WEBSITE ANALYSIS REPORT

https://coinbase-lidiya.com/

25 Aug 2026 · 21:36:05.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:35:25.632 GET 200 document 12.2 KB 307 ms 5 alerts

21:35:26.140 GET 200 stylesheet 117.5 KB 99 ms 5 alerts

21:35:26.141 GET 200 stylesheet 2.8 KB 159 ms 5 alerts

21:35:26.143 GET 200 script 10.6 KB 173 ms 5 alerts

21:35:26.145 GET 200 script 462.6 KB 294 ms 5 alerts

21:35:26.149 GET 200 script 490.6 KB 293 ms 5 alerts

21:35:26.151 GET 200 script 3.1 KB 168 ms 5 alerts

21:35:26.153 GET 200 script 5.5 KB 153 ms 5 alerts

21:35:26.154 GET 200 script 3.4 KB 188 ms 5 alerts

21:35:26.155 GET 200 script 950.1 KB 379 ms 5 alerts

21:35:26.157 GET 200 script 1.84 MB 336 ms 5 alerts

21:35:26.158 GET 200 script 66.0 KB 256 ms 5 alerts

21:35:26.330 GET 200 font 854.2 KB 278 ms 5 alerts

21:35:26.620 GET 200 img 12.3 KB 118 ms 5 alerts

21:35:26.765 GET 200 xhr 120 B 44 ms 5 alerts

21:35:26.833 POST 200 xhr 2 B 43 ms 5 alerts

21:35:26.835 GET 200 xhr 32 B 44 ms 5 alerts

21:35:26.838 GET 101 websocket 0 B 131 ms —

21:35:26.884 GET 200 xhr 1 B 230 ms 5 alerts

21:35:27.224 GET 200 img 870 B 36 ms —

21:35:29.119 POST 200 fetch 3.2 KB 55 ms 5 alerts

21:35:29.211 POST 200 fetch 264 B 252 ms 5 alerts

21:35:29.370 GET 200 fetch 854.2 KB 271 ms 5 alerts

21:35:29.375 GET 200 fetch 854.2 KB 283 ms 5 alerts

21:35:29.376 GET 200 fetch 854.2 KB 280 ms 5 alerts

21:35:29.377 GET 200 fetch 854.2 KB 282 ms 5 alerts

21:35:29.379 GET 200 fetch 854.2 KB 283 ms 5 alerts

21:35:32.415 GET 200 fetch 854.2 KB 263 ms 5 alerts

21:35:32.417 GET 200 fetch 854.2 KB 266 ms 5 alerts

21:35:32.422 GET 200 fetch 854.2 KB 274 ms 5 alerts

21:35:32.423 GET 200 fetch 854.2 KB 276 ms 5 alerts

21:35:32.424 GET 200 fetch 854.2 KB 268 ms 5 alerts

21:35:35.014 GET 200 fetch 854.2 KB 278 ms 5 alerts

21:35:35.017 GET 200 fetch 854.2 KB 280 ms 5 alerts

21:35:35.019 GET 200 fetch 854.2 KB 279 ms 5 alerts

Transaction #10

Request / response

URL

GET HTTPS

https://coinbase-lidiya.com/_next/static/media/cc8d810991ac575a.ttf

IP / ASN

64.89.161.118

Unknown

Requested by: https://coinbase-lidiya.com/

Resource information

File type: TrueType Font data, 21 tables, 1st "GDEF", 58 names, Microsoft, language 0x409
MIME type: font/ttf
First seen (UTC): 10 Dec 2024 · 16:54:08.570 UTC
Last seen (UTC): 23 Oct 2026 · 22:41:50.207 UTC
Times seen: 4238

Size: 854.2 KB (874708 bytes)
MD5: 0a77e23a8fdbe6caefd53cb04c26fabc
SHA1: ee5c2e22ffeddefc433c9aa4c76779bb73a5c682
SHA256: 0be2399ea925f1f83ff974764761da9860ec50742ed29a5d4c1ffd0c5c7ac3a8

Certificate information

Issuer: Let's Encrypt · YR1
Subject: coinbase-lidiya.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: FD:71:1C:A4:32:65:DF:2E:88:3A:1D:2C:05:83:55:F4:D7:7B:97:C6
Valid from: Tue, 25 Aug 2026 01:47:23 GMT
Valid until: Mon, 23 Nov 2026 01:47:22 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing

HTTP headers

Request headers

GET /_next/static/media/cc8d810991ac575a.ttf HTTP/1.1
Host: coinbase-lidiya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://coinbase-lidiya.com/
Sec-GPC: 1
Connection: keep-alive
Cookie: phishKey=T2M_4F; vAuth=eyJhbGciOiJIUzI1NiJ9.eyJpcCI6IjE5NS42NC4xMTguMTUyIiwiaG9zdCI6ImNvaW5iYXNlLWxpZGl5YS5jb20iLCJpYXQiOjE3ODc2OTM3MjUsImV4cCI6MTc4NzY5NDAyNX0.0TVorEqgoMKDnxGy6X17jBMmap3YEGUMlJx3imGa9ag; vid=2a782700-75b1-45b7-80d4-bd7d8683083b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 25 Aug 2026 21:35:35 GMT
Content-Type: font/ttf
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=31536000, immutable
Accept-Ranges: bytes
Last-Modified: Mon, 24 Aug 2026 12:57:36 GMT
ETag: W/"d58d4-1a033d90600"
Vary: Accept-Encoding
Content-Encoding: gzip

21:35:35.020 GET 200 fetch 854.2 KB 284 ms 5 alerts

21:35:35.021 GET 200 fetch 854.2 KB 285 ms 5 alerts

21:35:37.714 GET 200 fetch 854.2 KB 479 ms 5 alerts

21:35:37.718 GET 200 fetch 854.2 KB 477 ms 5 alerts

21:35:37.720 GET 200 fetch 854.2 KB 480 ms 5 alerts

21:35:37.722 GET 200 fetch 854.2 KB 477 ms 5 alerts

21:35:37.723 GET 200 fetch 854.2 KB 481 ms 5 alerts

21:35:40.646 GET 200 fetch 854.2 KB 269 ms 5 alerts

21:35:40.650 GET 200 fetch 854.2 KB 268 ms 5 alerts

21:35:40.653 GET 200 fetch 854.2 KB 276 ms 5 alerts

21:35:40.654 GET 200 fetch 854.2 KB 270 ms 5 alerts

21:35:40.656 GET 200 fetch 854.2 KB 274 ms 5 alerts

21:35:43.381 GET 200 fetch 854.2 KB 278 ms 5 alerts

21:35:43.383 GET 200 fetch 854.2 KB 283 ms 5 alerts

21:35:43.388 GET 200 fetch 854.2 KB 285 ms 5 alerts

https://coinbase-lidiya.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #10

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://coinbase-lidiya.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #10

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://coinbase-lidiya.com/

Domain graph

Network requests