{"report_id":"69afcfa9-1924-48a3-9c44-3010d5bc34c0","version":6,"status":"done","tags":[],"date":"2026-03-14T12:33:33Z","url":{"schema":"http","addr":"mail.456558coinbase.com","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"172.67.152.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mail.456558coinbase.com/login_up.php","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"title":"Plesk Obsidian 18.0.75","dom":{"size":98855,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (56184)","md5":"c77bfd3f9c577576b7531656145b86ae","sha1":"4b0e6d1aa630f1be3cf4d9c5fcff850693cd874e","sha256":"35a1b5f7818492613c1b8a594d950d98b52ed322735313b37cbfa6d482a35338","sha512":"07ac03d41050faa4ab5e716968ecdba1231a8ac8f85ee1fbda0aba72c72939f49bd395591fcdec5f5e1bf69359998fdb56ae9aaa24ead8dbb1b14af3aab475ff","ssdeep":"1536:g+NxTkIUPuAJ3jwCAKe8LqADAeAKx2OIyto6j2Z7nm6xzw2fMZwrDZOi13okp:vNxTkIUPuaam3V0B6jc7nRmwrD3144","tlshash":"bea3f71908287f3b07c723f67c97358dbab48194a1d41014adee85a907eef9de42f16b","dom_hash":"domhash1db7351ae74d0e5b513acc4f09b6be73","first_seen":"2026-03-14T12:33:41.88353Z","last_seen":"2026-03-14T12:33:41.88353Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mail.456558coinbase.com","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"172.67.152.104","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-18T12:33:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"mail.456558coinbase.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-30","domain_rank":0,"first_seen":"2026-03-14T12:33:38.250833Z","last_seen":"2026-03-14T12:33:38.250833Z","alert_count":40,"request_count":20,"received_data":6777023,"sent_data":9848,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"uat-proxy.plesk.com","ip":{"addr":"108.129.55.197","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1999-06-13","domain_rank":0,"first_seen":"2025-08-21T20:20:46.51845Z","last_seen":"2026-03-12T08:11:59.643289Z","alert_count":0,"request_count":4,"received_data":4088,"sent_data":3212,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"sentry.io","ip":{"addr":"35.186.247.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2012-04-07","domain_rank":135,"first_seen":"2016-08-31T05:38:44Z","last_seen":"2026-03-09T08:20:49.291605Z","alert_count":0,"request_count":1,"received_data":556,"sent_data":637,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mail.456558coinbase.com/login_up.php","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b21ad27a0f0e2dd6ac927d74fae31124","sha1":"148e1278c332adb4399f8f8c886d9e189fa3ff5d","sha256":"6285e4ecd67114f4fac46819558724e947c08ca831448b5cd0f03d3395f2685c","sha512":"5af872beaf0800f7cec958f9fde4c85a63e4b665262a63a64e521be38cab6f2595d7691eddcaf0490c5f02a5853907ca8b6e58ba813615c62de75a3f52ed4165","ssdeep":"","tlshash":"a2d0220d0da81022affeb08cef2322248cd39bf2400b8c41b2dd7299da228768348062","size":196,"data":"","first_seen":"2026-02-26T16:24:39.334154Z","last_seen":"2026-06-06T02:28:17.767586Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/login_up.php","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6b77d324469199e30446c542094a393","sha1":"501664e99a9d1e162aeed7ca72f68144d40eee23","sha256":"41b2fd8063ee00dfa55d2d270ece9e4d608a79e5aacfde4ebe06fad4ab371973","sha512":"b923f51890699b158fe633441bf8e71584d3e33bb7cedcb6d60fead6dd9a56fb746b928271e7ea09b23205e25d6f85b59b4fd8dff0170a0b579a8ad1bc415a56","ssdeep":"","tlshash":"42f05c2635914a7fe45a95ae3a343a9a533cb403d2c85ca4a29ec7204bf48b4001515a","size":485,"data":"","first_seen":"2026-03-08T12:40:35.741249Z","last_seen":"2026-03-14T12:54:47.259824Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/vendors.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"23488eb450418423526cbd06e495f35e","sha1":"2f28aca001869ade416f19b8e942d0959234b29a","sha256":"93bc419e06d29b19992bf801f5a483c97c4a42edf7785ed17ba02c280704e84d","sha512":"8476b50caa5fb0082259e1e18002ce2b9410b8b8f3fd17a3331679a689d85f1e90b3a6e37243b7f39a9137bc10f2619d50c31aaabfc7be572bd00612a79e16f9","ssdeep":"49152:elDCgaaj8mWD08x7XwVfNmlP20ixRw42/hgJvskIZ3pYQL+2hiAef8Zo0j4AjuF8:cCgVwYJlIv+l+MFbg","tlshash":"9bf54ac931d1b07643e351a9807f1106f23a1969644dc4a4f678d8ea6cf9c8ea27bf3d","size":3527462,"data":"","first_seen":"2026-01-16T02:31:31.998798Z","last_seen":"2026-07-12T07:55:49.520275Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/externals/prototype.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b977fcf623bdf0786a7a642b5060cb4","sha1":"6b278e07ae45a8bcb49bcbdb0202abc6b41cc624","sha256":"fd88cdbcd424715233994f5f3ad361fdc8cc02b5badc6b2474c3fa2a95741057","sha512":"5db52c963a9531a0690dee627b043c5858752d02e2682237afd1c0dfd74ce96ea2c31a2745f98d6e9bc9935a286f857ee5b2f12f37853146c12effb62842c345","ssdeep":"1536:lp8HqTIkDc9+DkfJtPkoQzID5mGgSio6dFlLN4ia1mY60hgPXsQn5ycO64pJ1VLC:5U+D7WL+Xsa05Pi0W","tlshash":"6193d6dc31c2b176439b617a402f614ef23a5d95680e9050f568d8e6bcb8e9b8233f7d","size":96954,"data":"","first_seen":"2025-09-09T02:20:02.46182Z","last_seen":"2026-08-09T12:12:57.997929Z","times_seen":1084,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/modules/letsencrypt/global.js?1758311547","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"736e9873b188ca07579c91f59ca0611b","sha1":"7838cdb3d5e814c9cdf04d0df66d216137a0ef35","sha256":"48a1cf43c9e4eb052dc744098a4af4570f1fb95dacacca06f6140ceb885e2d6c","sha512":"31cb1e20836413215c850eed9a36a17208a0688513d8a02634db7a2121966794d52f713b02bfbe936acb48ab2f7c8510f3d2d7fcdbd605a4d5e2e942ece5f414","ssdeep":"","tlshash":"110184367a9a30ed1b3a9075ca1ee055b620351fa551d521b88ce6190fd07703978af9","size":728,"data":"","first_seen":"2025-04-17T07:43:46.709778Z","last_seen":"2026-08-09T12:12:58.015408Z","times_seen":2056,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/main.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b8fce64f67e6bcc7f64eaf0e7bfcbcb","sha1":"4d892695d655ac2f3239d4739c21058bb42ae25a","sha256":"efebedd1217616fc4ae27d880c1ae47324db57a84e9d9632d871d966c2639ddf","sha512":"a5acc34319f27f9834c2b67e23fe938e5ba522d31b1095fbcc12f835165585786b301093e81e2135f16466e6002702b84c5a2d92ca53dfcde6a89a836e5c5541","ssdeep":"6144:WT4qyYUhErw8c2RKzGIe2ikABJ8c/otly7MZmP4h5E6vkug2/Xkmc:WT49YRwoEe2vcAto7MZmP4h3kug2vtc","tlshash":"7d3594ab304476bb0eebc153986b794530f17276348a40987a3ca5dedb749482d63f3b","size":1133392,"data":"","first_seen":"2026-01-16T02:31:31.990416Z","last_seen":"2026-07-12T07:55:49.521114Z","times_seen":41,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/externals/require.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e45cf5f857c9c3906e717d54d5c55e3","sha1":"fb62c16d3bfe5c380a00965c9ca28bc81f13bd16","sha256":"870ffd19294292f2390606f671ddee5aa480ac13c3088957918c65179cca94e9","sha512":"8e0e0d2491302cc6a15d4cd6ea9ec6a9af3e8d08f3955336753da5d1b4b023837605781b274108afc98ec9dec5dec08e14aad03791dcf591c97d6e05c73b2044","ssdeep":"384:AvAC1fnN5sMU8Qatweblko9n8VQ/AGGa1PHSEDO1SUyy1AmXMeNshGVW40tI:OfYMU8nblko9n8CY1aJHSEDMNyy13XD5","tlshash":"2082eaee3ae6f903b26222f4506f504e6377dd53140cc154f619e8f5acb8568a6a3e3c","size":17713,"data":"","first_seen":"2026-01-16T02:31:31.967183Z","last_seen":"2026-08-09T12:12:58.000402Z","times_seen":710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/login_up.php","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4ba9671892ee40ef730a9de509f739aa","sha1":"fb9d10e170d9e076a15dafcc6f6c72c7e6dea4e9","sha256":"89e0312bdb2d175a6b1fe8e30843f86a88f45354029b304c48baa69a776df696","sha512":"90c16df095fd6dfb29d4b592e9ac8e5731fd3c76d70aaa75d2f22d4246e15f8d2871c83d0db7c6ffa110d094bb7cebbced39bf6b6333ae38e8ad723f133281f0","ssdeep":"","tlshash":"f990021428665155d485402115467411a59639ae54172e61de145765178609142685e4","size":51,"data":"","first_seen":"2023-03-08T15:21:27Z","last_seen":"2026-07-18T09:57:56.233022Z","times_seen":2180,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/ui-library/plesk-ui-library.min.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d5475d50f242d0afd0064c89741541d","sha1":"55f725c3a7cf39a567aa4ec49a2d8ebf3d5076cf","sha256":"106e2ad3edfb7c6f46702a5d4b7c4decf343c61c97b7bc9f54dfee01d95cac3f","sha512":"13a1d2f917315978f23892e122a70222db06be31d6477673d921f7f8bfaa17c8e4cfcd0e4e6286028fcd3de157470adb91ca8ea882ebdd1291bd1fdaeb7fe75b","ssdeep":"12288:pSCs4AMqDBljvmidP8M7GNNRymCN/FnX9sEtCUWg:pSCs4MP1MRoN/lXVhWg","tlshash":"35e45c9070c1f4e916f744d6406f5409b23a1d29e40e5ca0beb8eccd25ba85a717bfbe","size":670793,"data":"","first_seen":"2026-01-16T02:31:31.96251Z","last_seen":"2026-07-12T07:55:49.507617Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/login_up.php","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ece25a4595770a8868797a3023d3fe8","sha1":"0926fda179972089eac695d25ef1866aa12a2dfc","sha256":"decc0a65f0df8f803227ded7cdfa31f014762edc0ae6361e30ff4c01cb46d52e","sha512":"39baf385477f70c8d36d3681593068e535d66f2ea63cd6384441fb83bb2a25c48b39bc2c669b73c69fe1987a69fcc1e15a480bb7dc8a73616fc018516a8ac10a","ssdeep":"1536:Hx2OIyto6j2Z7nm6xzw2fMZwrDZOi13oF:R0B6jc7nRmwrD314F","tlshash":"b093e61909253f3b07cb23f77c9b258dbab481d0a1d810546dee846902eef9de52f16b","size":89245,"data":"","first_seen":"2026-03-08T12:40:35.747349Z","last_seen":"2026-03-14T12:54:47.261595Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/modules/notifier/global.js?1758311369","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d490c52f6633dd26bf3a46b713c3e0c6","sha1":"c492c36f30698f69d9d8215f8f7c975312f5a5cf","sha256":"1a81d8c8f3ba066c179b646d4dc7a9906fa8b4f24e69a532869cc98018165a25","sha512":"82a73bef8268fd611dbd6f460cc33234d74d81bb6b620a7eee63b660fd1f321d12e6ee0ffe46625fa771d5669f675101ef147626f17bf2252cca83e34c7f81fc","ssdeep":"384:aiozAyMWa+5d0yicAoyQCdLEC8h8kpcmAnB2:jozvRJziXXQCdLEC8hKnB2","tlshash":"3682a7dd70e3e4ec13eb726d60dfd209797b0d09d809b582e659d4e17868a82d123f2e","size":18383,"data":"","first_seen":"2025-09-19T02:59:45.797163Z","last_seen":"2026-07-27T03:09:07.377939Z","times_seen":1232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mail.456558coinbase.com/","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T12:33:11.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Sat, 14 Mar 2026 12:33:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://mail.456558coinbase.com:443/login.php\r\nserver: cloudflare\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Sat, 14 Mar 2026 12:33:11 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=afFej%2B8MjywLssuQqMaHnNWYilgCtyOvnf%2FPc1wHCREu0%2BHA9ZdFO9SOpJ3n0lYNsFUCZg3BjzkYxwbDKn77dMEpBCq8IhG24VN1qUbUD%2FPy6gqWTkXr\"}]}\r\ncf-ray: 9dc34e2d1eb4eff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92281,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T21:49:08.725351Z","times_seen":17806559,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":28,"dns":1,"connect":8,"send":0,"wait":328,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/ui-library/plesk-ui-library.css?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /ui-library/plesk-ui-library.css?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: W/\"699d9170-35235\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uTJVGU%2Fyie13mXMswLIIUNa%2BHh206yCzavFbymJ0U7elNdVgaiE8DsQLKuW%2FgiQ8cq%2FPZ7HUDQdgiB44CG9FtbfEoFtReyAdGh7d3M0UukS8oVTGA%2BDR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e32f9b6618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":217653,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5a333963a4bff2f1bdb7f0e0edfef136","sha1":"9b96bebbb5c5528066eec1f77603cb9665ffa486","sha256":"24b7611992f94098520e155a0ddec4d0c07224c7afe44e0a6544724791524bc2","sha512":"9ccab04ccac3890ea0f5bd1eeb29201a5af73a3171d903e4c4ecf0f4915f22aa75ce423766cab0f1586d6c135df826ff702ca7520a6d1aa7313ed2541ef3bac4","ssdeep":"1536:q4i2g3u1uRu6smfL10mfea+axGpGoGWGqW40K3NFpb/fQ9+:ap0mfea+aF9+","tlshash":"002462d1e540353e3e0fb7b971b1a99c62086a81ce52dbdef098e31c86c16d3c9e6d19","first_seen":"2026-01-16T02:31:31.97368Z","last_seen":"2026-07-12T07:55:49.507051Z","times_seen":67,"resource_available":false,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/externals/require.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /cp/javascript/externals/require.js?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: W/\"699d9170-4531\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lnAlUsLMqHOy5wrIxL2tB7INM%2BDU%2Bl1YFzUFD%2FBcsBgGwmjBimZQ%2BS6j5gYOXrQkMXVJ3%2ByG%2FEnuzfPkzXN3%2F6QQuS0tDrmuJlEwyErEM%2Ff39MZbYc2l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3309cf618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17713,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (17511)","md5":"9e45cf5f857c9c3906e717d54d5c55e3","sha1":"fb62c16d3bfe5c380a00965c9ca28bc81f13bd16","sha256":"870ffd19294292f2390606f671ddee5aa480ac13c3088957918c65179cca94e9","sha512":"8e0e0d2491302cc6a15d4cd6ea9ec6a9af3e8d08f3955336753da5d1b4b023837605781b274108afc98ec9dec5dec08e14aad03791dcf591c97d6e05c73b2044","ssdeep":"384:AvAC1fnN5sMU8Qatweblko9n8VQ/AGGa1PHSEDO1SUyy1AmXMeNshGVW40tI:OfYMU8nblko9n8CY1aJHSEDMNyy13XD5","tlshash":"2082eaee3ae6f903b26222f4506f504e6377dd53140cc154f619e8f5acb8568a6a3e3c","first_seen":"2026-01-16T02:31:31.967183Z","last_seen":"2026-08-09T12:12:58.000402Z","times_seen":710,"resource_available":true,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/modules/letsencrypt/global.js?1758311547","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /modules/letsencrypt/global.js?1758311547 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Sep 2025 19:52:27 GMT\r\netag: W/\"68cdb47b-2d8\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38lQt6lKoWktlPinK8n38cK7fyN1at8TMAc6voRIyMuCy8qeSQroDgAbNHoHPycpp%2BG%2FTr3Tp5fWRbaOTmYQDEHC6g4ZC8gW8qbzJpqhu%2Fvr0VHI2%2BgB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3309d5618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":728,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"736e9873b188ca07579c91f59ca0611b","sha1":"7838cdb3d5e814c9cdf04d0df66d216137a0ef35","sha256":"48a1cf43c9e4eb052dc744098a4af4570f1fb95dacacca06f6140ceb885e2d6c","sha512":"31cb1e20836413215c850eed9a36a17208a0688513d8a02634db7a2121966794d52f713b02bfbe936acb48ab2f7c8510f3d2d7fcdbd605a4d5e2e942ece5f414","ssdeep":"","tlshash":"110184367a9a30ed1b3a9075ca1ee055b620351fa551d521b88ce6190fd07703978af9","first_seen":"2025-04-17T07:43:46.709778Z","last_seen":"2026-08-09T12:12:58.015408Z","times_seen":2056,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/theme/images/logos/plesk/logo.svg","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /cp/theme/images/logos/plesk/logo.svg HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jy6%2FMrrBITIvT5ItQ2KXDPPpEOtmDqMdOHQ3bLvvMBMxyWiJTOkPqx1HbkZIIo9ftOpllHedupCmdJbTSM1df3TSr4jxR0bFP47HVe9r6AoSL37Yranl\"}]}\r\netag: W/\"699d9170-aa8\"\r\ncontent-encoding: br\r\ncf-ray: 9dc34e3ec826618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2728,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9360d7ea139bd99ace88e0b99ec9429f","sha1":"542ed6c0c25874845c57a2701340eb327e926458","sha256":"372daa2218a79b1c3ccc8f83cd3f2ac98ce624a7c50e9478f997b631468c6bd0","sha512":"42c1d9ca33d2c188c87eb56b861feca28ec42eb699d5c3ba94a50dde40be3345f1eb09e3c5d792a3e4fc5b300a56b32719f75020b5e5c1881f79fd9fe0f134a5","ssdeep":"","tlshash":"e05167f71330c35c84cba4baef3ae944920ee47dbba34681829ed61468c3995f607954","first_seen":"2023-05-08T09:08:30Z","last_seen":"2026-08-09T12:12:58.007067Z","times_seen":1974,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":297,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /ui-library/fonts/open-sans-regular.woff2?e7777b3c2bb7ae4d50f3 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/ui-library/plesk-ui-library.css?1771934064\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 59600\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: \"699d9170-e8d0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=owo4fBGLrU8moq%2B2rLHbNlxU9Cw4HStjpiLXd3rOlnvgNL6xxFj6P9K0ntwOGZy0DBOElRjBxlYUpFTSl5DsNb5joSdoZ%2FhkX4nhhLaJ6asIoMgjSIYT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3ee866618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59600,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 59600, version 1.0","md5":"e78dce533ecee30c5efd812bb23c248d","sha1":"87d988c2f0343952ccded7c17b000e33db6f3d15","sha256":"03e2544599e5a06566b2579f82ac6e445b724435fccb1f3e8988e58f45b1fc5e","sha512":"84ef89585b92b235ce6d0288f2a52cd894a074bf23c29e06927ad7e3a5316bd97069b69a5246acd1d9eb6beb42b85866a1109d9591300746f11c515d959d82b8","ssdeep":"1536:OOgE9AeA+6fIVtMLSaRUArskS2m21Cgbv+M7+Do/N1:AE5A+6ksSaRPAHw0ov","tlshash":"4543f1155519c890cd26783c89b9aee180b06eb4c2480ef76f9c3685fee1767f6137a4","first_seen":"2023-04-06T18:57:36Z","last_seen":"2026-08-09T13:05:46.914966Z","times_seen":4789,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":404,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"108.129.55.197","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Amz-User-Agent: aws-sdk-js/2.1693.0 callback\r\nContent-Type: application/x-amz-json-1.1\r\nX-Amz-Target: Firehose_20150804.PutRecord\r\nX-Amz-Content-Sha256: 0882994e9171ec6c3a03db83f5723c15fe9c80fe08b99e1221fdcf3b4e948607\r\nX-Amz-Date: 20260314T123313Z\r\nAuthorization: AWS4-HMAC-SHA256 Credential=00000000000000000000/20260314/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=c9748c767b1e9c17e1f9e6a078554f2d0c9a8d0e4d58a39c0364d61c03b7253f\r\nContent-Length: 218\r\nOrigin: https://mail.456558coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":218,"data":"{\"DeliveryStreamName\":\"plesk-18.0-ux-no_session\",\"Record\":{\"Data\":\"MjAyNi0wMy0xNFQxMjozMzoxMy44MjhafDVBNTguNTVGOS45NERFLjQ3RTMuODA1My5CRTQ0LkZGNjUuQTJBQ3x8fHwvbG9naW5fdXAucGhwfHx8eyJ1YXQtYWlkIjoiNWFoZGc2cG91YzYifQo=\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-type: application/x-amz-json-1.1\r\ncontent-length: 245\r\nset-cookie: AWSALB=GtdB9bGytyeXxwmDYnRt3I+Q0DzdvgsI8M311VKWeEpZD6pD02LQzKEckD0s2Ap+IZXeg42HC8gqCE0GKxsyQFncHV/G2UHYpZWwf455FcP2Aoylm0zHVxOBKnf3; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/\nAWSALBCORS=GtdB9bGytyeXxwmDYnRt3I+Q0DzdvgsI8M311VKWeEpZD6pD02LQzKEckD0s2Ap+IZXeg42HC8gqCE0GKxsyQFncHV/G2UHYpZWwf455FcP2Aoylm0zHVxOBKnf3; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\ncontent-encoding: gzip\r\nx-amz-id-2: D2X14zpg/PbXwAAyEhwz8FSjCvgLwWkZ9sDKOFHGiXg91OYcCanMyres/3oVd/9N16fruQTfrDwyqUKwTuu4DveOCdyWMzSp\r\nx-amzn-requestid: d0cd9f2b-90a8-3c85-b2e2-c8e1f3b81415\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":257,"size_decoded":0,"mime_type":"application/x-amz-json-1.1","magic":"JSON text data","md5":"98f47db4a7fa5bdef951da26330d9698","sha1":"26e6c29a212013daa8fd765798681f8a1c32d777","sha256":"9601b342fcdc0ec476d3d058d963ac4d66b7b26c99afbdf60f395437c90dce2f","sha512":"9427cf7fdd806bd7826c88ac1b2d7227c1d6e91cc038d332e4137657d4955e5cd85a13b7fb9dc316a487bf85de129a75724137499e6c24afce5b3b63294134a6","ssdeep":"","tlshash":"c0d0eb9034006052a80aa210feef836101277d6a41d22dec2003e1f81030800414c8b0","first_seen":"2026-03-14T12:33:41.892668Z","last_seen":"2026-03-14T12:33:41.892668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/login.php","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T12:33:11.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /login.php HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\ndate: Sat, 14 Mar 2026 12:33:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://mail.456558coinbase.com:443/login_up.php\r\nserver: cloudflare\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Sat, 14 Mar 2026 12:33:11 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJeh9ZxmV8HWz1EptL9LvJUD0gfIyYMOoCN7Zner6%2BYXua8PyeB1ImulNxhKopTuttq9GRyeo373%2BzIgEq0Sri9YBEjrGNxJ5Q4o9MxvJSvOEqUnfu6Y\"}]}\r\ncf-ray: 9dc34e2f3bddeff0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92281,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T21:49:08.725351Z","times_seen":17806559,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/externals/prototype.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /cp/javascript/externals/prototype.js?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: W/\"699d9170-17aba\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2BUi2oyuCCESApP8Z8WOMt9t758GaDEWquIoqTQ4Q5GAToeycea%2B%2BAggsmVChch6lNl0%2FqqmQ%2BMApKgObE9aUweaRELlODnSj1sIkeijJOHdyxLIublC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e32f9bf618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96954,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60866)","md5":"7b977fcf623bdf0786a7a642b5060cb4","sha1":"6b278e07ae45a8bcb49bcbdb0202abc6b41cc624","sha256":"fd88cdbcd424715233994f5f3ad361fdc8cc02b5badc6b2474c3fa2a95741057","sha512":"5db52c963a9531a0690dee627b043c5858752d02e2682237afd1c0dfd74ce96ea2c31a2745f98d6e9bc9935a286f857ee5b2f12f37853146c12effb62842c345","ssdeep":"1536:lp8HqTIkDc9+DkfJtPkoQzID5mGgSio6dFlLN4ia1mY60hgPXsQn5ycO64pJ1VLC:5U+D7WL+Xsa05Pi0W","tlshash":"6193d6dc31c2b176439b617a402f614ef23a5d95680e9050f568d8e6bcb8e9b8233f7d","first_seen":"2025-09-09T02:20:02.46182Z","last_seen":"2026-08-09T12:12:57.997929Z","times_seen":1084,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/ui-library/plesk-ui-library.min.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /ui-library/plesk-ui-library.min.js?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: W/\"699d9170-a3c49\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZhYrYCA4MHljnCGThyhHkPYGJa6b%2BwdDXjF3K%2FmKyKMDoMiV9zAqEx2EgcrENnPW%2BZP2bfJmc1YXvR4d%2Fl%2BmfEctFl1XBYMxPCYRk%2FQIdz6FZnilCjAH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e32f9c6618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":670793,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (35833)","md5":"8d5475d50f242d0afd0064c89741541d","sha1":"55f725c3a7cf39a567aa4ec49a2d8ebf3d5076cf","sha256":"106e2ad3edfb7c6f46702a5d4b7c4decf343c61c97b7bc9f54dfee01d95cac3f","sha512":"13a1d2f917315978f23892e122a70222db06be31d6477673d921f7f8bfaa17c8e4cfcd0e4e6286028fcd3de157470adb91ca8ea882ebdd1291bd1fdaeb7fe75b","ssdeep":"12288:pSCs4AMqDBljvmidP8M7GNNRymCN/FnX9sEtCUWg:pSCs4MP1MRoN/lXVhWg","tlshash":"35e45c9070c1f4e916f744d6406f5409b23a1d29e40e5ca0beb8eccd25ba85a717bfbe","first_seen":"2026-01-16T02:31:31.96251Z","last_seen":"2026-07-12T07:55:49.507617Z","times_seen":59,"resource_available":true,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":229,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/main.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /cp/javascript/main.js?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: W/\"699d9170-114b50\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mDahYaNG9Ae6SesRje6STbS2KSs3caTqBj9m9H3FHLegrfQaKvGN9%2BSNi5%2FdwHnIlZeok2QzVYNE%2Bu2eTDOAwGEf1I9JIiXh6q%2Fpa%2FdYpbw7Uh%2FfvZyO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3309cd618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1133392,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a0cf7d5fedb57ce0107138fb0a62f1ae","sha1":"237555eb90e74bc500d942aafd059647ad17997f","sha256":"a1d19f21f55cf301567a55cd1ae5173eb81956903c58a7a6af2b7caa5806d9d8","sha512":"ce6d3a18d612b1fe9b494e26804facccc4273c7192e4f761ddeead53ce46c5937b6e39ffa1bd10097ebeabd1511083ca3823a43b6e0e67a084b030bf0334d818","ssdeep":"6144:WT4qyYUhErw8c2RKzGIe2ikABJ8c/otly7MZmP4h5E6vkuP:WT49YRwoEe2vcAto7MZmP4h3kuP","tlshash":"a52595ab304476bb0eabd163886b754530f17236349a40987a3ca5dedb74d482d63f3b","first_seen":"2026-01-16T02:31:31.965005Z","last_seen":"2026-07-12T07:55:49.515234Z","times_seen":52,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/modules/notifier/global.js?1758311369","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /modules/notifier/global.js?1758311369 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Sep 2025 19:49:29 GMT\r\netag: W/\"68cdb3c9-47cf\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5NXov6f%2FOShLyzQJ5XjvjaV9Ia8wHJGMXioGh3nB6HVvHfe%2FVVw9s89zfppcHl0xy7wS17W%2BZH5ReM6Lswf1ucF%2Fc0ribUfVUaClGRhUgsEA3Qr8PCc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3309d3618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18383,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18319)","md5":"d490c52f6633dd26bf3a46b713c3e0c6","sha1":"c492c36f30698f69d9d8215f8f7c975312f5a5cf","sha256":"1a81d8c8f3ba066c179b646d4dc7a9906fa8b4f24e69a532869cc98018165a25","sha512":"82a73bef8268fd611dbd6f460cc33234d74d81bb6b620a7eee63b660fd1f321d12e6ee0ffe46625fa771d5669f675101ef147626f17bf2252cca83e34c7f81fc","ssdeep":"384:aiozAyMWa+5d0yicAoyQCdLEC8h8kpcmAnB2:jozvRJziXXQCdLEC8hKnB2","tlshash":"3682a7dd70e3e4ec13eb726d60dfd209797b0d09d809b582e659d4e17868a82d123f2e","first_seen":"2025-09-19T02:59:45.797163Z","last_seen":"2026-07-27T03:09:07.377939Z","times_seen":1232,"resource_available":true,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/images/favicon.svg?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:13.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /images/favicon.svg?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:13 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhE0HEScNc%2BnP8SxNy8cXKvrMv9%2FyqPSGsmOAzEiRjc30qbB1NWMQoSBFpuNyF%2B5si%2F8ztKLh9xR%2BTIjdLdC7psncs6UtPlb%2FK1CdHS7%2BoEkwplBQVSS\"}]}\r\netag: W/\"699d9170-27a\"\r\ncontent-encoding: br\r\ncf-ray: 9dc34e3c89de618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3db793b2c015d7c858962cd0d8e6df16","sha1":"4ff02cb7383ec6ccfa2f40aa98e8a0367d59233f","sha256":"a3226d3734644e6cee2791e42f6cdb81df5a773b39177bfcf00618961628dd1f","sha512":"7ce8d6eb9670d1b5fb81e3ea6877f20856f3c9ee6b6af5cf340bb10d2d87dfc3fd6b8e2eac5754d9423a2edeaa3da009b7d205bf50eaf634d411a686cdf7f273","ssdeep":"","tlshash":"8bf0a2e11764b18d89990f75df3c7aa4491d74f9724c04d1b68c4c64708faf9ed81e80","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-08-09T12:12:58.001643Z","times_seen":2171,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":301,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sentry.io/api/1327420/envelope/?sentry_version=7\u0026sentry_key=50365a6fe24f4ff28f6b625410e04a35\u0026sentry_client=sentry.javascript.browser%2F10.22.0","fqdn":"sentry.io","domain":"sentry.io","tld":"io"},"ip":{"addr":"35.186.247.156","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:13.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"sentry.io","organization":"Sentry"},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 24 Jul 2025 00:00:00 GMT","end":"Mon, 24 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:5D:97:97:7A:AA:2D:23:D7:21:D1:D4:EF:2E:3B:0D:50:F0:11:3C","sha256":"F3:73:7A:50:D7:AC:5C:4F:8E:94:6B:EC:E0:EA:D2:F8:6F:EE:EA:F8:DF:BA:97:5D:92:0E:ED:DA:82:D9:6D:BA"}}},"request":{"raw":"POST /api/1327420/envelope/?sentry_version=7\u0026sentry_key=50365a6fe24f4ff28f6b625410e04a35\u0026sentry_client=sentry.javascript.browser%2F10.22.0 HTTP/1.1\r\nHost: sentry.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mail.456558coinbase.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 431\r\nOrigin: https://mail.456558coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":431,"data":"{\"sent_at\":\"2026-03-14T12:33:13.802Z\",\"sdk\":{\"name\":\"sentry.javascript.browser\",\"version\":\"10.22.0\"}}\n{\"type\":\"session\"}\n{\"sid\":\"68c1c3d623a148f399d2c4f09b5e27bd\",\"init\":true,\"started\":\"2026-03-14T12:33:13.801Z\",\"timestamp\":\"2026-03-14T12:33:13.801Z\",\"status\":\"ok\",\"errors\":0,\"attrs\":{\"release\":\"18.0.75.1\",\"environment\":\"production\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after\r\ncross-origin-resource-policy: cross-origin\r\nx-envoy-upstream-service-time: 0\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-08-09T21:50:13.974318Z","times_seen":758007,"resource_available":true,"data":null}},"time_used":834,"timings":{"blocked":142,"dns":10,"connect":25,"send":0,"wait":550,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"108.129.55.197","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:13.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\nReferer: https://mail.456558coinbase.com/\r\nOrigin: https://mail.456558coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-length: 20\r\nset-cookie: AWSALB=PbQ0NeN6hrMRWyPzpte5ES7EsmjY5f1xK0/Njxz8z4pgfikXZ6CCQKAxt6D+TMaMNSgr4kdl1S/1snlVkqo/v/lPAlPm4G2c5DuHylCJWyUYmbXOjJQ5OJ8gazTe; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/\nAWSALBCORS=PbQ0NeN6hrMRWyPzpte5ES7EsmjY5f1xK0/Njxz8z4pgfikXZ6CCQKAxt6D+TMaMNSgr4kdl1S/1snlVkqo/v/lPAlPm4G2c5DuHylCJWyUYmbXOjJQ5OJ8gazTe; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\naccess-control-max-age: 172800\r\ncontent-encoding: gzip\r\nx-amzn-requestid: daa695c9-9322-f68a-b889-c203d787a91c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T21:49:08.725351Z","times_seen":17806559,"resource_available":true,"data":null}},"time_used":588,"timings":{"blocked":179,"dns":19,"connect":39,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/modules/letsencrypt/global.css?1758311547","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /modules/letsencrypt/global.css?1758311547 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Sep 2025 19:52:27 GMT\r\netag: W/\"68cdb47b-2a4\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEyduNTOlaMPz6jb1ZFJ4HYt2OlGrDvNbnW3mFmECMIv4g2FvohvwhYJZ0hnnwul76uyMrO5rKinp7Ummh%2FX8B1HsbuzJASbUNIp11x7vlRgQ%2FC8tK20\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e32f9be618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"50186bab48df0fb765c5e62893fcf211","sha1":"5dafe8f3b22fbb0776758d7ab6c81b47c68d119a","sha256":"f1b7502665bd7cb890a9d0d3f7d0aa377b7adfbb03f9f8101a2aca3cfa3532fc","sha512":"c7a8cf632c28a059ea865f67075e3559bce1a459a97f1529e7a5d67da03c82a65c035eaf32f819f0463702c62fab6d0fb90bc5eb1bc91fe126be185756e4b9de","ssdeep":"","tlshash":"dc019e62d7672cce7a1590691f64c742631c681fc015d72dfad8f65c4f8b054fa32762","first_seen":"2023-04-06T01:25:59Z","last_seen":"2026-08-09T12:12:58.008187Z","times_seen":2337,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/javascript/vendors.js?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /cp/javascript/vendors.js?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: W/\"699d9170-35d326\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RbC68H7omvdGxO9oZs4KXVSTIJLvM70FLqE%2BWe2TwBeU0gH2fk2%2FH%2BgoZY%2BIViQmLo5kjyICNJBkrMTlPA3xe%2B9lqq51TdbzQQ1YbwhZeGhR924vuKIl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3309c8618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3527462,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"25fa6c3778b559dea3306e417d224393","sha1":"33ed974dbddb34e77054024a4552921937cf1d50","sha256":"9846cf7b40d4911eb6c57c7c9040eb4869dcee92eed88f0926031c82a2011de4","sha512":"9a556ee0442b5119b656d7a6fd918748c7c10dc521914814f9cd6da30240d6d7a8927ef25fb6dd7f2a9cf137214b0c69c43b60a7828c60796e499e65ccccef2d","ssdeep":"24576:COEl0eCgaaA0ygjsUgmWD08x7XwVfNml5:elDCgaaj8mWD08x7XwVfNml5","tlshash":"082529c932c2b47257e352e9807f0106e33a2855744d8468b7acd8de78b9d4da23bf79","first_seen":"2026-01-16T02:31:31.956824Z","last_seen":"2026-07-12T07:55:49.50829Z","times_seen":57,"resource_available":false,"data":null}},"time_used":912,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":441,"receive":471,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/images/apple-touch-icon.png?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:13.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /images/apple-touch-icon.png?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 4528\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: \"699d9170-11b0\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lAf0rcqB%2BlrRbPKfY8V1yAD9oDofPiKS4vjUN7Il32BisMm58rk6iuj0OutzDC0ImhkKL45mWTmKeuOjo%2FrELJ6SZpQFVAxxvtnRMcW6W6zkskyeQFfN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3c79d3618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ebbd61fb584cc8ae62ffa726070c952f","sha1":"7aefbffc866e859207b23f736faeac97f51414e6","sha256":"b23ec702f16e22329aa8d8a74cede38c886e609acd467517a004439cbbb1da1c","sha512":"f25e44b2827d8131d7264ac6d89c1da95b452111d92f8681b001145283cd505b7fc72f637b72d94a550247284f15d9334f4e4b8802e795378c8c6483ae68fb73","ssdeep":"96:LSlwpX/RP3oYm4HoZtygi8U/q8fDdOY0JkLTRR6U5/3:LSlwJ/RP3oYmJW7t1Dd0wTz6Uh","tlshash":"fe919e6c5303d6786bf82488136e65e5d24a76627c5397b60ea41b1e2cdc38afbc5cf0","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-08-09T12:12:58.016114Z","times_seen":2653,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/theme/images/logos/plesk/logo.svg","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /cp/theme/images/logos/plesk/logo.svg HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T21:49:08.725351Z","times_seen":17806559,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/ui-library/images/symbols.svg?c93dbf4e8547363db109","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /ui-library/images/symbols.svg?c93dbf4e8547363db109 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MB7JocmyaB%2Bv5ZqFAIq%2F%2BndVnydTgaE%2BFhDVdmfT8crFDCK4B6BG0%2FM%2BAdclTPD82fwRoUCZxnB%2FERD3E%2FuqTI3bXYYPdXZxP2qARPLB7BMnAUOnHwG1\"}]}\r\netag: W/\"699d9170-47337\"\r\ncontent-encoding: br\r\ncf-ray: 9dc34e3ec82d618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291639,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"499cc33c42abfb5485666b7d4016fbb1","sha1":"8bc6aded0acf1cdbe4cd1a94189e852edb06a25e","sha256":"e8fd13692a15dc7b03cd7a0a926fdaba4b276fcabb2b28ff04efb587542960f8","sha512":"189f779777fadfe7331b36393d9dd2fb638e76bb22b851e48dc68f4e9f134e1d4d020c43fcfec628c879a2e02a056817526190691948a5d9894cf73e71408b2e","ssdeep":"3072:BGHcIZBsSfBUp1pIcNceSHD0jgULLLm7I7rgiCzAwpoQGF4sUrUSicuca8YzgcL4:BGDfBh9aCztq7/YaU","tlshash":"87542eb907bcd2dc2547c63aeb3b55e0571ea4bfb1b6c0a0396f8b704b53061d6876a0","first_seen":"2024-05-28T06:49:03Z","last_seen":"2026-08-08T08:12:50.77783Z","times_seen":1084,"resource_available":false,"data":null}},"time_used":678,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":278,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce576","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /ui-library/fonts/open-sans-600.woff2?098c0a7547a49b0ce576 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/ui-library/plesk-ui-library.css?1771934064\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 61548\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: \"699d9170-f06c\"\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pFCofzHw5uXR7WM01X6pOOEi7F2KOtL8eVJ7PylTEgn43QImNbFtm5qqO35orYgwrrDjMv9DDVViUiznfngH63wrOTHjHqNysUT2IsBIFMpMJyGHGcIh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e3ed84f618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 61548, version 1.0","md5":"e9681ca3d29d814a5621d4764dd1a11e","sha1":"bbda68459fc0531b915bdf9e524ecc8f782db0aa","sha256":"51f0bacf9e49a400a5a2947ef6b14127ef3241b0760d97721e0aedd7add66456","sha512":"f03e8536b40002c4aceb759f4e3cce90277491e4ed1b0d9c3b061d36efe8328545765e2d391a22bdd1e1d3d1e94e50ad4b18f65339c6ee0d22c02316869d808c","ssdeep":"768:/h88uQaIKMZe9H1M8KzcxRsmUYwKDSJIVeOFd+h63Lm18JXdHEAfeckzRA7Hi8:/hFSFMU9YImWvKQ2ikabi8","tlshash":"a753f1b07b32e55bfec639739a6d6311d2135c6e8b0705f642b8a050263f12babc459b","first_seen":"2023-04-30T18:17:13Z","last_seen":"2026-08-09T13:05:46.942432Z","times_seen":3543,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":397,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"108.129.55.197","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\nReferer: https://mail.456558coinbase.com/\r\nOrigin: https://mail.456558coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:14 GMT\r\ncontent-length: 20\r\nset-cookie: AWSALB=MNmFeeLImOzLGNehiab6veV6svbyjMgrHr0I8No6VLeygu32XDSf+M3uMWSE4c8U5yf3dpAXFuIKRJQAgqbTK5s2Xir/moAoDsV9+xNd+O5BhuEkq5jnmVuAdi7m; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/\nAWSALBCORS=MNmFeeLImOzLGNehiab6veV6svbyjMgrHr0I8No6VLeygu32XDSf+M3uMWSE4c8U5yf3dpAXFuIKRJQAgqbTK5s2Xir/moAoDsV9+xNd+O5BhuEkq5jnmVuAdi7m; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-headers: authorization,content-type,x-amz-content-sha256,x-amz-date,x-amz-target,x-amz-user-agent\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\naccess-control-max-age: 172800\r\ncontent-encoding: gzip\r\nx-amzn-requestid: c07412b0-c05a-e125-a25b-457aa1e5dc90\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T21:49:08.725351Z","times_seen":17806559,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/login_up.php","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-14T12:33:11.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /login_up.php HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nexpires: Fri, 28 May 1999 00:00:00 GMT\r\nlast-modified: Sat, 14 Mar 2026 12:33:11 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\np3p: CP=\"NON COR CURa ADMa OUR NOR UNI COM NAV STA\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TzqwrFnrqhQrH%2FSg2EuS3i833FEejToJdV5rMCpwh1cyckDA7h61%2FogT15%2BQC9A%2FjiaffpY8CYMQSDDJyhPAT1DTxG53m0nFO7GcWUsJbBIN7%2FEj5VG6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dc34e2ffac4618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Prototype","description":"Prototype is a JavaScript Framework that aims to ease development of web applications.","website":"https://www.prototypejs.org","common_platform_enumeration":"cpe:2.3:a:prototypejs:prototype:*:*:*:*:*:*:*:*","icon":"Prototype.png","categories":["JavaScript frameworks"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92281,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (62516)","md5":"525aecad8f9219df3500e50abd09bdbf","sha1":"f8665f3bfb8ea8c9f13670740dd9978fae3a8e4f","sha256":"a2ab4fb57e04990bec638a6da7a98d5b35b54b500cf487e3a3e2dbfc871caf91","sha512":"9e36653b76972b1caf4b583ac64df54373616ad33b28214e9a3566bbcc3cb8c671e6f4f1c31e40b94f41f608317b278ad349966bfc062a64101a63096329e147","ssdeep":"1536:4NxTkIUPVx2OIyto6j2Z7nm6xzw2fMZwrDZOi13oM:4NxTkIUPD0B6jc7nRmwrD314M","tlshash":"9293e60909253f3b07c623f67c9b358dbab491d0a1d81054adee84a913eef9dd42f16b","first_seen":"2026-03-14T12:33:41.904834Z","last_seen":"2026-03-14T12:33:41.904834Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":256,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mail.456558coinbase.com/cp/theme/css/main.css?1771934064","fqdn":"mail.456558coinbase.com","domain":"456558coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:12.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"456558coinbase.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 16:02:30 GMT","end":"Thu, 04 Jun 2026 16:02:29 GMT"},"fingerprint":{"sha1":"BF:30:85:7A:13:15:6F:34:A0:CF:A0:28:62:48:52:61:86:13:60:15","sha256":"93:8E:4C:64:06:5F:E1:AA:FA:13:2D:83:01:00:D1:B0:F0:9E:CE:3E:88:66:EA:2F:ED:99:07:40:30:93:F7:3F"}}},"request":{"raw":"GET /cp/theme/css/main.css?1771934064 HTTP/1.1\r\nHost: mail.456558coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/login_up.php\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:12 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 24 Feb 2026 11:54:24 GMT\r\netag: W/\"699d9170-5d291\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4nRym4IKCBHNqPb1zvCSnXbP3KHPbBmPOzSSlh5Ca8BxG0RpvjbUkQLdwCNuQIX6ZDMQZScao0%2BQfDex%2Fn04kVvdhwO%2FpRJQ%2FGSHYS3ogqlSk%2FvoiMAi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dc34e32f9bc618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5d0386768bcdd424ed94162bef96a9fe","sha1":"8ed0f0922c4763216cf95877c9c78a03eac4d594","sha256":"2ff5d50fe75ce1eb42d527898c264b6260eec4154b031506708b0f338c787396","sha512":"61a69a10caaca6677ab51cf732e54c01340c0fa303fe8b944f1fc31e50dc573b21692a8ba092b16ce1806755aa053e3d6dffb111ff4cc4abf02fc7ddd4595c1e","ssdeep":"6144:S6VSzdcO33ag+Y3isi8RDDDu88xag88Sb5Q:mcOviP8XQ","tlshash":"c3842c90f09935bd356f872af2e13645a31e9461d2535efef4abf2ac82c90c41633e16","first_seen":"2026-01-16T02:31:31.947669Z","last_seen":"2026-07-12T07:55:49.513443Z","times_seen":48,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-14","alert":"Sinkholed","trigger":"mail.456558coinbase.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"uat-proxy.plesk.com/","fqdn":"uat-proxy.plesk.com","domain":"plesk.com","tld":"com"},"ip":{"addr":"108.129.55.197","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mail.456558coinbase.com/login_up.php","date":"2026-03-14T12:33:14.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"uat-proxy.plesk.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Fri, 01 Aug 2025 00:00:00 GMT","end":"Sun, 30 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:5B:6C:B7:19:D1:F4:7B:E1:8C:07:D2:A7:7E:84:36:29:07:F3:07","sha256":"4B:46:37:E8:81:F5:46:5D:48:54:2D:9C:36:A9:A2:1E:0E:BC:41:8C:54:04:8B:05:56:7D:21:4A:77:E1:C7:59"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: uat-proxy.plesk.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Amz-User-Agent: aws-sdk-js/2.1693.0 callback\r\nContent-Type: application/x-amz-json-1.1\r\nX-Amz-Target: Firehose_20150804.PutRecord\r\nX-Amz-Content-Sha256: 111288eaa562591aa8f6d58922fdab5cf5151215dff13654bc0588c718b7895d\r\nX-Amz-Date: 20260314T123314Z\r\nAuthorization: AWS4-HMAC-SHA256 Credential=00000000000000000000/20260314/us-west-2/firehose/aws4_request, SignedHeaders=host;x-amz-content-sha256;x-amz-date;x-amz-target;x-amz-user-agent, Signature=f2e14c07fc614e8066068ebb546e598e5bc167a8a0c7fe82bed5da18322bbfd2\r\nContent-Length: 294\r\nOrigin: https://mail.456558coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mail.456558coinbase.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":294,"data":"{\"DeliveryStreamName\":\"plesk-18.0-ux-no_session\",\"Record\":{\"Data\":\"MjAyNi0wMy0xNFQxMjozMzoxNC43NDVafDVBNTguNTVGOS45NERFLjQ3RTMuODA1My5CRTQ0LkZGNjUuQTJBQ3x8fHwvbG9naW5fdXAucGhwfHx8eyJwYWdlTG9hZFRpbWUiOjM1OTUsInJlcXVlc3RUaW1lIjoyNjUsInJlbmRlclRpbWUiOjI2NjAsInVhdC1haWQiOiI1YWhkZzZwb3VjNiJ9Cg==\"}}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Mar 2026 12:33:15 GMT\r\ncontent-type: application/x-amz-json-1.1\r\ncontent-length: 247\r\nset-cookie: AWSALB=Jvu+YAIrTo8RBVma01VqqhOdbQBRy6iRpKJlCWvXRCNLF8zbdoiI+Tk5JJFvbzl+Iw01DsQgpae3OnuLMtoeNwwnNXKpMnQrxX2GYt+Ix7Wj0s0RhAOqTaNI4tU4; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/\nAWSALBCORS=Jvu+YAIrTo8RBVma01VqqhOdbQBRy6iRpKJlCWvXRCNLF8zbdoiI+Tk5JJFvbzl+Iw01DsQgpae3OnuLMtoeNwwnNXKpMnQrxX2GYt+Ix7Wj0s0RhAOqTaNI4tU4; Expires=Sat, 21 Mar 2026 12:33:14 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: x-amz-request-id,x-amz-id-2,x-amzn-RequestId,x-amzn-ErrorType,x-amzn-ErrorMessage,Date\r\ncontent-encoding: gzip\r\nx-amz-id-2: G4iPNKGxbfNuRIA4kdA6ub4GbOjReHrxW/rKVm7yPapdZQCZRVW470UP28T0ywK+VJyGl62EAPC+KqslDMIBajQWnoqWB9Xo\r\nx-amzn-requestid: c9654617-ff0d-57e2-ab4a-11dd93c03bec\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":257,"size_decoded":0,"mime_type":"application/x-amz-json-1.1","magic":"JSON text data","md5":"d3f01075e51cd406f489753e92fdf727","sha1":"5514b06fa1d82bf826eb2db75893ab696cb993c8","sha256":"3800785b2356d9e8faa7d11d06c2831a0662a2d5af683f6c3d45e6b27cc50d86","sha512":"4833029c5d4ff7c4e2eacb80412d4c834fc7301ea40b22eeaaeaa377a5d762a64f6892163a6110502cdcfecced0793ac47c0f5ac90dea09bdc4f54987d1d1d2e","ssdeep":"","tlshash":"47d02e673889c643b78062388498c8181a61f83fcb09b38c8892e84031e28a22373239","first_seen":"2026-03-14T12:33:41.906962Z","last_seen":"2026-03-14T12:33:41.906962Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}