{"report_id":"f979f178-a2ca-498d-bcb1-17a4d2747f81","version":0,"status":"done","tags":[],"date":"2026-08-23T15:26:53Z","url":{"schema":"http","addr":"1985621-secure-coinbase.com/","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"103.224.212.141","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"https","addr":"1985621-secure-coinbase.com/?tr_uuid=20260824-0126-2619-a936-5c1b3d3e88fd\u0026fp=b784f0ef577170fff1d8422071eeddc8","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"title":"1985621-secure-coinbase.com/?tr_uuid=20260824-0126-2619-a936-5c1b3d3e88fd\u0026fp=b784f0ef577170fff1d8422071eeddc8","dom":{"size":14633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (656)","md5":"3001fe472e2e4d8174c8699740e98fef","sha1":"f05ec76748d08353d2cd90e4c2b10d2a677c66d2","sha256":"e9c7477ea9863d64b8fe92b4d23b3c7146354251ec1a779ceba4c62d7fd48bf9","sha512":"b3e7b86dd6f199cb7452fd6ae1857a00e29c8aa45b0c97f3642c411ada7e5f279cdde739932eb0abd3d102a3062102b236d3cba189769e587dc85c77f34606a2","ssdeep":"384:iOjArYiGhmZSww0qTfBAOVgmAyhtbgtl+u/cj1IO/5/9SLB:iNZBsjBjrAyhtbgt4MiIO/5/9SLB","tlshash":"7862e0588af204265513703856bf620877754763568cec00bd8ca990ffa9db38efb7e4","dom_hash":"domhash9641da7233664e7fe73b4fa377d9e46c","first_seen":"2026-08-23T15:26:58.011411Z","last_seen":"2026-08-23T15:26:58.011411Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1985621-secure-coinbase.com/","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"103.224.212.141","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T15:26:53Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"1985621-secure-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"assets.abovedomains.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2020-12-09","domain_rank":0,"first_seen":"2026-05-11T02:11:45.073615Z","last_seen":"2026-08-18T05:58:55.085472Z","alert_count":0,"request_count":1,"received_data":4651,"sent_data":521,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"1985621-secure-coinbase.com","ip":{"addr":"103.224.212.141","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":50456,"sent_data":2748,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1985621-secure-coinbase.com/js/fingerprint/iife.min.js","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"103.224.212.141","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","size":34240,"data":"","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-08-23T17:27:51.057536Z","times_seen":72418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.abovedomains.com/javascript/forsale.min.js?d=1985621-secure-coinbase.com","fqdn":"assets.abovedomains.com","domain":"abovedomains.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8c803ace24586f847c60099ab58126d","sha1":"de50f727eb8a895c42d248c6bb2459a3816eb7dd","sha256":"1c7f3dd0d0d77a17097cfcd6a2159ec1f854565b34de6e686e225779ac8aaedf","sha512":"fb179dcae1bae9671a4582fe1ee5de5487e4ec6ae1250e7215a26dfcd2b530a6ab374a23ad924910f3efa897959413b80eb433d03eec8fc38f1143e2921077e8","ssdeep":"","tlshash":"ea7176603d4524708ec2449fb67ba24ab171f139ea5ae040842ccc79d6b8e9631e7ef8","size":3596,"data":"","first_seen":"2026-08-23T15:26:58.016445Z","last_seen":"2026-08-23T15:26:58.016445Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"assets.abovedomains.com/javascript/forsale.min.js?d=1985621-secure-coinbase.com","fqdn":"assets.abovedomains.com","domain":"abovedomains.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1985621-secure-coinbase.com/?tr_uuid=20260824-0126-2619-a936-5c1b3d3e88fd\u0026fp=b784f0ef577170fff1d8422071eeddc8","date":"2026-08-23T15:26:28.685Z","timestamp":1787498788685,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.abovedomains.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 07:06:35 GMT","end":"Tue, 10 Nov 2026 07:06:34 GMT"},"fingerprint":{"sha1":"28:60:23:D5:C7:BA:A9:73:3D:19:A2:29:4A:05:90:38:1C:58:66:67","sha256":"5A:92:D1:A5:38:C5:A5:26:58:6C:88:AB:C0:7C:84:BB:38:05:48:93:34:B8:64:88:E1:6C:E0:11:09:13:63:64"}}},"request":{"raw":"GET /javascript/forsale.min.js?d=1985621-secure-coinbase.com HTTP/1.1\r\nHost: assets.abovedomains.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1985621-secure-coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 15:26:28 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 4955494\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=3600\r\ncontent-encoding: zstd\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-security-policy: default-src 'none'\r\nx-frame-options: SAMEORIGIN\r\ncdn-proxyver: 1.62\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 08/23/2026 15:26:28\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 0d1a8a37f22ae2c1d48a9e73bd54a550\r\ncdn-cache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3596,"size_decoded":2742,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3596), with no line terminators","md5":"b8c803ace24586f847c60099ab58126d","sha1":"de50f727eb8a895c42d248c6bb2459a3816eb7dd","sha256":"1c7f3dd0d0d77a17097cfcd6a2159ec1f854565b34de6e686e225779ac8aaedf","sha512":"fb179dcae1bae9671a4582fe1ee5de5487e4ec6ae1250e7215a26dfcd2b530a6ab374a23ad924910f3efa897959413b80eb433d03eec8fc38f1143e2921077e8","ssdeep":"","tlshash":"ea7176603d4524708ec2449fb67ba24ab171f139ea5ae040842ccc79d6b8e9631e7ef8","first_seen":"2026-08-23T15:26:58.016445Z","last_seen":"2026-08-23T15:26:58.016445Z","times_seen":1,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":144,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1985621-secure-coinbase.com/favicon.ico","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"103.224.212.141","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1985621-secure-coinbase.com/?tr_uuid=20260824-0126-2619-a936-5c1b3d3e88fd\u0026fp=b784f0ef577170fff1d8422071eeddc8","date":"2026-08-23T15:26:28.789Z","timestamp":1787498788789,"http_version":"HTTP/1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodotop.link","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:52:21 GMT","end":"Thu, 19 Nov 2026 12:52:20 GMT"},"fingerprint":{"sha1":"4D:E3:9B:30:3B:31:2D:6E:30:09:07:0E:E4:46:1F:D3:D7:FE:F0:21","sha256":"D4:75:EC:A7:4A:BF:04:78:56:71:3D:FD:F0:AB:65:01:32:4A:B5:FC:35:39:67:A6:31:41:3E:C1:18:89:B2:91"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1985621-secure-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1985621-secure-coinbase.com/?tr_uuid=20260824-0126-2619-a936-5c1b3d3e88fd\u0026fp=b784f0ef577170fff1d8422071eeddc8\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":94,"size_decoded":170,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e96ddceb1c305b9ad21eaae42522c26f","sha1":"ad08ae39a71ed5ba992b8b5dabc450d046354696","sha256":"9221cfedfc5e03790f46c7890bca21fcc47c5788d89dab0aa0799c492b6ae78a","sha512":"1cc850f76467645447e9935f4de13ede698727b4fb598c7bd36de2779596d8b5a85cb94b0cf1fb2259ad1d988f1f199e3f4c310dfdc22fcdd378b8e773f0dbd5","ssdeep":"","tlshash":"bdb012cf360e0d0cbb9307d24dc71bb01c2e836c2c46001027859a333400075cda71cd","first_seen":"2023-04-09T07:10:46Z","last_seen":"2026-08-23T15:26:58.021825Z","times_seen":12587,"resource_available":true,"data":null}},"time_used":508,"timings":{"blocked":0,"dns":0,"connect":166,"send":0,"wait":166,"receive":0,"ssl":176},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"1985621-secure-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1985621-secure-coinbase.com/","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"103.224.212.141","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:26:25.143Z","timestamp":1787498785143,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodotop.link","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:52:21 GMT","end":"Thu, 19 Nov 2026 12:52:20 GMT"},"fingerprint":{"sha1":"4D:E3:9B:30:3B:31:2D:6E:30:09:07:0E:E4:46:1F:D3:D7:FE:F0:21","sha256":"D4:75:EC:A7:4A:BF:04:78:56:71:3D:FD:F0:AB:65:01:32:4A:B5:FC:35:39:67:A6:31:41:3E:C1:18:89:B2:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 1985621-secure-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\nserver: Apache\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 579\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1112,"size_decoded":778,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"f7cdc68c668dd09997b4909a5000c2c3","sha1":"3a3d229f504edded21a8b49d40823c6e18da2deb","sha256":"2a60c477cd73d9a6c8db26eeff46abaa75ed260ba461d27f7d36313c5a8112a3","sha512":"58eda6f88e5ca464d79fddf769f388ca88ec9e0df255563572d09fa212117e441ef526141b4153dfbb7599e37c8c402967c08efd025463c624c80669ec0eece4","ssdeep":"","tlshash":"be2112047cc1a8137128804d48f1f04fc1771a88b5dcce7dd48de5b9ad403aeea1d8da","first_seen":"2026-08-23T15:26:58.023739Z","last_seen":"2026-08-23T15:26:58.023739Z","times_seen":1,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":-1,"dns":338,"connect":160,"send":0,"wait":175,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"1985621-secure-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1985621-secure-coinbase.com/js/fingerprint/iife.min.js","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"103.224.212.141","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1985621-secure-coinbase.com/","date":"2026-08-23T15:26:26.378Z","timestamp":1787498786378,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodotop.link","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:52:21 GMT","end":"Thu, 19 Nov 2026 12:52:20 GMT"},"fingerprint":{"sha1":"4D:E3:9B:30:3B:31:2D:6E:30:09:07:0E:E4:46:1F:D3:D7:FE:F0:21","sha256":"D4:75:EC:A7:4A:BF:04:78:56:71:3D:FD:F0:AB:65:01:32:4A:B5:FC:35:39:67:A6:31:41:3E:C1:18:89:B2:91"}}},"request":{"raw":"GET /js/fingerprint/iife.min.js HTTP/1.1\r\nHost: 1985621-secure-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1985621-secure-coinbase.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 23 Aug 2026 15:26:26 GMT\r\nserver: Apache\r\nlast-modified: Fri, 21 Aug 2026 07:20:54 GMT\r\netag: \"85c0-659897a174180\"\r\naccept-ranges: bytes\r\ncontent-length: 34240\r\ncontent-type: text/javascript\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34240,"size_decoded":34481,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33896), with CRLF line terminators","md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-08-23T17:27:51.057536Z","times_seen":72418,"resource_available":true,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":160,"send":0,"wait":165,"receive":160,"ssl":181},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"1985621-secure-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1985621-secure-coinbase.com/favicon.ico","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1985621-secure-coinbase.com/","date":"2026-08-23T15:26:27.068Z","timestamp":1787498787068,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1985621-secure-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://1985621-secure-coinbase.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T17:39:47.630109Z","times_seen":18058935,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"1985621-secure-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1985621-secure-coinbase.com/?tr_uuid=20260824-0126-2619-a936-5c1b3d3e88fd\u0026fp=b784f0ef577170fff1d8422071eeddc8","fqdn":"1985621-secure-coinbase.com","domain":"1985621-secure-coinbase.com","tld":"com"},"ip":{"addr":"103.224.212.141","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T15:26:27.310Z","timestamp":1787498787310,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dodotop.link","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 21 Aug 2026 12:52:21 GMT","end":"Thu, 19 Nov 2026 12:52:20 GMT"},"fingerprint":{"sha1":"4D:E3:9B:30:3B:31:2D:6E:30:09:07:0E:E4:46:1F:D3:D7:FE:F0:21","sha256":"D4:75:EC:A7:4A:BF:04:78:56:71:3D:FD:F0:AB:65:01:32:4A:B5:FC:35:39:67:A6:31:41:3E:C1:18:89:B2:91"}}},"request":{"raw":"GET /?tr_uuid=20260824-0126-2619-a936-5c1b3d3e88fd\u0026fp=b784f0ef577170fff1d8422071eeddc8 HTTP/1.1\r\nHost: 1985621-secure-coinbase.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://1985621-secure-coinbase.com/\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 23 Aug 2026 15:26:27 GMT\r\nserver: Apache\r\naccept-ch: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3406\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13991,"size_decoded":3909,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (580)","md5":"bdefae0466a9f3321b2dde32286b0d0f","sha1":"ba3441cf4cf84a925486b8bdcf7da2089ae9c0b9","sha256":"8caf42e3593971ce423003251cfbf1c51775a54a12943632b514c69783ea2ec6","sha512":"ec1c333e732343c88244f2899c191570b5749396b3a79404f1c9d0e48a79d40801c5745930d78f480e7323e05ef08a264fda4492afba86b7456e0e728ae06b88","ssdeep":"384:0ajArYiGhmZSww0qTfBAOVgmAyhtbgtl+u/cj1IO/5/9SL8:0RZBsjBjrAyhtbgt4MiIO/5/9SL8","tlshash":"1c52bf588af204265513703456bf620877758763568cec00bd8ca990ffa5db78efb7e4","first_seen":"2026-08-23T15:26:58.030389Z","last_seen":"2026-08-23T15:26:58.030389Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1149,"timings":{"blocked":-1,"dns":0,"connect":159,"send":0,"wait":818,"receive":0,"ssl":172},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"1985621-secure-coinbase.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}