{"report_id":"db30e0ea-580a-49d0-86e9-b48e72ae0d5d","version":0,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-07-05T13:58:20Z","url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"title":"Coinbase Wallet - Your key to the world of crypto","dom":{"size":103791,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (20588)","md5":"08f5cafb5ce1851fb8790e0b5270f33c","sha1":"7ef7f0f814dbe2f3e6387cbe9b0d5ac74819a0be","sha256":"8859c144a6aad7e813f61ee460d6a90f38c77c18852efcc96c1af2111b2de877","sha512":"149685806740c0436197caf66116049007e6982b0f12ea5a2d189dbd82bf09fe34dd74e85df84142c64b1159cadd50774b7edefec119481086c9ca5d1b9ae264","ssdeep":"3072:mLAXQ61LAXQ67LAXQ6fLAXQ6y8Ba78xqo:mLAXQ61LAXQ67LAXQ6fLAXQ6y8Ba78xP","tlshash":"aaa33321e3329130639f4a7ef491af1e73adb2039700b8a5792f18d11f4f569a1d7e26","dom_hash":"domhashbef136fe2db54284089e3cf8a23b2cdf","first_seen":"2026-07-05T13:58:23.864014Z","last_seen":"2026-07-31T09:10:09.587551Z","times_seen":6,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-09T13:58:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-05","alert":"Detects file containing Telegram Bot API","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev/key/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-07-05T00:39:06.841284Z","last_seen":"2026-07-05T00:39:06.841284Z","alert_count":161,"request_count":53,"received_data":1885945,"sent_data":29485,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"md5":"e287642630bda473a535226c276ec706","sha1":"34cff9a3a61bce4437369c78d2072a08873b6fe8","sha256":"231e5313792765106eae85a9188b6259c9e7fbb247527430d55544368c84eefc","sha512":"ed80d1aaaf5ee8f3ac3d46e8e8f4df70be6314110ceb6495a6573c21a6db63f243724ca558bac173c39d81366b0e8d730cd03e331917255b13f50855a6272bca","size":5169,"token":"8257791871:AAGiiOGQPv_rC86nImB1ln8uWUodi5_yrlU","is_revoked":false,"bot":{"token":"8257791871:AAGiiOGQPv_rC86nImB1ln8uWUodi5_yrlU","user_id":"8257791871","username":"baseballsgoybot","first_name":"Base","last_name":"","chat":{"chat_id":"1885861760","title":"","type":"private","bot_is":"member","total_users":2,"active_members":null,"admins":null},"pending_messages":4}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e287642630bda473a535226c276ec706","sha1":"34cff9a3a61bce4437369c78d2072a08873b6fe8","sha256":"231e5313792765106eae85a9188b6259c9e7fbb247527430d55544368c84eefc","sha512":"ed80d1aaaf5ee8f3ac3d46e8e8f4df70be6314110ceb6495a6573c21a6db63f243724ca558bac173c39d81366b0e8d730cd03e331917255b13f50855a6272bca","ssdeep":"96:Ubsb0RYM//n/SWJQszfCVaEgiNiNqifis2deUtXcdo+cS+Ol7Kl6iNi8iviH:TCYM3n/SwQnlgiNiMifis2XZ+BEAiNiE","tlshash":"11b1689a36f712310777a1be2b7b62013637d01b3548dd593a9c47010f09e68aaf6bdc","size":5169,"data":"","first_seen":"2026-07-05T13:58:23.983642Z","last_seen":"2026-07-31T09:10:09.605396Z","times_seen":3,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-05","alert":"Detects file containing Telegram Bot API","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev/key/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"✅ Telegram logger active - everything typed, pasted, or copied will be sent with detailed info!","filename":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","line_number":324,"column_number":11}]},"http":[{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/mJdT6qQYwWac.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.954Z","timestamp":1783259876954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/mJdT6qQYwWac.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uUCFPMoO3faTIwDzOQSbz%2Fsnb1JgoHV96mL0j736%2FQJ6ZTtbXUPbmvfjME08NLqnjtTKb3BeqzJLekHPiUWHpbZ2UKnK7yZPzaqAohP3jdEkpPUnxBjaKSWCaOg7bcZ6DRrMyGdIG6eHQTIxg7AVb2cEM8KKmUS2ZL4P1IZ%2BAsR1ihzmLTVpRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3fe39c02189511c720ae6f8beb233469\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6fec149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6352,"size_decoded":3786,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5216)","md5":"0fa854d76250c203ed7058375bbbff26","sha1":"11abdd12797076dace90b307d1db6da4dee74fbe","sha256":"dbbc5e2e9fe6c0f9d2bc8e05729dfacc911fb758492f2a4ba8a29d7e3b86cbda","sha512":"ae7f8ea392b7feb4c36bdaa1d66cc483161e9a74b2c49bbb134304b1a63b45ef27fd9121e2c0281a16f93933412b7943c4e6ad71cfc61330a66b7abb2f877463","ssdeep":"192:J2AFJGrWnNIkTZSp5jtamznXiZgweZSnu++5WOOxNmx:J2ReQvhfXGgweZwt+QOOxNmx","tlshash":"4cd1f99eee793c15f745890061cebdc9201ea7d32cb112c89ecdb2c49d651ad3bd112d","first_seen":"2025-10-23T12:35:27.435406Z","last_seen":"2026-08-06T06:42:12.246376Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/SudVPGxdk0Zm.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.879Z","timestamp":1783259876879,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/SudVPGxdk0Zm.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 40632\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d6ef84eb81bedc9d1187a307f6eaa091\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Id3k1UknpnqKjyODOpTCqwAgBxdNsWpfZ%2FjIYspHyEz28%2BtRmGgKXxyCU9RSXg1c%2BPy9nxSGJ7iZ1imAZ0GQBaCH9qQSqMC0nYvIC4x%2BXTe1Rgohvzn17OEWypOUN6eJeB7Q7yQV4Q7ap%2FXuwKLC7I2koMhdsT59gnGpEfgPhH9eJF4OWJsoFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b67d3549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40632,"size_decoded":41421,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40632, version 1.2097","md5":"62bf1b795c1ad225811afd9715abdc90","sha1":"0ddcce99464162ee676d81ac4bba9dcb001aa40f","sha256":"881387e5619f45f03a99e2fa88a752237343c0bef2414425c3219031653ce45f","sha512":"f59286ca8381ea5f1c29ce03b2d6baf862adb0c0b124dcfd9363fbe214da7e739f86c863a104f3b37942359c45a9a039d6b759c3f47a9745f7caa489ac2cecaa","ssdeep":"768:7ULSNCQzC5hiA5z9A2Y76nwuLRhVGviFiqSbi7cpR:j0iAZO2nwuswiEM","tlshash":"c703f1c427b02afe5e86347ab4c351497bea1814914b8b79405546feb07eca157abc33","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-13T19:03:36.252882Z","times_seen":433,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/E4K8obPfFZte.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.892Z","timestamp":1783259876892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/E4K8obPfFZte.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 39128\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"bff9f3fc2f4043acc05ccb243a082ed0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BbUs65SYvvvKxnckdbs9fGzghRf%2FoAZVx0rVk1Xdw6DOtWa%2BL6oW4VtES6HIwXttrmW3fGVCLYuTqLmHVpKQNJbWUzTkIiPN9OqoP5h0Wgb6Fjw1nNzVnVSSqhBRwq%2Fr0ZpAFQiyKI0yRsAnaMMv6seggncytft1OpuLI1E1ehPd%2B%2BzanjnKPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b69d7549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":39917,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.2097","md5":"d65a3b1d9255924adbeeabac46787723","sha1":"2f5d6025d09e81ac0a6583f050560013f2b3fcce","sha256":"b2943cf448795751c6a309662c5237904fcb74e31507271deb64437350274b8d","sha512":"5e993defeb28e2a1332a02a017fd096a2b5a5d7d9d5294959e5bd8da51ccdf6b5bbc1b568126a89c350c43029d0e43da49fe14d47f85c6f2e45e87eb2d28e455","ssdeep":"768:r9ukWoIxmQnMtkdq0wReJL2N29X+bbzkoWy2ptCC8m5e5mFLEVy3:r9u7xmxtkAzReJiFbE42bCC8ceUFLEVQ","tlshash":"1f03022fc4b1f3e9a0d05cb96a3733d9e8ef1654318bb75138ae1ee5f8d69061209135","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-13T19:03:36.314218Z","times_seen":613,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/chhnZabe3lrp.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.895Z","timestamp":1783259876895,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/chhnZabe3lrp.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T2AtGKPz1EC6pRW4HyyziaRkn995BYhWzoUV0mx17Kbh0IHC5qxWvqyXgbadIORwz6H3b0PiqQPykFviDRLucwXMN4ZgnrTfwE1B%2F4%2B2iBuhYQ7%2B1w%2FR1EsuozOwCR4BfLjB8Za9L3B37d39pdFOD%2B7s7QIFkABwowcSx%2BbUc9mK9wMxS6QpqQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"799c95adf135c32b81b96cb5edd6567a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b69d8649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45007,"size_decoded":15700,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13132)","md5":"92058c6bcdc8d21065dbadd7a9ed1862","sha1":"688dbf9d12c05c7fde75c71da2dac2543d14c032","sha256":"5902589f00d4a847db87afda36a04c8c5bd646bb32f57d13ecb62303c951ab01","sha512":"5b6a11a434f2c5f440e4498b995ee832c4ae3c5e1ccf840446b2a0f5eeb72eb31e137d13df0336d7f418f7f678be64337f021593a06dfcfb4be7deef82baa3fb","ssdeep":"768:OnM8FSV2fKWdM4dg1ZV/qmBsY41ZRFTyqxA/2ZgQPTWHQ9UXexnKT4dWdpPthJvm:OnM8F/KAdg35B345FTLK/0gQP6w9UOx/","tlshash":"4c131adecea83d59dbd40616e6cf35eb021d63c72cb1168d2548abc44ea998d37e403e","first_seen":"2025-10-23T12:35:27.344396Z","last_seen":"2026-08-06T06:42:12.242347Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/sXHNE8oUyi8j.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.902Z","timestamp":1783259876902,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/sXHNE8oUyi8j.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FWXpd5rpUvSgmW4PL20EZmndChsv24fby9xugY20HAN%2FO4vWYyBOZAI%2FPA7lVvaOjEudc1Bx4lM6IndyxqNOCh4ReEauxH8A2RiCLS8XweZuzU%2FdQ0DKQMa6G0oAzAnGjo5ylyG3CAaDCHQw6T0xoEb71Bc8bw7Qk8OI1XEb4UFWvvDnC%2F6GiQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"37e4c221f39ea44aeffc06d1661c736b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6adbf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29239,"size_decoded":10530,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11764)","md5":"014bb91e54e9bcd72bcdf6efdfc98ddc","sha1":"79dae5fecf99988f98086206ee24627b1be17328","sha256":"16f3fe1adffb182421fea598d49eb279e04cba8f364d2551f2522eb59c2d75c6","sha512":"73d90fb703154efe101ce34606eae68aebd5d77382609ba9797cb1360fc14fd26b79792a86391af6b1e6a4fcfda4c03d42a05627f8d1f4bf6ec925b862e4ffa0","ssdeep":"768:8hG3GqO0yfMMVrRsOH+lPpHLq95JFZSDUgkcf9Z4J0b:8PEMhRsOH+bsUDnoS","tlshash":"21d21aeace7a3c58fb85091aa8ce66e7113e2b931c31254c885dfbc44dad45937e427c","first_seen":"2025-10-23T12:35:27.331114Z","last_seen":"2026-08-06T06:42:12.196834Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/7FxYPc0yPsTB.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.924Z","timestamp":1783259876924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/7FxYPc0yPsTB.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nRmYB7QIYMVMmZL%2Bfk5JhYKzowJ5qBotUSxKFWWspeoaouQqGnJGXBfh9cfzrKgENufjbk7V6xb0N1ioo4QFsqtoQr5CnVzZ4ZcMRY6b0ItR6cHE5SbyB10KJfiuO8kszwZH2teORaellOkPfCp1yBtl8VG%2Br8oc6r65o9eddaztdIM9neu5zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3ca03f9d8644d8cf4d3766b8b3cb1d87\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ce3549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25068,"size_decoded":8889,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13876)","md5":"15f462bee0514f1eb8ad87908f4ea609","sha1":"883234d4da19f1684f22d98b936ea0a16e1d8fa5","sha256":"269f9c836bc3ff6bb2d75b8516bc32d7cae3491d0b66817664638a872850d3fd","sha512":"15e0aeb50b25a8a0fbbaacedd38ead7f4538bffbd2da80cf4c7e29d48074b38082842886677e93e38f5cb4f63a0ccdad6391277db5313957c65164614eac1076","ssdeep":"768:Uq2XM+ZE8PblDRLp1CnQuiNME67s5X5qBBiljwGI3Jjzu:UzM2E8PblVp1sQuVE67kpqBBiljwfzu","tlshash":"73b21ad59fe93ca9e7da000b65ee36e3411c67df2c6208dd484cbbc4496d48e2be056d","first_seen":"2025-10-23T12:35:27.389399Z","last_seen":"2026-08-06T06:42:12.223535Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/KpLFJQYpFcdW.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.926Z","timestamp":1783259876926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/KpLFJQYpFcdW.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w407SCcsYh2RL8vEJ3t4c43d18YKpQt%2BTGAOAuCO01YYM1lZ1N%2FpMijrNzDp2HKUpoHqAHaDu2Rj1BiRAxllIBKW5I9isI3XGSP935%2FDMR2oorEa%2BI0xRyd8CT1U%2B%2Fs3ReUOSUXjNMB1pyggX1Yj3fuhT8efmNvfPLlKG1SowibPCG8W3LesrQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3eb9a77473d2ffb4aff3cd3f54e4be0b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ce3a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10172,"size_decoded":4276,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7284)","md5":"9c0efba34f734744b0addbab680a2ac1","sha1":"3cd19baa9604f774e48723a35f4afe0a7d81a9be","sha256":"8982b129a4e9370c087d4e27ad133f88e168363eeeccfe7f827cb474c5aaa3ee","sha512":"c0dfea24a318fa5a8c66b73c06f28dde07d9a2c6f75ce912a66e858cb57619f48f4413cc8434a5a4982c35d90026495637cfb2887f745a02190f661dd2820e4e","ssdeep":"192:rfbdhgmLI+JAdTkRwvjfXtTVnlOoD3WQJ8ufY5k2:fdhgILGuCLf9Vnlx6QJy","tlshash":"272274c9df2c7ca58f4128ccabdca9ea503cf3021d321a079649a7860adc5cd76e55a9","first_seen":"2025-10-23T12:35:27.333061Z","last_seen":"2026-08-06T06:42:12.235196Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/NTAEFjdcrLrI.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.943Z","timestamp":1783259876943,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/NTAEFjdcrLrI.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zujsqTyRw1suAySGEttsuTULkE8e8q6YSHShqEo8e4UrRY1kaXWia0aUgBumApz5WfCHQ7nRDcaNBhj8a9RIz%2Bd6wodJtQ%2BODzhe4GT9LcAIpA2C%2FpJzDfaE7YNVEre99d%2FBtDi%2FSHp8iXdB1ZBWcqB972zmu%2BKq5mS35ZRDKGIj%2FFfiwsPSpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aa54823b1702f6504c1d239501e5cd51\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ee8649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5447,"size_decoded":3636,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4984)","md5":"c4f566a4cf012141919d55ed839e5ac4","sha1":"e12f145f759c0e621f5128034a0c719200c94ffe","sha256":"d04c8716f1b4d825b1ded945611e252f74573f75aa1eddb6837ea83536e7af02","sha512":"234df68dd03039f6702fd611a3efbb6bac6cf9758f0992533e684d9ee26795a6ea16a58218f45ed31a325333e1265803837b9dfd62355dd971458142050af1a2","ssdeep":"96:AdvWtIrdcX4vyG9rWqp1fdROXofsjoYV+uB0pZCjQfhfDLGSNfbnFd:eWtI5cyH9CqPdV+V+u2uQfhfXFd","tlshash":"23b1f69a4f653a81dbda550d93de7ec7023d96932c321adc6a4ebbc906190cc2ae015e","first_seen":"2025-10-23T12:35:27.360455Z","last_seen":"2026-08-06T06:42:12.221679Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/bKxMmPCRwHXo.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.949Z","timestamp":1783259876949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/bKxMmPCRwHXo.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zM4YeXFGM93eihOJ5Z3B0ULm91XiB6djHLojYrjmsNPu0EteK%2FXQGE92fBHq%2FimWBbfsGJT2q7wiltx0%2BSgDB6A1sxs22pY7BljitSF%2BS3ETjaV3GFAw6i8yd7qADW71Vx0sYzfKpv%2BgJpK%2Bku6g4ysxgYDWSRMy08kld23YTqEp55qkxXBSfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"96e98f01d26f848c83257bc289760cea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6eead49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22620,"size_decoded":8858,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (17484)","md5":"aa1e0327555f441a5a0b763ad1309131","sha1":"75c657b9a3042b957ea070a467c3e99c0bc531e8","sha256":"8ef9a57b0f8c646d250fec6ce0ded936bec73a0a25c70232bdad653e28353656","sha512":"4d0449c370e99b6204c25c06e7e23e80490593146d20869126d3298599757e9037411041a79cd670f530c4caf84f5681707e620d00a8f0c207603212731985fe","ssdeep":"384:vucC5Dc2QaSf72ZwyX1TZNb42ZRvP021pbD1tn39P3PkmBBRh4NHzc58lH6Aap1Z:vNf72ZwgL3RvP0iJtPfMNHzc5EH6tgIB","tlshash":"2ea2e7dbdfa83d19efc5450676de29d7401da3971c72008c590abfc18dae54abbe023a","first_seen":"2025-10-23T12:35:27.407084Z","last_seen":"2026-08-06T06:42:12.200653Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-05T13:57:56.454Z","timestamp":1783259876454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 0\r\nlocation: /key/\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0%2FelT1lLi5NPGmdJXGIaAoipBVt8jeca13VliHro%2FtZIz58Ko020X5WXwTuCyxEG1GJIUpTGasxuAG3zv7mFeBbXjYXOi5PFL4oHd8NNt%2BqKcny9LyjFqQSoTnZYrTZVyr%2BbUCj5G7Fg7y2Svsgt3tQwJvmZXqZUlomTmmlrmofZss%2BAnpRKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-ray: a166e1b3fdb649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-13T21:51:57.324612Z","times_seen":17876576,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":7,"connect":12,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/xTrrLwgWfQTo.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.894Z","timestamp":1783259876894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/xTrrLwgWfQTo.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DmhAe8nEpKY%2BlmWp48FFoDhqM%2BLz2t0sR01eGdF%2Fb%2Fr30tBh7x%2Be1CPeVfARsq2B%2BSLr4yziuDK7bvMIG9S9l2piA0lQHRabSqsSkkkyIlTzumWfL4OEbr2ywahoZg6a9WVAsCSTQ6%2BNdudwrhi6Z9A%2Fi2N0JPjINt6STXPf5JQszUG%2F5mbKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"328cb7d28b7ee2782b3843f723961bad\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b69d7d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":361587,"size_decoded":80218,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (12255)","md5":"9b9dc7fbadbdad43be0831a7b3cb16f5","sha1":"0a14c15e814d74dadd5b23a1d588388347c7d79b","sha256":"b5feba42c6777dfcb9500824be515d703da8e689087201eb452025f8d0d496a5","sha512":"5e0043956db1bee96a5ffa5c43b63c5f9fe1d48acf6c9f12fcfd2ec2d3c035a98310c23a5f3568574c9f6e241dc65b0324982ec46aa8bdb290092d34928db4c2","ssdeep":"6144:5qxq2SV53pu54d6/n8IQiU3sZlCUDf3vS18+QmCcqe9Xhcabq10WvT3cr46oouiA:v2f3vRmnqSXh1q10IT3cr46oouP","tlshash":"1174c4deea01773cde3bea1513ddb6ec5108b71b0d5106d6e40276114acbbf66ae202e","first_seen":"2026-07-05T13:58:23.894572Z","last_seen":"2026-07-31T09:10:09.594953Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/xU3LAWcd2ylT.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.915Z","timestamp":1783259876915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/xU3LAWcd2ylT.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wDtPRm%2BM6BrMajvspfRjUyX4DH2B%2BXSucE8lcK04PRKpfU57tFQhj8h%2BEgZiPH0JmdkkNbeRSsdi93JEvhZrkdnxw5vPl7ziNQdN5dXJl%2BRnkeV1CTOPb%2BX9kr562UucmXvGuI2wemcUCgK%2FY0fFECX9vqQ5CmayrPsR4ZVJCngteL6iNNdQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"087492ffa990b87f48ce0e3e6cdb5c2b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6be0649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14635,"size_decoded":6013,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14484)","md5":"053252af6ac0f15afc4b02524af9c3e0","sha1":"5a39192f1e649bb158611af74736ff1dc854497b","sha256":"8b9138ee9a2f47e71d3a94c21378cb395b7d51c5dd037a5318b2b7b5e973b415","sha512":"73f25de1b11bc59630a99598fd9778b89ee1f932123c9197f8fb31c538603b5e155ae5bf8934086adf3527f2437fe98a9cca57f72edf5a0254f9b29752aa3099","ssdeep":"384:8AyRFVzZh8IzZgchwqJY7J5qfZfTafnqZetONZky33M:+wEfzetakK3M","tlshash":"bc62f72eaea93c48f7850409a1cf21f7d25d43cf382159ad598dabc4c49b6cf32e47a5","first_seen":"2025-10-23T12:35:27.385659Z","last_seen":"2026-08-06T06:42:12.21109Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/bPLZSOZTaW18.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.917Z","timestamp":1783259876917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/bPLZSOZTaW18.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4uqmRiU63gBtxLbESiU0MvyjScCPwaCtGYxkLfY081SNXKWd43AGYmxIaUbWKT16OHkB8DG8Q87Jauu%2FgD4dtxGnCWSUP0YQklK7MD2%2BYCS%2Ft3LMl%2Byyv37ZJO2Wvx4jcUs5KMd4LvTPsnuc4%2BAPdaquqQWNqDAxoUp6taNafBwUpW%2FLINZNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7cba3c14542b7e7a937b3af1a85fc61c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6be1649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2847,"size_decoded":1189,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2810)","md5":"aeab1850ab7b346a05c0eeda3e1a46e7","sha1":"6cbe08db3c0b7406cdb1c212e699a68446dcd0d2","sha256":"eb8ac1dd0881450ba52e14e610e3ceb5e3bcf5196af43cdb912c9cf713e45317","sha512":"b5f17cb85802c6d363b8476a7826fe353740ee8299de284db612cd76ecd4d3bc712294d8bc17f83b00949f59393daad3c1eb36ded5b09ebf9300e6426093505e","ssdeep":"","tlshash":"6a51d9cad708e9a64a027ddceb2cfeadaa38f1000e331b135649176b1ac99de34565d1","first_seen":"2025-10-23T12:35:27.414593Z","last_seen":"2026-08-06T06:42:12.243958Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/oB9a0UPurYjp.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.922Z","timestamp":1783259876922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/oB9a0UPurYjp.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cI3njUIi3ApOgtELKbaheeQbh7z%2FRdZHAub9C56Dl3740ClEAcCJUuWCY8UaaAPolSku%2F%2F8zTmnZr5vkEhUZI8Gh9ZY9hBUq5YIzVwhbnuBOSKYEqNZXZjlMZTenuMlpzPSL6eC9Wo43rlcSWoFNo%2FZhYy7FBC7vUqCnpL9ixWyirn%2Bmo0Ta7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"87ee9e4c03e3d00decc252d008743288\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ce2649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45557,"size_decoded":13846,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13764)","md5":"412d765364af02ae19d344e697a9c9b2","sha1":"d96bbdac0b95d3224443a10d67c00c67c40c04fa","sha256":"3ee16afe5011a62ce68f3bf1916913169b99eb46539894c66d7064d848ce9e7e","sha512":"6804707cc8a05e56a9403bc3ef136a148d80ee263e1b91de89afda2bce8828fd341303d34d647e507976a8d125629a6edc0e14b2f2218e5829edf6c4f7b71d67","ssdeep":"768:hgSHWvPZT+aoOqG2YGNCr27cXEMiOObKlUwXtRTY8RuItKtYX5QYx+z7r0DgCqU:hgSHUPXjxG0aiEMLUYONClx+PIDgCqU","tlshash":"671318ca8f993c99df8309495bdd61da012ca3471c32244a990dbbc54ed94eebef016e","first_seen":"2025-10-23T12:35:27.433656Z","last_seen":"2026-08-06T06:42:12.241546Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/bC5PNcfIf8MF.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.931Z","timestamp":1783259876931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/bC5PNcfIf8MF.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zt3268uRbGDdIferkcZPcfcoiSVbUPk%2Fa%2FV2i2GSpX%2BkzttcBAWsIZFDQeMKWmBiWO8Vn1uWeblV4UcXVxa2osonBeqMch49v%2B3Z4HqDBb9%2BHuIDL8FdBKGWP73FddsRBvsxgstbWCJHfX6zYeUqXi8HIOPQW%2F5AlLiKONlZV%2FA8S1nDaW44MA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e62934c06cb3f33d27404673bcbd2b85\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6de4b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17454,"size_decoded":6464,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14476)","md5":"f1a835b32b4e871ce1cc07f3526d6891","sha1":"1af0b61027694763a85ba4fa624cfff9b24e7e05","sha256":"e80418907948c65e90125dd1077d1f008fe4897aa4352f88990c05358d2eab84","sha512":"e30ceb9bd0c0abe64f72c665e7a6a03880a2021738781afd3dfe972cd28d64a7c26f0a2c24c03d9065de924d83131911c32ca151666d71615cbed45e08b29ef0","ssdeep":"384:OqLKIbBQTwE67HBnzkt470mj9Fpgt6eYSJi5kyg2ywGlzaM:OqTdwvI5O2yVlzaM","tlshash":"f472d8c8cf593c988f8269cd9bed7adb121db3071c32295b890c6395099e4de72e05b9","first_seen":"2025-10-23T12:35:27.348892Z","last_seen":"2026-08-06T06:42:12.224402Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/images/egcMsRVyBQiW.ico","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:57.322Z","timestamp":1783259877322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/images/egcMsRVyBQiW.ico HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:57 GMT\r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BeNQqudIakHi8bkbGTMsnMt7Qe3T6NnVS%2FLoEh9iSN2gjCu4YzZITAxmtK6orUDtBHdpCywwlEftskpV%2BEsBj%2FjvQaVfjJqWSJWwydtYZ4k4floGhMCLFwAtfm4TLRRUfLczRSOewYoU4Q%2BImNqeGY0GTZVGejzDofN4x9Shr%2FN6Q1It5%2FT2zw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e7b3091ce78df48775180365aee64293\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b94e5c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":624,"size_decoded":1448,"mime_type":"image/x-icon","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"a5f23baf6db0edc9ab9d0df640ab61ca","sha1":"dc540821ad889182fa5d498f94c12578fa40e436","sha256":"dfa5b7342e3dd601604618771cb8f292b09af005c18a5050514fcb1ffa5ac070","sha512":"490fcdcfbcdb1d3739c43441a0b50b4483c2c9652d5574bade6467b63325f2866a6d5a9e5a2d507b20f79355b499e4ef293341d4265b778f514f22f2e5baa146","ssdeep":"","tlshash":"8ff002a72052bfe0cf045169116246c5cc19c1693822d1d6a57bfab518b0a2a04a4e56","first_seen":"2025-10-23T12:35:27.436762Z","last_seen":"2026-08-06T06:42:12.226887Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/VSFoQJA9uhp1.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.877Z","timestamp":1783259876877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/VSFoQJA9uhp1.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 40076\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"207927c37f5aff3c1cc796373c82988c\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=306Ea48MjhUO0Ag3PJhvWdX%2Fnv%2F9kC8aK0lFlA75efWoiVsbRLRpKPpUFg968fccjq7zRI1Cql2zNfJixmb3LWJIOm32wJOZ8xVg2kPJGN%2F4Efckst%2FP%2F884NQfpMMENyDgJHV3xG6OjhSU9eHZdnRFqrJbh%2Bg0ePxSyeKCtSeeuSLsiR2oiPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b67d3149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40076,"size_decoded":40867,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40076, version 1.2097","md5":"88e532b2f6f58aac7f1dbbd3b4731e92","sha1":"e95841b0fe50b87199b4abbfd2d10563896e0688","sha256":"a1f75e7f702059493bb74cfcb3178d095b3f6da4d313e92b3ceabc3e63eb914c","sha512":"0c5a54e3bcc57152391a87ddfe4fb3bd13271f2bb0a2aaa605da649f86b301d9ba603c359315bde13420c83651b5e266d6269f51eb5c1ab43823f8851d09b574","ssdeep":"768:UZJnqiM79PCLTjpjMz6R1T1laTnl+rNvatafqvM7B1XOv:UbQ7kly6R1ScQ4iYvev","tlshash":"3e0302b7d657282df92f5fbd6e4c81187840491770f787528a8f2066c162cb8f56fd09","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-06T06:42:12.232854Z","times_seen":1171,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/2lULBGJKZgz7.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.880Z","timestamp":1783259876880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/2lULBGJKZgz7.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 181080\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"9d6930a77c244d62ebe0b1017e96ffcc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ftz9hc7hba5HnLF1R6atqJbaSB84R4tFWlnq%2BB3zB9%2BbLQNyGT2%2FpYLYWq6chid2VD2j%2FLc4JAP8V2LSNhyzGOjf7mMy7f1CK2%2BV99sZqqSRS2ERemeIyobMNWLMSHOIpGb7yWXgS1eytFjCXc%2BAWe2LdA33yC%2BaMZnK0Krd%2FhvaejxgB7uTMg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b68d3849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181080,"size_decoded":181876,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 181080, version 1.0","md5":"412e3817abcfdc90ad260ede6a70de7f","sha1":"db699a9700323d01c0b1395853bcd0cfcb8f2d54","sha256":"0b31eb2cdccdf326b5cb371c6c706a85f5b0927332d0f540c3f98d45920d797f","sha512":"eb959c80cd477187ebc04c02a67fa2e0592c4d5745175a16a43b05facd5c560a335433db7f458522d9c58d74142fba8c51db970906caf106aae7c8e4be510836","ssdeep":"3072:01OVm3NPXJrm1SRgg7P/oDqXdvzQ+cRzu8eUREe1f1KgHc/89:0jNfSGgKIDqXVzkRzu8fRECKgH59","tlshash":"53042225a2d2dcf416df3792d318a20cf59eb37981c324d7969dc2b8065f6725e890b0","first_seen":"2025-06-08T03:26:07.757609Z","last_seen":"2026-08-06T06:42:12.236772Z","times_seen":107,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/JWC5ZvejoiXU.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.882Z","timestamp":1783259876882,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/JWC5ZvejoiXU.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 37592\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"52cda14b8a73945e9180cacfa3ed3caf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYSfF60MpPsoJlMo4xaUH%2Bjip3VzVtaiFcNBmKcMq%2F9bgeclML0yPk4TXutnB84wlSUh167b3I8JrSpRMV2sGuwCnWG9O1AC4wyEJ0I%2BIQVEUNpI0%2F6I2BoweuIKoFFmbPxPCsjp45%2F5r8ObvAw7yoPI8lq28dV9qY2ESrWvk%2FSbSHNKycsZMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b68d4749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37592,"size_decoded":38383,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 37592, version 1.197","md5":"2007516c393c0e57a0d19598e75de0be","sha1":"df22f511688b26e008989a1c0caa85b4fe056d14","sha256":"f38dc2c8af9fd55d70e23ac1f52f6633d601dde1c97faab684f490520adc2229","sha512":"ad46fe8793922bfab71fde9cc8fb1a0e1b53b7192d1206363f640c75519151b70867c2d3a5682a5cbf5d5cf9e3bd14c99d36b61c9b2da51152a2c265ebd0f673","ssdeep":"768:T6ukLDWwMNOtUcp8mvxP7v4AXmpmiHJlMpblrowxSaFfLrzNnTq9E885n:Odf5JB8WZ7vLXm5HJipblzFzNnTqE5n","tlshash":"bdf2024134a65542e37c107ee14bf1e9da24e0825c5f1ae31e7442f9cade16f51a372a","first_seen":"2023-08-13T06:38:04Z","last_seen":"2026-08-06T06:42:12.248862Z","times_seen":43,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/KGTazsVMBkYn.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.884Z","timestamp":1783259876884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/KGTazsVMBkYn.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 40016\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"4307a3ff4766bd2835bd810a36b45b67\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2FPNB2StrVbb9e9qVUB4xnpla0jbSGrwR2juf03t2k%2F24DShdI2HGYr4hFhxCVFpdClAgO%2FZicJF22OpgHbtFRAZuGiLIKOHeuTZpFESH7BRB5keQyggGpYNHR0NfUIv2qnAFxYxNRRaS1c4L26qFtqlUswhpOw97dPjwOAGC%2BntVGGDwYMrng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b68d5349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40016,"size_decoded":40803,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40016, version 1.2097","md5":"b54c6aeed882bdf66df4e5fac9c2340e","sha1":"b483fbe25190262b648b390c11e6bdf9fea33edb","sha256":"81368223143520415fe7fbdc3792d2d52ad7e422d8b214661ff932afe577b779","sha512":"3afc93e98b6a5a756a0e0adfc5d04da8258cbf9065fe4a90673d3193baefce1fb9867fc235dd953a4dce5a2b033b3d1f4280f20270db913baa0f72a3a73bf804","ssdeep":"768:acqYNePjaM2LJWNjCEa18ryDLCIZJFxucAMXM9tcrYecoNj46FSc3Xy6mjLk:a2NePjaMG3CIVxu3cMj1ebx4aSc3Xnm0","tlshash":"8603f1e3a36799e3dfaf54a575c21eac1a1044d765a3afa9d5f2024730d2d0d54031ec","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-13T19:03:36.286462Z","times_seen":1514,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/Ne3FaDc9toNs.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.899Z","timestamp":1783259876899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/Ne3FaDc9toNs.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VtfGVHXf9P%2FFYGDZF7rI%2FD%2BfuJh0pEqKFLwp98UU0MKlHp389naaUjTvc8AwirrgC8j4p9hEAYni9EcG9tE3QKsnNbPIybvzmz7%2FCCH%2BzIV%2BX8Qm%2FPs38a9aaHoaVnX1N9AoCVoKHTO6RQfnRpm4996Fcce9ybYM6NuB4o8LwbQUgezg9Bmakw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bbb042c926996775e605f4577681cb65\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b69da549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46404,"size_decoded":14619,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (19708)","md5":"a47b5775136aec6643863a138af3ffcf","sha1":"a4c6d1021dfe4872c22f954fd712508d11f998a2","sha256":"644c623839744c830488313fc7ce3d73464863c27778664604156c4dcc5daa1d","sha512":"004515d7d2d963af64023334dbdfd9187bf66109abd2a8c2a1dd85abccd29168c072869b94630f33f8ba6929ccd60ae5862f49f4817299a392f70a9fed6ad6b4","ssdeep":"768:NPbsr5ug2gFdxembn0vXHWvPZT+aoOqGM6KXHWzIrVJaA8yi3E9mN:/gFCa0vXHUPXjIX2zeqpN","tlshash":"ab23e5ce8eae3c45efd5080aa6de65db402c678b1831045dd94cfbc88ca949d7bd423e","first_seen":"2025-10-23T12:35:27.410558Z","last_seen":"2026-08-06T06:42:12.227478Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/loBctUnt05S4.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.906Z","timestamp":1783259876906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/loBctUnt05S4.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6xgq62RfT0E8lEV%2FzkH67HYA1sCA9w4s3SsAlXYGQ6xa1XxMpTwFE%2BDcwv7IY3Z0DhtqOWf1xqBbvxfRAcejm8xmGycu%2BL0AMN7kevzl2eBzNyBakFFGtNg4pImCvDHD1gWAZ5xwl5yMtI1Yr%2FpssjGJX7FuUYJQtQLKbZRXIFF%2FN8hzaunCGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"27430c91a084ccbe8d3158b9fd6f8d4d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6adda49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6799,"size_decoded":3944,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5976)","md5":"6aca882fd4375d19dd5c2a3bb5a27cd6","sha1":"09c42b51689cc2d04eedab16db6a7ed671d6a684","sha256":"80f2b7fe1e2b41ef91cd3a2fd288eb6116796205dd268faae3e18e2d749390f5","sha512":"64a6f4710dc53b097a4bae4ce67a79043431fb24ee5edf7d43ff7397461800fb9701d2fa7a19b6de0906d9adcdc920283b40efd80276d94aac733b1c908e6172","ssdeep":"192:X7JL7cHPN5SkKEwFKFolDBdDHLYhqTH8psL7A13:KvzS0wtzpyQlvu3","tlshash":"c8e1c4cb5f263dd4ffa449094acd26c7402d139b18b2206e194cbfcc95a9489abf553d","first_seen":"2025-10-23T12:35:27.372037Z","last_seen":"2026-08-06T06:42:12.220039Z","times_seen":13,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/PPRw3ogUK970.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.913Z","timestamp":1783259876913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/PPRw3ogUK970.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCJU7QgoJlNm8%2FfT80Ni3ecGflaJ2Wtw1VIRk43BxGIjjFuTcgI5QTaeolMlt%2FkU3Nltj%2FflS%2BUhaImttzeSIxRV5oyR6m3%2FTMQdnAim9FnQspdhjzS6RUxFnOPFQyPaTQIkU%2Bmt%2BRZFkXwPqIDBE1zyZX0dPBLD5lVnBvf%2B4hFRUQBFfNy39g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"20ab82c02e40f5610b2c4081d2ce797c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6bdfe49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28533,"size_decoded":9891,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23168)","md5":"2d7cf7786e05f3e23ffd4e5c27d54bd8","sha1":"d1eee5f94478dcd9bef43ab868b40db14f57d784","sha256":"098cb22cf90fdf7de76b471642649989eeffa742356b10a3af9932003c4d80c9","sha512":"07d54af61c8f442c1fea75fbb948df9ee4c7e26501f79f024e4589769235b5299c07d717205bfdd3ce98891359fed9fe7dd7ec6cab9c4ab521a433e63d803a3c","ssdeep":"768:3AANvIRtB//5qvAiEvzEDJv1hWTgzK5EL5PuOoNo5:3VIFpwAiEmVWTOKAPSNo5","tlshash":"72d2f8d9cf697cb8efd5810a20ef54d3122d6b5b187124ae908db7c84e7d48e27e062d","first_seen":"2025-10-23T12:35:27.393933Z","last_seen":"2026-08-06T06:42:12.239168Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/0DqqsjGKxFF1.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.914Z","timestamp":1783259876914,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/0DqqsjGKxFF1.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hzn8ia0Ggz1ItJfcz1Jfr6X09FpuCpO4zcu6gR%2BKL94YLmOc2g5vXdMGnfD2bpxQBp8jI%2B87kp8EIiwUQvvnWq9hN60KSMEUbBmEdmCjOH4iXprhisRB4wZpUfwPpAtCj%2FtDxgCbjfnThiLNHt8qXGoRAiWrs6lY13SunxiEhq4xklB0z7Oz9A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a1457b84ced17e340da0c74aa38a470b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6be0149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65143,"size_decoded":20479,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8924)","md5":"b2650c39fca7a183d5b6d619770ae7e7","sha1":"d73882e55993a9b16c550c6f2654c1bdac86579f","sha256":"ad6ff2800dd0196033d6b7b938198d4e54b6fd5c2bca652a39a340bc3daff6e4","sha512":"1b75bea52f3b410ea2e0ab62c783e065537efff9bd74c6acbdd5fb40dc9622f9b253d30c94ca9b37cf5644825c3bbc608205394b60d9c8f08fb01a03a026449f","ssdeep":"1536:3mwLwWkL1QmDqYy5VdW5CxQ/p/IqzAUXOD6SzamyHAuV:3d+LSmQQYCUyLS+V","tlshash":"5e533acede6a3d48fbc4050a65cf25cb415d77872c62158d9a48fbc84daa5893bf023e","first_seen":"2025-10-23T12:35:27.412695Z","last_seen":"2026-08-06T06:42:12.23997Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/0bArvebIepcU.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.883Z","timestamp":1783259876883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/0bArvebIepcU.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 35268\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6cb3e2060573cf39153569416d04b7d4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNGrZKaDkaMmhTaoAzDQB3wcl8aSaKThfuWb8dt6igCtKSWNbFKe2FcutV3%2BvHFYUjLpzz%2FpB%2FQug%2BfS4uUsBpPT%2F%2FXw%2FXTMQMi0cjVJZvRbAqn4rApnz0i3rrorVpgazp%2FRTg7umal%2FVQ96Fqq3HiKWWacCQGkU7EmA6mBHtKfsIz%2BbhZubaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b68d4e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35268,"size_decoded":36067,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 35268, version 1.197","md5":"d7894037d2647ae5cfaf2c464fad4096","sha1":"d065233a8aa95ad1d70753de8c40caff51f92572","sha256":"718743b9a883d19a9a315ae3b11413a9a2deb42d9c8f0941cda8f9cc472f9308","sha512":"e4cebc926611479719dba83066341d8cb991fef37d01bece6a7777a6020db7e59198783c29d20453e6b083ef4743d8ba2dc72167cc2188931a345bb24b1e4afa","ssdeep":"768:r6XSCH2LsoVAbbg8GuK0hobBw//lO9s2o7lJk4cIgzuwdDExDg:GXmVAbhGuK0hoiUO2os4cIDwdDExc","tlshash":"8bf2f2b4f3c1f536e22f2d73224491d2aef7b469837889756799c4c5ca44720c50d6ed","first_seen":"2023-08-13T06:38:04Z","last_seen":"2026-08-06T06:42:12.205776Z","times_seen":47,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/l3HkRzsWmFt5.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.889Z","timestamp":1783259876889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/l3HkRzsWmFt5.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 40480\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"d43b8c193f02095d776969c0b247de43\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9F78%2F505%2Bwld5gZDkCUDvveZUfvCHFvpwwSXXGeYs3EjAowUa0bgmfAlhTGh4d2WGZaHBaGg2ZvwARDDRPdqbWqNZ1SwqoyobhcD32MgP35ZnUJKJEYQWvxPQM6ZB%2FxzupAWMvnznVUKupbQ7xEOi4C9JCLCNbygyQG8cFHBQjUloXoYmwlV3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b68d6249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40480,"size_decoded":41265,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.2097","md5":"c9a6e887656f7b1014db3f1a07247ee2","sha1":"371f6e5792cff6d3bf6122392d2403f05f1ca445","sha256":"5db56ddf9ab991fc7a3a5b188b6b0c92331213ec4991b71d9821c36dcbcdb687","sha512":"8544191d90eb82b7ed77b813bebb04c918677dd206f37d151db7ee5f34feef64afee26b0ea94398a64a8aea0d8c6d8613dd1b106eb49142a485235e6e19e2710","ssdeep":"768:Czw/1p285wfUizBtYzRe195L9i980ZzsDTdPALCNVb872CEzwZfkAYl:tI85WBtd195xi980Cn6IbT9ws","tlshash":"810301d9265d774ed88b863709c227308ce889d6720be1872bb4a18371e6ec8c625fd5","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-08-13T19:03:36.196515Z","times_seen":1610,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/kzkke8wpSUV7.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.900Z","timestamp":1783259876900,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/kzkke8wpSUV7.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PlTY7hBaJQfsTVZ8opiJWmI4Jg4HxkKVxmk4BICedf5oDGYdmlQzn3Sw7PVVricrh5W4TVWDJXCGJ3TNreUoHTsy2fUjFGO98%2BHyXMMERRI79J9t2lXFpxDVtb0sPLWPdhgHp4cLzL%2FSJxMkQ9t9QwyUMtMs%2Fgw5Flkqz7mLNlhpV2U0FJPe5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"be358bc32b99f6a8799290f90f74fdb7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6adae49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23346,"size_decoded":8695,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15560)","md5":"262598515f758c812e57d8782e111b28","sha1":"6a44fafe2535b56387324b1b11bc3ebc14833414","sha256":"e785e3a657f5be802a7cd2785eecd0ca2b40c29c0080efa7c5c7863dc7bddd76","sha512":"72cb8e77317de5ec8c3e5445443a7e56c7dbcef3392aa8e6e3c240a10205c473c5105c78c84bb007d980d95ff8043d6f761f25bbf94ef3eb40b19f20551545da","ssdeep":"384:3OuOQ2s3y9KFxy3g+sJFTC+XWmBwq+RtGZZWwIILhVPf50vl2vMR+Wj2Mk1Ba+tx:3q3y1WmctcOoGVj291E+tnQurMsR","tlshash":"03a2e6cacf887db8ff54450aa5df24d3414e130b2e62046e894e7bc9489e9de9be053d","first_seen":"2025-10-23T12:35:27.428579Z","last_seen":"2026-08-06T06:42:12.238354Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/BswcZKlGce31.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.904Z","timestamp":1783259876904,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/BswcZKlGce31.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m7x35LhbQV4rWPo1iA4N5hz%2FMS3J7mULc5XcjHm0uwmcVStuNUcHSyfTHz4dT%2FJLlqb%2F49qbjk0gcSlLzoijOiGV6%2Bs6OCZVwCXE1aUDhkCojefpY3Tpz87AlV%2Bd9Tl2csGbNbO7UxrdH44BIdcXjYPTnBQJ6jG5yt6WtLVhbY%2BZqOrL9L4Mig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c372b1ef7dadcbd420f9f03dd6908048\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6adcc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2847,"size_decoded":1189,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2810)","md5":"bd0d9bf8dd08849baa785317001f1754","sha1":"bad30563f92539a53d5974818338dc164bfd4e1c","sha256":"125bd4704c9abfe11713ea90c89df87b1655b0890b5df9155c3213b51a5b2d68","sha512":"dde58c5e95457586998f63cd481d455b2f0503265c0b36fc97b9eb38299ef43b12eec098fbf20719ab4e993b6d8ef6f5c6afd64250f623678e1aa4dafb6e47c8","ssdeep":"","tlshash":"9851dacad708d9a64a027ddceb2cfeadaa38f1000e331b135645176b1ac99de34665d1","first_seen":"2025-10-23T12:35:27.34138Z","last_seen":"2026-08-06T06:42:12.219161Z","times_seen":13,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/HnI2b6HFAQ9Y.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.909Z","timestamp":1783259876909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/HnI2b6HFAQ9Y.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6C937HWeYI1RGix8XRpG8XnHQGRnNJgK5z2iqfNLAPLjdnLKJ4NEvstqEhRBKFIMbmvfd5I9YmH2LGhqX9sYnKCaIxfaBd3F%2FGMfGePY3CO7uSNKIkWNFFvNq2Iaqu%2BxFBc8sXxvf8RWpV3gw2eWmyQQ0PYe5qyBmYFuMFBRdYdxRyL9IDOBgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d6270fe630f94f181e4338ea0d3db725\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ade349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52287,"size_decoded":16145,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (29320)","md5":"0f46bcb2a630f7e36678f35308fe421d","sha1":"ab56fd9f9668559f47bb2f82bd9335e9e304f81d","sha256":"a339c32993b644b2ed08c9820bf8a04cf91469d59038fd51dfc13fce812dc6ea","sha512":"71a6d8ca567f44379144ac4b7d372582f1dbe00374bb73f755d7cfbd0700f03ff23e9e3eae40c430d9879d65da237f7a2463c4d6b257511290184701f070b41a","ssdeep":"1536:1RpY/aFwWk4XUKi922zD088/WHmPYfjDspt6nF0xcnI9Z0WMzXO:1kCg4XUKi922z8/WGPYfjDspt6nF0xcg","tlshash":"983309cece6d7c59ef85494e67ee65ca410c73972c32299a860cbbc58d9a0ce27d013d","first_seen":"2025-10-23T12:35:27.342655Z","last_seen":"2026-08-06T06:42:12.228018Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/0SzCFdT0vshP.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.920Z","timestamp":1783259876920,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/0SzCFdT0vshP.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OnR%2Bpn8FLpK977d1PZNnc1npYto8QRKlPgxAsIspFZQyWv0%2BKHRqJE9oQErS8QQuNVqSS42cOr%2F8JjDMfzikoFVlp28hJ2SG%2BvFeb0trljTnUFb8ZYQ2MpdmIPTSFq%2BlycA2WaqHtn9v0gL%2BiAeHfLz%2F0a1xnO35BxEnfaIBGoAoe%2B6rI7q01g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eed6dd2727679a46d3fd0ede0f16f4be\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ce2449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3941,"size_decoded":2771,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3080)","md5":"5d6aca23cbf9a15516273980107cef1c","sha1":"0a8434c8aeba632a545b477391b0c4023739d7f0","sha256":"262aea2e6ce3e869df0b9342704a9fd9c724c9e910c554838ed287324912cebd","sha512":"8d15fe39fe405b6a7c88fc35519a04dc872ba44a3b327b641e06652ceafe4a89df5d0d34753d615050e9906338b32530f9291279dcc9e3614b9ef52985ab6cc6","ssdeep":"","tlshash":"1381f99ba9543b44c85bec0097ed1087401de58618a126cd5c8abb86cbfb5c617f12ad","first_seen":"2025-10-23T12:35:27.367569Z","last_seen":"2026-08-06T06:42:12.240736Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/ZGfQxteEAUGd.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.930Z","timestamp":1783259876930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/ZGfQxteEAUGd.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jozYflv8Oveo%2FTgUqH99ZcU5Qeog536Pz56dM18ROlCsv3aR5APnQVjA%2F7BkDVDJ7YzI3VMJLiPjvGESDk3D1W1h9bOpARC3iaAWF%2Bah6e3Durn12AU5ymlQSUcA7WsbNFWm5WxtjSzcanoznB3yBI%2BaitWnYAluj3e5YAOslfGrTTEGqJhUSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"21d4d69a6eb158cc4c3cce06145f69b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6de4749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10172,"size_decoded":4272,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7284)","md5":"25660c22686821bc72b7729bc830cb40","sha1":"5cfc98c7d3c67107a64303e6a54067256b9fcfd3","sha256":"c737f1055a0d6d7164d8e44428e549810bb33ec87d46552d1f2e2d7f68e43552","sha512":"16a47af8bd35f056a7b8eb7b2f6298a3d360689cbbab76d0f8e076cda404776be48bd33760a37f5977d7548298a3789bbf13196ef36bc007f28dc04eeb0e319e","ssdeep":"192:rfbdhgmLI+JAdTkRwvjfXtTVnlOoD3WQJ8ufY5kb:fdhgILGuCLf9Vnlx6QJv","tlshash":"122274c9df2c7ca58f4128ccabdca9ea503cf3021d321a079649a7860adc5cd76e55a9","first_seen":"2025-10-23T12:35:27.395559Z","last_seen":"2026-08-06T06:42:12.198771Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/LHap1R50Pjsm.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.944Z","timestamp":1783259876944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/LHap1R50Pjsm.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WOBQz%2FdC3m5yL1Urhr5KlAvuORsehol5YoGMIxlDg7C6jpy%2BXDB1D6stLb3nRC1h4J7%2BifgFe3CdL04jJJXa%2FjNNpkM4Hx2mPTgl3UVeAvXWCFxTVMxQ5VKVy8t8N9OFkNdN90IeGWn6wwdO1zJvBWkgLoDb%2BlIjBtEfBUbNbQKyF0q0UcNOVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b349ac2aad21555d7f4fc550883bdcc5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ee8d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":1218,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (617)","md5":"1ab4833fae307a232d192b56e0a472c2","sha1":"3b72f0b27b70240d26d1607f90ce62a65738ec4b","sha256":"8477677b9ea7201dd150726666d87e65db96a556f800af9b4d1840db0ecb5c4f","sha512":"7c83604e61bc3088c6efbe587627da665b1e884cb6e2b6ad57113ee0e89a749a8db737ddf6cedcdf3353debc69fa9f1b6f21597cd9e27ddaa483483291847f98","ssdeep":"","tlshash":"b0115b7a817113acee13ec2d1f68828d9095e032990513ed96432528cbcbbd05e9268a","first_seen":"2025-10-23T12:35:27.418937Z","last_seen":"2026-08-06T06:42:12.225874Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/BbOEcRCMeIrm.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.940Z","timestamp":1783259876940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/BbOEcRCMeIrm.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E%2Bm%2Fn630T3v5qeOPfI87yXxbK6aaZuHp%2FXxmRCN8%2Ft3jDGEOUjqhW58Qb6qclrufJ2aTKHFLBUSnIIL0TxupQUmmSgdlMIn2iKCiP24xHPLjkIY5ubPa3GCRU4I38xr1b3fVjqxAXA4n54GOnAWvZq5Xpv9qbB%2F1qP4cFAZSD1BmHCq9GZE4Sg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9e16fc205456e656513830b739a8374b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ee7949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1011,"size_decoded":1442,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (596)","md5":"79f454abb9fb420733c9143cf64ca589","sha1":"4c2cd817754546c1bf67cfe768e4e87b66ac17c4","sha256":"895ab643c7cab092029ea71662d926f7f9442258a556f02c37793ebf96391176","sha512":"c68868de1857664b730632aa910dd04cdbafa47e45dbc8cc60b8b9b003cbec041a97a3f460ed74e160c4a38d53d84a9cce107d36b1f610755e7664069469f3d1","ssdeep":"","tlshash":"511121aecc5318d6dc15280d3b8c6955413d34eb9ab15a93f1943b8b2dbf5f2b050a4e","first_seen":"2025-10-23T12:35:27.417089Z","last_seen":"2026-08-06T06:42:12.229489Z","times_seen":13,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/Bj99Mzsc6z9f.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.950Z","timestamp":1783259876950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/Bj99Mzsc6z9f.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K07Tm74C29owFh5puc0lI3lS4Ker5rmGwgLZpSHvZVjUWLGm1LWdWqOnAoJpPIRrINJVNIKXDfiB21I%2BIkvyXTugI6rc%2BjUT5ZQ4W6H6Yhkaqk45q2oE8tLgiwbK0Bd%2BAK11GI2Q2MMtwzBJjdjQ9UjzHFka%2FvoJ1Iocyw9AfG4MlB4b%2Bng0FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"224a395696c410a7953b3f1c76b16556\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6feb049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34863,"size_decoded":12037,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27540)","md5":"00ead715ad667c66085a5eb21af41f93","sha1":"9b78cded25ef5d6164af8f4d90b1279b5c9c0dc3","sha256":"f67152806f46b40bab8c1bc6db73b16ce96ba66fae817791038d7c48f8eb09df","sha512":"af876723031ee2267808689e4c47827e82f88a4d05c96c0b4a93bd27a2819b85bc0a20b8c0f99f2f537c47895d3d195419ce4a10806e1b1a491046f563c212a2","ssdeep":"768:+dxembn0v2uS/uGPYLvMCht/CrASIHq66NIyMhE:+Ca0v2uS/uGPYbXpHNm","tlshash":"d2f2d8cecea93d4aebd4640961de69c7910d53cb2c722999d88cfbc8487e58d27e013d","first_seen":"2025-10-23T12:35:27.363192Z","last_seen":"2026-08-06T06:42:12.226399Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/QSp1IIBEFhMy.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.952Z","timestamp":1783259876952,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/QSp1IIBEFhMy.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2Bhqpjm38ztXt%2FxSkEBw4mDHWyucnpr7%2Busw%2BvtOXdHkHatunFmjjeUopdPsI6BRKVsK7CY%2BBIlHO8k50CCeMz%2FzvTkudSkEAM%2FJc3sZaF3sElgeXY7PcgwPThvI0oyPNhSO90NbqyZn14d1ff8rpBMFz7KuvZ7AJ6ByVwuwoi2V7AAF7uX0Pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d3e97d2297877f60fd31715cd75651ae\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6feb649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18704,"size_decoded":7684,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8660)","md5":"38e95352f07a1b5c8c0cc3720ed80429","sha1":"7e9f37e5db5a86663f1f02a3914ccb070403b28c","sha256":"6a1862caefcd61e8d4e4bf61218cf0ec086465f99f3f83e502270495570a09e8","sha512":"9606991b21970b7f08b731aee528192a1952acb32792e28664c3e7c6598497e9fd1a27de23a6da31eff96ffba1da472d557bbfcd44aef839951643c7cb701768","ssdeep":"384:HzREVuX+usQqmsCOR8m5sBeb7ls3uPlSbNyM2qrmR7Os3lnEY3L4dYSzaugyJU:HziHmTOuHYpS8qc7Os3lnlYvA","tlshash":"0982d78e9e9a3c98ffc5110ba5cf25d7502d278f1872149caa4cbbd94c694893ff022d","first_seen":"2025-10-23T12:35:27.421153Z","last_seen":"2026-08-06T06:42:12.214427Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/FxyfPKWBJ0Xr.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.956Z","timestamp":1783259876956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/FxyfPKWBJ0Xr.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yn4AfRCkQ4vXwZy5fvIuMp5sc4l2EOWDexHVbAyo6yV%2FtwmjYRxjIe3LbfxzR5idFyGFnqZFJTai6ew5WpqIJbhuhak81ZrNpIqbgosZ2BbY6Gr0847YqkxzieuHqnt7kZkfz8ndiqYgPI0Ndn5LPjk5rN7NIhbEU3W7qpihX7CHOm%2F2goC1cg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec5b5bc2219259e6e6b8798b214fdd9e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6fec949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5472,"size_decoded":3128,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5372)","md5":"f4980026a3a3b66258949cb5dd38d8bf","sha1":"ba4fa724a84b93529a0b3e4dd2e7363a717c8462","sha256":"431bad37233786ba410534fcc1fbcdf32ec900e438814f302b4445afdafd5d3a","sha512":"2c8a557960a14ea6454c858f6e7292dba5269697725c51d7fc144f2ad9b5579ec3fd7b7ac6c3280e04314ea4469d52bb820a6433e86e7e0bdb1e792556cbf56d","ssdeep":"96:xgIPKXZvo6PB/KQn9AN6S8DBLvJFpK10w7lwWEbkZO8VU8m:xxPUvo6PF9AN6SmLvlS0gJEbkZO8yd","tlshash":"94b1b81eaf5a7ca9ffc8041975cdb4db116cab972c23064d89097bc40a6d6ceb7e006d","first_seen":"2025-10-23T12:35:27.338218Z","last_seen":"2026-08-06T06:42:12.232048Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/BOksxN7AT6n0.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.957Z","timestamp":1783259876957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/BOksxN7AT6n0.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YtIcMPmm%2ByXSPLmCrZtWnL4nQxbjtsoOrj1hMF%2BAoMz4lisD5dQb2r5f%2BrkIY3qnfQbr0rYVTMxzLwQEgVKc%2B3kQu%2BZSF0aND1JxI3JCvWw9NhI65AfLQ%2FK3otaQH6iDYUSsV%2Fsh2mGAuRSRK0dVhzPM97d2AGHDChSELtNqBQ%2BWBST%2FhgblWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c8699f6a5be86adac50e05549c30bcf8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6fecd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18181,"size_decoded":7567,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13060)","md5":"09ec0289888b2af350f201e1a67b17d5","sha1":"4710c3f492f9da85bf84e0f07d00f6f2c4f591fe","sha256":"b389a33a398a879104b0c0f3161c45074b1cae90b405b3c629fe1e2d1eea7e0d","sha512":"47990c018dbeacf01de467343415c48e12473bea8ba96a9eebf7b21883a20bf44660d3063c982e277d3a32cce239e3b23f3caa5a5600b386b12fa144f4c0e1f1","ssdeep":"384:vucC5Dc2QaSf72ZwyIH6c91tiv2LjuzEVLtChBZWm4iWcrDE0xoyQHI0/yC8:vNf72ZwT6v49Vl4WcrhGyQHI0/yd","tlshash":"cc821ace8f683e15fb89550576de35c7012d63872c32168d5a0bb7c48aae58a77e023f","first_seen":"2025-10-23T12:35:27.366049Z","last_seen":"2026-08-06T06:42:12.202572Z","times_seen":13,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/b1At05W4QIdb.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.918Z","timestamp":1783259876918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/b1At05W4QIdb.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YnTYsl7TexXWOE4kgPZrbedFPOwsveTv1c7uER1LxpqMC0yyzYUQWwahy2yahZyE0lE96cGWDwELONPeERGaGIad68ToN%2F%2ByzMxDO%2Fc3AYCPFAQZ3AHFILarXD1oQaIa7LAL8MX0Rk0bVGHJ3TX4OV0N5FWbimDuykfC4luorAzVewyjyDS1sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7180a5bc0cc466b303ffd7f8915fe87a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6be1a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2847,"size_decoded":1183,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2810)","md5":"4d1d7abb905621eea5adfe1cb73cac10","sha1":"06d8b4983d0a5b08c03a198d8a1dc9612f0c87bd","sha256":"3e760460a4e24e920211ffa8949277f348ea7301149d7dc670e173740de35e51","sha512":"630e8a4eb775814c29fa1a2447e43a84af925ee92e3aecee4892087f4ee2b50d1ddb2a148d9eee2381e5511eec074af782fb7146f2ffa9c0353af096e9534375","ssdeep":"","tlshash":"e151d9cad708e9a64a027ddceb2cfeadaa38f1000e331b135649176b1ac99de34565d1","first_seen":"2025-10-23T12:35:27.345953Z","last_seen":"2026-08-06T06:42:12.220869Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/1wJMwe0zMl5c.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.938Z","timestamp":1783259876938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/1wJMwe0zMl5c.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=njCtgOrmNI273EmLkMR5fzfkZv9KaQgKS2cnLim3eljWUFsmcBk3%2Boya%2FJdf6pIMYnZDnfOg5CNeKUmxkFsiA%2BdMx%2Bcbmzg7xJ%2BAeXFVlBkvLy%2BPEnUKTTdZpewzm43hP4sn9Wqvj659idmwYh8Uorz3F97Dg%2FHBB%2BBjdKye69NtWqSOtUVJCA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d25568a2cc1ab6b364c2d2206e4681f3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6de7149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24467,"size_decoded":9187,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10292)","md5":"0303f73f5e6ad30aabd52c18e7381e82","sha1":"a161015d23f3a4fd037e9d072cfa0e35e3d0c44e","sha256":"e15aa0ffb7b004fc01685e20dcac43265b5be582ef19db4eb53a666062eb5270","sha512":"b726fe3d5591174a15b9751a30875c3eb342f85517ad8c385d08ffa120aee761028ffa23469448811ab8b059cfb9eb3725e91d74883df68fcfdc6b6c5c9c1912","ssdeep":"384:gE56tiOObHqlJCwEeJpRmk73SVk2EHA2ucZlckzK2tFVO8RVKTIJw5qr2VNtJCXU:gEMiOObKlUwXtRTY8RuItKtYX5QYx+zP","tlshash":"2bb2f9c5cf9a3c55df8646091acf21cb020e678b287319dd160ebad41a6d8ed7bf016e","first_seen":"2025-10-23T12:35:27.402028Z","last_seen":"2026-08-06T06:42:12.225247Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/4lBlAqCvmPjZ.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.946Z","timestamp":1783259876946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/4lBlAqCvmPjZ.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybvCPJzQzuQmV9GaAILrvQH1RNy%2FU8uVhg57NY4%2B6Fv57Y4GM8vqAY1QTEc5gAbtqTN6XBvLE16f%2Fc%2BWBWZnKj6zJrEsataupBAhS9m04tyzwZ7Bw9%2BLhxIBrQzBIf6Fa3dRzrIU7doLB%2BSrw92bKkcC9VQ0taC13Joqc3qjVrdjykeZ66klpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c5c47ffd878603d5e67a79c79333e6d1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ee9649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22661,"size_decoded":8596,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8528)","md5":"1fb701fbdd5cfe4590784a056f8e9ab3","sha1":"46a9eef9fa201c00de923b1c9330b7ef8df0e624","sha256":"d23679dcea91dfa7d4915465a7026a2d682e7496ded2aac1780c0f64752b7210","sha512":"62b432564a99d5d64a47329ca14b3db50be4f4c5b1545cf3bdbef25fbe57071e1b982795cc54d2ab2c9ab40f1bc648dc946a69dc4b26c2e6262010bf94dc68e4","ssdeep":"384:n/TOYWEeg8W0DkOAkOdDkOAkOdUcySn+gFt8dfke1mqbvrViFY402nsa3I10f2JN:r0kOAkOBkOAkOPcfkozrZb7a41ZRFTyA","tlshash":"46a2e6cd8c1a7908e716078a8bcf26d6112deb8329711dfff1d46a898b656cd73d012e","first_seen":"2025-10-23T12:35:27.351641Z","last_seen":"2026-08-06T06:42:12.213338Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/bEUVG25EXKDc.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.948Z","timestamp":1783259876948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/bEUVG25EXKDc.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjM1HIvFyv7Plm%2FclF4A9nCy1lxR%2B0Z1wdki%2FGY29fDMd7RUVCdTezc48Oyy17uqGTBi6p05T%2F1qMEC5Jma5F82c5GTPorpqiCBuvxvp5g1Gxvs%2BLkLWVFUHA3ZupvxFwPAU6z9fT6kMrewwxtyTcfy%2BTyCTsoe59n8L5SdZUp%2Bvn5MIAU14AA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c62c0ab40d695a71bdff5fe67a4a75a7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6eea449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1966,"size_decoded":2028,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1308)","md5":"3d60dca6d0fb399ba8a7cc30270dec8c","sha1":"3aa185b1c934d0b65de3943d82c6af49c6d3ffcd","sha256":"200040ed5c1c8309194871b407e021eb0f96ec08e559f5788835fde5253cd58a","sha512":"6d14d7c174afbb67d41d24193e35571fee2aea44adddbf6b1230c53b9a78c898f4287582a2fe424950d20c045de99d35e32e1d5e0144d66f6d3da8cac9efbdde","ssdeep":"","tlshash":"d341b85e9c613476ce378e07e2c9029b0028b7933e73104fb70c6ac44995a9e7271f1a","first_seen":"2025-10-23T12:35:27.404657Z","last_seen":"2026-08-06T06:42:12.245593Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/SbGP3PwYgWSB.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.958Z","timestamp":1783259876958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/SbGP3PwYgWSB.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IIkikVtRNZWmlS%2FPIMrIs7MzxnNp%2FsIpPVJoiZKs%2BGzqSP%2BfbOjNLekkb6t7axP5DqnYHi6IyXnl2HmmSrXAGF%2BzvBjsitcXO0YdRM%2BAluC7a8bWVkVH5TfJaPee%2FaSIfH8f%2FgqMmK5xzDeE%2FjztLpNi1WGFCUVygSAv11mEPn%2FCtwGdq%2B0iSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ce9223147c26c43ae68334c69e006ba7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6fed249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13155,"size_decoded":6128,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8360)","md5":"c0c1c006053f1e8a9a0eba8b739a9799","sha1":"6d17af22a341076d8c3e79e25bcd04677030614c","sha256":"2796a93d53170ec2be0e2c908a8b5fecc3fc0161eb000c1fae7b6654afdf2272","sha512":"fb4b58e5545f7cd249c98512b79e8d1ecec7ec7c49eaf1610601965c38384fa43f8aff323aa6082a343d6c4e0cecea4f40a7616987e7911a61c3e14cea2a7cea","ssdeep":"384:vucC5Dc2QaSf72ZwykoCzOQR/kUZ2p62Zp6oO0oYQX2D:vNf72Zw/Z4HnbxoYI2D","tlshash":"c142188b8f283f46fb95010636efb9d7011da7871c3106ae5a0d7fc546be58967e012e","first_seen":"2025-10-23T12:35:27.408759Z","last_seen":"2026-08-06T06:42:12.215777Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/RHKoOp1GgDp9.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.960Z","timestamp":1783259876960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/RHKoOp1GgDp9.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BdqyiBvO1jLhILMVHQBBtYY5LkoVGUpCUQJbSw2eKFZ7L4as%2FbxbiiTgY9qaBE3OFwOcR5qXsC7Tlz2axATEU3la4oNz%2BvLYTl%2FLMYiXMPbbWHVe5VMU4Tzwjx%2Bv18PX8Fl%2BPzik9q1LcQQIbMjt9fIbeEmOGRDL%2BaoZq3uxDqzgQ47S4HTqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a1ad25a87c88a95a754452181641cf05\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b70edc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42905,"size_decoded":13587,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16968)","md5":"6a192e0c7873ec67c53ce987549ce785","sha1":"73e8d376641d723d52a00b65c6010aedbd975740","sha256":"11d0b7c28ae8c4f95808109eac6ef5d3f91e3b49d06c43c608d9ee9ca664037f","sha512":"4a6abe34f5d0b5e43a90a55a309621a7e82d35e2d4d1e709dedbcbcfeb0b3341aa33cd45808d2c89a9ca9e69b17d496b8045c6a6496b924749f5c8defb590f0e","ssdeep":"768:vNf72ZwJ0kOAkOBkOAkOPcfkozrZb78G/movxCUJMzHjtz8p3MdRvRemDh/ezrh6:vEqCcdbn/mOxCU2PoORCwp/","tlshash":"95131ace8e253d49eb55064a57cf25c7012ca78b18721dffe988b7c98b6968d27d003e","first_seen":"2025-10-23T12:35:27.422845Z","last_seen":"2026-08-06T06:42:12.247204Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-05T13:57:56.501Z","timestamp":1783259876501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/ HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2BAqb9k%2FRDUUh1iQM9qXqElKocx3skT8bbxoFKP4MMd1NSqkXiBulsyrPX%2BQKNADP8YXUysJpn2mNiy0E6nc0HSJFHSeKTU5LfBVy%2FFT9g7o3WR49GF7o%2FOaN%2FbtHITCe3Lnj1jbGeJr8zTB8X%2F44ebcUjbFVN3aXct%2FgeFo4wUF5Y80tT2vmQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b42e2349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103791,"size_decoded":10874,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (20588)","md5":"08f5cafb5ce1851fb8790e0b5270f33c","sha1":"7ef7f0f814dbe2f3e6387cbe9b0d5ac74819a0be","sha256":"8859c144a6aad7e813f61ee460d6a90f38c77c18852efcc96c1af2111b2de877","sha512":"149685806740c0436197caf66116049007e6982b0f12ea5a2d189dbd82bf09fe34dd74e85df84142c64b1159cadd50774b7edefec119481086c9ca5d1b9ae264","ssdeep":"3072:mLAXQ61LAXQ67LAXQ6fLAXQ6y8Ba78xqo:mLAXQ61LAXQ67LAXQ6fLAXQ6y8Ba78xP","tlshash":"aaa33321e3329130639f4a7ef491af1e73adb2039700b8a5792f18d11f4f569a1d7e26","first_seen":"2026-07-05T13:58:23.864014Z","last_seen":"2026-07-31T09:10:09.587551Z","times_seen":6,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-07-05","alert":"Detects file containing Telegram Bot API","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev/key/","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/fonts/tVmUk1829UhA.woff2","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.890Z","timestamp":1783259876890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/fonts/tVmUk1829UhA.woff2 HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-length: 41428\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"605e9171fa3bd186c915e3ee0841c0b5\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TuTlcHAUxBPsvZda3xbYz%2FJb8T4xJT2yrUv5xKe2VHMtdwA10UiMAWTQ4p9JtuMu0KSezbC4%2F%2BGsZFHhizGKYO9qSBh9%2FSebt%2FCYkzuQE%2B%2FOezvfkBEAXFhgm9Atikb593x%2BRQHDLEBhC7DLgMkran9W775zBpVlw2GKSYd7Lj6Axr5WrogzyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a166e1b69d6949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41428,"size_decoded":42223,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 41428, version 1.2097","md5":"d164398f71705e41d035e25101303347","sha1":"8449766a334d9a8d3f0cee8d71bc5ec78edcd654","sha256":"d05b0b7f77764998467c3d46b48bc544f90c7fb5f261304ca109f4f8d12e33a4","sha512":"d95e2dc8c4ab187506197d0455546e283428cc474d02e4a8a9307eb97368e8c4f34ab0f935ee2d1692e51dcbd14a70cfcafd7a38d809aca32f4bf3a91a8c233f","ssdeep":"768:NEHxZuRx5hEba8J7HOohu9IeKci1NbOfSgOPGdqelzetngUc1un22Rzhp5uIgc:UxZu5ubaZohdL/imPGYN21un2Mvgc","tlshash":"d313f14bf849187ba173b578e99baa1144353b1aefb5815b48f2730d49f018ec740af9","first_seen":"2023-08-17T10:59:17Z","last_seen":"2026-08-06T06:42:12.249657Z","times_seen":192,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/JdVPnARgqnB5.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.910Z","timestamp":1783259876910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/JdVPnARgqnB5.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxWbALBOye5%2BfE1XqeUUmPLcZsrOIkCyOID8D3uPraFfuP6ZV79DxSUk3GhtzPcYVNSEjq%2F8FO2m8M4OcV3nfLrpmhDr4l1Op88D9qipvcsZUVT86N0%2FL4uDCpQ1GDFlWLxfGdILXipkRLD3BHWj4xDCPbnn6J57jehSa0%2FCgupAB%2Fl%2FzH76gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"44b50e9f0af4eb0f964c32803ebb9aa3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6bdf349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50009,"size_decoded":16226,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11764)","md5":"7dc766b9b804bfd8e04af85f793d84d9","sha1":"1a5307f48e1cb8f29e808fd0a63689f2a9d2bcd6","sha256":"ac1d620904246e7b9c5919f7302a4449bd68d08ae9df83f3f8cd904581975e1c","sha512":"273c12d0a9c76dfdd19bd5feb3f29fec9e9b1b2ec2b267914e57c4a7bcb3333274f1004ab67bfb04684981474f0e209ea03dcd408395ca22a643da3255aaa4d5","ssdeep":"1536:HzamyGIX3WdHDQAdRnqeq84cn/PEMhRsOH+bkcW:HrhvnPhRsOH+bkcW","tlshash":"ed23199e9faa3c94fb85490aa4cf21d7502d27871c71249dcd8cfbc44dae88a37e416c","first_seen":"2025-10-23T12:35:27.381071Z","last_seen":"2026-08-06T06:42:12.228732Z","times_seen":13,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/oNdFAfB6ub2t.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.928Z","timestamp":1783259876928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/oNdFAfB6ub2t.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u0q%2FQskEKLoEbYvaI2Tk9LTx14EgcSZtbt2K8Tb5NMA5urA7%2BX43rfkiMVUhWdJvGMooyr6NeFUZBd3uG%2FDzHMSveFa8mWAp7WDmwZvThlT2fQ1zo8J9tJm06uVdINMfy4SFcCE9whQfep9j3tdJzXmIIinoShuJYPTXmq9XZ%2F%2BYzhxPm%2FhNzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4f38bdd54e89768cc5e5c13c05693425\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ce4449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11801,"size_decoded":5256,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11724)","md5":"d86ed241ba332816c41e591a78fed76d","sha1":"0c8ebd3e7130b3154a500d057fa30c3cda87bbac","sha256":"6d646939723e4b168db900e2d7b7832e6f6614a341734e4db58279be39811ad6","sha512":"30ab5b00a364d83001d45926d32a3efdb23ddd747f953a8f5b20b84c7e1245eeb81f603329211955f28210a3caa20561786c3afaf35ff9c9508a0a2c6deff88c","ssdeep":"192:XfKYph5x5w5lC5SPimy5cegt6qacNvmwixr5bEW76wESpnTDPM+/1UMSB:CYpXnclqFmacegkqacQjxxEK6w/pnTDk","tlshash":"af32e8dcce6d7c84eb88844a95de11cb126e3fdb2c31369d819cfbc99ad90462bd4139","first_seen":"2025-10-23T12:35:27.334591Z","last_seen":"2026-08-06T06:42:12.212393Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/jSvWc0I8RLij.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.897Z","timestamp":1783259876897,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/jSvWc0I8RLij.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xgAn54AdCyTJVxk0O0oWApqZBkqEWDQZVazfGmUki6k08jctKSRSL%2FHM00tnbckSy%2FtEmnqAPLvfVw6Y%2BoHujshFelsQey8ANvZpU9%2Fs3qUyLzq3OIqtylgklvT8hwaQR3XIx0tNDuR%2FMyhULUorLE1XlZ9mLFK6hmhEgi5cDpm9aBcu9Kwpw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"357533292f9d264f4a39dbebdd4a6030\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b69d9a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56467,"size_decoded":17022,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (10428)","md5":"08054e9239abd71ce1c6c7167466a33f","sha1":"9caf0e5ef759580b9bb68193e4bd504c6f6acb74","sha256":"5b67b167a77573abb74fc487dce2f06b20a0b7fd87f31e87d26aac87f35ff68a","sha512":"34c5e303e6b11f3c6ca9e15769cfafe78637198e9bf8b8368785002932ea7cfd4f240fea74d7172c8d17128c258d063108f8cee029802b9cfabd028b7a0c9116","ssdeep":"1536:rCcdbZC3voVjTVWhinOzvxXEvaJnzCtASYWElNrq/Jg24RsyVuh3rqTkzrv8N77X:r7bdjRWhinOzvxXEvahHqxq7uhqTknUd","tlshash":"c1431ad98e5e3d88eb95010966cf26e7412c67471c7319ef658cbbc906b89cd37e022e","first_seen":"2025-10-23T12:35:27.387824Z","last_seen":"2026-08-06T06:42:12.243156Z","times_seen":13,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/INDJv5BoJ8P7.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.911Z","timestamp":1783259876911,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/INDJv5BoJ8P7.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTwU4qSoUphITBSx36bB%2FDn%2FpxyggZE8pdquU7sCDOTOMSFFbSJHDr7uH%2FQQXTUE9gOB8s2Yk7hYeSSAV1fUU4CXrNYUKQEbqol2213RvONeqPnXVom%2BCbmVqZg2uCEu5bu7cJa3Y7%2Biaga7ZTqoIc2gzeR8pr1iYIHCOyHLJtOzp1A2d9u%2Fkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d7c31b2fa4ebb4cd1454e89008e687fb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6bdf449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24619,"size_decoded":9745,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13764)","md5":"ae62d56a3b17162df14251b16023ba24","sha1":"f25b221627a06b35a9215ba94ac62ebf9c52d0f9","sha256":"96887fb0fd1264b088ca7be9309f92f00c39de7d9b462572b3baf439b51ef028","sha512":"3663b718a7dec3b6cd92be4a725373f3f508dd8884f2e0b7b5fe681a44f9944f94390c83977d5aed3824b99608d8aed3fb18b5bdd1e7971d81b0318eea9d5e84","ssdeep":"768:LLZG1pnwQER71Effv7hzLTKNnqQD/O29e+4zWHnf3DZrZft:LOwQEAX2qQuSnHft","tlshash":"e6b21bda9e7a3f18e785590a66cdb4da010d53832c71055ea98cf6cc0dee5cd7ae013e","first_seen":"2025-10-23T12:35:27.431886Z","last_seen":"2026-08-06T06:42:12.209288Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/RU8bCl9oG37B.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.923Z","timestamp":1783259876923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/RU8bCl9oG37B.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAt%2BTYVYeqZdb0r3X5vSjvHFsVdC83AO%2BN9IBEtVdkSxKpLNsh2ke01g8Gj4bXuHy%2B%2BUt762t2u4%2BGQJaSNiREEDve3Qqz3j0X8l2jbXEatsdMMIB12li7HR6NV02PgzyTpjfM0AXT5pibKjbSvOZQOe3eepNW1lmDs7K7nqC0pPlbS%2Frbz0JQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"63ce7c35176b4120eb1d5ab99128a7c6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ce2e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13368,"size_decoded":5929,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7120)","md5":"64dc4eb98c679538ec325c318c4971ea","sha1":"ebb843443ee21951c77f88cad5234a83b74aaa99","sha256":"eb1566b8fdf1e14b95142b7d99adfc1fb6f391ac0cc3c59644f6dae893d1e8de","sha512":"3ee3c181e3a304a5a75907c2404303801171129b4d2c6e5b3f3dddebe22519ff91e4381121dd1b434fce7b33444782cbf1d3b67b3741507bf7098ab7606dcd07","ssdeep":"192:7y3cVgvA636BZ7v9nlSc+yvQdzdJSVW8zNPzl4P6UdPkcSzI3c:7y3cVgvxKPDvHJPz6P6UOv","tlshash":"b352f79e8e697c4cdb884d86adce50db223d7ba30c22268cc46cfbc6495d46567d227c","first_seen":"2025-10-23T12:35:27.347446Z","last_seen":"2026-08-06T06:42:12.234399Z","times_seen":13,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/0Q4AxsGl7Etx.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.934Z","timestamp":1783259876934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/0Q4AxsGl7Etx.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dgHWP8OQLXWhH4AUB4fTe23Z4zKoHj%2B%2BmsI3FE1o%2BgEwbln9nUWOQOxQVMPA9oZWh2xHiUiHNuPekEDAfwydIsSRFannVt6m10zkM%2B6KMct84dL2OmXFmkImG2m7znsYH42MJdjECV8rLqXaXC8pc6ocVCdLlrLhy5xHdStiZ2WcR4UX52GxKQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a67bacb13b00802200583cb5df53ef7c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6de6649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29007,"size_decoded":9258,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28484)","md5":"628cf355806caf2fcd082532c3b47dd1","sha1":"ab4846a3134d03c2e6e9436e70c4e1fc46ccdc93","sha256":"f66bc914dfe7694b5822e345201569be6ddd2f1019677f50a53dc2752c1997cc","sha512":"c844ef41d02b59d0e331bf5d45a5fd0a1829fc1ee498e109292a6d538065e0bd9d2f816777b646cc2992def1055ce664be17619b680959d76f30e89d3faf9c81","ssdeep":"768:eMdIXaw5XXpfQd1bgnn5+z7lK72V2v2w2w2Lt2TFUe:eMdIXaw5XXidinnusJ","tlshash":"37d2b6ce8faa3c84ebc6090666de35d6011d5b9b3c63158d490ef7c4569e48e3fe026e","first_seen":"2025-10-23T12:35:27.354948Z","last_seen":"2026-08-06T06:42:12.244778Z","times_seen":13,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/IXBbrBYdPMAI.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.941Z","timestamp":1783259876941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/IXBbrBYdPMAI.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6nvB%2FAM4LThVAlFefTb8suAXx33x1cH2oiseg7FuiWuTLGowtqSALSircmW9BwkpP6odzo2wkwRdz%2FEptiPEA1ShtYS0F%2FFQt8AwqHQxcspskMWB9fu8VjLQi4YCfnQ8MjSFuouuxP9HiW9r6vTazPLj1NHZ7AOFWjpdSy1xmQalkZVuE4O2LQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4a04f297befb1632408994a7e762f00d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6ee7c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777,"size_decoded":1328,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (596)","md5":"7c76e954328217c060175c5f77e77ef7","sha1":"da7564a230c988c7790c0f0f1bb764b41392c344","sha256":"3431b2bbbc99b314a992bcb826dee0190053e6d813ef66347d00d35e4141685c","sha512":"0e7d7f55c77980793e92ce637cecb35a3cf836ae5cb13cb8347976932ff027d92255f702038ef4288d0e11c8e3f4d6b03fd32e08f5f687f805d3b9c5caed937d","ssdeep":"","tlshash":"2f01d5fd8d8309a5e82d280e768c0a65416834eb95b10ad7b1453fcf257f9f2b490a4d","first_seen":"2025-10-23T12:35:27.356768Z","last_seen":"2026-08-06T06:42:12.230276Z","times_seen":14,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"moz-extension-getstarted-coinbase-extension.pages.dev/key/css/Df8ChS4GVOeg.css","fqdn":"moz-extension-getstarted-coinbase-extension.pages.dev","domain":"moz-extension-getstarted-coinbase-extension.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.170","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://moz-extension-getstarted-coinbase-extension.pages.dev/key/","date":"2026-07-05T13:57:56.953Z","timestamp":1783259876953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moz-extension-getstarted-coinbase-extension.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 04 Jul 2026 02:22:59 GMT","end":"Fri, 02 Oct 2026 03:21:41 GMT"},"fingerprint":{"sha1":"89:AF:39:C3:39:22:57:64:58:A1:1C:D7:F7:F9:DD:98:CC:32:D0:58","sha256":"37:5D:B0:12:FF:D6:53:24:84:CB:15:08:BD:A5:EF:6E:5A:AA:68:C3:18:29:DB:59:C4:CA:95:91:BD:12:D8:9F"}}},"request":{"raw":"GET /key/css/Df8ChS4GVOeg.css HTTP/1.1\r\nHost: moz-extension-getstarted-coinbase-extension.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://moz-extension-getstarted-coinbase-extension.pages.dev/key/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 05 Jul 2026 13:57:56 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QK95WchJoMHHvxufqiEfXASYJKpcXm1d5LjG3eZluQ6CGs%2FcN3YFF0QKhqEaXkMp5bl%2Bi8janfaRBlxkCYoLHK7SXWx5HT3mJKhrnPFbPoBUYoq8%2Fc6KQEi5uRzyDv8q%2FTJLNa6u6313gFTC0wTGT7zk9SAmxWB6AimIoexuv6zAy%2BvskeoQCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"cf9870fce786d3f3bb2591917985bd83\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a166e1b6febc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43722,"size_decoded":13705,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23492)","md5":"fee5145743b5d86bf69a3a3f5f71bb67","sha1":"71074609ec7bebff8ae4401a7043260a6b5b8868","sha256":"8a43cc32fed21fee5145eff47a9f5f3c18da8c6ec3f4f440a16d88679274f132","sha512":"3edc513ad7e760ffe053013964c9a15793a4bb4b502933a6f0d8ce432f228f515e4c1ffa2c8b64b8e39375ed2521d742919bdb49493a3b21f0bb8978126d6c12","ssdeep":"768:vNf72ZwJ0kOAkOBkOAkOPcfkozrZb7mAUvyvuh+M6B4HP3Hxmhm7uhvfR5RTObqh:vEqCcdbpCIuhfH/RmM0R5RTh","tlshash":"f3133bce8e193d0aeb55424667cf25d7011ca787183219eff5887bc94bae6cd27e012e","first_seen":"2025-10-23T12:35:27.336097Z","last_seen":"2026-08-06T06:42:12.231227Z","times_seen":13,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-07-05","alert":"Phishing Block","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-05","alert":"Sinkholed","trigger":"moz-extension-getstarted-coinbase-extension.pages.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}