{"report_id":"62e6ea93-351f-48f6-9d16-d729a16c3e00","version":6,"status":"done","tags":["crypto","phishing"],"date":"2026-03-23T08:47:21Z","url":{"schema":"http","addr":"mailspof.wkproject.id","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"mailspof.wkproject.id/","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"title":"Coimbase - Sign In","dom":{"size":106,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"e44de33b775a6ca866776145aafd3c78","sha1":"a9079dab1e89170b39c1da665c53e733b00c498d","sha256":"efd4595fecc095473a8a523dc934dfcbc565075ce46a4c662563112f0f878839","sha512":"a54a60a1b1f2e04fcff54ccc8641bbe5d0aaa1d1395e7ba515609afe36dbab28a910cc7522abfc8c2f7afd18914f27f0210fc6046aad8a04912ae09bc05a6bdc","ssdeep":"","tlshash":"6db092f56412000aa620aba089daf20849408511e0098c40a49031ec848c609d8a3690","dom_hash":"domhash5e6292264e4e9b437727682de9d4390f","first_seen":"2025-04-09T11:37:13.458426Z","last_seen":"2026-08-04T06:05:21.401995Z","times_seen":282,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mailspof.wkproject.id","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T08:47:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":3759,"sent_data":451,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"login.coinbase.com","ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-07-02","domain_rank":64446,"first_seen":"2022-03-22T06:39:46Z","last_seen":"2026-03-22T11:32:54.717754Z","alert_count":0,"request_count":1,"received_data":5136,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mailspof.wkproject.id","ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"domain_registered":"2018-06-05","domain_rank":0,"first_seen":"2026-03-23T08:47:22.25333Z","last_seen":"2026-03-23T08:47:22.25333Z","alert_count":18,"request_count":16,"received_data":401268,"sent_data":8933,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":32566,"sent_data":1082,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":1,"received_data":3003,"sent_data":457,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/recaptcha__en.js.download","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:01.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/recaptcha__en.js.download HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html\r\nCookie: inactive; inactive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 21 Mar 2024 16:49:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 504106\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/static/71371380d08a07cda58a.woff2","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /static/71371380d08a07cda58a.woff2 HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/styles.df88908d9e4f7c067040.css\r\nCookie: inactive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":35796,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7999), with CRLF line terminators","md5":"74a77626ef19cd29146dee9021f3e808","sha1":"4baa858c3af7bc7d0b90d0d3a946bc3aedf9b853","sha256":"45c25e2f8d53425c8eab4a23faafec4857eadcf6d2e6abe659bc781a4b1ecaef","sha512":"37e23d341f29ebb912968196b41b8701130f965407f8b5d890f962d820728f2e840604c26a505ab04ee6404d82da0ef4a3238cacb81b9c5b5ff45bf34ff8a44b","ssdeep":"384:DkEIdnga6ZmlgrZM9EggB9EEIIlB/Lz/RHUqx2nneLlbot1OarreZq5JLP:YEW96ZruDylB/f/lN2eB8PfeZqXr","tlshash":"05f2e869a61630397027c5b4a2b476cce541c107af619ae5f7cd2a71efc7ef889b3180","first_seen":"2026-03-23T08:47:25.960804Z","last_seen":"2026-03-23T08:47:25.960804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":452,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/static/502b733210ea3fdd4bf8.woff2","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /static/502b733210ea3fdd4bf8.woff2 HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/styles.df88908d9e4f7c067040.css\r\nCookie: inactive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":35796,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7999), with CRLF line terminators","md5":"74a77626ef19cd29146dee9021f3e808","sha1":"4baa858c3af7bc7d0b90d0d3a946bc3aedf9b853","sha256":"45c25e2f8d53425c8eab4a23faafec4857eadcf6d2e6abe659bc781a4b1ecaef","sha512":"37e23d341f29ebb912968196b41b8701130f965407f8b5d890f962d820728f2e840604c26a505ab04ee6404d82da0ef4a3238cacb81b9c5b5ff45bf34ff8a44b","ssdeep":"384:DkEIdnga6ZmlgrZM9EggB9EEIIlB/Lz/RHUqx2nneLlbot1OarreZq5JLP:YEW96ZruDylB/f/lN2eB8PfeZqXr","tlshash":"05f2e869a61630397027c5b4a2b476cce541c107af619ae5f7cd2a71efc7ef889b3180","first_seen":"2026-03-23T08:47:25.960804Z","last_seen":"2026-03-23T08:47:25.960804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":513,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/static/2a5dafc68ca015ca866a.woff2","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /static/2a5dafc68ca015ca866a.woff2 HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/styles.df88908d9e4f7c067040.css\r\nCookie: inactive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":35796,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7999), with CRLF line terminators","md5":"74a77626ef19cd29146dee9021f3e808","sha1":"4baa858c3af7bc7d0b90d0d3a946bc3aedf9b853","sha256":"45c25e2f8d53425c8eab4a23faafec4857eadcf6d2e6abe659bc781a4b1ecaef","sha512":"37e23d341f29ebb912968196b41b8701130f965407f8b5d890f962d820728f2e840604c26a505ab04ee6404d82da0ef4a3238cacb81b9c5b5ff45bf34ff8a44b","ssdeep":"384:DkEIdnga6ZmlgrZM9EggB9EEIIlB/Lz/RHUqx2nneLlbot1OarreZq5JLP:YEW96ZruDylB/f/lN2eB8PfeZqXr","tlshash":"05f2e869a61630397027c5b4a2b476cce541c107af619ae5f7cd2a71efc7ef889b3180","first_seen":"2026-03-23T08:47:25.960804Z","last_seen":"2026-03-23T08:47:25.960804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":529,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":502,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/vTGbt0ba_6WFa6djDrDEz8hdvsDcG69SdtRJRDiJ66U.js.download","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:01.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/vTGbt0ba_6WFa6djDrDEz8hdvsDcG69SdtRJRDiJ66U.js.download HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html\r\nCookie: inactive; inactive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 21 Mar 2024 16:49:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17827\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":175,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/saved_resource(1).html","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/saved_resource(1).html HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nCookie: inactive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 21 Mar 2024 16:49:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 152\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":152,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"09b33fa7a1116338c9b2326b08c03bfe","sha1":"6d8ee025ab2df83f5765362a1ec59e14541d52d1","sha256":"324967ab0642b90c52e9aa8b3650961f15deca3a70bc87e55912148740bceef3","sha512":"6734e3be692c5f37d29ea8c73d1396b8fc7c69b085ea34e533492655dcc7d530576b9c278d18e56ecc7f4248118ea78772a5866b5acf59d55a32e941b1162cd9","ssdeep":"","tlshash":"3ac08cb51413200ba220aaa09ac9e14408408010a0898c41a08031ec65cd308e8b3690","first_seen":"2023-04-09T17:36:07Z","last_seen":"2026-08-09T10:01:49.296978Z","times_seen":151,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":331,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/styles__ltr.css","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:01.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/styles__ltr.css HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html\r\nCookie: inactive; inactive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 08:47:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Mar 2024 16:49:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent,User-Agent\r\ncontent-length: 24411\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":56398,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (56398), with no line terminators","md5":"eb4bc511f79f7a1573b45f5775b3a99b","sha1":"d910fb51ad7316aa54f055079374574698e74b35","sha256":"7859a62e04b0acb06516eb12454de6673883ecfaeaed6c254659bca7cd59c050","sha512":"ec9bdf1c91b6262b183fd23f640eac22016d1f42db631380676ed34b962e01badda91f9cbdfa189b42fe3182a992f1b95a7353af41e41b2d6e1dab17e87637a0","ssdeep":"768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2","tlshash":"d2434c7338403a2afc37976170967ddcf12cd523ea111bbaf656792086cb0b69163b47","first_seen":"2023-08-25T14:13:12Z","last_seen":"2026-07-31T06:40:57.815559Z","times_seen":64728,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:02.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mailspof.wkproject.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 02:01:42 GMT\r\nexpires: Mon, 22 Mar 2027 02:01:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nage: 110720\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T20:28:50.750149Z","times_seen":544293,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":75,"dns":2,"connect":7,"send":0,"wait":9,"receive":3,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/styles.801010d00ab7c83ee8b9.css","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/styles.801010d00ab7c83ee8b9.css HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nCookie: inactive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 08:47:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Mar 2024 16:49:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent,User-Agent\r\ncontent-length: 859\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":3300,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3300), with no line terminators","md5":"4175685a2459f0f65b0efd55d70b59e5","sha1":"69b3162fd5299ec5a1697fe23857ccc2e373bf08","sha256":"a1045c3cd53129d7c9f470fb02434803bf20639fe1e02bff1a722e99b4910d0f","sha512":"0fa0bb0e10ac94d58c630015c8f8f53a8750e788783db310b4df441f701dcb5f80a115b70d2609ede9272df965d2744ecad7ab69b830806689da5de47610929a","ssdeep":"","tlshash":"2561af67ca912344d123cd44abd827bcc63cc067b7220eed77466f3787c7a8a16a564b","first_seen":"2026-03-23T08:47:25.963887Z","last_seen":"2026-03-23T08:47:25.963887Z","times_seen":1,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/anchor.html HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nCookie: inactive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 21 Mar 2024 16:49:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent,User-Agent\r\ncontent-length: 28421\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":46801,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (36813)","md5":"10f3f9f6e7b1b4a3ce5f2a9a247648b4","sha1":"8ee81840718917ffb235fc1e5f7fe2ea2a97a854","sha256":"30cbf5315dc7aab1ee4aea9025f59703fc74a65dec9b27970f59bf1b3c4ca52d","sha512":"a99202599934ac6db38b777265c90dc08eb48dcbb4b2c4e9fcbecdcbb15f4bf1b41d44bc695d3c003e80a2fe3482b401a8bfcff1d22f41549fa0ff65d8919bf9","ssdeep":"768:+lI/LySXtf8uRRSauBpuoMfFx/eGuGeU406BYq/hbyFk+1PkoGa48ZCgBoCW2CPR:nf3vDeU406CqZbyyyPksBuR","tlshash":"9d23ae441c0664a6df5b1dd233ee3b39e95f4219958668b87bfe6489aed2c43d1083cc","first_seen":"2026-03-23T08:47:25.964818Z","last_seen":"2026-03-23T08:47:25.964818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/vTGbt0ba_6WFa6djDrDEz8hdvsDcG69SdtRJRDiJ66U.js.download","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:01.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/vTGbt0ba_6WFa6djDrDEz8hdvsDcG69SdtRJRDiJ66U.js.download HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html\r\nCookie: inactive; inactive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 21 Mar 2024 16:49:21 GMT\r\naccept-ranges: bytes\r\ncontent-length: 17827\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:02.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mailspof.wkproject.id\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Mar 2026 18:54:15 GMT\r\nexpires: Thu, 18 Mar 2027 18:54:15 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:33:02 GMT\r\ncontent-type: font/woff2\r\nage: 395567\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15552,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15552, version 1.0","md5":"285467176f7fe6bb6a9c6873b3dad2cc","sha1":"ea04e4ff5142ddd69307c183def721a160e0a64e","sha256":"5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7","sha512":"5f9bb763406ea8ce978ec675bd51a0263e9547021ea71188dbd62f0212eb00c1421b750d3b94550b50425bebff5f881c41299f6a33bbfa12fb1ff18c12bc7ff1","ssdeep":"384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi","tlshash":"8462e103f2bc4c01e786193ebb5870237205272619efa67780ce7ea4c65ec81a39b457","first_seen":"2023-04-05T04:58:40Z","last_seen":"2026-08-09T20:28:50.745741Z","times_seen":341744,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":125,"dns":2,"connect":20,"send":0,"wait":8,"receive":2,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/saved_resource.html","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:02.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/saved_resource.html HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html\r\nCookie: inactive; inactive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html\r\nlast-modified: Thu, 21 Mar 2024 16:49:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 152\r\ndate: Mon, 23 Mar 2026 08:47:02 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":152,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"09b33fa7a1116338c9b2326b08c03bfe","sha1":"6d8ee025ab2df83f5765362a1ec59e14541d52d1","sha256":"324967ab0642b90c52e9aa8b3650961f15deca3a70bc87e55912148740bceef3","sha512":"6734e3be692c5f37d29ea8c73d1396b8fc7c69b085ea34e533492655dcc7d530576b9c278d18e56ecc7f4248118ea78772a5866b5acf59d55a32e941b1162cd9","ssdeep":"","tlshash":"3ac08cb51413200ba220aaa09ac9e14408408010a0898c41a08031ec65cd308e8b3690","first_seen":"2023-04-09T17:36:07Z","last_seen":"2026-08-09T10:01:49.296978Z","times_seen":151,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Generic Crypto/Wallet","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Generic Crypto/Wallet phishing","tags":["crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:02.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:09 GMT\r\nexpires: Sun, 29 Mar 2026 10:06:09 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 81653\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-09T22:48:25.366259Z","times_seen":705164,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T08:47:00.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent,User-Agent\r\ndate: Mon, 23 Mar 2026 08:47:00 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":35796,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7999), with CRLF line terminators","md5":"74a77626ef19cd29146dee9021f3e808","sha1":"4baa858c3af7bc7d0b90d0d3a946bc3aedf9b853","sha256":"45c25e2f8d53425c8eab4a23faafec4857eadcf6d2e6abe659bc781a4b1ecaef","sha512":"37e23d341f29ebb912968196b41b8701130f965407f8b5d890f962d820728f2e840604c26a505ab04ee6404d82da0ef4a3238cacb81b9c5b5ff45bf34ff8a44b","ssdeep":"384:DkEIdnga6ZmlgrZM9EggB9EEIIlB/Lz/RHUqx2nneLlbot1OarreZq5JLP:YEW96ZruDylB/f/lN2eB8PfeZqXr","tlshash":"05f2e869a61630397027c5b4a2b476cce541c107af619ae5f7cd2a71efc7ef889b3180","first_seen":"2026-03-23T08:47:25.960804Z","last_seen":"2026-03-23T08:47:25.960804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1316,"timings":{"blocked":569,"dns":215,"connect":173,"send":0,"wait":177,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/style","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.205Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/style HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nCookie: inactive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nlast-modified: Thu, 21 Mar 2024 16:49:19 GMT\r\naccept-ranges: bytes\r\ncontent-length: 533\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-unknown-content-type","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Noto%20Sans","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css?family=Noto%20Sans HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 23 Mar 2026 08:47:01 GMT\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"175f0d45b4a286f2b25a9d3994238fc1","sha1":"327597c3192a17331ebaeaa988c2e3a398b6e388","sha256":"35c048fcd4d20bc35c22922ddd4093291776aa141d0834e822f17c6775fc10a0","sha512":"4c40ad31ea8a58bdd9cd0810773d89f60b9240a62c9ec09ae58c0adfd6d565946910c27599bfb3e61916fbd4a54808a2b1a91851e8e24c33abc1250d39c1af0f","ssdeep":"","tlshash":"ef51fc75801fd4946743ace633df3d329d1e91212040d379abfd9c89acb286a133175e","first_seen":"2025-09-13T14:11:10.743146Z","last_seen":"2026-08-06T08:43:19.095954Z","times_seen":959,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":91,"dns":1,"connect":21,"send":0,"wait":32,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login.coinbase.com/static/6028d3ddca338885c7ab.png","fqdn":"login.coinbase.com","domain":"coinbase.com","tld":"com"},"ip":{"addr":"104.18.35.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinbase.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:43:54 GMT","end":"Wed, 17 Jun 2026 04:43:51 GMT"},"fingerprint":{"sha1":"09:0C:1A:6D:8E:CD:D8:59:2C:56:C0:BB:30:80:8E:F8:40:F6:B3:CD","sha256":"2E:F7:6F:58:95:1E:70:41:A0:8A:27:66:79:BE:73:05:AF:57:18:BB:7F:4F:4C:27:4B:19:43:C1:0E:19:3E:D5"}}},"request":{"raw":"GET /static/6028d3ddca338885c7ab.png HTTP/1.1\r\nHost: login.coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 3208\r\ncf-ray: 9e0c2b422c6f76ef-OSL\r\ncache-control: public, max-age=72000\r\ncf-bgj: imgq:100,h2pri\r\ncf-polished: origSize=3409\r\ncontent-security-policy: base-uri 'none'; form-action 'self'; frame-ancestors 'self' https://keys.coinbase.com/ https://www.coinbase.com https://coinbase.com; report-uri '/csp-logging'\r\netag: \"65709c60ba9187028931a7cb2a3201d3\"\r\nlast-modified: Mon, 28 Oct 2024 22:50:53 GMT\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ntrace-id: 7061933067062775538\r\nvia: 1.1 bbedf3606cd5248b62d6074accc85882.cloudfront.net (CloudFront)\r\nx-amz-cf-id: k7hVE_dRdxD8q38h_ss40sKS5jGQOrmWvpn4bqEuAmATSsyPyd8MKw==\r\nx-amz-cf-pop: IAD61-P13\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nx-cache: Miss from cloudfront\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nexpires: Tue, 24 Mar 2026 04:47:01 GMT\r\naccept-ranges: bytes\r\nset-cookie: __cf_bm=1cGCoEw3KYzlrq3O9d4Cs7rvdLferZXvUdpa15jP5OE-1774255621-1.0.1.1-5sIBzia0A4q3XLKjc.NVNqSyaRrap5l9tFPhooMHWf7EdcmhvyWUQFu4t7yMJnSROrYWSQZ1Sp143Ah3Iikp2JWTtMx9z5kiYhuxDoydPVA; path=/; expires=Mon, 23-Mar-26 09:17:01 GMT; domain=.coinbase.com; HttpOnly; Secure; SameSite=None\n_cfuvid=vRuIsL72ZthMf7GxexH0lF_Z0LBx0GV5KOFtc_PvXi4-1774255621864-0.0.1.1-604800000; path=/; domain=.coinbase.com; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=DCifM%2B5JDLPIWb7uDu1UOY4iyT3xaD%2F69mUrBfqEJHsxJxnjeFoho%2BfRb8dOWwi2q1CbiC52f3QLTaob6sMeC6dQ2A0hyiHcAlURU9zewxfoEcnKBElwpCGUc5R1qvcxW9DOzA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 228, 8-bit colormap, non-interlaced","md5":"dcb94e347ea8ea596d6f0c69c981bf08","sha1":"74cd2352ef646f6eee229e41ed16bf207a2f2564","sha256":"dd5038e08166a804d6c4256916506bc2e95b3ff0d0833460710983698532f849","sha512":"480a9e63859483702ee9681648159de5407958ac26e2c02bb17327d1efd0c82ab38523c68383b23861057e458e14d3f88c06851f5a9d3f27a764c97e5b5ef375","ssdeep":"","tlshash":"8b613b75e27deff2e209fbba992481a84a1cbc47bd6b53142f41fc02c43ba948e15814","first_seen":"2024-02-20T16:40:19Z","last_seen":"2026-08-05T16:26:55.508005Z","times_seen":53,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":34,"connect":1,"send":0,"wait":400,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/static/8a6a40a08f92d9a9b3e5.woff2","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /static/8a6a40a08f92d9a9b3e5.woff2 HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/styles.df88908d9e4f7c067040.css\r\nCookie: inactive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":35796,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7999), with CRLF line terminators","md5":"74a77626ef19cd29146dee9021f3e808","sha1":"4baa858c3af7bc7d0b90d0d3a946bc3aedf9b853","sha256":"45c25e2f8d53425c8eab4a23faafec4857eadcf6d2e6abe659bc781a4b1ecaef","sha512":"37e23d341f29ebb912968196b41b8701130f965407f8b5d890f962d820728f2e840604c26a505ab04ee6404d82da0ef4a3238cacb81b9c5b5ff45bf34ff8a44b","ssdeep":"384:DkEIdnga6ZmlgrZM9EggB9EEIIlB/Lz/RHUqx2nneLlbot1OarreZq5JLP:YEW96ZruDylB/f/lN2eB8PfeZqXr","tlshash":"05f2e869a61630397027c5b4a2b476cce541c107af619ae5f7cd2a71efc7ef889b3180","first_seen":"2026-03-23T08:47:25.960804Z","last_seen":"2026-03-23T08:47:25.960804Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":425,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/recaptcha__en.js.download","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html","date":"2026-03-23T08:47:01.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/recaptcha__en.js.download HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/anchor.html\r\nCookie: inactive; inactive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/octet-stream\r\nlast-modified: Thu, 21 Mar 2024 16:49:26 GMT\r\naccept-ranges: bytes\r\ncontent-length: 504106\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nvary: User-Agent,User-Agent\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T22:49:10.243451Z","times_seen":17807357,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":176,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mailspof.wkproject.id/Coinbase%20-%20Sign%20In_files/styles.df88908d9e4f7c067040.css","fqdn":"mailspof.wkproject.id","domain":"wkproject.id","tld":"id"},"ip":{"addr":"109.106.252.99","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mailspof.wkproject.id/","date":"2026-03-23T08:47:01.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mailspof.wkproject.id","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 06:22:09 GMT","end":"Sun, 21 Jun 2026 06:22:08 GMT"},"fingerprint":{"sha1":"50:27:F4:00:2A:EC:BB:0D:7A:4E:04:C2:86:A0:5F:A9:8D:DE:16:ED","sha256":"21:A1:CC:D2:84:2B:15:09:83:04:6E:0E:B0:35:58:1D:1F:D2:CA:0C:2F:3E:B7:6F:D2:8C:F8:32:99:F9:E3:E6"}}},"request":{"raw":"GET /Coinbase%20-%20Sign%20In_files/styles.df88908d9e4f7c067040.css HTTP/1.1\r\nHost: mailspof.wkproject.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mailspof.wkproject.id/\r\nCookie: inactive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 30 Mar 2026 08:47:01 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 21 Mar 2024 16:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent,User-Agent\r\ncontent-length: 18149\r\ndate: Mon, 23 Mar 2026 08:47:01 GMT\r\nplatform: hostinger\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nauthor: coinbase.com\r\nset-cookie: inactive\r\nserver: coinbase.com\r\nx-powered-by: coinbase.com\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":108956,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3db5f823cd100aa9d00ed647eca178ff","sha1":"ec753775a768c11c26cbc78c9fb84acb76cb8581","sha256":"387ecc81465749a7456c2ed642a7e66b1f1cc27fe368c9969aab1ddf54dd45b4","sha512":"4a944d3ae87a2c8df35684fe381bb7ffbabd496e8fdfe22bf1b6e267b9fa63c6bd4a9db1f5af45410041f1096b1739fc5ab655f1658d85e7fae9e8c8b7c4c956","ssdeep":"1536:FldTdUhuRDhcjBbKtfhJ+ToENSJF2TElebTIzWWVvMQToaQPgroOrP0fZe2Pn9Da:Fl6FbIJtWWVvMQToaQPgroOrP0fsw63f","tlshash":"83b354652a31e23cea3a69fea3687f4f61017c475a0149ddf5022613aecbfb7c132645","first_seen":"2024-03-17T13:10:51Z","last_seen":"2026-03-23T08:47:25.968222Z","times_seen":6,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-23","alert":"Phishing Block","trigger":"mailspof.wkproject.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}