{"report_id":"a1ada7ae-99c0-4cd4-ae83-7afddd7e7c28","version":0,"status":"done","tags":[],"date":"2026-09-01T20:38:27Z","url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"13.248.169.48","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/lander","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"title":"yahooandpersonals.coinbasegive.com/lander","dom":{"size":832,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (686)","md5":"1396424602f5a97d87bce061a6a4005b","sha1":"d4623fb343a676a487074d6b6f5e9e6fdd4e2003","sha256":"1da6eefb98b4116c04ef40fbadf70f132141ae21fbe48f4d77fcfb4f474dd095","sha512":"3c7acf373e13e66f6f48eafa5b97ff6c6456bbb4e2d352ba1c47151c3e7440626c31d36aea38746f52bdd96d5fe6aa3f0f26ef7d48659b24d8cd059d8ae68647","ssdeep":"","tlshash":"f90141c28c51c21c59b086dc7a33bb3ea256d05e9de1ecc0f1f0006969cebd28c9e498","dom_hash":"domhashca7abff07e15136dd3b3a9573765686e","first_seen":"2026-08-30T16:29:41.139996Z","last_seen":"2026-09-01T20:54:19.963963Z","times_seen":31,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"13.248.169.48","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-06T20:38:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"img1.wsimg.com","ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2008-03-17","domain_rank":58983,"first_seen":"2012-06-20T14:42:31Z","last_seen":"2026-08-31T13:04:47.09601Z","alert_count":0,"request_count":5,"received_data":841460,"sent_data":2611,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"yahooandpersonals.coinbasegive.com","ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-10-19","domain_rank":0,"first_seen":"2026-09-01T20:38:29.086582Z","last_seen":"2026-09-01T20:38:29.086582Z","alert_count":20,"request_count":5,"received_data":3961,"sent_data":2665,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}]},{"fqdn":"api.aws.parking.godaddy.com","ip":{"addr":"98.95.243.62","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"1999-03-02","domain_rank":239345,"first_seen":"2020-03-23T21:33:37Z","last_seen":"2026-08-26T10:15:05.695772Z","alert_count":0,"request_count":3,"received_data":1931,"sent_data":1955,"comment":"","tags":null,"fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"csp.secureserver.net","ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1998-03-30","domain_rank":62352,"first_seen":"2022-12-18T21:17:09Z","last_seen":"2026-08-31T11:47:03.96781Z","alert_count":0,"request_count":2,"received_data":1014,"sent_data":1146,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/lander","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"396983b43a97ac40197e7d22399b707b","sha1":"9c54ff4c30658fd6a7e94eaaae5072b3ed2ec1dc","sha256":"de4e0ef840a4a74223bb4637d128d0fd8894ac9f95bf604576e8c5280c768442","sha512":"82fd10e645edc15d344110f8b284535fb26273101b469e7db360c1aecec7c1d3fe30a0520a96e5b893ed378c90ed246b9224bd79dca35918753e2b4cb628e1e1","ssdeep":"","tlshash":"d5700028008000008830aaeb230b228c322ef0e0a0008e223220220020c80038802080","size":25,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-02T00:42:34.670937Z","times_seen":15389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/lander","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4566be3a5ae95b1cc330f895a1bf2265","sha1":"712e5d763efe3bc39da3e99fdd0e13c3a5cbc943","sha256":"b23d5005af4518da7309bbb1f5dc1acf5adf215a3e28e21c59501eedcc7f08e4","sha512":"6b733bf4affdac5ace6d720afe9b8626a6f2a1c9c5c3e93b1a3b51611825398acae79c46a907bcf0cf4aef0e36947655673a5202362eff3741cc5d1fdfda8297","ssdeep":"","tlshash":"e6a00261508050e444fc911533733f17f7a3140524806450d7d0051472dfc27d0043d2","size":63,"data":"","first_seen":"2026-04-16T20:30:26.794154Z","last_seen":"2026-09-02T01:04:58.972105Z","times_seen":18465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/lander","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5d32b0ee8d41b1e47a523df01b25b68","sha1":"ac3178156ab1fd26ac597c73367bed18880c5ce1","sha256":"167d38de22fc467ddbebd2a93ac19cd51bf189e0147c168a07f147ef8da0b609","sha512":"6a53edbf80bb8214232a9c68ce71076f23a0af76870a81219cc32cd31bc08558b2ebcfddeff4b0b86e983b1f1b63d65d82fdf792a0abd816587c4fd0e8688c9a","ssdeep":"","tlshash":"d09002840262480848ea662c0b06aa323730820880f3cce088c0e008320be43628b9c7","size":53,"data":"","first_seen":"2026-04-16T20:30:26.798415Z","last_seen":"2026-09-02T01:04:58.972868Z","times_seen":18465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/js/main.b227b566.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"57904d8e7eeb253866938d67757005ee","sha1":"6356c79d134532fdae32137c32dcad63e84fec1e","sha256":"adfac3cf0d189bc9ed9bf13dea49f2d59cafa7ca25ea0a8e44edd827b6df816b","sha512":"598ae6c5645850f02edeae9a8037e0b261f49416109b7ff6abef8ca4f717f2873f67acfb1a5043d643cdeb47f86066377af0c308eceb176e29a93593a75141b4","ssdeep":"12288:ynwcCew747QYnT7QYnT1DUk4f0WTI4WugqciqXD5xcTVBPb:6wjpU7QYnT7QYnTWTVBPb","tlshash":"c4e42bce76e1b0b407e292eac43f5c4fb3686e15d008c561efbad9da94698498137f1c","size":712150,"data":"","first_seen":"2026-08-27T22:28:31.30337Z","last_seen":"2026-09-02T01:04:58.965339Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"56ad8d8cdac1d0e48cbb1ecefc4e10b6","sha1":"82a17170f875858e419c6ca81f71f8cea9b619f7","sha256":"21f2f0620476936458d35bff8503ca60c9a9b7a163e9837d68f8e8221839fbaf","sha512":"781c99aad69e3b77a3618d8e7f8b80cce44390b1bbf659d469c04ff7e872df82c4b9c0bc4883b596ee30b10ba97adb43ad11aa96679dd82024fd075b03623734","ssdeep":"1536:azZq1lDuiRGSW/3TV4vlV7mDHaQfzOIDz2Gi9:eCPW/8lj","tlshash":"77a3a788f6a1f07142e76165413f010bf279a966b0aed0d4e725e8f4adf85ce8173f29","size":106613,"data":"","first_seen":"2026-08-25T19:47:01.786054Z","last_seen":"2026-09-02T01:04:58.959478Z","times_seen":781,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"debug","text":"lander event:map[actor:server1.conn0.watcher17.process7//obj43 class:Object extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[kind:Object ownProperties:map[createdAt:map[configurable:true enumerable:true value:2026-09-01T20:37:59.673Z writable:true] dataSource:map[configurable:true enumerable:true value:map[type:undefined] writable:true] domain:map[configurable:true enumerable:true value:yahooandpersonals.coinbasegive.com writable:true] domainStatus:map[configurable:true enumerable:true value:map[type:undefined] writable:true] errorCode:map[configurable:true enumerable:true value:CONFIG_FETCH_UNKNOWN_ERROR writable:true] eventType:map[configurable:true enumerable:true value:PROXY_FALLBACK writable:true] isTurnKeyReseller:map[configurable:true enumerable:true value:false writable:true] landerParamApiStatus:map[configurable:true enumerable:true value:map[type:null] writable:true] system:map[configurable:true enumerable:true value:map[type:undefined] writable:true] xRequestId:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:51] sealed:false type:object]","filename":"https://img1.wsimg.com/parking-lander/static/js/main.b227b566.js","line_number":2,"column_number":582272},{"level":"debug","text":"lander event:map[actor:server1.conn0.watcher17.process7//obj44 class:Object extensible:true frozen:false isError:false ownPropertyLength:51 preview:map[kind:Object ownProperties:map[createdAt:map[configurable:true enumerable:true value:2026-09-01T20:37:59.802Z writable:true] dataSource:map[configurable:true enumerable:true value: writable:true] domain:map[configurable:true enumerable:true value:coinbasegive.com writable:true] domainStatus:map[configurable:true enumerable:true value:BLACKLISTED writable:true] errorCode:map[configurable:true enumerable:true value:ERROR_DOMAIN_STATUS_INVALID writable:true] eventType:map[configurable:true enumerable:true value:ERROR writable:true] isTurnKeyReseller:map[configurable:true enumerable:true value:false writable:true] landerParamApiStatus:map[configurable:true enumerable:true value:map[type:null] writable:true] system:map[configurable:true enumerable:true value: writable:true] xRequestId:map[configurable:true enumerable:true value:map[type:null] writable:true]] ownPropertiesLength:51] sealed:false type:object]","filename":"https://img1.wsimg.com/parking-lander/static/js/main.b227b566.js","line_number":2,"column_number":582272},{"level":"error","text":"error publishing event - HTTP Status: 405","filename":"https://img1.wsimg.com/parking-lander/static/js/main.b227b566.js","line_number":2,"column_number":582511}]},"http":[{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/css/main.52c56e7a.css","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.083Z","timestamp":1788295079083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/static/css/main.52c56e7a.css HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: /e0jOgycEPOuRdH5g87pq/LzBzmGsqbD5d1IqYT+/urRdgz7rwLkAgQl/czKWTtNW16qhSMLgP0=\r\nx-amz-request-id: B8P1YEMRB2ZWJ6RR\r\nlast-modified: Thu, 27 Aug 2026 22:08:56 GMT\r\netag: \"2fb4e44dab7c1c1f3762c8e4e7209492\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: AQQ8fDl34jxVwQDfcHyzk4lmgufzbOtT\r\naccept-ranges: bytes\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Wed, 01 Sep 2027 20:37:59 GMT\r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\ncontent-length: 4250\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":19527,"size_decoded":4870,"mime_type":"text/css","magic":"ASCII text, with very long lines (19482)","md5":"2fb4e44dab7c1c1f3762c8e4e7209492","sha1":"de9f8414c874b61d737d3e03e8909d5b8c3dac7c","sha256":"4038fb39967501a8a03a47ce60a79186d895a361b07d4bb110df9ef76b73545b","sha512":"952aec605ff93fdf670455b64131db829b6d2e710421ebab5961b6dba1f478ab09cc840e4256df2754caa852a51375951e64c357d21c1297c6474dab0dcfbbcb","ssdeep":"384:v9HfffIi8GKbmB9aLNLi6qjUYyQyl/p1nXSxHqUoCtC/0rtYYljK/yfj:v9HfffIi8GKbmB9aLNLi6qjUYyQyl3nC","tlshash":"a492b7611d46102ea5379424c9f1e39ca159f012d2afb7b9d937532f8aef182e637e0c","first_seen":"2026-07-23T20:08:05.314576Z","last_seen":"2026-09-02T01:04:58.966246Z","times_seen":1178,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":7,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/px.js?ch=1\u0026abp=1\u0026gdabp=true","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.327Z","timestamp":1788295079327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/px.js?ch=1\u0026abp=1\u0026gdabp=true HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-request-id: 46FH0MQYW1FRS1R9\r\nx-amz-id-2: bUIR51X1mq4Zw62gGe3bM5CmBOi5dBjvJIXqUiJnV1PQHPSwsR1DCXfPMmaht6uiH882WrkX5NucisZ0PGtUcOob6KBvNATK\r\naccept-ranges: bytes\r\nlast-modified: Thu, 20 Aug 2026 18:39:57 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nx-amz-version-id: ZTciaM4e5W7wqm2tnKR6H_NrFK.fpF89\r\ncontent-type: text/javascript\r\nx-amz-server-side-encryption: AES256\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 20\r\ncache-control: max-age=31536000\r\nexpires: Wed, 01 Sep 2027 20:37:59 GMT\r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":665,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/signals/js/clients/scc-c2/scc-c2.min.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.078Z","timestamp":1788295079078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /signals/js/clients/scc-c2/scc-c2.min.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: q2EmTrhcC/PR9ZLIQKGH0iUd6tWlVNuMsPE9UPdtkhXyNjFgPPeccEWqYr/vb0waF7iIWheUYAU=\r\nx-amz-request-id: 1AKBMQAYEGPWCKD5\r\nlast-modified: Tue, 25 Aug 2026 19:45:10 GMT\r\netag: \"56ad8d8cdac1d0e48cbb1ecefc4e10b6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-version: 1.3.3\r\nx-amz-version-id: MeEMI4pY1a0nmUjyvETUbje9mL.IsLTY\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=1800\r\nexpires: Tue, 01 Sep 2026 21:07:59 GMT\r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\ncontent-length: 21697\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":106613,"size_decoded":22348,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"56ad8d8cdac1d0e48cbb1ecefc4e10b6","sha1":"82a17170f875858e419c6ca81f71f8cea9b619f7","sha256":"21f2f0620476936458d35bff8503ca60c9a9b7a163e9837d68f8e8221839fbaf","sha512":"781c99aad69e3b77a3618d8e7f8b80cce44390b1bbf659d469c04ff7e872df82c4b9c0bc4883b596ee30b10ba97adb43ad11aa96679dd82024fd075b03623734","ssdeep":"1536:azZq1lDuiRGSW/3TV4vlV7mDHaQfzOIDz2Gi9:eCPW/8lj","tlshash":"77a3a788f6a1f07142e76165413f010bf279a966b0aed0d4e725e8f4adf85ce8173f29","first_seen":"2026-08-25T19:47:01.786054Z","last_seen":"2026-09-02T01:04:58.959478Z","times_seen":781,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":19,"receive":1,"ssl":214},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/static/js/main.b227b566.js","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.081Z","timestamp":1788295079081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/static/js/main.b227b566.js HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: Nf4HvTewxCLRjJwSNAcU8/FXKwXPbGK1/8cctXvDLnnOieGMOwFS7KdQiGThk6qDaDbv93gboYo=\r\nx-amz-request-id: AV0F8DS9VG77ZNWF\r\nlast-modified: Thu, 27 Aug 2026 22:08:53 GMT\r\netag: \"57904d8e7eeb253866938d67757005ee\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: iURY6F_CwzLlBdJpKvolEPejFdVRN2rv\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncache-control: max-age=31536000\r\nexpires: Wed, 01 Sep 2027 20:37:59 GMT\r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\ncontent-length: 187681\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":712150,"size_decoded":188310,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"57904d8e7eeb253866938d67757005ee","sha1":"6356c79d134532fdae32137c32dcad63e84fec1e","sha256":"adfac3cf0d189bc9ed9bf13dea49f2d59cafa7ca25ea0a8e44edd827b6df816b","sha512":"598ae6c5645850f02edeae9a8037e0b261f49416109b7ff6abef8ca4f717f2873f67acfb1a5043d643cdeb47f86066377af0c308eceb176e29a93593a75141b4","ssdeep":"12288:ynwcCew747QYnT7QYnT1DUk4f0WTI4WugqciqXD5xcTVBPb:6wjpU7QYnT7QYnTWTVBPb","tlshash":"c4e42bce76e1b0b407e292eac43f5c4fb3686e15d008c561efbad9da94698498137f1c","first_seen":"2026-08-27T22:28:31.30337Z","last_seen":"2026-09-02T01:04:58.965339Z","times_seen":173,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":9,"receive":5,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img1.wsimg.com/parking-lander/px.js?ch=2\u0026abp=2\u0026gdabp=true","fqdn":"img1.wsimg.com","domain":"wsimg.com","tld":"com"},"ip":{"addr":"95.101.11.152","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.345Z","timestamp":1788295079345,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.wsimg.com","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Fri, 05 Sep 2025 18:24:05 GMT","end":"Wed, 07 Oct 2026 18:24:05 GMT"},"fingerprint":{"sha1":"0E:95:B5:3C:BC:57:5B:29:44:36:31:82:4A:13:83:C0:BB:C6:51:2D","sha256":"2E:41:DD:15:BE:3D:3A:3A:29:F0:65:E6:52:EC:88:54:C4:60:01:9E:68:96:30:F3:2A:31:D9:A1:95:CA:69:24"}}},"request":{"raw":"GET /parking-lander/px.js?ch=2\u0026abp=2\u0026gdabp=true HTTP/1.1\r\nHost: img1.wsimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-id-2: o4yOl88dJJpj/lclWSt1gmNxXVJ7BwFrHd9sfv+YzxzAX/IuGUB80o6e9TPyLy34PwGLT3h2RpI=\r\nx-amz-request-id: HFTYF119WK6DTB13\r\nlast-modified: Thu, 27 Aug 2026 22:08:58 GMT\r\netag: \"d41d8cd98f00b204e9800998ecf8427e\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: yTdLsJgjvD.evlxN92feFnc42chjQurr\r\naccept-ranges: bytes\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 20\r\ncache-control: max-age=31536000\r\nexpires: Wed, 01 Sep 2027 20:37:59 GMT\r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":645,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/api/parkingEvents?abp=1\u0026gdabp=true","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.685Z","timestamp":1788295079685,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /api/parkingEvents?abp=1\u0026gdabp=true HTTP/1.1\r\nHost: yahooandpersonals.coinbasegive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://yahooandpersonals.coinbasegive.com/lander\r\nContent-Type: application/json\r\nContent-Length: 620\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":620,"data":"{\"eventType\":\"PROXY_FALLBACK\",\"errorCode\":\"CONFIG_FETCH_UNKNOWN_ERROR\",\"createdAt\":\"2026-09-01T20:37:59.673Z\",\"domain\":\"yahooandpersonals.coinbasegive.com\",\"isTurnKeyReseller\":false,\"isCname\":false,\"feedProvider\":\"NONE\",\"ip\":\"195.64.118.152\",\"country\":\"NO\",\"city\":\"Oslo\",\"visitorId\":\"92cad81c-e03a-4049-9f92-eb64e42cefb9\",\"protocol\":\"HTTP\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"httpReferer\":\"http://yahooandpersonals.coinbasegive.com/\",\"domLoadTime\":1,\"pageLoadTime\":1,\"isMobile\":false,\"adblocker\":\"not_present\",\"isConsentRequired\":true,\"landerType\":\"forwarder\"}"}},"response":{"raw":"HTTP/1.1 405 Method Not Allowed\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"405","status_text":"Method Not Allowed","fingerprints":null,"data":{"size":0,"size_decoded":1198,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":104,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/api/domains/domain?domain=yahooandpersonals.coinbasegive.com\u0026portfolioId=\u0026abp=1\u0026gdabp=true","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.687Z","timestamp":1788295079687,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/domains/domain?domain=yahooandpersonals.coinbasegive.com\u0026portfolioId=\u0026abp=1\u0026gdabp=true HTTP/1.1\r\nHost: yahooandpersonals.coinbasegive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://yahooandpersonals.coinbasegive.com/lander\r\nX-Request-Id: f86e6fae-1253-4e62-a953-cc5f82109e84\r\nX-Visitor-Id: 92cad81c-e03a-4049-9f92-eb64e42cefb9\r\nX-Country: NO\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: expiry_partner=; caf_ipaddr=195.64.118.152; country=NO; city=\"Oslo\"; lander_type=forwarder; pvisitor=92cad81c-e03a-4049-9f92-eb64e42cefb9\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncontent-length: 202\r\ncontent-type: application/json\r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\nset-cookie: AWSALB=6XGoKlFtm3eZC7+jhHGoBNhxiUo7d3Vx0tH/L7hxrH5wDd6hjTwikQOmYHEXhQAziBL7MTFV31eljtvxsREnGI9t35l1VMhU0zm1UGM8XClnPAqhMwusD2/0rFk/; Path=/; Expires=Tue, 08 Sep 2026 20:37:59 GMT\nAWSALBCORS=6XGoKlFtm3eZC7+jhHGoBNhxiUo7d3Vx0tH/L7hxrH5wDd6hjTwikQOmYHEXhQAziBL7MTFV31eljtvxsREnGI9t35l1VMhU0zm1UGM8XClnPAqhMwusD2/0rFk/; Path=/; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Secure; SameSite=None\r\nx-request-id: f86e6fae-1253-4e62-a953-cc5f82109e84\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"6XGoKlFtm3eZC7+jhHGoBNhxiUo7d3Vx0tH/L7hxrH5wDd6hjTwikQOmYHEXhQAziBL7MTFV31eljtvxsREnGI9t35l1VMhU0zm1UGM8XClnPAqhMwusD2/0rFk/","quoted":false,"path":"/","expires":"2026-09-08T20:37:59Z","raw_expires":"Tue, 08 Sep 2026 20:37:59 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=6XGoKlFtm3eZC7+jhHGoBNhxiUo7d3Vx0tH/L7hxrH5wDd6hjTwikQOmYHEXhQAziBL7MTFV31eljtvxsREnGI9t35l1VMhU0zm1UGM8XClnPAqhMwusD2/0rFk/; Path=/; Expires=Tue, 08 Sep 2026 20:37:59 GMT"},{"name":"AWSALBCORS","value":"6XGoKlFtm3eZC7+jhHGoBNhxiUo7d3Vx0tH/L7hxrH5wDd6hjTwikQOmYHEXhQAziBL7MTFV31eljtvxsREnGI9t35l1VMhU0zm1UGM8XClnPAqhMwusD2/0rFk/","quoted":false,"path":"/","expires":"2026-09-08T20:37:59Z","raw_expires":"Tue, 08 Sep 2026 20:37:59 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=6XGoKlFtm3eZC7+jhHGoBNhxiUo7d3Vx0tH/L7hxrH5wDd6hjTwikQOmYHEXhQAziBL7MTFV31eljtvxsREnGI9t35l1VMhU0zm1UGM8XClnPAqhMwusD2/0rFk/; Path=/; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":202,"size_decoded":761,"mime_type":"application/json","magic":"JSON text data","md5":"44d63d2012ae0eaa3c48fb3f02b66362","sha1":"d9caa67f60efe08f15bc8265bd137e503935ea79","sha256":"300b1b61805dbba829b8a7329fe4639de533dcd5a17b553f1b7efbafdab1e736","sha512":"fd439a936136993d384d20a79588fb72065e6dd6ce7e9152fc729f626baa30f490c601df14d1008446b0054d49a1e8f93fb54d45ee3e58d0e7b7089abb5bf99e","ssdeep":"","tlshash":"c9d012116810691d2c4407c5d6f0ba85619c195395dd1d99dfad5e5304d52782325269","first_seen":"2026-09-01T19:58:41.755714Z","last_seen":"2026-09-01T20:54:19.970237Z","times_seen":29,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.aws.parking.godaddy.com/v1/parkingEvents?abp=1\u0026gdabp=true","fqdn":"api.aws.parking.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"98.95.243.62","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.806Z","timestamp":1788295079806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aws.parking.godaddy.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 02 Jun 2026 23:23:12 GMT","end":"Thu, 17 Dec 2026 23:23:12 GMT"},"fingerprint":{"sha1":"17:C2:FA:21:FD:E0:C4:2D:7C:7C:CD:E7:20:6D:E6:83:33:CA:A6:DA","sha256":"F2:2D:E3:51:E5:A6:AC:9D:1B:38:30:A2:5E:E3:77:5A:37:C2:0F:95:80:EA:2A:8F:58:0C:42:F4:D8:86:5C:16"}}},"request":{"raw":"POST /v1/parkingEvents?abp=1\u0026gdabp=true HTTP/1.1\r\nHost: api.aws.parking.godaddy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nContent-Type: application/json\r\nContent-Length: 654\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":654,"data":"{\"eventType\":\"ERROR\",\"errorCode\":\"ERROR_DOMAIN_STATUS_INVALID\",\"createdAt\":\"2026-09-01T20:37:59.802Z\",\"domain\":\"coinbasegive.com\",\"domainStatus\":\"BLACKLISTED\",\"isTurnKeyReseller\":false,\"isCname\":false,\"feedProvider\":\"NONE\",\"hasCustomerLoginCookie\":false,\"ip\":\"195.64.118.152\",\"country\":\"NO\",\"city\":\"Oslo\",\"visitorId\":\"92cad81c-e03a-4049-9f92-eb64e42cefb9\",\"protocol\":\"HTTP\",\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"httpReferer\":\"http://yahooandpersonals.coinbasegive.com/\",\"domLoadTime\":1,\"pageLoadTime\":1,\"isMobile\":false,\"adblocker\":\"not_present\",\"isConsentRequired\":true,\"landerType\":\"forwarder\"}"}},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 20:38:00 GMT\r\ncontent-type: text/plain\r\ncontent-length: 0\r\nset-cookie: AWSALB=x+DABQ1ycqINRYAVsL3/ESVrepfJs4Zy7pAORxWmvLgIexL3jUoCh5wIPh5QPQ52K71IvZGsvUF5EDJnnTY30Sv/Hn1oL+fXfu2dGf+D9+K0G5QL0A0gfruUcvCu; Expires=Tue, 08 Sep 2026 20:38:00 GMT; Path=/\nAWSALBCORS=x+DABQ1ycqINRYAVsL3/ESVrepfJs4Zy7pAORxWmvLgIexL3jUoCh5wIPh5QPQ52K71IvZGsvUF5EDJnnTY30Sv/Hn1oL+fXfu2dGf+D9+K0G5QL0A0gfruUcvCu; Expires=Tue, 08 Sep 2026 20:38:00 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"x+DABQ1ycqINRYAVsL3/ESVrepfJs4Zy7pAORxWmvLgIexL3jUoCh5wIPh5QPQ52K71IvZGsvUF5EDJnnTY30Sv/Hn1oL+fXfu2dGf+D9+K0G5QL0A0gfruUcvCu","quoted":false,"path":"/","expires":"2026-09-08T20:38:00Z","raw_expires":"Tue, 08 Sep 2026 20:38:00 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=x+DABQ1ycqINRYAVsL3/ESVrepfJs4Zy7pAORxWmvLgIexL3jUoCh5wIPh5QPQ52K71IvZGsvUF5EDJnnTY30Sv/Hn1oL+fXfu2dGf+D9+K0G5QL0A0gfruUcvCu; Expires=Tue, 08 Sep 2026 20:38:00 GMT; Path=/"},{"name":"AWSALBCORS","value":"x+DABQ1ycqINRYAVsL3/ESVrepfJs4Zy7pAORxWmvLgIexL3jUoCh5wIPh5QPQ52K71IvZGsvUF5EDJnnTY30Sv/Hn1oL+fXfu2dGf+D9+K0G5QL0A0gfruUcvCu","quoted":false,"path":"/","expires":"2026-09-08T20:38:00Z","raw_expires":"Tue, 08 Sep 2026 20:38:00 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=x+DABQ1ycqINRYAVsL3/ESVrepfJs4Zy7pAORxWmvLgIexL3jUoCh5wIPh5QPQ52K71IvZGsvUF5EDJnnTY30Sv/Hn1oL+fXfu2dGf+D9+K0G5QL0A0gfruUcvCu; Expires=Tue, 08 Sep 2026 20:38:00 GMT; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":1794,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.aws.parking.godaddy.com/v1/domains/domain?domain=yahooandpersonals.coinbasegive.com\u0026portfolioId=\u0026abp=1\u0026gdabp=true","fqdn":"api.aws.parking.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"98.95.243.62","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.344Z","timestamp":1788295079344,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aws.parking.godaddy.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 02 Jun 2026 23:23:12 GMT","end":"Thu, 17 Dec 2026 23:23:12 GMT"},"fingerprint":{"sha1":"17:C2:FA:21:FD:E0:C4:2D:7C:7C:CD:E7:20:6D:E6:83:33:CA:A6:DA","sha256":"F2:2D:E3:51:E5:A6:AC:9D:1B:38:30:A2:5E:E3:77:5A:37:C2:0F:95:80:EA:2A:8F:58:0C:42:F4:D8:86:5C:16"}}},"request":{"raw":"OPTIONS /v1/domains/domain?domain=yahooandpersonals.coinbasegive.com\u0026portfolioId=\u0026abp=1\u0026gdabp=true HTTP/1.1\r\nHost: api.aws.parking.godaddy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: x-country,x-request-id,x-visitor-id\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\nset-cookie: AWSALB=/I9sovvjA5lRpHl6gf0qiPQIfUjMA/YUUUmKk1ZEEu+BRC9kY3z9vdA1ZlDpgC42SCQISCBHAVhajDIpINeoRXUdfo0ErWlEml3EPp0KfIjzGsS4RH8Rcz+oOIgc; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/\nAWSALBCORS=/I9sovvjA5lRpHl6gf0qiPQIfUjMA/YUUUmKk1ZEEu+BRC9kY3z9vdA1ZlDpgC42SCQISCBHAVhajDIpINeoRXUdfo0ErWlEml3EPp0KfIjzGsS4RH8Rcz+oOIgc; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Request-Id, X-Visitor-Id\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-origin: http://yahooandpersonals.coinbasegive.com\r\naccess-control-max-age: 600\r\nvary: Origin\r\nx-request-id: XWikqPII\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"/I9sovvjA5lRpHl6gf0qiPQIfUjMA/YUUUmKk1ZEEu+BRC9kY3z9vdA1ZlDpgC42SCQISCBHAVhajDIpINeoRXUdfo0ErWlEml3EPp0KfIjzGsS4RH8Rcz+oOIgc","quoted":false,"path":"/","expires":"2026-09-08T20:37:59Z","raw_expires":"Tue, 08 Sep 2026 20:37:59 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=/I9sovvjA5lRpHl6gf0qiPQIfUjMA/YUUUmKk1ZEEu+BRC9kY3z9vdA1ZlDpgC42SCQISCBHAVhajDIpINeoRXUdfo0ErWlEml3EPp0KfIjzGsS4RH8Rcz+oOIgc; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/"},{"name":"AWSALBCORS","value":"/I9sovvjA5lRpHl6gf0qiPQIfUjMA/YUUUmKk1ZEEu+BRC9kY3z9vdA1ZlDpgC42SCQISCBHAVhajDIpINeoRXUdfo0ErWlEml3EPp0KfIjzGsS4RH8Rcz+oOIgc","quoted":false,"path":"/","expires":"2026-09-08T20:37:59Z","raw_expires":"Tue, 08 Sep 2026 20:37:59 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=/I9sovvjA5lRpHl6gf0qiPQIfUjMA/YUUUmKk1ZEEu+BRC9kY3z9vdA1ZlDpgC42SCQISCBHAVhajDIpINeoRXUdfo0ErWlEml3EPp0KfIjzGsS4RH8Rcz+oOIgc; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/; SameSite=None; Secure"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":757,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":3,"connect":97,"send":0,"wait":102,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.609Z","timestamp":1788295079609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=b18ef4f046435b64a469b32c3c1c20a3 HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nContent-Length: 1069\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1069,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"4d5c6c14b2674fe59b3615d50e3bc226\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.3\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"4d5c6c14b2674fe59b3615d50e3bc226\",\"host\":\"yahooandpersonals.coinbasegive.com\",\"path\":\"/lander\",\"location\":\"http://yahooandpersonals.coinbasegive.com/lander\",\"referrer\":\"http://yahooandpersonals.coinbasegive.com/\",\"sessionPageViewCount\":0},\"context\":{\"userType\":\"c2\",\"visitorId\":\"49c2de50-efbd-4fd5-9513-17f1fc234a82\",\"sessionId\":\"49c2de50-efbd-4fd5-9513-17f1fc234a82\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/data-platform/signals/page-view/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-09-01T20:37:59.353Z\",\"forensics\":{\"traceIdAdopted\":false},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"parking\"},\"customProperties\":{}},\"producerEventId\":\"02202e72-101c-4198-bf93-29567ecceb8e\"}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 60094451251397342532533313119551791807\r\nx-envoy-upstream-service-time: 96\r\nx-error-info: 0\r\nx-request-id: 50cf097d-e994-4656-8478-f7e4299d0882\r\nExpires: Tue, 01 Sep 2026 20:37:59 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Tue, 01 Sep 2026 20:37:59 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":507,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-09-02T01:18:09.909091Z","times_seen":769487,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":205,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.aws.parking.godaddy.com/v1/parkingEvents?abp=1\u0026gdabp=true","fqdn":"api.aws.parking.godaddy.com","domain":"godaddy.com","tld":"com"},"ip":{"addr":"98.95.243.62","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.898Z","timestamp":1788295079898,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aws.parking.godaddy.com","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 02 Jun 2026 23:23:12 GMT","end":"Thu, 17 Dec 2026 23:23:12 GMT"},"fingerprint":{"sha1":"17:C2:FA:21:FD:E0:C4:2D:7C:7C:CD:E7:20:6D:E6:83:33:CA:A6:DA","sha256":"F2:2D:E3:51:E5:A6:AC:9D:1B:38:30:A2:5E:E3:77:5A:37:C2:0F:95:80:EA:2A:8F:58:0C:42:F4:D8:86:5C:16"}}},"request":{"raw":"OPTIONS /v1/parkingEvents?abp=1\u0026gdabp=true HTTP/1.1\r\nHost: api.aws.parking.godaddy.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 20:37:59 GMT\r\ncontent-type: text/plain\r\ncontent-length: 0\r\nset-cookie: AWSALB=RqLs8MXb9AtpZYIgqfEJBkHaw1FCThnIr0ihkhzVvGeqLbYkKWmhORc0VSg86qoNYWSdNFsvDNxm16sbat3hgJlX96lrPTO0qdAZxuC7swTETxYq574e05bY7xeX; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/\nAWSALBCORS=RqLs8MXb9AtpZYIgqfEJBkHaw1FCThnIr0ihkhzVvGeqLbYkKWmhORc0VSg86qoNYWSdNFsvDNxm16sbat3hgJlX96lrPTO0qdAZxuC7swTETxYq574e05bY7xeX; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/; SameSite=None; Secure\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"AWSALB","value":"RqLs8MXb9AtpZYIgqfEJBkHaw1FCThnIr0ihkhzVvGeqLbYkKWmhORc0VSg86qoNYWSdNFsvDNxm16sbat3hgJlX96lrPTO0qdAZxuC7swTETxYq574e05bY7xeX","quoted":false,"path":"/","expires":"2026-09-08T20:37:59Z","raw_expires":"Tue, 08 Sep 2026 20:37:59 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"AWSALB=RqLs8MXb9AtpZYIgqfEJBkHaw1FCThnIr0ihkhzVvGeqLbYkKWmhORc0VSg86qoNYWSdNFsvDNxm16sbat3hgJlX96lrPTO0qdAZxuC7swTETxYq574e05bY7xeX; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/"},{"name":"AWSALBCORS","value":"RqLs8MXb9AtpZYIgqfEJBkHaw1FCThnIr0ihkhzVvGeqLbYkKWmhORc0VSg86qoNYWSdNFsvDNxm16sbat3hgJlX96lrPTO0qdAZxuC7swTETxYq574e05bY7xeX","quoted":false,"path":"/","expires":"2026-09-08T20:37:59Z","raw_expires":"Tue, 08 Sep 2026 20:37:59 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"AWSALBCORS=RqLs8MXb9AtpZYIgqfEJBkHaw1FCThnIr0ihkhzVvGeqLbYkKWmhORc0VSg86qoNYWSdNFsvDNxm16sbat3hgJlX96lrPTO0qdAZxuC7swTETxYq574e05bY7xeX; Expires=Tue, 08 Sep 2026 20:37:59 GMT; Path=/; SameSite=None; Secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":627,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yahooandpersonals.coinbasegive.com/","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T20:37:57.744Z","timestamp":1788295077744,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: yahooandpersonals.coinbasegive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T20:37:58.310Z","timestamp":1788295078310,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: yahooandpersonals.coinbasegive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncontent-type: text/html\r\ndate: Tue, 01 Sep 2026 20:37:58 GMT\r\ncontent-length: 114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114,"size_decoded":216,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"e89f75f918dbdcee28604d4e09dd71d7","sha1":"f9d9055e9878723a12063b47d4a1a5f58c3eb1e9","sha256":"6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023","sha512":"8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0","ssdeep":"","tlshash":"eeb092ddbc61e48018e535511ea3b60d146a22ebb9018b4018c00836a96035f8d0aac5","first_seen":"2024-03-15T21:37:10Z","last_seen":"2026-09-02T01:07:23.556048Z","times_seen":163621,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":5,"connect":103,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csp.secureserver.net/eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb","fqdn":"csp.secureserver.net","domain":"secureserver.net","tld":"net"},"ip":{"addr":"23.44.47.70","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://yahooandpersonals.coinbasegive.com/lander","date":"2026-09-01T20:37:59.611Z","timestamp":1788295079611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.secureserver.net","organization":""},"issuer":{"commonName":"Starfield Secure Certificate Authority - G2","organization":"Starfield Technologies, Inc."},"validity":{"start":"Thu, 23 Oct 2025 00:07:48 GMT","end":"Tue, 24 Nov 2026 00:07:48 GMT"},"fingerprint":{"sha1":"0C:85:75:97:2A:6F:2B:92:48:28:1A:FB:30:8A:C4:98:A7:9E:26:CE","sha256":"2F:4B:65:33:11:10:9D:A1:94:4B:5A:5D:40:E6:63:70:B6:7E:1A:7F:E7:90:E4:E8:F4:4A:37:2E:94:17:64:AB"}}},"request":{"raw":"POST /eventbus/web?clientid=8da2217409854bee82e12dc4ca0b39fb HTTP/1.1\r\nHost: csp.secureserver.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain;charset=UTF-8\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nContent-Length: 1769\r\nOrigin: http://yahooandpersonals.coinbasegive.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1769,"data":"{\"schemaId\":\"urn:shared:user:events:/v1\",\"data\":[{\"global\":{\"traceId\":\"4d5c6c14b2674fe59b3615d50e3bc226\",\"client\":{\"userAgent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"sdk\":{\"name\":\"scc-c2\",\"version\":\"1.3.3\"},\"device\":{\"viewportWidth\":1280,\"viewportHeight\":1024,\"screenResolutionWidth\":1280,\"screenResolutionHeight\":1024}},\"page\":{\"traceId\":\"4d5c6c14b2674fe59b3615d50e3bc226\",\"host\":\"yahooandpersonals.coinbasegive.com\",\"path\":\"/lander\",\"location\":\"http://yahooandpersonals.coinbasegive.com/lander\",\"referrer\":\"http://yahooandpersonals.coinbasegive.com/\",\"sessionPageViewCount\":0},\"context\":{\"userType\":\"c2\",\"visitorId\":\"e8bd809f-42f9-4c46-a56e-65f7732083a0\",\"sessionId\":\"e8bd809f-42f9-4c46-a56e-65f7732083a0\"}},\"events\":[{\"schemaId\":\"urn:shared:user:event:/rigor/page-navigation/v1\",\"data\":{\"eventCreationTimestamp\":\"2026-09-01T20:37:59.357Z\",\"navigationType\":\"navigate\",\"timing\":{\"navigation\":{\"connectEnd\":1788295078674,\"connectStart\":1788295078674,\"domComplete\":1788295079354,\"domContentLoadedEventEnd\":1788295079326,\"domContentLoadedEventStart\":1788295079325,\"domInteractive\":1788295078883,\"domLoading\":1788295078872,\"domainLookupEnd\":1788295078674,\"domainLookupStart\":1788295078674,\"fetchStart\":1788295078674,\"navigationStart\":1788295078673,\"requestStart\":1788295078718,\"responseEnd\":1788295078861,\"responseStart\":1788295078861,\"loadEventStart\":1788295079354,\"loadEventEnd\":0,\"pageLoadTime\":681,\"domContentLoadedTime\":652,\"domInteractiveTime\":210,\"serverResponseTime\":143,\"redirectionTime\":1},\"paint\":{}},\"traffic\":{\"pageLevelProperties\":{\"ap\":\"parking\"}},\"producerEventId\":\"714f5e61-57e7-456d-8253-8a09273ac67d\",\"contentLoadType\":\"hard\",\"response\":{\"transferSize\":1009,\"encodedBodySize\":709,\"decodedBodySize\":709}}}]}]}"}},"response":{"raw":"HTTP/1.1 202 Accepted\r\nContent-Type: application/json\r\nContent-Length: 2\r\nAccess-Control-Allow-Origin: *\r\nx-bus-trace-id: 54924276345076096563902503923440566385\r\nx-envoy-upstream-service-time: 74\r\nx-error-info: 0\r\nx-request-id: be91eace-4a97-4f1a-b990-0b5305f5d3be\r\nExpires: Tue, 01 Sep 2026 20:38:00 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Tue, 01 Sep 2026 20:38:00 GMT\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=86400 ; includeSubDomains ; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":507,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-09-02T01:18:09.909091Z","times_seen":769487,"resource_available":true,"data":null}},"time_used":400,"timings":{"blocked":0,"dns":3,"connect":3,"send":0,"wait":179,"receive":0,"ssl":215},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"yahooandpersonals.coinbasegive.com/lander","fqdn":"yahooandpersonals.coinbasegive.com","domain":"coinbasegive.com","tld":"com"},"ip":{"addr":"76.223.54.146","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T20:37:58.717Z","timestamp":1788295078717,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /lander HTTP/1.1\r\nHost: yahooandpersonals.coinbasegive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://yahooandpersonals.coinbasegive.com/\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ncache-control: private, max-age=60\r\ncontent-type: text/html\r\ndate: Tue, 01 Sep 2026 20:37:58 GMT\r\nserver: openresty\r\nset-cookie: fb_sessiontraffic=S_TOUCH=\u0026pathway=6acb076a-35e9-4320-98a3-3e53ad19faad\u0026V_DATE=\u0026pc=0; Path=/; Domain=afternic.com; Expires=Tue, 01 Sep 2026 20:57:58 GMT\npathway=6acb076a-35e9-4320-98a3-3e53ad19faad; Path=/; Domain=afternic.com; Expires=Tue, 01 Sep 2026 20:57:58 GMT\nvisitor=vid=6acb076a-35e9-4320-98a3-3e53ad19faad; Path=/; Domain=afternic.com; Expires=Tue, 31 Aug 2027 20:37:58 GMT\nmarket=nb-NO; Path=/; Domain=afternic.com; Expires=Wed, 01 Sep 2027 20:37:58 GMT\n_abck=A57AB590B1CB65E6EC1BB4480EB641D5~-1~YAAQiUA2F/w9vSWgAQAAkWOxXhDjMEqqg5zuQprG1XUBsqPY4CeiCYljxThPsTUOykomC93t9ETmy0T/whqKerXXBJbVPtBDHQZrgZnJ6QwNUC2eCV74miydzQZbK+E4Ylhbs2PN+eYu6P63LMBo2cHfVCk/ZPNz6EyFrC4nF8l64Wk3WNhQopwq5LCUAm7UqlWqN44JKiG9Bzi6WLlwSs2jyKRP//ED8Ly2vqbjX50isV+n3DM+MgE3csdyoNGqJ6vLi6DjvcSX6I5DJQryBptuhYBwRliG2hJ/kgOI77IRpXABdbvexKaSRYWJRBG6UPigMr9E8xUkb486aj5oUk1s0bBSaJXSd0v6v7/bSBwDbNt6gIKWsXwGodvzYVqddPdyHfH5nHBLWhaBCYzQ+FQqUDCy4Wwn6ol+qCPMe7QYfy62V4FTlZuJrFgwCJqcpoAgCbjBGg==~-1~-1~-1~-1~-1; Path=/; Domain=afternic.com; Expires=Wed, 01 Sep 2027 20:37:58 GMT; Max-Age=31536000\nbm_sz=8B6C4894C934C90E1FCA6B855D288EC2~YAAQiUA2F/09vSWgAQAAkWOxXgGV4tzWrZ3r3hYUnmCraYySHnw53lHqkCw5UuchmAPlh1AFG6Q/NdLRO6HF/q21cuPO7qQuxCZbO+IAiUwq8YiAdZ2H0CONx1lTqeXISRH3yzWvQuM3GvK233saBPNe2apbZ9vkMJDIpqvxcQx8HBYN9D3GkaXYQL+EtpW5ruCh4vdL8n7k3U282dPmk5m6nYL4JmVboAMiR8NiaJwxQRWy8HJIFMIS91sPLnKSo1hAyDRCoLw2Cf5w1wEOIUbdK5GFhL8m12rv4N4KL8aJSHBsTocoDJOsiKakBykSZt8kXxrT5GyavQz/rIMHb1RugNIWyzFDDNcABvs7fWci5COXc9Nb~3291462~3490360; Path=/; Domain=afternic.com; Expires=Wed, 02 Sep 2026 00:37:58 GMT; Max-Age=14400\nexpiry_partner=; Path=/; Max-Age=86400\ncaf_ipaddr=195.64.118.152; Path=/; Max-Age=86400\ncountry=NO; Path=/; Max-Age=86400\ncity=\"Oslo\"; Path=/; Max-Age=86400\nlander_type=forwarder; Path=/; Max-Age=86400\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_TmOSBkLe6Wo+bKgSRYclxxwMxQmEkI9QJ9tdAE/MpWPSx9zUfB8Z0nnZBiJtFmJkMdoEROYlcH8vi7YCDGNrDg\r\nx-content-type-options: nosniff\r\ntransfer-encoding: chunked\r\n\r\n","headers":null,"cookies":[{"name":"fb_sessiontraffic","value":"S_TOUCH=\u0026pathway=6acb076a-35e9-4320-98a3-3e53ad19faad\u0026V_DATE=\u0026pc=0","quoted":false,"path":"/","domain":"afternic.com","expires":"2026-09-01T20:57:58Z","raw_expires":"Tue, 01 Sep 2026 20:57:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"fb_sessiontraffic=S_TOUCH=\u0026pathway=6acb076a-35e9-4320-98a3-3e53ad19faad\u0026V_DATE=\u0026pc=0; Path=/; Domain=afternic.com; Expires=Tue, 01 Sep 2026 20:57:58 GMT"},{"name":"pathway","value":"6acb076a-35e9-4320-98a3-3e53ad19faad","quoted":false,"path":"/","domain":"afternic.com","expires":"2026-09-01T20:57:58Z","raw_expires":"Tue, 01 Sep 2026 20:57:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"pathway=6acb076a-35e9-4320-98a3-3e53ad19faad; Path=/; Domain=afternic.com; Expires=Tue, 01 Sep 2026 20:57:58 GMT"},{"name":"visitor","value":"vid=6acb076a-35e9-4320-98a3-3e53ad19faad","quoted":false,"path":"/","domain":"afternic.com","expires":"2027-08-31T20:37:58Z","raw_expires":"Tue, 31 Aug 2027 20:37:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"visitor=vid=6acb076a-35e9-4320-98a3-3e53ad19faad; Path=/; Domain=afternic.com; Expires=Tue, 31 Aug 2027 20:37:58 GMT"},{"name":"market","value":"nb-NO","quoted":false,"path":"/","domain":"afternic.com","expires":"2027-09-01T20:37:58Z","raw_expires":"Wed, 01 Sep 2027 20:37:58 GMT","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"market=nb-NO; Path=/; Domain=afternic.com; Expires=Wed, 01 Sep 2027 20:37:58 GMT"},{"name":"_abck","value":"A57AB590B1CB65E6EC1BB4480EB641D5~-1~YAAQiUA2F/w9vSWgAQAAkWOxXhDjMEqqg5zuQprG1XUBsqPY4CeiCYljxThPsTUOykomC93t9ETmy0T/whqKerXXBJbVPtBDHQZrgZnJ6QwNUC2eCV74miydzQZbK+E4Ylhbs2PN+eYu6P63LMBo2cHfVCk/ZPNz6EyFrC4nF8l64Wk3WNhQopwq5LCUAm7UqlWqN44JKiG9Bzi6WLlwSs2jyKRP//ED8Ly2vqbjX50isV+n3DM+MgE3csdyoNGqJ6vLi6DjvcSX6I5DJQryBptuhYBwRliG2hJ/kgOI77IRpXABdbvexKaSRYWJRBG6UPigMr9E8xUkb486aj5oUk1s0bBSaJXSd0v6v7/bSBwDbNt6gIKWsXwGodvzYVqddPdyHfH5nHBLWhaBCYzQ+FQqUDCy4Wwn6ol+qCPMe7QYfy62V4FTlZuJrFgwCJqcpoAgCbjBGg==~-1~-1~-1~-1~-1","quoted":false,"path":"/","domain":"afternic.com","expires":"2027-09-01T20:37:58Z","raw_expires":"Wed, 01 Sep 2027 20:37:58 GMT","max_age":31536000,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_abck=A57AB590B1CB65E6EC1BB4480EB641D5~-1~YAAQiUA2F/w9vSWgAQAAkWOxXhDjMEqqg5zuQprG1XUBsqPY4CeiCYljxThPsTUOykomC93t9ETmy0T/whqKerXXBJbVPtBDHQZrgZnJ6QwNUC2eCV74miydzQZbK+E4Ylhbs2PN+eYu6P63LMBo2cHfVCk/ZPNz6EyFrC4nF8l64Wk3WNhQopwq5LCUAm7UqlWqN44JKiG9Bzi6WLlwSs2jyKRP//ED8Ly2vqbjX50isV+n3DM+MgE3csdyoNGqJ6vLi6DjvcSX6I5DJQryBptuhYBwRliG2hJ/kgOI77IRpXABdbvexKaSRYWJRBG6UPigMr9E8xUkb486aj5oUk1s0bBSaJXSd0v6v7/bSBwDbNt6gIKWsXwGodvzYVqddPdyHfH5nHBLWhaBCYzQ+FQqUDCy4Wwn6ol+qCPMe7QYfy62V4FTlZuJrFgwCJqcpoAgCbjBGg==~-1~-1~-1~-1~-1; Path=/; Domain=afternic.com; Expires=Wed, 01 Sep 2027 20:37:58 GMT; Max-Age=31536000"},{"name":"bm_sz","value":"8B6C4894C934C90E1FCA6B855D288EC2~YAAQiUA2F/09vSWgAQAAkWOxXgGV4tzWrZ3r3hYUnmCraYySHnw53lHqkCw5UuchmAPlh1AFG6Q/NdLRO6HF/q21cuPO7qQuxCZbO+IAiUwq8YiAdZ2H0CONx1lTqeXISRH3yzWvQuM3GvK233saBPNe2apbZ9vkMJDIpqvxcQx8HBYN9D3GkaXYQL+EtpW5ruCh4vdL8n7k3U282dPmk5m6nYL4JmVboAMiR8NiaJwxQRWy8HJIFMIS91sPLnKSo1hAyDRCoLw2Cf5w1wEOIUbdK5GFhL8m12rv4N4KL8aJSHBsTocoDJOsiKakBykSZt8kXxrT5GyavQz/rIMHb1RugNIWyzFDDNcABvs7fWci5COXc9Nb~3291462~3490360","quoted":false,"path":"/","domain":"afternic.com","expires":"2026-09-02T00:37:58Z","raw_expires":"Wed, 02 Sep 2026 00:37:58 GMT","max_age":14400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"bm_sz=8B6C4894C934C90E1FCA6B855D288EC2~YAAQiUA2F/09vSWgAQAAkWOxXgGV4tzWrZ3r3hYUnmCraYySHnw53lHqkCw5UuchmAPlh1AFG6Q/NdLRO6HF/q21cuPO7qQuxCZbO+IAiUwq8YiAdZ2H0CONx1lTqeXISRH3yzWvQuM3GvK233saBPNe2apbZ9vkMJDIpqvxcQx8HBYN9D3GkaXYQL+EtpW5ruCh4vdL8n7k3U282dPmk5m6nYL4JmVboAMiR8NiaJwxQRWy8HJIFMIS91sPLnKSo1hAyDRCoLw2Cf5w1wEOIUbdK5GFhL8m12rv4N4KL8aJSHBsTocoDJOsiKakBykSZt8kXxrT5GyavQz/rIMHb1RugNIWyzFDDNcABvs7fWci5COXc9Nb~3291462~3490360; Path=/; Domain=afternic.com; Expires=Wed, 02 Sep 2026 00:37:58 GMT; Max-Age=14400"},{"name":"expiry_partner","value":"","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"expiry_partner=; Path=/; Max-Age=86400"},{"name":"caf_ipaddr","value":"195.64.118.152","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"caf_ipaddr=195.64.118.152; Path=/; Max-Age=86400"},{"name":"country","value":"NO","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"country=NO; Path=/; Max-Age=86400"},{"name":"city","value":"Oslo","quoted":true,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"city=\"Oslo\"; Path=/; Max-Age=86400"},{"name":"lander_type","value":"forwarder","quoted":false,"path":"/","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"lander_type=forwarder; Path=/; Max-Age=86400"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":709,"size_decoded":2930,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (708)","md5":"c50adf367a8512435f345cd67da1c76e","sha1":"803aa13ce7ff891faa0060b5ec83fe9b1f740019","sha256":"cf1037f1324b45af19445be200d79271403798cfa888ee2b88633b76670aa8ab","sha512":"a2912faffdadcc0c3fdb9c2ad7c9ebfd328ad514be0c4433e7a12d910a033b7f43165c64bb290eb61aab1addef9db8adc149ff0dc4690525b01ac5ef421bb07e","ssdeep":"","tlshash":"5b0170d28c51c61c0ab096ad7a33ba2ea256e1199dd2ec81f5d0103558debe38d4e994","first_seen":"2026-08-27T22:28:31.300327Z","last_seen":"2026-09-02T00:42:34.670243Z","times_seen":47,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"yahooandpersonals.coinbasegive.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}