{"report_id":"efdcf177-9f47-4856-9f69-085d3f5cffe6","version":6,"status":"done","tags":["coinbase","crypto","phishing"],"date":"2026-03-09T06:11:24Z","url":{"schema":"http","addr":"personalvault-coinbase.com","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"104.21.75.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"personalvault-coinbase.com/","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"title":"Coinbase - Sign In","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"personalvault-coinbase.com","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"104.21.75.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-13T06:11:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"personalvault-coinbase.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":50,"request_count":50,"received_data":5784013,"sent_data":26461,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/9080-4ea33a0da6721c50.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"967fd956bd79796a75f93beb1433cce9","sha1":"c37480d5357870a5b516012a84091712b4cd8b6f","sha256":"570d8a92cf0173b2b7c53b8b296c58121a61f817ebba2b28d919b5ea3e56b45f","sha512":"e56fbee93519e8046610cc17e028e652491ff084b97ac79f200e9c50eae64e812bd5e25d6529efca1f75dc10e6d9aefc5b8a950f84bde9ae95f048de6b7a89df","ssdeep":"96:u5fh/CwrRPzHQaB3iav2ckLtN13ZKtRQOGoMhjY+1kQzFa+uJRhq4fJ9nhdYtgnm:u9RrQuSav2cE96fGHYDzbrnhxnm","tlshash":"55e1b5c2b292f524d76f4896d07f8468fa7e3624101d8138e0ba5c9534d42adf2b3fb6","size":7334,"data":"","first_seen":"2026-03-07T19:49:10.061846Z","last_seen":"2026-03-09T06:29:22.815481Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/5981-b34841cfc8467838.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f0247df9085b179de284c31b28fde71","sha1":"2f2988e506e2c512f29692c4bbe3fd49386a1af0","sha256":"5ee24553353e227bc81e1df7facf23d206bcd68b2d6f43106903295c8c3e8382","sha512":"cf2efd126212fa47cd0685e204bd5083436e35a61e703ae15e841119473d086113ae5c7759c61f441360e4f97c053924677389e56440c69fa9eddc095b7b3a02","ssdeep":"","tlshash":"511125d973c434b9abbbc8c89dbeb393f03786223918c02cb6d55476209465c7155b95","size":1000,"data":"","first_seen":"2025-10-20T12:46:36.550396Z","last_seen":"2026-03-09T06:11:32.229025Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/4317-06ea163b936d313e.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2177226b4d8eb9aa78dc203b3cf52227","sha1":"71766b4357c181b6db905319080575214ac51fd5","sha256":"e0d8e14a7b17a48e0cac61e27b44584ee1ca7cfe8e73b4c3f9f0bfb59ab9a83c","sha512":"4ac55171c6ba7316b414a6b41fe69d44cb72e81cabcef1ad758b1a257c7efb13981d588b6d37dada46b1ab40359ef933aee06bc344eb5f36e50dbafe369e72c7","ssdeep":"","tlshash":"0d113ea46165e07c927b948c9dfc1904f39c3f19603c8c80e8e4ec08f530ee96a3576c","size":1000,"data":"","first_seen":"2025-10-19T12:48:44.737604Z","last_seen":"2026-03-09T06:11:32.230598Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/8084-bc97c745e23bd80b.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"de5ccee46bbf1cc281cf39ed8dc5d0f9","sha1":"b2b4da7824b1fccf992c0008dc63bfafe1bc480a","sha256":"2a4e08fbd97071a54777e213282e778fd232c1101a9d3234200b1f1caf74eedc","sha512":"563b6bf1d6223877a0a8aaa32b7975affb4abed3eebdbfcf1748a7d2fc03edcb031c3ca4e7b2588045b17e546faebed98e5daab817073f50d944246b4071995f","ssdeep":"","tlshash":"ec11a5347d14f8e526478cc8d86f0081e2613afba0a5e6d977414dd48838f8c61d1bf3","size":1000,"data":"","first_seen":"2026-03-09T06:11:32.232447Z","last_seen":"2026-03-09T06:11:32.232447Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/9948-437dfbb62e980c08.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1102a60ec54cea1b73b52975f6c3fc1","sha1":"4c3e9b256b3c1e194df59588cf9a6e42ee285b2b","sha256":"a3e087283cf42c2399977235aebe75d2834c4da2d803c783ffefb9f985e16ecb","sha512":"e3c7ee6b5cf8b0fe11c734b52d436d99d5a6ac091599eb01182ce3e0c53379eda65db5850e35d841a0ed56ab9ec2b6833f623b28b96f4114a9276433f1c0f830","ssdeep":"","tlshash":"3b1102be7190789a1aeb10e440bb220b72b94c6e142dd0d062644cf1f5f271c2662f9a","size":1000,"data":"","first_seen":"2026-03-09T06:11:32.233782Z","last_seen":"2026-03-09T06:11:32.233782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/9920-b6304c085019c550.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"62d49be3a92a155092aabbde2cdae641","sha1":"53a477e1bc96346b739de5a336cc7e0033ee0693","sha256":"e9412fe74d2626c150fffb2863164e79ff75efedb4623b35a7d89de5aabf230a","sha512":"e7b52f4c89c6b70d29ff6f53337ce39599c9f100638c517712b11d8f3fdbcd1dbff5af72395f7778cba5ba91cbeeb5380e79924cbc5acd0990f93da8a0568639","ssdeep":"","tlshash":"89113294b72478e06a3520dcd00e6d8bf2dba4b6c248915046488cf4147d8cf6e46f7d","size":1000,"data":"","first_seen":"2025-10-19T12:48:44.72746Z","last_seen":"2026-03-09T06:11:32.235292Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/6224-9d1adc6249fea293.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bd50098151ad1ac4df81e31dc579de7","sha1":"391801f7ca4209f3406a750deceff1bb23f44003","sha256":"334186ca8db11ecac68144b9fed798de5940bcc62e1b0762d35ec4954ae952b6","sha512":"2c1f82f2464870e6a29d6b66b23023801fa8a41aa5b94f290ca47c625ead70c9ef4b4e7d663826c1b115772dd474a0d31bb8d6ff3e7a2749bc980bb8270649fd","ssdeep":"","tlshash":"7e11e15b35d6b8f61bed20dc4c6f1019e58dfc916409425d89a5c0c63d3590c61dbf3c","size":1000,"data":"","first_seen":"2026-03-09T06:11:32.236938Z","last_seen":"2026-03-09T06:11:32.236938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/main-app-eb6d10f2b2ee3ac6.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6541e0a2de12ba6b0c15870dfc8876b","sha1":"a545f2ea756fbc06548890ecfa04d9984a75c135","sha256":"a7fd84ef3feeeafd6eab5ca050bd8533e7c8d1c72618873e558956455899ba8a","sha512":"19556f9fb9102e7cca4fbfab099de43cd3dcb12db0393f3eb9ab11f11e1925869dc0cba38f20868c12741b8037ef03c99eebb296e0d0b10ed5223624538aad0a","ssdeep":"","tlshash":"12f0826a4f0cf42f1c266d20fd979de2281f4135202b4e646900dea62c63bacd260404","size":476,"data":"","first_seen":"2025-10-19T12:48:44.641185Z","last_seen":"2026-03-09T06:29:22.790234Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/c3e6b0225c1c1b6c-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/c3e6b0225c1c1b6c-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 181080\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"2c358-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SOi%2FNgxUDYRknyz80v%2BWiQlpzflOYePBKFV7FaiAVUYpA2%2FsfY%2FLQDzBYqNHiDWgTAEemhwm2UkY9CYqgYkBFkuQRCCHq6LC3btZKajeiHjJiA%2FbELXkLyJf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08c22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181080,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 181080, version 1.0","md5":"412e3817abcfdc90ad260ede6a70de7f","sha1":"db699a9700323d01c0b1395853bcd0cfcb8f2d54","sha256":"0b31eb2cdccdf326b5cb371c6c706a85f5b0927332d0f540c3f98d45920d797f","sha512":"eb959c80cd477187ebc04c02a67fa2e0592c4d5745175a16a43b05facd5c560a335433db7f458522d9c58d74142fba8c51db970906caf106aae7c8e4be510836","ssdeep":"3072:01OVm3NPXJrm1SRgg7P/oDqXdvzQ+cRzu8eUREe1f1KgHc/89:0jNfSGgKIDqXVzkRzu8fRECKgH59","tlshash":"53042225a2d2dcf416df3792d318a20cf59eb37981c324d7969dc2b8065f6725e890b0","first_seen":"2025-06-08T03:26:07.757609Z","last_seen":"2026-05-20T08:28:28.741246Z","times_seen":98,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/webpack-9ac15fb958d14290.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-9ac15fb958d14290.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"dd0-19cbf00c7bd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1bXjRJQ%2FtcgjEM656Nfe%2B7fLB73Riavw594fRRPosIwYj6LOYoXtejoIc%2FLzNItgXkK35Z02pnL52uPXsX%2BBh%2F5iGoF56C706seU1x7Pua7eucXcBS0tUTt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08e72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3536,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3536), with no line terminators","md5":"035b41ef8d3e75ceaf4fa7ccb18f16a7","sha1":"1638f28302251f0efbee04c576f5793ebd8df737","sha256":"ab944fabb318d7e3156876935c13c6e7594bda7830152ce61d2380df3dd8ea81","sha512":"4377acb761e9a3f5a7bb4140080ea27c45a895d0cb4c7741c0efa73d486f2b67e8ee95db800834d6804cb031ee31c09f586d9f6685a0e34b832a690c2b8dff3e","ssdeep":"","tlshash":"e271b5a93661fab157f004854c3fc151f629213b052ee8f0a307dcbaa4749920522ff3","first_seen":"2026-03-07T19:49:10.069202Z","last_seen":"2026-03-09T06:29:22.814689Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/main-app-eb6d10f2b2ee3ac6.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/main-app-eb6d10f2b2ee3ac6.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"1dc-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLQl%2BFgcKzqVVSGtamwPxfdaD9UsvArqYp44fNIm%2BEvH6KRJSZFyIoj0jNkQ54EfFjllzj5XNYPlKxB4tWv3KfvgrTUjtO%2BoIz5xvCH5MAgPP%2BDoqZROcO%2Fy\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b090d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":476,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (476), with no line terminators","md5":"c6541e0a2de12ba6b0c15870dfc8876b","sha1":"a545f2ea756fbc06548890ecfa04d9984a75c135","sha256":"a7fd84ef3feeeafd6eab5ca050bd8533e7c8d1c72618873e558956455899ba8a","sha512":"19556f9fb9102e7cca4fbfab099de43cd3dcb12db0393f3eb9ab11f11e1925869dc0cba38f20868c12741b8037ef03c99eebb296e0d0b10ed5223624538aad0a","ssdeep":"","tlshash":"12f0826a4f0cf42f1c266d20fd979de2281f4135202b4e646900dea62c63bacd260404","first_seen":"2025-10-19T12:48:44.641185Z","last_seen":"2026-03-09T06:29:22.790234Z","times_seen":7,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/9920-b6304c085019c550.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/9920-b6304c085019c550.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9f1e-19cbf00c7be\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rypF1JLW05nCKt762Haq%2FEgR44YcUuCOrxDvRKK%2B4XLFRAQe%2Bcw84iOPaZDxtoqE9nU%2F9K2Yslnl2qAjOb6uDlfSzzjwiF47V6%2FudYfPEg6wCcPG%2FDteCzF9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b193b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40734,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (40734), with no line terminators","md5":"c4e9fd906b24e6f55b66475cc7e66c69","sha1":"2177e3eefc2a865ed34f0449d5e51a639541bf49","sha256":"b6ebf535295570c7af6c9aeac36975b29a39733b5eeedd0b7d1cff70339f3eb8","sha512":"d30b6a2b48fbb24f613cd08850304239b9924c11035536fa7831b5228f1da8b9b4a790b6244db61a222974f2f11c25d1837a57a2c7d628d3833f18c8f17eb871","ssdeep":"384:CIP+R3v6tNduEETqSTTBpD06es/71NbL0iGwY3aSpscICU8bAXgyWeiqkc3TRLAt:CIP6WSfXh17ciGwzVCUZgyWHTBZ28Jz","tlshash":"5e03e9c5b321606243e6519384b60203f329a9995806455cfb7ceefba87cec971f6f72","first_seen":"2025-10-11T12:14:40.055092Z","last_seen":"2026-03-09T06:29:22.830043Z","times_seen":8,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/6224-9d1adc6249fea293.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/6224-9d1adc6249fea293.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"400e-19cbf00c7c1\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KUVzzQh8WP6vvb%2FSBnvpNoo1PEWHybPjctMT4nNJG4SQT5vJfrnUgjl8iC0pEDpidByWxNIIY35YTKH4uXiQpLUuKKCO9fazjdSuqpYJP0r4xmkNHe8UWVJE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b195e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16398,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16398), with no line terminators","md5":"e7ade7178e7e07bce14fb0ae34b944e5","sha1":"576fc7720a556ecdd724115ad46397734a62942d","sha256":"843bbf00667a0f921b3544ef909d45e35cc33cc49232ec72f87ffaf84142685d","sha512":"519d64e2dc1df88f3e88bf1217169c61299970c4bb0ed83dc8a1ecc5605a67b1c085bf9a59caea49b037ed29fa2536cf657d934fec7cad180a50a679c61bec1f","ssdeep":"192:7+lpJUkhJbgzNM5QCYvwJiMSg6TdRQq3x2aAjD49R8mzYAZRwlFuIn64c0gFNdnk:vkhJkKawJ16hR5hnR8OYNYz/d6SvZQJ","tlshash":"947274acb6c2b87a07bba0ad597f140ee27dbd81784d5149e5b0c1d63db124881a3f7c","first_seen":"2026-03-09T06:11:32.180113Z","last_seen":"2026-03-09T06:29:22.792038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/867464f658924ca3-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/867464f658924ca3-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36956\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"905c-19cbf00c7b7\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JeswTm1IQgOoaBvD%2BZPeu0XpREV2qK6JIecSxr66Irp88gLoXuigFD0jwMNQvsrnvOicSmqcVIGOAk2Mdu7eJsWHbF%2Fj6jcB5%2Fqpfh%2Fjuh3ZcDjT3jg9ZONf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af87d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36956,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36956, version 1.0","md5":"8b52afb321221a790f038d2c160a9f05","sha1":"1d48477f01daa3f6a79c3107d896e099e569de97","sha256":"2d797ad69240551e7ab710bbbc14a9598a9cd4f61b5b280789aec834dbb740fc","sha512":"85ba77f242018cfade55d2fd163cdf4998dcccdffc112340aad7a3c7b9b1c39b5bdc8db916b25e67a0d6c719aa7c7c24cf7903468d16d4f552322fce76160a65","ssdeep":"768:sKAfNwqj/q2HHsTH27wh26J7siRmB5VRFzi1AEUcoSsht59vyoghqfk:sdvgW8g6J7LUFW1GS2t59vtcr","tlshash":"def2f21ba180e731ef8c66d12d78404ec0786a1af502b1cec6f6f21a457900fa2b1bd5","first_seen":"2024-08-19T15:19:59.826011Z","last_seen":"2026-05-28T12:41:18.850041Z","times_seen":192,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/ad7693bb415d25ef-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/ad7693bb415d25ef-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40632\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9eb8-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hDycUdjGnv8fltEtKw2vUb3V0yxkkz%2BFoRAOPSpShrAGVpRVk%2ByqMJxyNEYnIb1nK1AuA4o1JCQ6LZyBLHdPiJ1becsVgkKR987WRFiX89XDXG7QKIjLg2xn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af89b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40632,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40632, version 1.2097","md5":"62bf1b795c1ad225811afd9715abdc90","sha1":"0ddcce99464162ee676d81ac4bba9dcb001aa40f","sha256":"881387e5619f45f03a99e2fa88a752237343c0bef2414425c3219031653ce45f","sha512":"f59286ca8381ea5f1c29ce03b2d6baf862adb0c0b124dcfd9363fbe214da7e739f86c863a104f3b37942359c45a9a039d6b759c3f47a9745f7caa489ac2cecaa","ssdeep":"768:7ULSNCQzC5hiA5z9A2Y76nwuLRhVGviFiqSbi7cpR:j0iAZO2nwuswiEM","tlshash":"c703f1c427b02afe5e86347ab4c351497bea1814914b8b79405546feb07eca157abc33","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-06T11:10:14.386568Z","times_seen":402,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/adb2e77b6651b97b-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/adb2e77b6651b97b-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 16672\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"4120-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6GmURrX%2FNTzqOEK%2FhHcPcmNTCvTiBy%2B%2BDBY0sU7gK39ji%2Bz6Qnt5izbBCFwSHMp6SqP1vV8U85tewugzBiu8zKawYlk3auh0BYy1BocZ4ce39YIMJRbAP4kC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8aa2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16672,"size_decoded":0,"mime_type":"font/woff2","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 14 names, Macintosh, Copyright (c) 2018, Gurpreet Kaur Balgir1shared-iconsiconsFontForge 2.0 : shared-icons : 23-7-20","md5":"e48c756b6037d6d7ec88e3e75f2f0e83","sha1":"7822fdf8e0e11f419930f413e2b9766284543eb5","sha256":"7b28292cd7fb89caf6051ad0eb4e464c1ea4f83062842aa95cc697152a135d48","sha512":"04ad2c880de12140fdfbf1b2e863724098a2f335683b1089305e405bf5c9c8d38249b7f111779de9c716b93da0d5e1a3bd34b85769c1e05db32c7d878588228d","ssdeep":"384:1E4VocGSRB1aWsGHjQjlIhNvkiiNfLbV91aA7YkLK:1DZvaWs1ja1kiefLLoA7BLK","tlshash":"e6726d52e727c1cef15a4eba08568aebcf368701b62363d7f6432e1a95570d00eb3b15","first_seen":"2023-04-14T16:55:58Z","last_seen":"2026-05-28T13:05:57.872183Z","times_seen":439,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/css/45d2ecb4d0da7b58.css","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/css/45d2ecb4d0da7b58.css HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"25686-19cbf00c7f4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yIS6TWvBTTApXc2rvYTXu77Fs8Hxw70FMN%2FhZI7BqrPxKkQASirI9hAp0%2Bfq8vHE8AmW2Epf7oCiFcx%2F%2BhSdDWV0Hp%2B8qvPxXOrjtSa%2FJLS3pXQmcC9gHx8W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08d92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153222,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (63243)","md5":"c46b0d272a27e0f95a357458441e6138","sha1":"9785570a80f2bbbd781be7a4254a54c23fca046d","sha256":"2497513e57ac824072b720ce18fcd2ace5e8fa87c9c2557428f3f0b68e4dd943","sha512":"8e88a4339b4cadc0bc7ec66fa42775c0b68e26de4fc9d287244c43fe1d6d359a2c84b66b005fb11e18d3aeef7012d28b5a82962acb48ce020e324f89cf1c4eb1","ssdeep":"3072:GH/CriqhKpmR6m1qvcehWECwvVdWDELlbLfXn1RMXgxCYI2GoqMnNh1jYKZi7WKb:GH/wNhKpmR6m1qvcehWECwvVdWDELlbg","tlshash":"bfe39569a611103f7c1784f5e19cfd9ca01bb5c4ef2a97fbed4222209bd16e329a3744","first_seen":"2026-03-07T19:49:10.059531Z","last_seen":"2026-03-09T06:29:22.808265Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/5899-f164ff0cdfc8c6dd.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/5899-f164ff0cdfc8c6dd.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"3106d-19cbf00c7c0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CzS%2FMdcyaPmusIx3ZwuDbaUK6l%2BpJRUVKDq9Q0v3P%2BoW7V3mnIZF%2FSIUTSORNaJeqAdGnpaG6DWTyg267FwgMpfvFeefb9dejpmSuU8F%2BcjMlLiHeS%2BjNT71\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b09062efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200813,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"57a03a924053b6b3238f38ce62ad9252","sha1":"83d6720d6fabd2fa19b2e223ff156d5c094a570d","sha256":"e46223b4ba1e1f2255860c34385fdbf8c0226759f1246cff6b21a1e55c5b27ff","sha512":"eb65eb52812bfda1757527aa0c0c3aae7c2c224d8a1b6340c6b6fbea071b56767456b35ec812d14453889c2f1686ab52b39e9ca222f6b51f1c6209c9b68e97e6","ssdeep":"1536:5IAgMTct1EEOuSKLnbB5tuAa6ykxIGJMxsSVVSMprNizTP8B6XYhn1sN:uLA/YLnty6DxIGJMxsSOP8oXYfY","tlshash":"cd14eaf676d0f8a207a740e5843b5006f3391c3a146e74a0a3e5ccda75644eee1b7f9a","first_seen":"2026-03-07T19:49:10.097672Z","last_seen":"2026-03-09T06:29:22.809778Z","times_seen":3,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/5981-b34841cfc8467838.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/5981-b34841cfc8467838.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"5987-19cbf00c7bd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k4lpptFDVYO6CausB18IX4Yf2tWeuOLzQ67lFSWyb%2B9JkjkfEIL%2BdwgIMojpi9j%2FvIAT4HSU5ZwWPcDwSGiwsu43DBC7FmMG7Z57RmUP0ZMdZNlkUmg50hGC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b09142efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22919,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (22919), with no line terminators","md5":"e09ee762274db55329afabb47a5408ab","sha1":"d84dafcb057ded420a1002342a45d5d30ecb0131","sha256":"83b00509a8a94dab8d5cd8a6ddf464e89535c97b8efe38133690e8eda46e112a","sha512":"5298f0e9bc2f7e7e12c5ed6fda975ac2ba51411d1454c8d3b31d74569cbb9a6203e0c3622a4f207c98609b2e47ad6541532d425c30641c1f8aa22770c4457d29","ssdeep":"384:ArjO0lg9ZlqCwrFSkzoGE1Ff8IiUHDw9UPPGu7flaJBJMUOiWskkcagwjAu/ZNA2:sO0lYjNhHDwSHrlstKf0","tlshash":"e3a2b6167a0705be5affd3e7d0acaf95d9380503d1190a4de3d64f36ab04ba5128bb0d","first_seen":"2025-10-19T12:48:44.675368Z","last_seen":"2026-03-09T06:29:22.810494Z","times_seen":6,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/5806-8ede07ee8b918b35.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/5806-8ede07ee8b918b35.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"2f8e4-19cbf00c7c0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWchybiDYYfXh6SO9yIl7frjK5A6Mrh92WeVZJo8TfXjQxYLtB3DVKJuMTByM6G5NEQmM9F5TbNsXq7Cdx7Z8bQkzRGv1Qirdl%2F96M8JE5tysLXzbht8GwLY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194788,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6454e9e5bef556dfa66fa4b9124ba78d","sha1":"6ddc3421426e5ce83a94be6aed9aa61f6bcc0c65","sha256":"9e2b06fbbdda93ced262cc34c6de16db87e57c8830e0c838a830aa0f1cd64b62","sha512":"09387e9a8436142d470f5b9edad8ac8c462a4d969fb4b0ea6e04b01a37e2808878b41aea0a01e5ac4a32c45c50c36a0ec616d7d2399d2d4e097b341c7aa417f1","ssdeep":"3072:lgPLyrVI/opbHWDc7C58LHGzYw/2KJeVlZM9TgzoDaDEGSGXMtKB:7HGzJ1aM9Tp+JTXJB","tlshash":"6a143ce67351b021c3db915ac0af0642b33e2998240d443cf37ae8db696459da2f7f79","first_seen":"2026-03-07T19:49:10.070911Z","last_seen":"2026-03-09T06:29:22.799437Z","times_seen":3,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/4581-64b38c388ac26b21.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/4581-64b38c388ac26b21.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"bd83-19cbf00c7c0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3GOusA7o7VFeIIbpdzlu6F3I%2FNiQQ5X7lv0Mwy9s%2F20MMLAZb34T%2FLqEDtQ3ezfXdGM47BUC1ljGMFgiSHF9uPBH52ECkW4RjWqR7pJAqAknQpfdidC1pIR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48515,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24559)","md5":"a4f5668bba6523db3533826648abb397","sha1":"4004750494ad4f74565f731de744128b97123804","sha256":"83fa81e78b93361b6b9a5d8a6614a60f62aea685b476d40b6a6a92e4fc6d79a8","sha512":"0d4e5e8b90aeefc7317ba6e883aed3562f8b40d4882ad7d2ee07905a8b6bc3106153c260b541937054a23003c98a9a50e4d2fd70bbace5fd9229d29b1cd7948a","ssdeep":"768:Nw0GpNmBNyUtVtcwHZ9isSyZJ9JwcavcTcF6N4ggIbfjgp9AHNf+AOr+kV:Nw08NWNyUHtzZhSyZLqm3Tbfqfv","tlshash":"8a232ce5f711b87087fbc4ddd03f8028b22a3e08a00f5860f6b55d941558e8ab1b6fe6","first_seen":"2026-03-07T19:49:10.099806Z","last_seen":"2026-03-09T06:29:22.836222Z","times_seen":3,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"bd30-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQ79myRfBCycFdAjeBR%2B6YLRh9gLoxqku1IX01HUmV%2B%2B8CGebsu8s2lybyzU4nWN%2Fo9b%2FUvrdB%2FG4qrhn6Rntc%2B8ItwDSXddxXGhg8jV2X5t6AVeCBNFrea4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08cb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-06-08T21:11:02.559278Z","times_seen":64223,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/05f186dfe80b0fd8-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/05f186dfe80b0fd8-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31540\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"7b34-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nPAQM9mMXBht5KFucD0b0qfDc0X0ud2x3VKXoW%2BHSMLxi4ypg1J4xbo5PqxcelkO5jglI%2F8XRmFcU%2BVTo1xDR%2B6%2FQu9tspYdT%2BRtk2F%2FejMsOkHdCrOPC67K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ad8212efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31540,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31540, version 1.0","md5":"cf121b25131ac7c88aae527828894f41","sha1":"60000b81513e06086d521ea39a4390a9336ac0f3","sha256":"7c5b7669224a42a618a5dd33fd95f953500648f0e660807c857b5c9f076c6173","sha512":"f775445af85065b8a21a15754b1eb4a2dfe8ea580ef68fc69c78335a77d7836d626e826ea6209f117c9f11e34558266b33def8bb80ed717b5b3b7fd2c7e8631d","ssdeep":"768:xQWnkfONl9UGBITCygSa/MLXKuFw8CfHPAK1hwQEW+k:xMfONqeBh5v11+W+k","tlshash":"2be2e0b743b68743c22593b9741b26be68aacef3124c606793dda477b064970bb1c437","first_seen":"2023-10-30T10:51:30Z","last_seen":"2026-03-09T06:29:22.818053Z","times_seen":6,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/3d64199040ad5e8b-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/3d64199040ad5e8b-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37128\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9108-19cbf00c7b7\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nKTt1mpHbrlmURoPlVqwyyZk4ej2v0zfNrGdeV34AV83OyUVtV4fdyNILhjc5oehlNGosCDKGrhGX6tK8Vauv7NurJvIRWdneRh9zjXUKGQsSXbTO4HAlmgT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae8592efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37128, version 1.0","md5":"edf0df2d1378e39073417bbc91f42470","sha1":"30682c17381e680f233d075ebc18291649ddf432","sha256":"bb9f64211722a2e83aa7a86bc01f8cf2449a984873f1514d49d7e66df897f3f9","sha512":"38e6c50b7a8089496c8201baf87b17b1b61f4a8a3cb4e4d3e960fa211dba764d179fad585da7d608a4a7fc000873da94d7383da6a3f7c6d49bdabf4a49ccacaa","ssdeep":"768:SBX/M0n5OmDBOu79k79j8ZYs/3gC4vXgX+ZTBRxkdiv3h0Ha4u:8PM05OKE7CZBvgC44mbkM3+aL","tlshash":"53f2f222fbb87c8b8006a7c5ceb3391bcab4042ad9af1d43ff3b6558171c549187d2a4","first_seen":"2024-08-19T15:19:59.825193Z","last_seen":"2026-05-28T12:41:18.805733Z","times_seen":192,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/68ed26f9d69f132e-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/68ed26f9d69f132e-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 67288\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"106d8-19cbf00c7b7\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlOrHfFARtCMr%2B6N6TLzlbD2VywX5PW57%2BZKSKCKmFlzASpfB7u7HNlH7XU68iditBBxFj6a0YyK%2FjMKIkbz45jer6uHWM43QM0XIQkltHeYRSd3HtQXHdMK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af87a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 67288, version 1.1311","md5":"47f2df7314f7aa70412e997963a5eff7","sha1":"565348e7d9bf7b881b1784f8795672970fa6de5e","sha256":"3f794eee5f8b0546e80675381ff5e9bf3d679ffef97da86b3519f5469197ad01","sha512":"92228213ae409a4d82fd0d6ddefde938532802aa505e3f1993299c5bfc7b203b18e630d63b724009ab54f9606b4dce8e35e25b52fc2fc809343658da2bbb957d","ssdeep":"1536:YyfRclhR4HoMGGXhzgon/cTiO1ww9OebAPwpJ4Ycg7tt8mtAzHeu:YyWlnsdGokTolY1Im+zHB","tlshash":"d9630209cfdb1a9cf90ec4d38962b286ddb0bf29c7422da6d45dd0eb4cbf1182c95509","first_seen":"2024-08-19T19:14:38.340539Z","last_seen":"2026-04-27T19:21:36.438398Z","times_seen":47,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/8c32c0dfd8d692d7-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/8c32c0dfd8d692d7-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 31612\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"7b7c-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y7prSUZXQCk0EDJtRz9hfIH%2Fn0KxAu99hFvxpxARtNTvW2uVWIDZ0Yjg%2BO6eMRe%2FRBcnGlmupaetApY83B8nCPsFH4DH00AmBAy8X1cAg4nhdx74vYAEjiSQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af87f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31612, version 1.0","md5":"44260da645f811ace9e15fed4accaa9e","sha1":"8f8d28772e2bd4bd355ba7f3e879bba55d08c95c","sha256":"bc486c6bb76ac097f163873acd5a94c458d077329d67fb6da6aa87def44b1c33","sha512":"dde41ba2e42c3d34b4cc999a049be80e9ad797269cc5a017f8630519d46161880dfd654a990d46706a6a57cac530e4ab837cde13be5b5a98b40444e29dda177a","ssdeep":"768:Riw4wRnHNUmzkXcUReU7PmVpqsrlyCEWVjy9dqlJRB0o:RjN9lIDAqsZE6G9dqlzB0o","tlshash":"69e2f188cd2e8a5d0bd2d974c29b82221f7108f1ae64c4de566edd7dc45148bc4acfce","first_seen":"2023-10-30T10:51:30Z","last_seen":"2026-03-09T06:29:22.821662Z","times_seen":4,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/bc72fcbc1432c9fc-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/bc72fcbc1432c9fc-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 129484\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"1f9cc-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xuxq8LCTwWxfg%2BscoyEDl5bKyqYdxbp%2BpX7qHrf6LklMqbTvgHi5O7qO0judwcWd75aVst0qhmRr8CsZAwsy5b%2B7seE%2BLtDH6FvETf3AAOAGnquM7obo21Ed\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08bf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129484,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 129484, version 1.0","md5":"5071d158eb5ba0431b8922015ed930c6","sha1":"46a034ed9ff3728e11dc64a0c9940d552daf6083","sha256":"93c70675bf7a740fb2b357e085c31de4e1adcf2b6a636135aad9cf1d65d93b53","sha512":"6018008b75be892b1fc4609ca91b70357a756e93832b9327ce30a78c091fbca3bc43b14eb5555befc1268098e2e3641a59bb89eae61a82e2de149b4a833b2eab","ssdeep":"3072:GG0TPZl6kKpGuhPvj1xO1V7s7DHpMjbGnFRsLEekloxzlxlJy5yKat:IPZwGkvj7p7GbGnFRs4boxzPl5t","tlshash":"6cc312deb524a70da96e44ba508b47a30ff54212d2fe81b67f019cd37b12de3904e762","first_seen":"2024-10-26T16:56:26.218198Z","last_seen":"2026-06-08T15:14:53.536222Z","times_seen":10140,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/9712-6161a00c8bcda292.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/9712-6161a00c8bcda292.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"bca64-19cbf00c7c0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PA4xvo544wxnOaUzKEHv6oZErdvqGL%2Fq8BNG4JRZS%2BtayhfBBJONhO2RLCVW827E3xZP0iYxV9s2YxdfMG5kCMHv8QWo3anUNVBodXUJfTCIsibU%2FFGUuCiu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19572efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772708,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1b60dbc2d0f34f4897b0e0cea50578c3","sha1":"c09abe512d7b9863f373f9ec0e48ded6d0081b67","sha256":"1e6f3de0230405f22bfb1a134bef2939923a32d16da87bd8baa7dfb11cc88027","sha512":"628a52baad1ab8f49a4b4682a1f354f8ad47197ec557213ae8f7fa2af11368f7ae41743b0dffa6391e2a60b69a0076e3f9d03d0a01b3fc248b0b249be1781554","ssdeep":"12288:ixDXJG7m0DCRW90/BfBj3RE+Y7qOOinSJPCG26BgWZ8+WZ:CFG7mQ90/B1BE+gqOOiwNw++","tlshash":"89f42ac8b291f07587e391a5802f0507f23e6919645e84d8f376d8d57cb888e927bf3a","first_seen":"2026-03-07T19:49:10.074322Z","last_seen":"2026-03-09T06:29:22.832641Z","times_seen":3,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":139,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/b5b83cdb4e0c5af3-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/b5b83cdb4e0c5af3-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 39128\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"98d8-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwdP5fHkRcn6CtTbUtEmWyvUTou0O5rc%2FHjEkiPamSOOjARnr5Z3ABw73cnxeQLzdSlD6p3%2B7cb3MaidHdHQHEQ1is1A3Ga8Hj%2F4kxXRhRuXHIRiOfK0c%2BVr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8b42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.2097","md5":"d65a3b1d9255924adbeeabac46787723","sha1":"2f5d6025d09e81ac0a6583f050560013f2b3fcce","sha256":"b2943cf448795751c6a309662c5237904fcb74e31507271deb64437350274b8d","sha512":"5e993defeb28e2a1332a02a017fd096a2b5a5d7d9d5294959e5bd8da51ccdf6b5bbc1b568126a89c350c43029d0e43da49fe14d47f85c6f2e45e87eb2d28e455","ssdeep":"768:r9ukWoIxmQnMtkdq0wReJL2N29X+bbzkoWy2ptCC8m5e5mFLEVy3:r9u7xmxtkAzReJiFbE42bCC8ceUFLEVQ","tlshash":"1f03022fc4b1f3e9a0d05cb96a3733d9e8ef1654318bb75138ae1ee5f8d69061209135","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-06T11:10:14.385622Z","times_seen":572,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-09T06:11:00.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:00 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: X-Path=coinbase; Path=/\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/05d2153dba2045ba-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/05f186dfe80b0fd8-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/13ee1628a0d20321-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/1afb81123baff3ee-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/1e41be92c43b3255-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/1fa5e20baf5e240e-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/2cfdedf783108135-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/3d64199040ad5e8b-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/3f1f98644fcd1e08-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/4809a92492fe3061-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/543526da9b164ad9-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/5fa835660d8d83cb-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/5fb533327e18eee6-s.p.woff\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff\", \u003c/_next/static/media/60ea1dd75fc6fea5-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/68ed26f9d69f132e-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/867464f658924ca3-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/8c32c0dfd8d692d7-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/941ca19046d8a998-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/97db86bd6b8ce2a0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/a999f51f5f4fa0bd-s.p.ttf\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/ttf\", \u003c/_next/static/media/ad7693bb415d25ef-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/adb2e77b6651b97b-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/b5b83cdb4e0c5af3-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/b9ffa8f31aac6d81-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/bc72fcbc1432c9fc-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/c3e6b0225c1c1b6c-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e4af272ccee01ff0-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/ec8b63007fcc272a-s.p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJcGhUuvLEHT2p%2BleiBaIDE0JuvUGFO5WerI9%2FAprRnpG41yGt7YegLESvvM6wHl%2F5qBI%2Bp71%2BCjiNqzx3HUiOWrZCnkBXtLJ%2BsmUTQGi3pIN1fI%2FPEeF3Dx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d97eb788e55c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]}],"data":{"size":14922,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14922), with no line terminators","md5":"86c144d2cb80b4d69384871d6ae78e1c","sha1":"6a2e9c4e1ff674e04409df42d9f92f44ef549659","sha256":"ee5c8de74e5c6c3b97b8d323ee5ab8bdc6a6d25f3f49a9f8c48fa079cda55733","sha512":"2e74f699bac335b6c854a6d63ea1eac9d2373ac45f2855e38e8f26a03a8dee341c771dfcaf561bcbdf0d82aad0f8444db39f5bc797b02bcf6f2092cdfa41a2a2","ssdeep":"192:LxBCUO1XYpInvBs532vT0Ys0/e0A0bPiPQRnwSsBJPgnqzcpm0t4n1NYh:Lz3OJg4v0mvwAlfmRWCn1NYh","tlshash":"f5626619b806ec99ec73fd0e103e9d3a40cddd7b85b9d8a8d3cece5602524791786d8a","first_seen":"2026-03-09T06:11:32.20075Z","last_seen":"2026-03-09T06:11:32.20075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":43,"dns":28,"connect":1,"send":0,"wait":192,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/13ee1628a0d20321-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/13ee1628a0d20321-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 117056\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"1c940-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3GK%2BpVGprQ4rzdsdRvSxkzHn3AZJQJ1nMrN%2BIhlXKqNGyMuYijZKJmIGWbV6rg3WYM2xm1XzDg51UOVMNlfC95DqR%2BFIfedrfUMa4ZJSTqzp9TWgmq6bmPsZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae8362efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117056,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117056, version 1.0","md5":"86fd2ee9d4d410f95a501f45d2a4defe","sha1":"02579d7791d9a8149f1c9734eb0c6e1d0384074f","sha256":"53aeca952cf8dfa4e64e54956d4a8b6fcf75a9b75a4c41b2fa24de75334761a4","sha512":"d5324901357a818cbcbff2fae20402acabd754b78e290c5494e48c127e889af8e8eb0a00b6ae40c51f8f03627f71b90f7551468a7e19937df1707ce211215ad8","ssdeep":"3072:fsVBqpO7mU0bsA+oLAbzDrN2vCEkTm23DY:fs2pO7mUcvjyh2annDY","tlshash":"0fb312904c8e5f29e5d523fd2c1e561002463ec731f7e826d9f9dda1c6a8a30dd3a963","first_seen":"2024-10-26T16:56:26.206143Z","last_seen":"2026-06-08T15:14:53.528297Z","times_seen":9699,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/2cfdedf783108135-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/2cfdedf783108135-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 234260\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"39314-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4TWwDMF0V0s1nfGyuo8pG3VmKtmdyUTj9kITO33C2Li%2Bt9F8n5YHIT9KAdaacSMeuoe%2B%2FWLWldh%2B04AUJMn2uzq5hiLDavwxLjwCyYRjpHzzlVLY5ZiBqYtk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae8452efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 234260, version 1.0","md5":"b37ecd8895b373064f6e8630804f08aa","sha1":"f2bfb2774a6294a641973b2920a9b2d7b2d863c9","sha256":"7b0041c48ba67087fcf5f6e8ec8d24e95db06cae9bf78c45b4542984bcb7208c","sha512":"5732de86b7022db347749e010e64a6b5a771cdd4d81d03f20593268028455cb2ea2b4047566cc742a00106584f7584bd7d5a79bad7fab09292c8dea4493542b3","ssdeep":"6144:e1+WZBHan60UAryv9uqI7l/i2c43oOBODy9HgW69FOdns:YRZdAr6PI7Zcm7Omlr69FOs","tlshash":"6234231774803114faaa7505df798a9a45835dfdccd0ca7cc8b6203cbe6b6d9e486c2e","first_seen":"2023-05-01T11:03:15Z","last_seen":"2026-06-08T15:14:53.520285Z","times_seen":11016,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/6364-18b0fa1ad5571f95.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/6364-18b0fa1ad5571f95.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"411bb-19cbf00c7c0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcEJqPiTneTvifSK9on6P1dClso2dYYr6FqRZkHPVVMA0hk4S1vhuYYU8dkZ2TNpmy5PvoSZET1RAOfczOP8abL6iIXb7DPxSErH%2FHE0NXx9d8Fg7L0xY99h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b194c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266683,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61706), with no line terminators","md5":"df53907b01f7a978c8bedab06ff45c94","sha1":"8f3bdb8ee3cfce2b900167f5a0bbeb221c70fe20","sha256":"6edf44f1fa58da8c9278c91e1935b9686977388874c6521fe7db1af407c7895a","sha512":"291041cb13bf87ed6e98a9fa3505cfbc3400d783bc39872e9783fc95ca770d586ba5b73f261211ced55e8599b6fd22d041a873594bd55d2b8d5beaba23aa9445","ssdeep":"6144:0wm13O+6BSn5NQCkvzi0XCwXwLINU2HZdGftya:0wOkSnv3ku0XCwHnHnGftya","tlshash":"7144920609ac4f7987ec22e015f72cc401794e0ad9dc3cbfb9ada1579925bd6e0c27ad","first_seen":"2026-03-07T19:49:10.073553Z","last_seen":"2026-03-09T06:29:22.817125Z","times_seen":3,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/cfavicon.ico","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /cfavicon.ico HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: image/x-icon\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 05 Mar 2026 16:54:03 GMT\r\netag: W/\"10be-19cbeebb258\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyFMEpXQy3xJgYW%2BN%2FrN0EGr6cNmGQRYGU4stvh%2BGlGGNtL0okJoCruH9Bj325fYGuLXv4ZVbFDl39CC15PY9erMN4WuqdeWDM2aIdZvmLvXjg4TQaT9bZge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7d9cba2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"07a86440ad4eef6b014324521c3c8ec9","sha1":"96a5f18bf72289fe6f10bd8812bfcde0fc0ed73a","sha256":"8ad0d320c68326edf5f934a188ddbc8fdadb09feb39e46ed7a7246806acc65ac","sha512":"5a8996e09f36e2254ef42673bb403089e7346390b55be582b9d3b6f4993c665d0b47b71f5c7661b34db59909a148ceb60dafa1584032c71291b25c10de4dc58a","ssdeep":"24:sub7XAb8/YX8mFcy8NIGoood2GooodSDYWE58S9pQ8FngtGUNQ:dcnOpooovooo4Ot6G8Q","tlshash":"e89173d2ff90c004c0868631df72eafa5e056c245f0f405376a93f6fbab1d92b5a1061","first_seen":"2026-03-07T19:49:10.07525Z","last_seen":"2026-03-09T06:29:22.795448Z","times_seen":3,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/3f1f98644fcd1e08-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/3f1f98644fcd1e08-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26516\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"6794-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UPj%2F4%2Bj3lQVvVtoPjcWtQNi1COGoYI0bVae7WX16CsWZecu%2BqlCfWF1Ut9v7O7SY%2F57EJA953vtspAmpJYKxvLseWapo04Zc9x2gnYhccWBj%2Fz%2Bbwk%2FZ9DLp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae85e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26516, version 1.0","md5":"5036dc3715e124a66890252eb94c529f","sha1":"67974f6cbe4a222e0efb407f934e5bc87edfd331","sha256":"9b4cba2cf23b61c92347f6d5053ed2c9a66dbbd23323b38ef66e25249e65b2d3","sha512":"3d23624098e880e2785d1e3004c1b2d39119eefc03e9ad4eca29e967bedf4eb848c994d4fde8eecc1422ead30243e0940cd47bad9aa6150b9f4a0b515fccd7f6","ssdeep":"768:GkkwV263rMH3gVqRHzRjV9F3suXnBRwnAbhOTy1iglfH3LV:dV267MH3gVULF3suXn3SA9OMlfH3LV","tlshash":"b9c2e105a5ecd15abe561b7bc9da23dc38ecbfd73f4d0fe68d63e0005430502a65616a","first_seen":"2023-10-30T10:51:30Z","last_seen":"2026-03-09T06:29:22.784437Z","times_seen":5,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/css/6aa1168a724791ac.css","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/css/6aa1168a724791ac.css HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"70d8-19cbf00c7f4\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FsaMMC4y2LGkfP3xenLSmP9Zc%2F2C2nMjl72n8MoWKAmrS4g9DkzTYiIlV7qFy%2BrTUMQRhYFCsriSU8xFvRayiRlA3nFDXARRAo9WBCrGJ%2F8dx6tqNPxZ4aI%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08df2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28888,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (28888), with no line terminators","md5":"b373e05a67b2e3819a7739f40dc3d11a","sha1":"941c527aafa7906d0e5c9905a7d6d6bbaf1f2350","sha256":"c8138bb88cb3f8f6108d3cf457441c05482d22217fa56a20d9c63dd3a603cf45","sha512":"1b21147dfcc79e095549bf87ac126380e122c6e433489be293f8c79d8b112dced68f494063c085409883bf989e17dc16842f316be3d64dc41b7005d6741e343d","ssdeep":"768:xhw/Yi0QBCy/0Q0M2p0QOey70Q4tPRe1mQ:xh8YiNoy/NL2pNby7NoPRe1mQ","tlshash":"8fd2b030841e449ed531bc9332c93f23352d641195d45832ea6db9da8eeb8f763e4bac","first_seen":"2026-03-07T19:49:10.060369Z","last_seen":"2026-03-09T06:29:22.827605Z","times_seen":3,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/60ea1dd75fc6fea5-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/60ea1dd75fc6fea5-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14140\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"373c-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8UINcF8gItYF%2BzQazSMtCDWCOZ6b57pD8wY6alU2BHx9wskvx5sqcOhumIwytBGvRPopedGV8c1fStNsJqNlI64RvsXfG75IAJworO21an6XbZbMju6YP0V\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8762efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14140, version 1.0","md5":"fe6211adc96dea156eeab09139c4789e","sha1":"882548e4f33b2645d1e2a7767df649ae13423130","sha256":"ece874c827df61f534c2386e1a019ca41ded745ac72c8cd7cb4593259ec8a98e","sha512":"fea4f5913f0553780dad272cecfbe9193a8f10ac6a9b59bfe6c86699a4fb2c7e25ae4ba1c851afc4257f25705af6861f7276b5a1a011d0c3a917b734bfc0f77d","ssdeep":"384:GABJWin/urH6JcSmaz6OTfSEGRqe11nfn6:GABJWi/GLSlLjGQe3n6","tlshash":"6c52cfd40c18e97f72e09071b22287de751a8da038c7efe556470d802eb33de94adb25","first_seen":"2024-10-30T19:07:11.429604Z","last_seen":"2026-06-08T12:27:07.313938Z","times_seen":5667,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/05d2153dba2045ba-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/05d2153dba2045ba-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40016\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9c50-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S9%2BOwk43%2Fls8%2BNtCv5i56oaBCIGP4sqCvs4orywzbTD%2BxWOyQOw7U7lp7oSVMp2HtXlvOSsEnweVy5eQW0EkxAIRl%2B9I1xUG%2B8TmJdYwUznkGDdQev7Rq9Ek\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ad81b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40016,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40016, version 1.2097","md5":"b54c6aeed882bdf66df4e5fac9c2340e","sha1":"b483fbe25190262b648b390c11e6bdf9fea33edb","sha256":"81368223143520415fe7fbdc3792d2d52ad7e422d8b214661ff932afe577b779","sha512":"3afc93e98b6a5a756a0e0adfc5d04da8258cbf9065fe4a90673d3193baefce1fb9867fc235dd953a4dce5a2b033b3d1f4280f20270db913baa0f72a3a73bf804","ssdeep":"768:acqYNePjaM2LJWNjCEa18ryDLCIZJFxucAMXM9tcrYecoNj46FSc3Xy6mjLk:a2NePjaMG3CIVxu3cMj1ebx4aSc3Xnm0","tlshash":"8603f1e3a36799e3dfaf54a575c21eac1a1044d765a3afa9d5f2024730d2d0d54031ec","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-08T16:54:29.987327Z","times_seen":1454,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/4bd1b696-a28a054654e98bd3.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-a28a054654e98bd3.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"28cb8-19cbf00c7bd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WypqbEuUJ2zniNoYECZCHFAO1wSZU84LGQIJoZfXl13JaabEh8z8%2BS2k6oZhJc3%2FWSLZZdOjvQpiwRJjBMWA0RFFpPBzyYcB7X3GmzE0abd1YlOJOPR%2Bin6H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08fa2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167096,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1e6b767a9ebb2f4ea2cdb4651d9ef237","sha1":"dc900b5af964774211077b6178859a292b3486af","sha256":"8a9a5119f429493746b4d4d4c4111c6a71bb3632e31c1339a14b11ba0a4df349","sha512":"c41e607fd915ab05921f374614e662af7ea2355c9dfbe415fa7cc64fc1a787e82b307731483801889c2071dc387751a364580fd580a145c73e3850486c97e576","ssdeep":"1536:vWSSc/OtXTZdmomUsjbmLCbLcL56jtP3VfHPqmH1c59zhFcavz12smlh77eP9AH1:6c/OjDImScLOTD1sFc0Olhe2WX+","tlshash":"4ef3f9ec3999e651aeb302a700df28037378262b240d4d60a614fd9db57845bb17bfde","first_seen":"2025-10-11T12:14:40.06089Z","last_seen":"2026-03-09T06:29:22.809059Z","times_seen":8,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/9948-437dfbb62e980c08.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/9948-437dfbb62e980c08.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"2754-19cbf00c7be\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FRhYQaTjHlTheJ1lE6A3NsaBckYkFNlri2zZiEYbEbaPZvRMS0G7L2mZAPNawZSucOkg5t1Xj7ofKb6wjr8Hh4jMF0dcGiXDaB4JSSelIdCsOJEZ7HpejTq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19442efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10068,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10068), with no line terminators","md5":"cc0cb68d273bfc90e45cb935afadec03","sha1":"7d09ea7381bd3dde5dbe21b2ebb5ad94ef93ac9f","sha256":"b20bc2372a1d5aa76a69786c8b55b6fe408a8df07fc21edc427ea7a0ec98ceb1","sha512":"76d3a87bcd34951bb864bfc9fca3a9aa30f40d4c8cce94774a189c3e165b3be9e04c371b50532dc8ea5da62b627e259f4cb5f9c47532e1be4eeeb6e2da94a31b","ssdeep":"192:MHpzvDVW+DmYBA5Xr39i6QfAOHW8rnnmNzxd2KL6Im5Y1wOc3YXwV9GWx:MHpz7tm8u330l1LbFIXwV9GWx","tlshash":"ca22c79ab1d1f8e2c3bb0061443b100bb2791d7d285e7154b7b49cebf9b046da1a3f59","first_seen":"2026-03-07T19:49:10.064503Z","last_seen":"2026-03-09T06:29:22.838974Z","times_seen":3,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/app/page-ed1b7853ea17ed32.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/app/page-ed1b7853ea17ed32.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"1ae676-19cbf00c7bd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvrjdUvAkW00ZKjd806woy2W7G9RU3kvF74XeL5IWOIsUBPH0aTYgr6SZJ7tgdmuw0T25JxZOzv5yagZWTvdZzoU9nhlIzjHvtS6GDhhT6qefA%2BzXuJtYPit\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19632efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1762934,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"fa7b1aff24897eb1b4dc8e0b57433f45","sha1":"727ad9ff79afa1b9a1467bb49c44774a12f2ee08","sha256":"233cdf54623ef6f4f4a113166aa47a8e29fe2e3c430ba4df3a7d4a768dc721bb","sha512":"31f2378dbedce4467de9085c5d0fe5b70be5e46d444191a79e677fb6335e8b8c53a373f868350f68d67db5e61e870c6db4e4a83433a5a680a112c6479cdc743a","ssdeep":"12288:yDwmxDxBlu4Dvtuxb8ezkLbxX54iPkPvWB+bWZgx8NNIuGdNnjqkPWeIFafk1Eml:yDBS8ezkEg1IuGd4htVsRu","tlshash":"68250848be867dbd67af089c10ff140db12f7d84ea0a8098f5b8f55d386a4886553fd8","first_seen":"2026-03-09T06:11:32.214336Z","last_seen":"2026-03-09T06:29:22.830947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/cfavicon.ico","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /cfavicon.ico HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: image/x-icon\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 05 Mar 2026 16:54:03 GMT\r\netag: W/\"10be-19cbeebb258\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vCMcoS%2BciJ1bw0myPDjSl1aECFkn0Z%2BFFWIOrpPGptAbWw8ZRRfxDHgZRh2JCnM%2FP4Skrubv2M77ztVTnVdMJX5%2F85UAG8QBXB9QygJH%2F615T0bZICS2wqi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7d9cbd2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"07a86440ad4eef6b014324521c3c8ec9","sha1":"96a5f18bf72289fe6f10bd8812bfcde0fc0ed73a","sha256":"8ad0d320c68326edf5f934a188ddbc8fdadb09feb39e46ed7a7246806acc65ac","sha512":"5a8996e09f36e2254ef42673bb403089e7346390b55be582b9d3b6f4993c665d0b47b71f5c7661b34db59909a148ceb60dafa1584032c71291b25c10de4dc58a","ssdeep":"24:sub7XAb8/YX8mFcy8NIGoood2GooodSDYWE58S9pQ8FngtGUNQ:dcnOpooovooo4Ot6G8Q","tlshash":"e89173d2ff90c004c0868631df72eafa5e056c245f0f405376a93f6fbab1d92b5a1061","first_seen":"2026-03-07T19:49:10.07525Z","last_seen":"2026-03-09T06:29:22.795448Z","times_seen":3,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/1e41be92c43b3255-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/1e41be92c43b3255-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 37520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9290-19cbf00c7b7\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bn%2F%2BHuAzuCD6yZ5Uz4JvszNsL4rOIDLXZyWTv6ERK0zsXsxjOhKIivPfP47HUy2wqBCknj3lCHdgHQXn4HCVfKMDDNxy%2FDDFlD2AWgFZQYOHruQMy6V3SEgB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae83d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37520,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37520, version 1.0","md5":"b7627e3c9663757d70121f2ad4c8d986","sha1":"75be45f9d2d223ca9db09fc4fb29a14470f55f5d","sha256":"0a44e0bb6ba5c8537e8814c148ef7755f1bce12112361231f595ecc584a18d7a","sha512":"aacea6ee9d9b0eccc1670d80af09ef95f38e2bb098f0b8ecb40b794cd98b3909936e2116d6ff6561eac50608f621a2601ef320a23f5ead6f83181425957acd44","ssdeep":"768:7cfHxGPymCMqGpofV0K4bLO1uCzRPzTWprI8yrwkXrV9cBR8yFySNyi0:QZMPytYbnCzlqpr+59YFy1i0","tlshash":"e4f2f1180e54674f4aa9aaca029c74aae576a05b8743d077335c9bc8fee24b1437f1d4","first_seen":"2026-02-20T03:33:20.618197Z","last_seen":"2026-06-08T21:01:54.817622Z","times_seen":5546,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/5fa835660d8d83cb-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/5fa835660d8d83cb-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 23896\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"5d58-19cbf00c7b7\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvO6%2FJtNA3B7N%2FRxdIweJjwSSyW%2FtZra3PKen7c%2B%2FgKKv%2Fpwxgl3WW707Eci2GNmDO82RbHfbR9Zubr68cLN%2B9mv3uWHLRtM%2BnmErcbS6aNkbcX8VkENIkDA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8702efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23896, version 1.0","md5":"c6562a0c20ba6ba6682ce2cef69f69ba","sha1":"63faed5d58ff5a9422ac92d15052f1aaeff276c7","sha256":"e13c3d30a9e2ad33314ef5773f588757e9c987cd0c79dcbd375d5528dd3f9378","sha512":"078173ce3239abd0aeb85fcecca00234393d6dc1ea669acd87e082f8084e301d1edece1bf2973cd1cac9ae4277c8d93adc9b0a5a411e7f6a27407cba5fb45baf","ssdeep":"384:oJGUifl3Mr/4EauU8QCvIzwT7QuJP8ozdns1wXzT9NlFHkRaMk368JSbln:ogMr/4Er8CbQEP8sdnsqDPlFI8J0n","tlshash":"f8b2e15a0650f581fcba0a52433c2d6d8f1c4d951ec37f3d5132b8e77e4b16296da360","first_seen":"2025-10-19T12:48:44.634006Z","last_seen":"2026-04-27T17:22:38.706248Z","times_seen":8,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/941ca19046d8a998-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/941ca19046d8a998-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65792\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"10100-19cbf00c7b7\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8%2BYBhCe5DI9u%2Fl9HF9Qj73BAk34KWWOlSuU4ezbONhfLzd7C6ccs7MEFunASZYW7S53qD8gu1V%2Fdi5b9t8qoeOMpj6dg1DnIyQuTFunWip8IsOHkc4ETaBy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8842efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65792, version 4.262","md5":"82a07c9d5afdf356550ea56934ff9997","sha1":"8e66eb6d34e10174d0fe807b1702d1f6710edb26","sha256":"ea5631a165861af879ee5f1f7c48c3af7b406d33d5ee2ccf4c146d9dfef6d34b","sha512":"062bdfec310b1b79e30d03e0619162a67f8bc951514396f5186b1e79dd8f98caa88ff393b7da05abe31490237407d75aeea2c85acd9f90072e7c46218c75787f","ssdeep":"1536:Pt8p9u7BC+F2oT+FbUx6QLX3D66x4RcD/SGJsUNE:WWFRaOx1LX3O6xljSGJJq","tlshash":"575301fcf717e19a00945df42ec3c96ac8d9bec3a78a560d83891e8fcf075416b46949","first_seen":"2025-05-29T13:27:04.839777Z","last_seen":"2026-06-06T05:27:48.941649Z","times_seen":763,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/ec8b63007fcc272a-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/ec8b63007fcc272a-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40076\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9c8c-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xl4%2B%2FraHgFYjzZ6RR3T9VY41xppzR%2FqESopGSTM4%2FeDw4rZU58gvisHSYVc6lV8P3Wo9odPm9COqwrSC5nG06z006o375jQMT8YG%2F1DvdHF03XUC2KvpUK3g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08cf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40076,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40076, version 1.2097","md5":"88e532b2f6f58aac7f1dbbd3b4731e92","sha1":"e95841b0fe50b87199b4abbfd2d10563896e0688","sha256":"a1f75e7f702059493bb74cfcb3178d095b3f6da4d313e92b3ceabc3e63eb914c","sha512":"0c5a54e3bcc57152391a87ddfe4fb3bd13271f2bb0a2aaa605da649f86b301d9ba603c359315bde13420c83651b5e266d6269f51eb5c1ab43823f8851d09b574","ssdeep":"768:UZJnqiM79PCLTjpjMz6R1T1laTnl+rNvatafqvM7B1XOv:UbQ7kly6R1ScQ4iYvev","tlshash":"3e0302b7d657282df92f5fbd6e4c81187840491770f787528a8f2066c162cb8f56fd09","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-08T16:54:29.980951Z","times_seen":1130,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/8084-bc97c745e23bd80b.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/8084-bc97c745e23bd80b.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"37ac-19cbf00c7c0\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R%2FYr4xNjeaDklecLUFNa3n%2BxBPGGADq2IrC9I2Bpthy0IepTyR2hm4wTZpneYWd26ua%2F%2FWUD8FsmFCEKTGZp%2FPLx7zbv7ixtwFyfgaS7rjWP3keFKbad4CCY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19502efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14252,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14252), with no line terminators","md5":"7f582cb3e57b491af16d5bf876c8ad0f","sha1":"12134b8a0dc23eb010ec94d3f7eda7a47733a43f","sha256":"5a82b138943e568c78095afe0ad4bc69026b393cb84d1562f7ff8e7e6a72b0db","sha512":"466bba39478ef971d19eaa038955b22fbed872c2fe1156065a96132e10db38410a3e44a8cca2a8eb7fd03400a38bf93284b45e495467288419d85cdc5cc797fc","ssdeep":"192:9ulWdYf8hT9uUA22BjdwUf5VmToOdMavoHizW6xnRFxYJC4BfPRKhMCJ:9jk8eUa9ONdWHZ6PH41oMQ","tlshash":"5152f9b73695f8d6135b80d5c43f000df3655db66739b14833a68cd9aae0584f0a2bba","first_seen":"2026-03-07T19:49:10.101532Z","last_seen":"2026-03-09T06:29:22.802456Z","times_seen":3,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/1afb81123baff3ee-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/1afb81123baff3ee-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40480\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9e20-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2FcuM1z2i%2BAME%2B%2BuyEL8T%2BLi8Ds%2B2eMiPjlhsSr3NbLMnSizr%2Bz0i2bbn37qxl%2Bmnr%2FIwY9cqwR68bhmEpo0LpinS3%2B7qE0J7t9qDty%2FROkzydwF7w6GHqTe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae83b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40480,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40480, version 1.2097","md5":"c9a6e887656f7b1014db3f1a07247ee2","sha1":"371f6e5792cff6d3bf6122392d2403f05f1ca445","sha256":"5db56ddf9ab991fc7a3a5b188b6b0c92331213ec4991b71d9821c36dcbcdb687","sha512":"8544191d90eb82b7ed77b813bebb04c918677dd206f37d151db7ee5f34feef64afee26b0ea94398a64a8aea0d8c6d8613dd1b106eb49142a485235e6e19e2710","ssdeep":"768:Czw/1p285wfUizBtYzRe195L9i980ZzsDTdPALCNVb872CEzwZfkAYl:tI85WBtd195xi980Cn6IbT9ws","tlshash":"810301d9265d774ed88b863709c227308ce889d6720be1872bb4a18371e6ec8c625fd5","first_seen":"2023-04-22T15:10:15Z","last_seen":"2026-06-08T16:54:29.981802Z","times_seen":1549,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/4809a92492fe3061-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/4809a92492fe3061-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65708\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"100ac-19cbf00c7b7\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aZWRm3M4%2Fd%2Bnj214LUC9OV4bx9CbQg5mtWDKxrqjXaM%2FXxM0Wb8WtsVG0vb5ovaroTDSDZ8pX0igActDR4%2F5TMW%2BtBnV1Ezqwce4KiuCO3GH%2BMOEnId6xYT%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae8632efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65708, version 4.262","md5":"311b7754cef71aa0c26e3ab308da9ee6","sha1":"b3b55aa91fc87c1f3f5af5ec61cf2a3495431c9f","sha256":"6741a71f929a48895901ddc3c21119dc76daf6482a4dca8c587c6a0cbc5443f9","sha512":"364797ba953000502e5e3fd17eac7feb513a2934c2a32adade355e654030f65c380d52a5be59b3ee537f6a52de6146946d2b4f4ec74b870c536eb9ed5ddac580","ssdeep":"1536:BzmnCn6TXCWm7VsKES6yFrDAfSGZEGBy0FhFIFawpVTW2oDCV34tha:0XTXxmGJS6quHER0ZIFHK2ouytY","tlshash":"cc530290da1abb8fc4223f7b10336a991b509be375eff5a216165032083b9fe805e175","first_seen":"2025-05-29T13:27:04.805257Z","last_seen":"2026-06-06T05:27:48.92397Z","times_seen":767,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/543526da9b164ad9-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/543526da9b164ad9-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 160460\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"272cc-19cbf00c7b6\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EIQDLIuu6EepbVGUZ%2BB2Li19iLCWF2OPe1BpWn3b5xGd%2F4ckt90ji0xd%2BJmZKxPy6T4kW4mBzEf%2B2lKZNTrStS49%2BrPWCXsi1E0Dgf7kmiZ%2FDyImp5F0fxIS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8692efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 160460, version 1.0","md5":"a2a3093b921a74c8fe0971b9cb510366","sha1":"4332214bc091bfb45ff88fa8527b50fb5d08e044","sha256":"92721eca0225b378076085a2969b03744fc5513e428198f34e7a98edbcdfb464","sha512":"c8034bc47632bca741e81afe5b7a77839e24e294493ad4567398c1f2df2b820df1faf858c7f40a846f4964d67bc05207d7235ca04b72d28403d83878f45b102b","ssdeep":"3072:dfstH4wOP6DylGeiX9Xl0Kv6bKB94jH2kiCZ1KzF/8BCICIQa6+qI2:WH4wOP6DDt9l34jpiCZ1KZUMVb7I2","tlshash":"d1f31244519a37c7c7ade280c932d831ee10df1364f674aa9fc279208a939e5257f72d","first_seen":"2024-12-11T12:29:07.672509Z","last_seen":"2026-04-02T14:17:18.859749Z","times_seen":127,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/5fb533327e18eee6-s.p.woff","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/5fb533327e18eee6-s.p.woff HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff\r\ncontent-length: 180124\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"2bf9c-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L8nKcUOt8TO6ZvMd5oW3nbg5Co8yMetM9WdmGjTN8DSyyC%2FeT9YrkZ8L8zI0k6kPz815OoXrw6zxLAKppuyGzjtTNhbgh%2BvVS%2FjhCW%2B%2Bj6skjwDu3n%2FBX8ug\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8752efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180124,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, CFF, length 180124, version 1.0","md5":"671b0be82a6025072a4bf4653b6bdd67","sha1":"21e78b926cca539d803fb24d7448b96875fe6f99","sha256":"1dd142cb948458f8258fa4f7ba5e61bb3060e1b41dbc55eaefce115c3518759f","sha512":"ac26112c97ad4f13a0450a74746f376c2247fdf3efeeee1526d0b6587d99d65c02c1fedd735689de8dc3c2434ecfd428c82c07ba3a150d9e5349e16fa837ccec","ssdeep":"3072:gn7hoPTF44TCXEJb3qTAA/EW0e8mQS/h225D/Wdk+BWGbHPVA705fJSO8q+zEc:g7hoT1Jb3qTAeEFeQCh2Ge++sGLPW76O","tlshash":"a30413768a6a2dcaf830d7d435f324191e238350dfc9540f8d597f4f6a6a72ac804a5f","first_seen":"2023-05-08T21:55:31Z","last_seen":"2026-03-09T06:29:22.820791Z","times_seen":46,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/a999f51f5f4fa0bd-s.p.ttf","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/a999f51f5f4fa0bd-s.p.ttf HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/ttf\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"a5d4-19cbf00c7b6\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F8npPYGH%2Bmti8UNK%2FF0iK8kKi%2FmMH0R6LgoHSdAEC3LRkbRLfjIhrst69rZdntBFswFa7gMQVBU7EJx6%2FLld5A7jwcboiunjmcuC7I6JsVFX8bj%2BLcFGsGma\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af88e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42452,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"0925ccec4a80beede826072d6c95fed9","sha1":"06c5afae46d02bf266ae07db0118e34b157a6296","sha256":"a927919c5e951f3dc518cc59732d73bc7284226581561d8778c5ed8241b158b2","sha512":"8b2d8bcfb7b8e3cf686b153d3ed12001a2490b0a38bb0052f0d54ac77102c71318480743269a53ad1d4350f4d20ee41e8c714ddbaad7525ff1d37eb281b0a851","ssdeep":"768:VoNjxfRdiFFMSC/ZGg0ItI0dq4qNLHshb9wAKNcmiqflxB7dcrJA41GgXeUE10vI:GN5RdiFFMSaZX0YI0dq4qNjshb9wAKNS","tlshash":"25132907e7c7df1ac8178a348e7262718dca9531c17f62d9ea422e0aa0dbdf64cd8615","first_seen":"2023-05-28T00:04:54Z","last_seen":"2026-06-07T04:43:36.016122Z","times_seen":438,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/4317-06ea163b936d313e.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/4317-06ea163b936d313e.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"836a-19cbf00c7bd\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0InJl%2FbORdkfv10IUxgh6FlZyrftuQmMK7PfxijqSBrbFjF0BgYAkqlYNJGvYlnXUSytEO%2FyhLlTF5ced%2FdLnwbKJSEojxouiGLDgTPF0qoX48hJTOSFYtHM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b191c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33642,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33642), with no line terminators","md5":"358a633089dbbed72389687ccff7b2b1","sha1":"037ab41218e5134c4245ce1dcc7862b1725892c7","sha256":"c6c40dd1372e4a9f44ce1c324b9e830f79d74cc883fdca972a45f36f8a858379","sha512":"81031a6a0e05a94d6553a5cf620fd75e0db3b001091193109d13e92a79f4881e23ea536fe8b2fbe4900ed81c4881e7adfc54f9cd128787f91cde9be467af3a2b","ssdeep":"768:0bbBIhnIi03trGq4xksc64Jysq7vFyV+ieA3OV4bi:EbqhIi03tcx/c64Jysq7vFypeAaf","tlshash":"94e2f980f81861389c3fa711ddde532ce13876126e624822b14e0c5ef5d6fea39b6f25","first_seen":"2025-10-11T12:14:40.018522Z","last_seen":"2026-03-09T06:29:22.816291Z","times_seen":7,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/9080-4ea33a0da6721c50.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/9080-4ea33a0da6721c50.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"1ca6-19cbf00c7be\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2B0%2BPXyUy5gbui%2FWQQK9Ov5yR%2FoLcfv0mQQZynLjGuT4W77ZHyJyMx8IO024%2FoXW%2F4W2OzUOfvUctmMXDzd%2FpuBBzEMpRxjn8g%2FIHJXmYTwOW6JHMxBwlffI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19222efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7334,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7334), with no line terminators","md5":"967fd956bd79796a75f93beb1433cce9","sha1":"c37480d5357870a5b516012a84091712b4cd8b6f","sha256":"570d8a92cf0173b2b7c53b8b296c58121a61f817ebba2b28d919b5ea3e56b45f","sha512":"e56fbee93519e8046610cc17e028e652491ff084b97ac79f200e9c50eae64e812bd5e25d6529efca1f75dc10e6d9aefc5b8a950f84bde9ae95f048de6b7a89df","ssdeep":"96:u5fh/CwrRPzHQaB3iav2ckLtN13ZKtRQOGoMhjY+1kQzFa+uJRhq4fJ9nhdYtgnm:u9RrQuSav2cE96fGHYDzbrnhxnm","tlshash":"55e1b5c2b292f524d76f4896d07f8468fa7e3624101d8138e0ba5c9534d42adf2b3fb6","first_seen":"2026-03-07T19:49:10.061846Z","last_seen":"2026-03-09T06:29:22.815481Z","times_seen":3,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/chunks/app/layout-8dda1ece11bcb6ff.js","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-8dda1ece11bcb6ff.js HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://personalvault-coinbase.com/\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"15b9b-19cbf00c7b9\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3LbrpDtXRqwDpAEdP8%2BHGJ7tESfgl7mqtgx17zkIRVX6iU24kB1ZtKMlSKI%2FRU0%2B7OvVpeaZJp4m0ediRJ5s%2BFctNVbT5UhBA5zGyR090T2hQPr3YL7rOcW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b19352efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88987,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"4557c4d08ce55fbebe40719eb0662abc","sha1":"d5464ea8634d9e4d25c3ad222118d42e560c80ff","sha256":"6eb6b13c9fed76cdd22a01e3363fcf32de316d6eebc0abbd62b8d48fd5621ade","sha512":"f5fd5721e2c91a3bba00ed9eb47f1ff6f7402399392a4db270719dd9f4d3282624606bd99872e8343951860d94abdf34fbb3d81505a75db2d8c3c1daab5826a7","ssdeep":"1536:sMXeiatatHPQoeT8wYRYF/7EYGeLthZD0c+mLQvWZ8B:sMXeZktFPwf5UGthZoc+rvWZ4","tlshash":"f193a68dba85b4b9575f29fc957f600ea17fbdd0780a0448e1a4e8e93c7124851e3fac","first_seen":"2026-03-09T06:11:32.225511Z","last_seen":"2026-03-09T06:29:22.828405Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/1fa5e20baf5e240e-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/1fa5e20baf5e240e-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65164\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"fe8c-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JCXVnwVzocvVqywezXYg5z0S9ssaCoYV1zK0TkHwzGJ0LpXRXDRZM8B2OcT4sjTiCFuKVn0RaDBtH4nRguy0WOF6gG3fO2PJjU5F%2FzqblG94jVjMnWgf1h3C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7ae8402efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65164,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65164, version 4.262","md5":"fd35db0ac99bf8f311dd619fa90b97c6","sha1":"2366e7d0ebd9f81ca8d3d80798f1dd95d1c45d61","sha256":"18c26ac9c870ef7a39904bea4d8f23b43b70ddd94d628252eaeb4e79ef1c09f4","sha512":"c60c7a5b9b0e7761052f00db091b29acdf527ee1ee65e896131dd7dba0fb20502aaa7f904747ab89238dacd3aad7974677f441b4454f4e7152b91fea68050153","ssdeep":"1536:Uv4QYaLqDEgg+KBgHcUq9n4GJ0bk5y/+BU6tXmP5Y5N:Uv4+qg56cUq9n4GWb7+BU6tXmE","tlshash":"3a5312970565d663ca6ec638f9d063899d1ba152c26463fdc6bc1148e70e832f37846a","first_seen":"2025-05-29T13:27:04.917353Z","last_seen":"2026-06-06T05:27:48.907098Z","times_seen":750,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":94,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/97db86bd6b8ce2a0-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:00.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/97db86bd6b8ce2a0-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 38680\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"9718-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EsEepyds99Xp3e0%2Ff%2BOmGU8tcu5xwrCKhuHlaDOQTc4Xhr8KxiSgCivhWK%2FBftnKIwbUvXaJ05P6SXiNEnrgXhZ%2FmwcpeMWcji24CNN5QIm%2FI4IVRZFGFq3M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7af8872efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38680,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 38680, version 1.0","md5":"973db7a40afb19bbd5b9d9c1bd846870","sha1":"a9eee9d61c4809e53c90113552506690d85b8431","sha256":"297c7d932ead11a6e3ed31ace422a54ce11a168e4d360e7427296182b9b6b965","sha512":"2a4c530c543583a07b500be9b15b4edca047750dad0bd729b80c051d0c10616435101fbcecd5343d8acd4c1f04f5200c199b5603f04ec0a8124f0f65f50168a9","ssdeep":"768:ukCvoegoKSDDYOZbtDx+J1o6lBw1RDf4ufSjNgZ2CI3OI5GJMoCYbBz+dEgJy:d09D59tDxR6/TgZ2CozYV+W4y","tlshash":"5203f106e92e2335c5badc706a0d4f04d074f63a792c35eca817456f3a59a4fd1bc5a4","first_seen":"2025-08-25T02:38:07.064819Z","last_seen":"2026-03-09T06:29:22.806709Z","times_seen":11,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"personalvault-coinbase.com/_next/static/media/b9ffa8f31aac6d81-s.p.woff2","fqdn":"personalvault-coinbase.com","domain":"personalvault-coinbase.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://personalvault-coinbase.com/","date":"2026-03-09T06:11:01.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"personalvault-coinbase.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Mar 2026 11:04:46 GMT","end":"Sat, 06 Jun 2026 11:04:45 GMT"},"fingerprint":{"sha1":"23:EF:57:16:BD:55:9B:32:B2:0E:FB:13:97:96:D7:22:F7:9B:25:CF","sha256":"98:C9:05:4D:32:99:C3:04:C0:B2:DD:6E:4E:11:65:56:32:E7:BF:A8:0E:00:F2:7A:AB:0B:BD:DE:31:53:1F:8C"}}},"request":{"raw":"GET /_next/static/media/b9ffa8f31aac6d81-s.p.woff2 HTTP/1.1\r\nHost: personalvault-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://personalvault-coinbase.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: X-Path=coinbase\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 09 Mar 2026 06:11:01 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34588\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 05 Mar 2026 17:17:05 GMT\r\netag: W/\"871c-19cbf00c7b8\"\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKiJEMyFS91JRVjKbECmyBIt0LOPg%2FkN2Kycp2mjG4SEbonoxfXR9K%2F7q6%2FmTZEGE%2BDKqUwNgPDLueGgd6PerwiF6RQ6TlsKMBpJRbC4Zz6pl1PXyRmOKGrb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d97eb7b08ba2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34588, version 0.0","md5":"492a0a160b8da9414134282ef8b62f78","sha1":"25f704e7b3c6972ff84ba95d4e92e807ab15f38b","sha256":"318d39388d650f931cfd5283ab5da11570bc0c6b1a85360bcbf03d3656d2ea8a","sha512":"ca28ed371e6846e108297faf0c4c1a5de7e3409f535d2b63365b27cb12400c7aeae9ef0169bb318533d12d74cdd9102470f1c7fc8eee58c2ba22056fdb2ad3e2","ssdeep":"768:AWUwlnmujFvuPmo/290wc01MeCYDdJa7NPsra4l3:8G7jNGJeQhoa7qa4l","tlshash":"5ff2f112f23dc91dec5b1ae0d4322ae0dc159061cabe1798d4b7399123fd01bb54eb9c","first_seen":"2024-08-23T09:37:42Z","last_seen":"2026-06-05T08:10:58.476569Z","times_seen":390,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}}]}