597938","sha512":"d7071a536b3715a85a8f119217ece028a85a3d71c164ff872edff3cc2c8775c8275bb2159269e8fa0230f65af1c55d0290fc654499c3fd199fa682dfe81e3da5","ssdeep":"","tlshash":"d321cb870c448e1a22100475d48bb086c4f6888ee27d7c70f0b5436e6be8bfc90ee986","dom_hash":"domhash06be77f0a81eee3439339fa2016c81cb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.coinbases.biz","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":0,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T11:47:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"mail.coinbases.biz","ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"domain_registered":"2026-03-09","domain_rank":0,"first_seen":"2026-03-09T11:47:44.649082Z","last_seen":"2026-03-09T11:47:44.649082Z","alert_count":74,"request_count":37,"received_data":359446,"sent_data":23509,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/feather.min.js","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"b574a076a30ee3f8d842fd355e460344","sha1":"5ffa4ae06c1d33a91392867becd4e85af8426c68","sha256":"ea465ac6b69a037dc49fda6ab1c585f95725091eff4515df61db91d9d3c5e54e","sha512":"ccc9bbf9943c019af5af75bc67c943013907d39406e469b6c5ce8c96c09d073f65ea813c63b2170723204a6feb75142b86e1edf7d1c061f3258c138467af2ae4","ssdeep":"768:xBsdL1Xq52ecoxdaQfnalvNsojRu9J0zNcHqLExvi/9TkJ0qqvzpO5tGwNcpJzRK:xBE2fnFAycpJc","tlshash":"f1734e367d4db69ed10743d61a1f6026636f22fff88c4214e06c46b0c9276d7ee67a28","size":76047,"data":"","first_seen":"2024-05-02T20:45:57Z","last_seen":"2026-05-15T00:25:11.694325Z","times_seen":1615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/lang_status.js","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2771e0f4626b37635c16238c5d4b38e","sha1":"66d0cc17382bcd0b8fc8d909bed95cfcab9a0610","sha256":"7fd7ccd40fa23e6e9364ec35ced0101ce74378ecd98a39f0b0c015a8e055d472","sha512":"42d0593d1a968c1c488e31cd8444fd1e7ba5643bb5924673db9f3be35df290a2082ec38fbdfda3df1b7e75428a04cf62746ef9f7bbcb87b42e7ad01ebbfb6f08","ssdeep":"384:Itt0lpPoHDpCHqZyyK9ylY1Iieh4EjYanL+q:ItkJoHYKAMlY1leh4EjYaLl","tlshash":"9992b56971f3143681a3a1ba27cb7148b92884077582fd48bf8dd2442f8b578c1fbadd","size":19530,"data":"","first_seen":"2025-12-02T16:54:55.420804Z","last_seen":"2026-05-13T22:03:14.963855Z","times_seen":88,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c02e946fe528329cbd6a7377e12d4566","sha1":"570790a9b79df546ce021088e1e68bbd511f2a43","sha256":"26fabe452b0cd62327c2f5139c56173703a035442dd890565af1e72a8864cb84","sha512":"94deb8d40d3c42fe925d5bd7cbb2e95aea655afae26c53a7ba2793d9f2e2fccd9582ceec5ef120cc68d22efdeaf5019e243cf64d867a975e58bbd134d14d3f81","ssdeep":"96:gGKupQHToU8oMLLXlHPX58m1pw/WCytfOxH766wyJIT0OyQxkMzC7QvA5mmIzJ1L:gGFQHTqoSPXT1prCytWxyyJIT0OyLJmX","tlshash":"bfc11bb6713d967302df27333175a38972321098159f824440ad8a25133ceaeb5f7fd4","size":5791,"data":"","first_seen":"2025-12-29T02:55:37.254872Z","last_seen":"2026-05-14T19:22:37.367177Z","times_seen":766,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mail.coinbases.biz/favicon.ico","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:26.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 09 Mar 2026 11:47:27 GMT\r\ncontent-type: text/html\r\netag: W/\"692076bd-29d\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":669,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (447)","md5":"a59675de7afb4dd1ee118e07979d577e","sha1":"70b795c142bf46e83307bc0a0f4469faa4487433","sha256":"143131186b0942422e0aabae9a4677751cba4e2db1f9016c7d5af78c4dd713dd","sha512":"961842d6d647c951095eb9a1a61a6677e39f5e839775887bab9bc4cee7d95cc0df3ce9bef0c54064230a6cd92f347acc089940ae1de17191c781b9e18ad95eb6","ssdeep":"","tlshash":"4001feaf4b07073608aa051136ca36c82a0b46b89a7e029164e7927b7b415a5ca0e6ca","first_seen":"2025-10-28T11:05:08.658186Z","last_seen":"2026-05-13T22:03:14.952829Z","times_seen":104,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T11:47:22.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 09 Mar 2026 11:47:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://mail.coinbases.biz/roundcube\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12598,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":308,"dns":162,"connect":66,"send":0,"wait":66,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/feather.min.js","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:23.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/feather.min.js HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 76047\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Dec 2025 16:53:19 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76047,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61490)","md5":"b574a076a30ee3f8d842fd355e460344","sha1":"5ffa4ae06c1d33a91392867becd4e85af8426c68","sha256":"ea465ac6b69a037dc49fda6ab1c585f95725091eff4515df61db91d9d3c5e54e","sha512":"ccc9bbf9943c019af5af75bc67c943013907d39406e469b6c5ce8c96c09d073f65ea813c63b2170723204a6feb75142b86e1edf7d1c061f3258c138467af2ae4","ssdeep":"768:xBsdL1Xq52ecoxdaQfnalvNsojRu9J0zNcHqLExvi/9TkJ0qqvzpO5tGwNcpJzRK:xBE2fnFAycpJc","tlshash":"f1734e367d4db69ed10743d61a1f6026636f22fff88c4214e06c46b0c9276d7ee67a28","first_seen":"2024-05-02T20:45:57Z","last_seen":"2026-05-15T00:25:11.694325Z","times_seen":1615,"resource_available":true,"data":null}},"time_used":2306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":359,"receive":1947,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T11:47:31.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/ HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: techaro.lol-anubis-auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhY3Rpb24iOiJDSEFMTEVOR0UiLCJjaGFsbGVuZ2UiOiIwMTljZDI2Yy01ZTdlLTdiZGYtODgyMS1hMDcwMWNlZjk2NjUiLCJleHAiOjE3NzM2NjE2NDksImlhdCI6MTc3MzA1Njg0OSwibWV0aG9kIjoiZmFzdCIsIm5iZiI6MTc3MzA1Njc4OSwicG9saWN5UnVsZSI6ImFjOTgwZjQ5YzRkMzVmYWIiLCJyZXN0cmljdGlvbiI6ImRhOWFkZDU5MmQ3ZWI5Y2NhNzcwNWNiNDg3MGQ3ZmQ0ZTk3MThjY2Q1MTQ4NmM0MjYxYTcyN2E4ZDU2Njk2MGQifQ.UROxraDpT0MyAenOtbKYVVPHjmzHlKCH6c8ua3_gfv3mQ_LcJClbFojqgQi8CeUlz34vGiCU2lM4mPOweSVkBQ; techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-language: en\r\nexpires: Mon, 09 Mar 2026 11:47:31 GMT\r\nlast-modified: Mon, 09 Mar 2026 11:47:31 GMT\r\npragma: no-cache\r\nset-cookie: roundcube_sessid=520m36u11rtuljqp3c9nnlukmh; path=/; HttpOnly\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-frame-options: sameorigin\r\nx-robots-tag: noindex, nofollow, noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":17371,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4216)","md5":"497ebbc39fc97c148d35c39d48df6e2a","sha1":"819ce75ff57cad74c18a61057242a721af6cd6e6","sha256":"517217a2e16ff82a370b71d67994d7ce0bb4230f1084284a3457a7a524a4ceb7","sha512":"2c95393366e6a97d1178007ff8d21efa58396cbcb1aa282806af5e8b784a9db4560c4d32b7d961e3f80025224b0e694143e97a2321870d6eb44ff341010849e4","ssdeep":"384:DvbEoPQCgrwHg4k3bcALgE+ji5o084a5EPeKPBT//jXgqsT:DvbEo4Cq8hwFx/bQqg","tlshash":"19729411ad44cd3282db1cd9a8bb466525fca390d512188cf978d7f80b6dfbce2b7215","first_seen":"2026-03-09T11:47:47.382735Z","last_seen":"2026-03-09T11:47:47.382735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T11:47:23.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/ HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5d39-799e-80a6-00c9328b45ca\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 09 Mar 2026 11:47:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-store\r\nset-cookie: techaro.lol-anubis-auth=; Path=/roundcube/; Expires=Mon, 09 Mar 2026 11:46:23 GMT; Max-Age=0; Secure; SameSite=None\ntecharo.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665; Path=/; Expires=Mon, 09 Mar 2026 12:17:23 GMT; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12598,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8024)","md5":"d6ab34be3c23888e2e82fae66de53320","sha1":"26e2be3c2cb9131324e9d1c9be9868da00cbff84","sha256":"8b0a613e356b16eeb7649bb8ebbfcff56c36f828addbd4210d6719b5630c2bed","sha512":"3176945e34e8ab035ababd836f55e1eb96edc7f3f4c352533ca128840c28ddbe5a4b94c3b01d8c1bba917fa0eac701159950c32f855a8cb898d35f37ff235e23","ssdeep":"192:TOBETS2y++Fkd62Zv7JXeS7JXew/27x+RllWrpggc9SZPWa:6BETSD+Lhk7MRHWZ9PWa","tlshash":"cf42c77a6590006e7c43c0ebfca0ba58b51aa1c3df2fc6a9b58e5110bfd7af118d3244","first_seen":"2026-03-09T11:47:47.386449Z","last_seen":"2026-03-09T11:47:47.386449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.339Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/locales/en.json","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/locales/en.json HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:27 GMT\r\ncontent-type: application/json\r\ncontent-length: 5629\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5629,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eb1376555981705f75c92cac6fe5bc8d","sha1":"c63df34a7943088547b04e57dbc1d7e2e8e5b109","sha256":"cd23e940466a2ea3d217e7fa6b4fe22c6282a6563bd69b497f3165cccde25b4b","sha512":"aabe474bef22a6ae1421504f659c269e353141f5f5e55b5e8accd8ca7cde83474ca258e1b3d7e03f23d1726102e268c6129f12cffb8e67ff4a2aecc11ddeabff","ssdeep":"96:iD8r9nFYpVV+qGtsA+XpRV7ZkvRpUDIeqAODR3N5tJxgnXa1BNe:Rr9OVVZBXp/7Zkpq8eEDRntXAqS","tlshash":"44c1a82bd948112709c202d1a245a6e7bb51ce6b4320371c5b8b612f16de93f8377dfd","first_seen":"2025-09-19T08:25:05.616565Z","last_seen":"2026-05-13T22:03:14.970259Z","times_seen":383,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/skins/elastic/deps/bootstrap.bundle.min.js?s=1770543211","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:32.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/skins/elastic/deps/bootstrap.bundle.min.js?s=1770543211 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhY3Rpb24iOiJDSEFMTEVOR0UiLCJjaGFsbGVuZ2UiOiIwMTljZDI2Yy01ZTdlLTdiZGYtODgyMS1hMDcwMWNlZjk2NjUiLCJleHAiOjE3NzM2NjE2NDksImlhdCI6MTc3MzA1Njg0OSwibWV0aG9kIjoiZmFzdCIsIm5iZiI6MTc3MzA1Njc4OSwicG9saWN5UnVsZSI6ImFjOTgwZjQ5YzRkMzVmYWIiLCJyZXN0cmljdGlvbiI6ImRhOWFkZDU5MmQ3ZWI5Y2NhNzcwNWNiNDg3MGQ3ZmQ0ZTk3MThjY2Q1MTQ4NmM0MjYxYTcyN2E4ZDU2Njk2MGQifQ.UROxraDpT0MyAenOtbKYVVPHjmzHlKCH6c8ua3_gfv3mQ_LcJClbFojqgQi8CeUlz34vGiCU2lM4mPOweSVkBQ; techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665; roundcube_sessid=520m36u11rtuljqp3c9nnlukmh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 84104\r\naccept-ranges: bytes\r\netag: \"6988586b-14888\"\r\nlast-modified: Sun, 08 Feb 2026 09:33:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84104,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"3fb9784331ba8d606ca6e0877b9466a3","sha1":"2c8dde7ea3cee76f061c06bb64f9f00497f893f3","sha256":"19b51730c10082760e6d9b82c1342e60855f98d2666c64e4eb758d26b1a0c840","sha512":"a34c44d07455be21ca911be580524a6dc5c4d4cb91f46030c26c4d258ae9a46334e65a27a57aeb987c1801238919e6ffac280bbb5542899a8956c5577e7f0c40","ssdeep":"768:du/iPy7+zZHVPVBNpwV7BTUB6/YLF/fB+4ed4MMAja+t+QnXLb1+uaR+orWieOJ9:deiayUYLZ83dPD3GAP6f2jX+i/QB","tlshash":"8a83834972a0b472069f61a6807b4a0bf2372c5da107b01cbad9d4ed1f7cd893167f7a","first_seen":"2023-03-07T12:08:25Z","last_seen":"2026-05-15T01:38:21.480831Z","times_seen":2606,"resource_available":true,"data":null}},"time_used":7099,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4012,"receive":3087,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/api/pass-challenge?id=019cd26c-5e7e-7bdf-8821-a0701cef9665\u0026response=00006d940f3ff50bf776132910c76800df56b531a6b693cd59fc0961d756d579\u0026nonce=2001697\u0026redir=https%3A%2F%2Fmail.coinbases.biz%2Froundcube%2F\u0026elapsedTime=1674","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T11:47:28.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/api/pass-challenge?id=019cd26c-5e7e-7bdf-8821-a0701cef9665\u0026response=00006d940f3ff50bf776132910c76800df56b531a6b693cd59fc0961d756d579\u0026nonce=2001697\u0026redir=https%3A%2F%2Fmail.coinbases.biz%2Froundcube%2F\u0026elapsedTime=1674 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Mon, 09 Mar 2026 11:47:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 60\r\nlocation: https://mail.coinbases.biz/roundcube/\r\nset-cookie: techaro.lol-anubis-auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhY3Rpb24iOiJDSEFMTEVOR0UiLCJjaGFsbGVuZ2UiOiIwMTljZDI2Yy01ZTdlLTdiZGYtODgyMS1hMDcwMWNlZjk2NjUiLCJleHAiOjE3NzM2NjE2NDksImlhdCI6MTc3MzA1Njg0OSwibWV0aG9kIjoiZmFzdCIsIm5iZiI6MTc3MzA1Njc4OSwicG9saWN5UnVsZSI6ImFjOTgwZjQ5YzRkMzVmYWIiLCJyZXN0cmljdGlvbiI6ImRhOWFkZDU5MmQ3ZWI5Y2NhNzcwNWNiNDg3MGQ3ZmQ0ZTk3MThjY2Q1MTQ4NmM0MjYxYTcyN2E4ZDU2Njk2MGQifQ.UROxraDpT0MyAenOtbKYVVPHjmzHlKCH6c8ua3_gfv3mQ_LcJClbFojqgQi8CeUlz34vGiCU2lM4mPOweSVkBQ; Path=/roundcube/; Expires=Mon, 16 Mar 2026 11:47:29 GMT; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17371,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":2787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/skins/lws/ui.min.js?s=1763735243","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:32.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/skins/lws/ui.min.js?s=1763735243 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-auth=eyJhbGciOiJFZERTQSIsInR5cCI6IkpXVCJ9.eyJhY3Rpb24iOiJDSEFMTEVOR0UiLCJjaGFsbGVuZ2UiOiIwMTljZDI2Yy01ZTdlLTdiZGYtODgyMS1hMDcwMWNlZjk2NjUiLCJleHAiOjE3NzM2NjE2NDksImlhdCI6MTc3MzA1Njg0OSwibWV0aG9kIjoiZmFzdCIsIm5iZiI6MTc3MzA1Njc4OSwicG9saWN5UnVsZSI6ImFjOTgwZjQ5YzRkMzVmYWIiLCJyZXN0cmljdGlvbiI6ImRhOWFkZDU5MmQ3ZWI5Y2NhNzcwNWNiNDg3MGQ3ZmQ0ZTk3MThjY2Q1MTQ4NmM0MjYxYTcyN2E4ZDU2Njk2MGQifQ.UROxraDpT0MyAenOtbKYVVPHjmzHlKCH6c8ua3_gfv3mQ_LcJClbFojqgQi8CeUlz34vGiCU2lM4mPOweSVkBQ; techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665; roundcube_sessid=520m36u11rtuljqp3c9nnlukmh\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:33 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 61871\r\naccept-ranges: bytes\r\netag: \"692076cb-f1af\"\r\nlast-modified: Fri, 21 Nov 2025 14:27:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow, noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61871,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (61389)","md5":"84bf2f0d09f7ce9e78897528e6f3d4b8","sha1":"3204d9c2beaa1e7568103b54d2a6387ccb45736c","sha256":"f44decb04e6203cdbf8c3dd980b4c9efd1167115036b71f16b4abf10a4b401f9","sha512":"e7288e50aa538b0abfc5ab45a116efa856c283fc1aeea52fbf6dc49bc5c9c178810c0be7421d88c886c29bd1876673bdabd4b1acffef02f0cfec56d1e0368119","ssdeep":"768:dOPghASfdOniel65pHIe9Z/UQBZVq7EF0efUIy4OjIF7kB4RLoTYDmP2mmBgclxc:wohXdOnbe99ZEG0efPu2sTubBLlxc","tlshash":"c153d6dc726536b612bb226721afe10162335929cc019851b26dd4e61efcf8532a3f7f","first_seen":"2024-12-26T02:36:41.249973Z","last_seen":"2026-05-13T22:03:14.966101Z","times_seen":377,"resource_available":true,"data":null}},"time_used":9383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4006,"receive":5377,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 7378\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7378,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5951)","md5":"a02fea9652fbaf3a7ec9ea444605e22b","sha1":"9fc8c7107b662d9f88eea4de042ca9e96845f6fc","sha256":"b78b9a584956e9b8cc79241a0b88b820f3bad3ad1a94114a972651f545d815ec","sha512":"a4b24ddd3460d522aced7cc6e2a2109d0bbed16ea551ea24d28a51f09746d8444cfb6e688f334f0c5e96674598bb8ba0d7cd1df033e7939e549f38dcfc4513fc","ssdeep":"192:gGFQHTqoN60k88kjMvvGgDVeQ0a4NieGghLdWJ+:gGF6qoNg8RAvGgDVZQNiLghLdWA","tlshash":"6be129c4ba95623043db62b240eb8c8fa23ea434350d045cb529e9f63575c6d867bfb9","first_seen":"2025-09-19T08:25:05.601775Z","last_seen":"2026-05-14T09:09:45.211676Z","times_seen":681,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":446,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/lang_status.js","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:23.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/lang_status.js HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 19537\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Dec 2025 16:53:20 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19537,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f2771e0f4626b37635c16238c5d4b38e","sha1":"66d0cc17382bcd0b8fc8d909bed95cfcab9a0610","sha256":"7fd7ccd40fa23e6e9364ec35ced0101ce74378ecd98a39f0b0c015a8e055d472","sha512":"42d0593d1a968c1c488e31cd8444fd1e7ba5643bb5924673db9f3be35df290a2082ec38fbdfda3df1b7e75428a04cf62746ef9f7bbcb87b42e7ad01ebbfb6f08","ssdeep":"384:Itt0lpPoHDpCHqZyyK9ylY1Iieh4EjYanL+q:ItkJoHYKAMlY1leh4EjYaLl","tlshash":"9992b56971f3143681a3a1ba27cb7148b92884077582fd48bf8dd2442f8b578c1fbadd","first_seen":"2025-12-02T16:54:55.420804Z","last_seen":"2026-05-13T22:03:14.963855Z","times_seen":88,"resource_available":true,"data":null}},"time_used":3060,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3059,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 7378\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7378,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5951)","md5":"a02fea9652fbaf3a7ec9ea444605e22b","sha1":"9fc8c7107b662d9f88eea4de042ca9e96845f6fc","sha256":"b78b9a584956e9b8cc79241a0b88b820f3bad3ad1a94114a972651f545d815ec","sha512":"a4b24ddd3460d522aced7cc6e2a2109d0bbed16ea551ea24d28a51f09746d8444cfb6e688f334f0c5e96674598bb8ba0d7cd1df033e7939e549f38dcfc4513fc","ssdeep":"192:gGFQHTqoN60k88kjMvvGgDVeQ0a4NieGghLdWJ+:gGF6qoNg8RAvGgDVZQNiLghLdWA","tlshash":"6be129c4ba95623043db62b240eb8c8fa23ea434350d045cb529e9f63575c6d867bfb9","first_seen":"2025-09-19T08:25:05.601775Z","last_seen":"2026-05-14T09:09:45.211676Z","times_seen":681,"resource_available":false,"data":null}},"time_used":1552,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1551,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T11:47:23.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/ HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Mon, 09 Mar 2026 11:47:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-store\r\nset-cookie: techaro.lol-anubis-auth=; Path=/roundcube/; Expires=Mon, 09 Mar 2026 11:46:23 GMT; Max-Age=0; Secure; SameSite=None\ntecharo.lol-anubis-cookie-verification=019cd26c-5d39-799e-80a6-00c9328b45ca; Path=/; Expires=Mon, 09 Mar 2026 12:17:23 GMT; Secure; SameSite=None\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12598,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8024)","md5":"f44685c800ac8ca246f6bc36bc232a6d","sha1":"ed7e6674266acb1c429b41e593ed63b371cb590b","sha256":"b9174ca59f7e7c9ed5c06dab9f9779daa652c062f1379c2fed33766d24970ae8","sha512":"9ef5a7364a2856b039a5c891f52d7b11841e8b988a9a48d50961afb0641cd367b4e91a89c418192ab0ab67d9de1d048d06ec0042eb353879df7d7e1932f7300e","ssdeep":"192:TOUEMr++Fkd62Zv7JXeS7JXew/27x+RllWrpggc9SZPWa:6UEMr+Lhk7MRHWZ9PWa","tlshash":"2542c77a65a0006e7c43c4ebfc90ba58b51aa1c3df2fc6a9b58e5110bfd76f518d3604","first_seen":"2026-03-09T11:47:47.395153Z","last_seen":"2026-03-09T11:47:47.395153Z","times_seen":1,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:23.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/main.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 11:47:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5791\r\naccept-ranges: bytes\r\ncache-control: public, max-age=31536000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5791,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4373)","md5":"c02e946fe528329cbd6a7377e12d4566","sha1":"570790a9b79df546ce021088e1e68bbd511f2a43","sha256":"26fabe452b0cd62327c2f5139c56173703a035442dd890565af1e72a8864cb84","sha512":"94deb8d40d3c42fe925d5bd7cbb2e95aea655afae26c53a7ba2793d9f2e2fccd9582ceec5ef120cc68d22efdeaf5019e243cf64d867a975e58bbd134d14d3f81","ssdeep":"96:gGKupQHToU8oMLLXlHPX58m1pw/WCytfOxH766wyJIT0OyQxkMzC7QvA5mmIzJ1L:gGFQHTqoSPXT1prCytWxyyJIT0OyLJmX","tlshash":"bfc11bb6713d967302df27333175a38972321098159f824440ad8a25133ceaeb5f7fd4","first_seen":"2025-12-29T02:55:37.254872Z","last_seen":"2026-05-14T19:22:37.367177Z","times_seen":766,"resource_available":true,"data":null}},"time_used":3258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"193.203.239.98","port":443,"asn":210403,"as":"Groupe LWS SARL","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T11:47:22.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 09 Mar 2026 11:47:22 GMT\r\ncontent-type: text/html\r\ncontent-length: 162\r\nlocation: https://mail.coinbases.biz/roundcube/\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-robots-tag: noindex, nofollow\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12598,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.coinbases.biz/roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0","fqdn":"mail.coinbases.biz","domain":"coinbases.biz","tld":"biz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.coinbases.biz/roundcube/","date":"2026-03-09T11:47:27.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.coinbases.biz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Mar 2026 08:52:58 GMT","end":"Sun, 07 Jun 2026 08:52:57 GMT"},"fingerprint":{"sha1":"A5:9D:37:FF:48:51:93:20:45:13:E9:82:BA:A9:33:A3:21:DF:61:54","sha256":"E2:73:8E:D1:F1:7C:8F:8E:8F:1A:4C:13:1A:FD:C8:A6:7B:2C:5E:9D:AF:87:C6:E9:FB:DF:73:E9:70:7E:79:E6"}}},"request":{"raw":"GET /roundcube/.within.website/x/cmd/anubis/static/js/worker/sha256-purejs.mjs?cacheBuster=1.24.0 HTTP/1.1\r\nHost: mail.coinbases.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.coinbases.biz/roundcube/\r\nCookie: techaro.lol-anubis-cookie-verification=019cd26c-5e7e-7bdf-8821-a0701cef9665\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-15T03:59:12.236673Z","times_seen":15198060,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-09","alert":"Sinkholed","trigger":"mail.coinbases.biz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}