{"report_id":"b55ec6ef-af0f-46e7-a799-9d557444e9a8","version":6,"status":"done","tags":[],"date":"2026-01-19T15:06:50Z","url":{"schema":"http","addr":"cbmoa-coinbase.com","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"final":{"url":{"schema":"https","addr":"cbmoa-coinbase.com/","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"title":"Checking Connection - Please Wait","dom":{"size":5983,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d6d34dc344fd375c02ecd13022c1e049","sha1":"02eb212a23b2b8b809ff81ba4b9097b9256a2541","sha256":"1c22fef0261390b46630b4c8a8b1fdd382edcd704111734d1bce778110c88ba5","sha512":"85ca4c797d0bcabaee11c7773969051fe9cc151bdafadd06dddd9d46347dd7c1ff3218bb92a34435c1322cc7ec1e22e0d7a48840622053447aafe3d79a10cd1d","ssdeep":"96:KAV2UHZ41a5MtV6j4TYA1zvUhfeZsPG2CsLZ2pb8XgZyTwPUtMINb:128Z445MtuAxUEuPLZ2pIayEAM4","tlshash":"5fc194a73673002a675750945b57a3023535e44722cbc8283bac4358cfe5799e7b3bed","dom_hash":"domhashbb4c1be3855ed7068cd4082fb57f04fa","first_seen":"2026-01-19T15:06:54.931884Z","last_seen":"2026-01-19T15:06:54.931884Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cbmoa-coinbase.com","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":0,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-23T15:06:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-19T15:06:30Z","timestamp":1768835190,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":47944,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-01-19T15:06:30.214202+0000\",\"flow_id\":2167331907580114,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.12\",\"src_port\":47944,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-01-19T15:06:30.209106+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-01-19T08:09:39.571643Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":411,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipwho.is","ip":{"addr":"185.111.111.158","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2022-01-29","domain_rank":18239,"first_seen":"2020-06-08T11:52:47Z","last_seen":"2026-01-16T02:01:16.752268Z","alert_count":0,"request_count":1,"received_data":1165,"sent_data":406,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"cbmoa-coinbase.com","ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":9,"received_data":13829,"sent_data":5066,"comment":"","tags":null,"fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cbmoa-coinbase.com/","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"f606861c34f5495b9af5ea8f053dc5df","sha1":"b5f17589298fb2cad81401cf4d32726444e84526","sha256":"6e1663988c88d28ee6f62ffba7c1d34231db87d536c77846b330f00f5599c446","sha512":"d5caf6b8d17f7e2fbd34fc0e622de425ca97e64abd8dfb60718b210c46ea7b18cdc3ade1edb9ad39ea5f00cfff01e0dc44ab8a021e7a4d7b2f2f02d9d21244e3","ssdeep":"","tlshash":"6171446a3a771139476b20a54707a1053436a04b36c3d81c7b6c4210cfe6b6df673bee","size":3660,"data":"","first_seen":"2025-10-20T22:18:07.378583Z","last_seen":"2026-03-03T21:59:58.35226Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cbmoa-coinbase.com/","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-19T15:06:29.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:29 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":6157,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"465c309c1f0bf9900a70d3c76b8eb136","sha1":"a5b026128fd69ba510a557c6ca5cfc0f7e2927b4","sha256":"2691fca9c20da7f7a3f1110d3f827b9290e06812eab44500a6751d99e2747a6f","sha512":"0a6fc6d46055a2cab6fcf95863a84c9ceacc9441caa5919990dc0effd3dbdf2bd60c0da7f4c55ce561a687c3085408d2345ac19e1840121e2ec6b1769e7a8e71","ssdeep":"96:WG8CxC1f8MCrua5A1RkphdXMdIt2hsLATRf0Fnju5yu:WG8CxCJ8McAvOyZGLATiJyIu","tlshash":"bdc161aa7625101a537752b49b539301f835a45723c381197bac43448ff2749eba3fed","first_seen":"2026-01-14T14:02:50.296682Z","last_seen":"2026-03-03T21:59:58.349615Z","times_seen":15,"resource_available":false,"data":null}},"time_used":549,"timings":{"blocked":234,"dns":86,"connect":68,"send":0,"wait":81,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/favicon.ico","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:30.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 26 Jan 2026 15:06:30 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Sun, 18 Jan 2026 23:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4286\r\ndate: Mon, 19 Jan 2026 15:06:30 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"59fa7b2430edc250c1b0ea17abea16b6","sha1":"e25d35dc9a0a8c8540e6ad00896e509f73970918","sha256":"b590c8c8a13a839331c0d7f640d1c30266a96418f3458f1073f68a7887da77c3","sha512":"ccddbd84a828b35cbe63a280ce112fc2456ce3f3b434996ef5017e7a0e6eb2ba4885e5ddb054ce02c2b137d1ac1106d48c9ff8108049eff539adbbbcc87d2e2c","ssdeep":"48:VCd0O9+JOuaWP99Xed9snYBv+tX9lg3vrymxAaG:M0YuZ9ud94qCU/","tlshash":"999125d60f10847bf209bb7c1537c54e22af2f9468b4a2071a21b4e26ff2c9426f6c46","first_seen":"2025-08-03T10:28:53.204904Z","last_seen":"2026-03-03T21:59:58.350756Z","times_seen":37,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:30.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cbmoa-coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 15:06:30 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c073c82fb274c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":114,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/log_visitor.php","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:30.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"POST /log_visitor.php HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nContent-Type: application/json\r\nContent-Length: 224\r\nOrigin: https://cbmoa-coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":224,"data":"{\"connection_id\":\"BA34F8A0-D498-4805-905B-BFD0B88C205E\",\"ip\":\"91.90.42.154\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"city\":\"Oslo\",\"region\":\"Unknown\",\"country\":\"Norway\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: Content-Type\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:30 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a518312fcd8e029960260cb425787c9d","sha1":"70243a61e561cead0e19dc59da47d66472c41676","sha256":"17863842e2b733b828e2ed24e51bf0300fa77cea0faa3d9cdafb97c8dc32f87a","sha512":"45687db0e83bf665f322226cd21488cdbe825095dd34cc2623b9da492815a1ace652043ec81343730bd6c1042924f182ba8530cbb7133739b349bb216045fc82","ssdeep":"","tlshash":"ea900227050468f69642171574353f4934d551d390c07015a01e901eab1a81332e722a","first_seen":"2025-05-05T15:41:10.547713Z","last_seen":"2026-03-03T21:59:58.350195Z","times_seen":34,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:33.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET /check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:33 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-08-04T13:31:18.140986Z","times_seen":3667,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:48.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET /check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:48 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-08-04T13:31:18.140986Z","times_seen":3667,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipwho.is/91.90.42.154","fqdn":"ipwho.is","domain":"ipwho.is","tld":"is"},"ip":{"addr":"185.111.111.158","port":443,"asn":212238,"as":"Datacamp Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:30.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipwho.is","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Mon, 03 Mar 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A1:1B:17:6A:78:6C:D5:99:94:5A:7F:7C:C6:26:EF:8E:49:5C:8E:FF","sha256":"05:EE:0E:25:74:AA:B9:DA:0E:25:B7:DF:43:93:02:F2:C7:4F:DE:33:3A:75:61:9F:45:D9:B2:50:BD:76:DA:05"}}},"request":{"raw":"GET /91.90.42.154 HTTP/1.1\r\nHost: ipwho.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cbmoa-coinbase.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 19 Jan 2026 15:06:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-DE1-1332\r\ncdn-pullzone: 4617583\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/19/2026 15:06:30\r\ncdn-edgestorageid: 1332\r\ncdn-requestid: 08cb6be56aa6e1767f0b5d87cb5957c6\r\ncdn-cache: BYPASS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":648,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4fafab0de0debe2a9b37032ceea8b285","sha1":"8a959ca7846efb9666f2acf676a7c6a93205059e","sha256":"ae1205c0378f592e16c194d9b88557bbe8f7fba0da6476d8827b8e51eee6d1e3","sha512":"93ecf15b81bbbd8b1d09b56f70ecd513f958d704080050ee9f2ec4913eaea1ab7905f4a1916ed4a0da93236510c83bda28e9e6ce11a470cefd82f22352c0557c","ssdeep":"","tlshash":"92f09e25129dbd5d8a6f4399504eba5a27bcb007e28a598acde91f54c1c46ea704110e","first_seen":"2026-01-19T15:06:54.936403Z","last_seen":"2026-01-19T15:06:54.936403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":111,"dns":20,"connect":22,"send":0,"wait":26,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:36.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET /check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:36 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-08-04T13:31:18.140986Z","times_seen":3667,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:39.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET /check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:39 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-08-04T13:31:18.140986Z","times_seen":3667,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:42.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET /check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:42 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-08-04T13:31:18.140986Z","times_seen":3667,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cbmoa-coinbase.com/check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E","fqdn":"cbmoa-coinbase.com","domain":"cbmoa-coinbase.com","tld":"com"},"ip":{"addr":"91.92.241.15","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cbmoa-coinbase.com/","date":"2026-01-19T15:06:45.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cbmoa-coinbase.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 19 Jan 2026 01:47:13 GMT","end":"Sun, 19 Apr 2026 01:47:12 GMT"},"fingerprint":{"sha1":"F3:EE:E7:EB:01:FF:0B:34:FE:27:6F:93:2A:C9:F0:C0:3F:5C:3E:AB","sha256":"A3:06:38:A5:15:CA:97:23:3F:C8:FA:21:F1:41:F0:B9:EF:A5:0F:B7:04:74:8E:B4:6D:AA:78:54:85:A3:D9:A4"}}},"request":{"raw":"GET /check_status.php?connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E HTTP/1.1\r\nHost: cbmoa-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cbmoa-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=79d76acd58f21c0cf7aef9f43ac882f5; connection_id=BA34F8A0-D498-4805-905B-BFD0B88C205E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Mon, 19 Jan 2026 15:06:45 GMT\r\nx-xss-protection: 1; mode=block\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f6c2899bb01c7306947b98df4122dfbe","sha1":"d35ea1559102d6777ea5920b0084f17197c44ae5","sha256":"a839711b15b8e9862282ec0ed1034f134efb54b5d9969e66ea285babef923d4a","sha512":"82437bee130f7a7680b7b047b16a07065170b31bb204daff6005536ef11829d678583007f6df147c67802fe6f9af70e8861d39eab8d2787d20bc48be24bc1478","ssdeep":"","tlshash":"30700022280800000ac80800e0000230baa08a80002ba0c0200c00288820880e008000","first_seen":"2024-08-20T12:53:41.601958Z","last_seen":"2026-08-04T13:31:18.140986Z","times_seen":3667,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-19","alert":"Phishing Block","trigger":"cbmoa-coinbase.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-19","alert":"Sinkholed","trigger":"cbmoa-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}