WEBSITE ANALYSIS REPORT

https://www.133750-coinbase.com/case

27 Nov 2025 · 16:21:18.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:20:55.913 GET 200 document 7.6 KB 730 ms 7 alerts

16:20:56.533 GET 200 img 3.7 KB 28 ms 7 alerts

Transaction #01

Request / response

URL

GET HTTPS

https://www.133750-coinbase.com/assets/Consumer_Wordmark.svg

IP / ASN

163.5.169.66

AS399486 · VIRTUO

Requested by: https://www.133750-coinbase.com/case

Resource information

File type: SVG Scalable Vector Graphics image
MIME type: image/svg+xml
First seen (UTC): 06 Jun 2023 · 13:52:44.000 UTC
Last seen (UTC): 21 Oct 2026 · 21:20:13.839 UTC
Times seen: 1637

Size: 3.7 KB (3788 bytes)
MD5: 78b2915b21e673b15957e22970b36c40
SHA1: d147dd4dde281e9c200ed77ecb29cdaf0f1377e6
SHA256: 126270d27d1ac1a29b8d7d01238377840fe79b70212bd230adc6b2d9da82bf38

Certificate information

Issuer: Let's Encrypt · E8
Subject: 133750-coinbase.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 83:01:E4:E7:05:4A:2D:E4:BC:98:E8:18:22:BC:77:4F:FD:74:B0:62
Valid from: Wed, 26 Nov 2025 20:23:21 GMT
Valid until: Tue, 24 Feb 2026 20:23:20 GMT

Technology fingerprints

Apache HTTP Server:2.4.58 (Web servers)
Ubuntu (Operating systems)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenPhish Phishing - Coinbase	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /assets/Consumer_Wordmark.svg HTTP/1.1
Host: www.133750-coinbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.133750-coinbase.com/case
Cookie: PHPSESSID=9afba76ulibp1t74p1d8btm08c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Thu, 27 Nov 2025 16:20:56 GMT
Server: Apache/2.4.58 (Ubuntu)
Last-Modified: Wed, 26 Nov 2025 17:58:03 GMT
ETag: "ecc-64483233f00c0"
Accept-Ranges: bytes
Content-Length: 3788
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/svg+xml

16:20:56.554 GET 200 font 39.5 KB 63 ms 7 alerts

16:20:56.621 GET 200 img 540 B 29 ms 7 alerts

https://www.133750-coinbase.com/case

Domain graph

Hostnames

Connections