WEBSITE ANALYSIS REPORT

https://www.133750-coinbase.com/case

27 Nov 2025 · 16:21:18.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:20:55.913 GET 200 document 7.6 KB 730 ms 7 alerts

16:20:56.533 GET 200 img 3.7 KB 28 ms 7 alerts

16:20:56.554 GET 200 font 39.5 KB 63 ms 7 alerts

16:20:56.621 GET 200 img 540 B 29 ms 7 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://www.133750-coinbase.com/assets/favicon-32x32.png

IP / ASN

163.5.169.66

AS399486 · VIRTUO

Requested by: https://www.133750-coinbase.com/case

Resource information

File type: PNG image data, 32 x 32, 8-bit colormap, non-interlaced
MIME type: image/png
First seen (UTC): 05 Jan 2025 · 13:30:30.627 UTC
Last seen (UTC): 28 Sep 2026 · 09:12:20.694 UTC
Times seen: 544

Size: 540 B (540 bytes)
MD5: 135ffd17e05436fcd54db9a5a623f93a
SHA1: cd4de012367fe5a410c554b015186d7a1deb9f78
SHA256: 5f4a2738c55c46ca324443d57553bf79e8fa9575fa48b8fd241600cd0285ff46

Certificate information

Issuer: Let's Encrypt · E8
Subject: 133750-coinbase.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 83:01:E4:E7:05:4A:2D:E4:BC:98:E8:18:22:BC:77:4F:FD:74:B0:62
Valid from: Wed, 26 Nov 2025 20:23:21 GMT
Valid until: Tue, 24 Feb 2026 20:23:20 GMT

Technology fingerprints

Apache HTTP Server:2.4.58 (Web servers)
Ubuntu (Operating systems)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
OpenPhish Phishing - Coinbase	medium	Phishing
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /assets/favicon-32x32.png HTTP/1.1
Host: www.133750-coinbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.133750-coinbase.com/case
Cookie: PHPSESSID=9afba76ulibp1t74p1d8btm08c
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Thu, 27 Nov 2025 16:20:56 GMT
Server: Apache/2.4.58 (Ubuntu)
Last-Modified: Wed, 26 Nov 2025 17:58:03 GMT
ETag: "21c-64483233f00c0"
Accept-Ranges: bytes
Content-Length: 540
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png

https://www.133750-coinbase.com/case

Domain graph

Hostnames

Connections