| cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js |  104.17.25.14 | 200 OK | 139 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/ethers/5.7.2/ethers.umd.min.js IP104.17.25.14:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Size139 kB (139139 bytes) Hash71f8c498e792c6179d4e2840228f777a b651545587f6257345dc3de9ddaa444b10dedf3e a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73
GET /ajax/libs/ethers/5.7.2/ethers.umd.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://coinbase-io.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 139139
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "6350cee7-21f83"
last-modified: Thu, 20 Oct 2022 04:30:31 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 46551
expires: Sun, 06 Apr 2025 07:28:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T3GanitakIUo6zVmq3kraCphH48llxtc7R0Kfqa3yu40dJHYIZTEt85THcqOFqFJ5ifoECoJEQwM1%2FzUZpyRhCH4n99Uw%2BapQbm71W6dFJqQy8BTQ7tStaVxwJNbh6cPwKfhmgnz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875275df9ea856af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/web3/4.0.3/web3.min.js | 104.17.25.14 | 200 OK | 147 kB |
URL GET HTTP/2cdnjs.cloudflare.com/ajax/libs/web3/4.0.3/web3.min.js IP104.17.25.14:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerCloudflare, Inc. Subjectsni.cloudflaressl.com Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65470) Size147 kB (147285 bytes) Hash1932881debf364cfed402e1d0c7a54e3 e53d84ee93cb7c4eae82bdce939e80307b2cb1b1 e95c1fc6aaa308b9bbfc7ba359f34b57c65e4932440416441fe7c8864ccbdd84
GET /ajax/libs/web3/4.0.3/web3.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://coinbase-io.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: application/javascript; charset=utf-8
content-length: 147285
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "64ad8554-23f55"
last-modified: Tue, 11 Jul 2023 16:37:40 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3493956
expires: Sun, 06 Apr 2025 07:28:46 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mO3uufo5Zmew3FjI0TT0AN3weQLrfQZRuIDZnp%2B6rA7cQAAkbSVmk9O2JjUGC2oBiMQkLzz7CxJm3nV6fQ1d%2BLaukD83ftWi5ih%2BZze1KqT58pMEANULqX4BkSUSkJaHiItVJqaZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 875275dfceee56af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.min.css |  151.101.1.229 | 200 OK | 4.6 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.min.css IP151.101.1.229:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeASCII text, with very long lines (23850) Hashd849077e8b4cc93dd5c925165f2cded4 496b8e753292cc78d4964d94eee5c250d53ca13a ee3512f8c59eaa415d996f68ce467b98f6a0cfe42631bb0196df90dccb04f855
GET /npm/sweetalert2@11.7.16/dist/sweetalert2.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 11.7.16
x-jsd-version-type: version
etag: W/"5d2b-SWuOdTKSzHjUlk2U7uXCUNU8oTo"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 07:28:46 GMT
age: 1736405
x-served-by: cache-fra-eddf8230076-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4573
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/Frame.png | 172.66.47.99 | 200 OK | 2.1 kB |
URL GET HTTP/3coinbase-io.pages.dev/Frame.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 192 x 192, 8-bit colormap, non-interlaced Hashaf8eab062ba23d03b3223e4f0765cef8 609c712d810bc6e17b6cd5fb3e0bfac13da74db0 8fcad8fffd1096c991067baad2e433da6a3c4057e58531a7b592a6055d7484eb
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /Frame.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/png
content-length: 2054
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d74ef175d37544bfd9683fed9712bde6"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0v3Xe5ZZ5MmMFNzMuL%2FAyFdjtCYvItXToKczCqe1PvlnAB4FXJfrQcX4GX26NTLtYMA1b5p%2F7S%2BdhWsUL42ygx6KisM%2BIfgPWLCdOU4uEVbxxXZMztSYwnX4BMhEoCl7GFJDMS40RmI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bc6568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js | 151.101.1.229 | 200 OK | 97 kB |
URL GET HTTP/2cdn.jsdelivr.net/gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js IP151.101.1.229:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (43040) Hashca1104de538caea2d54265fbe90916b4 d6c416e5d153f500f7ac66d25a2b73db45867ad4 10d78c0a5e8664889dc8eb47c72bfa46ad0ed02c70a234be9acdefa27dbb24b0
GET /gh/ethereumjs/browser-builds/dist/ethereumjs-tx/ethereumjs-tx-1.3.3.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: master
x-jsd-version-type: branch
etag: W/"4edeb-1sQW5dFT9QD3rGbSWitz20WGetQ"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 07:28:46 GMT
age: 41027
x-served-by: cache-fra-etou8220137-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 96826
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/62365d11-b992-47f4-beed-588a457f71ed.png | 172.66.47.99 | 200 OK | 2.9 kB |
URL GET HTTP/3coinbase-io.pages.dev/62365d11-b992-47f4-beed-588a457f71ed.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced Hashc22af8b4559fbbcfdd5da045b88973b9 eba0805b11b0dcfeca0bed130fb2e4b8cf4080b8 05363b087a0ac051178a25d4262b11cb920d37ab535c9ecc91740b15a3f4075e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /62365d11-b992-47f4-beed-588a457f71ed.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/png
content-length: 2941
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "a5639f897c5bbdb8c7a9d21b28ea9fc8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O0i6vLroUMqNVWzE0zTApcB1jCuGyoscn8cgVklUdPOQ3N59sZS71Rwt8GeLgYuf5NYycvpZ%2FjfI8PRyIAGhhpHQJOmvtgOyoPvREhOWf2DCRfLy69BRbuXiIV4Gj1rhIpVR%2BlbGnNg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8be2568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/626691ce-b363-4e21-a0a5-f3e6579a85d3.png | 172.66.47.99 | 200 OK | 981 B |
URL GET HTTP/3coinbase-io.pages.dev/626691ce-b363-4e21-a0a5-f3e6579a85d3.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced Hashcf0e296e143427c7522b6ab65740fbdf 61a5aa75b617bb4f591368bd08ff15733d708a3d 9617e3eae514d0dd6c7bbe25d52df955a88c7b2de9cd68da5e8075d4ab0b8355
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /626691ce-b363-4e21-a0a5-f3e6579a85d3.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/png
content-length: 981
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "40d0dcb319db0914d53818816f75502d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n8C4a5gxzFcJ7dl1dzzl9ZJ%2F5Tk0IqXjwCBp3nyoGQZ5wYiWY8Xggc6gWAhA6rmpsQN%2BDyMSMWd1F9TawV7z7FYp9sYnKBbBH%2FiAEgnC%2BN0t3p20hFVVAVx6DVItA1LM2GGCxfQhj0Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8be3568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/4c4ea7a0-2905-41a1-8ee5-75e76c14b232.png | 172.66.47.99 | 200 OK | 4.2 kB |
URL GET HTTP/3coinbase-io.pages.dev/4c4ea7a0-2905-41a1-8ee5-75e76c14b232.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced Hash3de4f9e1ebd4402d03db7b98db075d75 4333e8d6df6b7972504b00e1905079dd5a115b3a a283eb6bcc05f0b5f38549225782461220df3ee4675ae7e74ef1a682df17a8bc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /4c4ea7a0-2905-41a1-8ee5-75e76c14b232.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/png
content-length: 4153
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d23322f91c1041e22a091f4a89111af1"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FZgRXdINOFHrU3EseMQbbJgSCxu9pIBhMRrIIjebjChGnC9H9Hk695%2BIbv3rfcVe0t3NYAVUwnB4epWf4hw8fQ44XT4TUEg7OyQamx3yMJAl%2B4cW75wcedL8ZVwthBBPQMxVMcUqEdI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8be4568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/3354091c-d5ce-476c-ab50-b2613d96e2ee.png | 172.66.47.99 | 200 OK | 2.2 kB |
URL GET HTTP/3coinbase-io.pages.dev/3354091c-d5ce-476c-ab50-b2613d96e2ee.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced Hasha6aa50d96c0a734033456e96bd2ffab3 d3286dbe69b13c8359e2352696422fbfe74515ea ba028fb227fe18be032122726be6edcfa8af82cd15427d7a6cd4e2fe6b207d78
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /3354091c-d5ce-476c-ab50-b2613d96e2ee.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/png
content-length: 2175
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "156aaea40c8cb5c1a1000a2ff8efe39c"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MK5M4YdM5w3eq%2FYjlUvVoIWG95O7HSjZaYIMGWtrX2MEn8PSEGB%2F1WDM9JB0prUNE6cRNQ9zl1Z7Q8xzv0rCbCxoKeLi%2FGjLE%2BOnmUuhb8ZAaqUNlLvDFCUdxpjdxRhxNoMPOsFIe7U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8be6568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js | 151.101.1.229 | 200 OK | 19 kB |
URL GET HTTP/2cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js IP151.101.1.229:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGlobalSign nv-sa Subjectjsdelivr.net Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09 ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File typeJavaScript source, ASCII text, with very long lines (43691) Hash0aaaa3278d29d8b8d9b3795f60d3b836 519ef68609c1f595ee6a9cbb7660e4c8585a0d41 b030031299100b9d6c6b413bf9e9d712f59695f1384ef548c3f43b0a0faecbfa
GET /npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 11.7.16
x-jsd-version-type: version
etag: W/"10917-UZ72hgnB9ZXuapy7dmDkyFhaDUE"
content-encoding: br
accept-ranges: bytes
date: Tue, 16 Apr 2024 07:28:46 GMT
age: 657745
x-served-by: cache-fra-eddf8230055-FRA, cache-hel1410029-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 19370
X-Firefox-Spdy: h2
|
|
| assets.coinbase.com/assets/245d5698473dc72a.webp | 172.64.152.241 | 200 OK | 13 kB |
URL GET HTTP/2assets.coinbase.com/assets/245d5698473dc72a.webp IP172.64.152.241:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerCloudflare, Inc. Subjectcoinbase.com Fingerprint17:6E:6E:1F:74:EF:97:21:64:D2:01:DA:3B:3D:38:19:63:00:24:00 ValidityMon, 05 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 835x458, Scaling: [none]x[none], YUV color, decoders should clamp Hash969a983ce74a462a68ba618b798a8cfa 67a6aaca9dfb9ec6cfc6c912e80fe8c5d6e2f202 217825f63cd85362766062022b2cf004c07a9bc47188f3b33e168ba7060ade55
GET /assets/245d5698473dc72a.webp HTTP/1.1
Host: assets.coinbase.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/webp
content-length: 13292
last-modified: Fri, 10 Nov 2023 19:22:00 GMT
etag: "969a983ce74a462a68ba618b798a8cfa"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31556926
x-cache: Miss from cloudfront
via: 1.1 91c2aa7e3369a817b01aa672c72e5ba0.cloudfront.net (CloudFront)
x-amz-cf-pop: JNB50-C1
x-amz-cf-id: rUy76o38KoXlYrWR2KZLbVs6fNOMyqDHfq6VYvb--BsTW1FXDQOyHQ==
cf-cache-status: HIT
age: 6855383
expires: Wed, 16 Apr 2025 13:17:32 GMT
accept-ranges: bytes
set-cookie: __cf_bm=AvhDdSqc1IK46.OfOgXwqJN.aVtiPQXbTc_zYaSpV.U-1713252526-1.0.1.1-I0WwilTrS07TbwcbMOxtybrzYouO5IPp.7IWDnKWnVymZisJR6.agXEUMy78lLw3jcX5S8IxJZZhKu9YUdy2Zg; path=/; expires=Tue, 16-Apr-24 07:58:46 GMT; domain=.coinbase.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875275e0c84456af-OSL
X-Firefox-Spdy: h2
|
|
| images.ctfassets.net/c5bd0wqjc7v0/1DrLQBxqDE4XmGXcmaGy7u/8acbd0322803e3190154169b028e9d20/freeMoney-1.5.webp | 143.204.55.54 | 200 OK | 30 kB |
URL GET HTTP/2images.ctfassets.net/c5bd0wqjc7v0/1DrLQBxqDE4XmGXcmaGy7u/8acbd0322803e3190154169b028e9d20/freeMoney-1.5.webp IP143.204.55.54:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerAmazon Subjectimages.ctfassets.net FingerprintB4:AD:54:1E:42:5A:BC:E5:5F:19:1A:F9:8B:06:8A:D3:F0:46:11:88 ValidityTue, 19 Dec 2023 00:00:00 GMT - Thu, 16 Jan 2025 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash5de118e2b690f5b854cfb7b58c3c0fe0 d57368d4be7ecd32ecc3b82ebedde956cd2f70f2 f7d696940ac77712e87388734b01e2978518291ae9dade39e0b824743ecf506e
GET /c5bd0wqjc7v0/1DrLQBxqDE4XmGXcmaGy7u/8acbd0322803e3190154169b028e9d20/freeMoney-1.5.webp HTTP/1.1
Host: images.ctfassets.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 30046
last-modified: Mon, 07 Nov 2022 20:01:34 GMT
server: Contentful Images API
access-control-allow-origin: *
date: Tue, 16 Apr 2024 02:30:06 GMT
cache-control: max-age=31536000
etag: "5de118e2b690f5b854cfb7b58c3c0fe0"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: u6gM-rbK6SRbhJWjWFKCKNjxwN0QApdYKsgFNGkBE0aZjiBsyJZBxw==
age: 17921
X-Firefox-Spdy: h2
|
|
| cdn.matomo.cloud/ikuromi.matomo.cloud/matomo.js | 54.230.111.115 | 404 Not Found | 0 B |
URL GET HTTP/2cdn.matomo.cloud/ikuromi.matomo.cloud/matomo.js IP54.230.111.115:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerAmazon Subjectcdn.matomo.cloud Fingerprint82:AD:7C:C7:03:79:96:F4:55:20:84:14:6B:42:42:99:FB:DC:33:DD ValidityFri, 27 Oct 2023 00:00:00 GMT - Sat, 23 Nov 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ikuromi.matomo.cloud/matomo.js HTTP/1.1
Host: cdn.matomo.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: CloudFront
content-type: text/html
content-length: 0
date: Tue, 16 Apr 2024 06:00:38 GMT
x-amz-replication-status: COMPLETED
last-modified: Thu, 02 Nov 2023 02:17:11 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
x-amz-version-id: x8CUW72Cdy4wRBv1lXTNc2XlWFvGGyiM
accept-ranges: bytes
x-cache: Error from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cvf8ZXq70QVbHJzcTs2JyFS670VU2PreqDCa7FUlvQ8U4h_uOVCZow==
age: 5289
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/cloud-icon.svg | 172.66.47.99 | 200 OK | 1.9 kB |
URL GET HTTP/3coinbase-io.pages.dev/cloud-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash03d1ad6c60d57b2f896ac6f57164d01a c9557b0d79801f26367d0811dc78b18c7d430bef 3826fb87430be205cde1626dac841630d14d44e411585cb3329d5a1b01be43fc
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /cloud-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"8ae4deeff3f7bf5e404456b5f8a42815"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=grZ8MUHda6ZyrclHkaUn9T3EIPETzB%2BtAvKzjy04nnG5BofcTtBM7d6qcH8naoKvxKWPA1%2Bf%2F3R58MUAqwmNSKXXA79FBTUonJJPJfuhAZX0sIus0cU0llhBG66v3VFoJGJqZnBsG4k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bc0568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| assets.coinbase.com/assets/2a688cc86b2508f2.png | 172.64.152.241 | 403 Forbidden | 8.2 kB |
URL GET HTTP/2assets.coinbase.com/assets/2a688cc86b2508f2.png IP172.64.152.241:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerCloudflare, Inc. Subjectcoinbase.com Fingerprint17:6E:6E:1F:74:EF:97:21:64:D2:01:DA:3B:3D:38:19:63:00:24:00 ValidityMon, 05 Feb 2024 00:00:00 GMT - Tue, 31 Dec 2024 23:59:59 GMT
File typegzip compressed data, from Unix Hash2266b00ba6f9a47f6d89cbfa4c12b3da 817dd6ae669671b028347c7e3a0045c623c46e40 ebd8f8b411479277405d3877178ac0435b2e7e83c4b90e03c3f99dc6d7e86f25
GET /assets/2a688cc86b2508f2.png HTTP/1.1
Host: assets.coinbase.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 403 Forbidden
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: application/xml
x-cache: Error from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rpgtOjToHTVz4Hb_fAAGJaG3Acoc-lZHSe3JLWXrDGJW2fquPWh-JQ==
cf-cache-status: MISS
set-cookie: __cf_bm=PSbnBFXBnjgREnnJtmxPvdCWv4DLhRb4Ua0wHJGMmLU-1713252526-1.0.1.1-QyCoa91N1wzZTSqRUAqsZXQmpqzcCiPulgfmnoKBYiafuBOy6J8gGHvon8n8AJi.qHixW4lPZOuulhUCWkqQxQ; path=/; expires=Tue, 16-Apr-24 07:58:46 GMT; domain=.coinbase.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 875275e0c84356af-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/cb1_new_logo_1.svg | 172.66.47.99 | 200 OK | 4.7 kB |
URL GET HTTP/3coinbase-io.pages.dev/cb1_new_logo_1.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash0ecb7b3a33af435a53cc770194c374cf 78a35053b6737b69c3352ac6113ecdaf50444e59 0f9ec8a5db38a70a7e2d3c318bb7f4c512856ef9ef0bf2c063565da784a24bf2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /cb1_new_logo_1.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1af31384129db4dc1ce9a9ee47708a02"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gLqO%2FtZ8zR5%2BiUC43JABX%2FieyT4GMDS0dGfR8huIkeH%2FYzqfCyRJe4yNYyl3a%2Ft98NKq6wCbZxKHOI5xqZDiCPYOY6snHiYk7VU2FbVnvKXOVjq6QDdcWrCuMaXrab2HIwdsbXtwIPM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bb2568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-prime-icon.svg | 172.66.47.99 | 200 OK | 7.3 kB |
URL GET HTTP/3coinbase-io.pages.dev/new-prime-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash50fdc5b9d1081435906a819863b4a663 87b182e251201c5772fb4fd6b613fd0b2fe9699a d12c6c2a991f3868d96820e2f2023e138cef3de30d001763ddcef67575f08429
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-prime-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"bc25798735921c182406236f722046e8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xo4BoHiUr5GNsx9d9Xl%2FHv2zHfmrG%2Fy4fV3kzm8skjtZrIlIbJoHhMbs198NuoQtr0Z0gbw85f5x2ykJoyuJDvxhjKub0tdExlF9f6MEoP8RRW4ApTggNx4OkvnQxAN50PJF6nUg9Wc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bb5568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/1afb81123baff3ee.woff2 | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/1afb81123baff3ee.woff2 IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2592), with CRLF line terminators Size563 kB (562691 bytes) Hash47270d22fdce60ffb5a696d13149440d 626dddca7df887ae9532b8fc435d214206a0de36 b188fe1ad6c8faed6853a5579e7680ae00735270f0f6833c3f6d0f7895208035
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /1afb81123baff3ee.woff2 HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: text/html; charset=utf-8
content-length: 562691
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V2NMdN1WkbmIvKi0CuDKWOgPLMpz%2Fi%2FTU0kVXzMHnaaf7LO2LlMET8kjJXodIDWSLvBGh7S3G8T0%2FItubucLccXyyvvMy5FACxXyBS9fGnmBqDh2pdYBHM6C0%2FptQ7IN5t%2FPHkipWRU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275e89e33568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/coinbase-advanced-trade-icon.png | 172.66.47.99 | 200 OK | 623 kB |
URL GET HTTP/3coinbase-io.pages.dev/coinbase-advanced-trade-icon.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2592), with CRLF line terminators Size623 kB (622570 bytes) Hash47270d22fdce60ffb5a696d13149440d 626dddca7df887ae9532b8fc435d214206a0de36 b188fe1ad6c8faed6853a5579e7680ae00735270f0f6833c3f6d0f7895208035
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /coinbase-advanced-trade-icon.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"430023f32c806a0c43809ad59388c188"
link: <https://fonts.googleapis.com>; rel="preconnect"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Nq2prPyu03SU%2FxqQ2WzS972FCvGYAaYZb0q9onCoII%2FAPBCZ33LWgjr3heYjEIql9mQ8FNkgOFKwU8tJPv5QcPBpECpYEJQkgy%2BfmQLVpOcD6xeYM7W7aDFJTRhC5ralUXhe0qQz%2FTM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275e83dc6568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/Delegate.svg | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/Delegate.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Size563 kB (562986 bytes) Hash800b9c02f933155e4f78fc7c15806f9f 4b3bf50c006da684479d00ee1f3e9e197e53aa62 9d5998be51963dc7359369465c523665937abf7e58f8e4411ca8495f3b22c2d1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /Delegate.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"8c6de511394be6c9904cfdb7ef6fe9ba"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P1TVqnZaGIX3J3KAi1XGSra5kexQiPUt4h7t9n1%2BqTF%2B9HSW9BEKy5T%2Beg2h41ISb1qfQ%2FVlTAi9Rm3JJU%2BFRoElpczo5TtNhdBorVDTOtwjOjV2a%2BCg8Tm3UZQTqvIZzxWcn86clFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8bdd568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/ad7693bb415d25ef.woff2 | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/ad7693bb415d25ef.woff2 IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (2592), with CRLF line terminators Size563 kB (562691 bytes) Hash47270d22fdce60ffb5a696d13149440d 626dddca7df887ae9532b8fc435d214206a0de36 b188fe1ad6c8faed6853a5579e7680ae00735270f0f6833c3f6d0f7895208035
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /ad7693bb415d25ef.woff2 HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: text/html; charset=utf-8
content-length: 562691
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ySjSHsVMIo3%2F5jhAyFnmOlYIWUQ%2Fj13w%2Fgjx%2Bb7aDEedrZ4B4nSYckRlQuwAYSIMdB%2FnHBES5Qja1cg47%2BuZa0Uzxq0XamSRbmd4MjGDGtQs%2BtNOeAWuyv3Mgdu0wAIlIIJqZPdHSuQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275e8be54568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/Base_Symbol.svg | 172.66.47.99 | 200 OK | 594 kB |
URL GET HTTP/3coinbase-io.pages.dev/Base_Symbol.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Size594 kB (593717 bytes) Hashf7486c495b8c83536df589a751a13157 9b726cbc4dd23d1796b33409e734d5baa4958e71 a5b8596391a3523658be1ecee4b1c989fe6762dd400bd3dbc96c85b4e1966c47
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /Base_Symbol.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"4f8a09b760806dd1d953ef9e81bff83e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IoGRWCcB7OlBIHn7WA2pMSFyJBXqitbgQc%2Fh8zTKl8cofb%2BeDiBk%2BMrVyTLXeNiaDJ%2FGeV9%2FJeoyEHhQvltqcTDxVkKqGfdPZ4yQ5zwXJXvAWw9z78rUcnz7AHAkCU4axbbqRBVvEMc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8bde568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/a55046bc53c5de686bf82a2d9d280b006bd8d2aa1f3bbb4eba28f0c69c7597da.png | 172.66.47.99 | 200 OK | 1.6 kB |
URL GET HTTP/3coinbase-io.pages.dev/a55046bc53c5de686bf82a2d9d280b006bd8d2aa1f3bbb4eba28f0c69c7597da.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 96 x 96, 8-bit colormap, non-interlaced Hash30bdf4bf9407688c6be2d5cff5a50ae1 a754a6b9466b5502f0d6f4ae7c36aee6fcffc5a9 2337406bf948189a074286a38e47e35c90a8e2c4239655e95009d4ddfa50059d
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /a55046bc53c5de686bf82a2d9d280b006bd8d2aa1f3bbb4eba28f0c69c7597da.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: image/png
content-length: 1591
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "bb4b45ad4879349da91be3aabff9cc92"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yV9zOCh7Q8X1cxVidDf2TKOoPHJSgoVe2RQxi9M%2FbwLT8dM1CYSwDwGBphI8VS9bSxWBO9coF3eAO2pTXHiJP3f2hIJNSh%2B4Btr9K2gZByjyYmC3buegbPyH0kHU8uOmpVxyujf3x9o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275eb1924568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/fd6899026b1e517bbb7995e5c992c71dc33b85edb3b28b66591579d6706deab2.png | 172.66.47.99 | 200 OK | 4.2 kB |
URL GET HTTP/3coinbase-io.pages.dev/fd6899026b1e517bbb7995e5c992c71dc33b85edb3b28b66591579d6706deab2.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced Hashe67068834b02f0f11ee8006752685d88 6b2857b7777dc3eea1844135d6c5b6052acc085e 16153e563f1f280a3a8ca6b2c881d6f9c4177781d4c1ce5f21506334ad3762ab
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /fd6899026b1e517bbb7995e5c992c71dc33b85edb3b28b66591579d6706deab2.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: image/png
content-length: 4230
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "0cb0405aaae18e92848fa03330ef4b29"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KvGiLQPwo%2Bn0gdZse32L91pUqp%2BEJpMf5hinaWibiaoXBKnkJ34xLle9J8vhas3uShSKcXmS9G81Osfs%2BG3wfryZY3iZIQ46WEm7dXmHXDWNBzbMH%2BT%2FdhNbDifOZDQn%2FfSJblQWbEQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275eb1925568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Inter:wght@400;500;700&family=Montserrat:wght@400;500;700&family=Raleway:wght@400;500;700&family=Roboto:wght@400;500;700&display=swap | 142.250.74.74 | 200 OK | 3.8 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Inter:wght@400;500;700&family=Montserrat:wght@400;500;700&family=Raleway:wght@400;500;700&family=Roboto:wght@400;500;700&display=swap IP142.250.74.74:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint47:5A:64:7D:9F:47:34:07:31:91:97:F7:04:42:7A:D5:EA:AD:07:4E ValidityMon, 04 Mar 2024 07:16:44 GMT - Mon, 27 May 2024 07:16:43 GMT
File typegzip compressed data, max compression Hasha9b72435423d6cade88ffd1b4e98a5b4 fca1599544d57e965d751f2d895b659035eeba5f ebaf91e80bdb1453337ad5669580fc782fbc4458006cc9237f2a583b5bf0ea8c
GET /css2?family=Inter:wght@400;500;700&family=Montserrat:wght@400;500;700&family=Raleway:wght@400;500;700&family=Roboto:wght@400;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 16 Apr 2024 07:28:46 GMT
date: Tue, 16 Apr 2024 07:28:46 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/image_26_1.png | 172.66.47.99 | 200 OK | 8.0 kB |
URL GET HTTP/3coinbase-io.pages.dev/image_26_1.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeRIFF (little-endian) data, Web/P image Hash6308f6154da591017ecb79c55e39a44a 6b8e24d8313ec9271b7e4fd497f9ab27b6d9e684 49f2a2881c78fb966b4f4bbdf2f9d6c454c79b609e5a975953c10f3b60e51049
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /image_26_1.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: image/png
content-length: 7966
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "010d4b5b24fa3840016f350e75ac9b5f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EPq%2BX2aNuSZB20%2BfOjoEQBmBSvD%2BJdkx3BAcGtQU8FuH%2FIoPhOTLd7gVjU%2FzuWS9%2FrZEYBvIrupwsORLJhOq58Dn%2Bj2stXEp30vkrP%2FlIu8%2FKWZ1PqqVuDjiR1xRqSMywOx0f%2FKy210%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275eb191e568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/4113b082d21cc5fab17fc8f2d19fb996165bcce635e6900f7fc2d57c4ef33ae9.png | 172.66.47.99 | 200 OK | 2.1 kB |
URL GET HTTP/3coinbase-io.pages.dev/4113b082d21cc5fab17fc8f2d19fb996165bcce635e6900f7fc2d57c4ef33ae9.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 128 x 128, 8-bit colormap, non-interlaced Hash3eb59b52bf27b98eefd1a5e34b56cf40 05f50409fcaf5f7b92898ee1a311ef8f79bebcaf 1b95901407d21149d48d451ffab1cdcb7bb71b9149c0e8ddc85b18c741ab1c83
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /4113b082d21cc5fab17fc8f2d19fb996165bcce635e6900f7fc2d57c4ef33ae9.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: image/png
content-length: 2094
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "ded4c8fe85c744f859a34bfed511cd4b"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqpejB3nH9Ss%2Bydbm8JBzVxeODl60GDsgYIEIOvfb1qbXE4WIA5r%2B2YoqHGyqkn9REMQ9eo6ltFlj3rMvZfSi2LlL0a00lRR36FAT3h6MYTQGzBaJAcrx8BgBuHqVYZH%2F00HJ8HjBoU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275eb1923568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 IP216.58.207.227:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15920, version 1.0 Hash3a44e06eb954b96aa043227f3534189d 23cef6993ddb2b2979e8e7647fc3763694e2ba7d b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://coinbase-io.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 Apr 2024 13:20:56 GMT
expires: Fri, 11 Apr 2025 13:20:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
age: 410871
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 IP216.58.207.227:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15860, version 1.0 Hashe9f5aaf547f165386cd313b995dddd8e acdef5603c2387b0e5bffd744b679a24a8bc1968 f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://coinbase-io.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 01:54:31 GMT
expires: Wed, 16 Apr 2025 01:54:31 GMT
cache-control: public, max-age=31536000
age: 20056
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://coinbase-io.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 09 Apr 2024 16:27:38 GMT
expires: Wed, 09 Apr 2025 16:27:38 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 572469
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jscdnweb.pages.dev/chair.js | 172.66.46.242 | 200 OK | 11 kB |
URL GET HTTP/2jscdnweb.pages.dev/chair.js IP172.66.46.242:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subjectjscdnweb.pages.dev Fingerprint1D:AA:9E:6D:04:70:58:13:1E:CD:EC:31:13:88:67:6F:B8:EA:BD:2A ValidityThu, 14 Mar 2024 19:38:57 GMT - Wed, 12 Jun 2024 19:38:56 GMT
File typeHTML document, ASCII text, with very long lines (394) Hash8333241db780fdf7eb87083eefe1156d 11584af4e01d3a5dfffd7256d0b228066cd4c94a 28c3f06ea0cd476fb77fad3bf48f8f58c93b7b38d2f3fed2a845f19e908ee595
GET /chair.js HTTP/1.1
Host: jscdnweb.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
Origin: https://coinbase-io.pages.dev
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wj1Pd9xOazgOdeH%2BzF7ceGJ3FBowPedBnrrfEKn7SOCHHu26Occ2GLsDmfbXY0kufpHfZNnh5WJGNQD39MWZKds0GsvGOl8RScn6M3ZhYCWbV5fQXxORW4xRY31tGAkJDsNfvCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275e0abf0b52d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/wallet_connect.svg | 172.66.47.99 | 200 OK | 5.8 kB |
URL GET HTTP/3coinbase-io.pages.dev/wallet_connect.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash2196b63ad9fe36e1f89d615df0c1b744 ca97ee69ccebc12f9c7cc4d1d2a70c5bf8f5e8f9 73bc498be99dc6cf3ff3e0fb5379dfaa7269e46bb4948624ef1db9e3ce0cd0e2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /wallet_connect.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"014828948a40225de2d507add8049f2f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KWInu%2FyaxnT2f6l0ckb9m7tPPsnzNfbSjHkWQpD8SL5iKEUgrMiSyQObx%2BW9ZJrSFUoV5iva9Injk3Xpv0V6ow322ouHGeIDhcuDXmA7glvyFGl895MQ7vat2iGTz3c4VPQxgc8avjc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8bec568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/trust_wallet.svg | 172.66.47.99 | 200 OK | 11 kB |
URL GET HTTP/3coinbase-io.pages.dev/trust_wallet.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hashb9484f656001ad8211f7f771fd6a29c3 b05965537e97ae5e43eee755f4e081ba8945779a 158272930bbae4a158e9317e4f68e6d9887743d4fd1c0883e34533542bfceb87
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /trust_wallet.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f800d965f8c70c22968f6d45aecb665d"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FgK6ThPZy1ZpwlBFEk%2Fj3J65DsgtmQZ0Q8%2B6CGASK8xBFuGxR8pDU1T9e3TCSaeNDv1y1N17slUGpJAiZp1WNGWjUm7UbValVk43lh2fLYLucAW4W5T%2B7y21cz9NT0OGHdEjcGGCVa8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8bea568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/binance.svg | 172.66.47.99 | 200 OK | 31 kB |
URL GET HTTP/3coinbase-io.pages.dev/binance.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hashace0ce7b2c34cdae1adf57ea9fc25a03 73491ebc473ea651eaa7eedee6d1739929294541 2efe9156d3b14c853f85c80b10d557a9ec89b7da08ce51541f399368da8d66d0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /binance.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"f2ec46cf3e487b6914d77580f5f3b99f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gSUcOg6VfXXerVZBexqQMq%2F1Tt2GE9UgSNHICfl9ZUYrteU0n1DZeV5xV5cnN%2B2Ks7j2WJzCgnH%2B1Ku%2FExaA7UfP2S7RgDd09yueX8vHkffear%2FGFROk%2BxPfJ%2FzIaz%2B8PzWP0BNwkI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8beb568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/derivativesNavigation__1_.svg | 172.66.47.99 | 200 OK | 797 B |
URL GET HTTP/3coinbase-io.pages.dev/derivativesNavigation__1_.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hasha43e838460ad190915e2bbeb11a2d185 ef7ac3062dc3f5fc7a4747d4bd6fa7163bfd48ca baacc5798ae3c3fd582c6a77393bd495f05c66b6b8049c10c9c49017ecf1b38b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /derivativesNavigation__1_.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b3a2f18227938fc073646e77a4807fbd"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eHv3wMjbhXej1v48esMKRdU37vGQ9fI1KMpG5pQ2e8c9g7Hvfe8X7uMmWI00v%2B5I8NhN2VgeE30kAoI1fFbPOqm1wFuAj2iZ5NwlKaMeI1vfAcqH6cKCnzKdzfnLnlsqAfr%2BmwIBHec%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bbe568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/coinbase-icon2.svg | 172.66.47.99 | 200 OK | 535 B |
URL GET HTTP/3coinbase-io.pages.dev/coinbase-icon2.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash3fa5e50d714deec92a5a8adceb0daf51 7323a00c98eb08334b30088d4b032287fd51b780 0636d2eb49d5e06a38446d59910e980796c341ffd62e63412062fe3dcb27afb2
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /coinbase-icon2.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"42351de9eeab2e495c3debdaeda95fec"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3SCaslvUUFjTOXux57xoaHbwhDJpYkLbjgc928hJlF2VdTD68FNbeXCOk3qj5AhxNUgWp%2BITRdSjfnbIJIL0fh6NWOui6czj4ZIbQBpTSrDw4O7oZI3cObhtdre3QJpBGvBDhETklok%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b75568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/CommerceSDK.svg | 172.66.47.99 | 200 OK | 918 B |
URL GET HTTP/3coinbase-io.pages.dev/CommerceSDK.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hashe0b46f5ee422353cbb094dd25291dc4c 12d0ce47e7cc42fe1247416d00247cc952366295 3870a3306ef549e3bbc998a2b81dedcbd92e003aa4dead14a0aba699933551d1
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /CommerceSDK.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"45d19128bfbbbd1989b540e9c47a0d41"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZkVzZvIhCG1IzjGq0YShtJ%2BzMbCuQd5y%2FLL51z2DVSdCtNtqwSRlbGIOzYLOIwlDIfepJ4tR9nzwlsODh6BiSJUbGGx6oaS4mT%2FsAKI43l1uk50ZbNSoHy7itfY6xcxzCxrtyJqXHQU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bca568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/settings.js | 172.66.47.99 | 200 OK | 6.1 kB |
URL GET HTTP/3coinbase-io.pages.dev/settings.js IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeASCII text, with very long lines (6108), with no line terminators Hashaff25d0484b4be0f84247f5f0a7f0f0d e361ff4d9cafa7df693cf978322a2795bc4bb3a1 4a45028292db2697a771d06c90812ab773f3697c9c8ee0ff24e75f472a04d170
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /settings.js HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"6a3857a1917e34c66ade97a131c3bcf3"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DqrAYUZ6WdlLEEArPLySOvvT1aho2AGT4uQOnpZz1m9bBcVP7%2BqVsrGWI6opNxdCyNOuTW3h38Iygwzh1HOBXX8CXqHfXANQ%2FnmWLn2DqYkyHkaQoRrAzaoW1e%2FXZ2%2BesrXQXX54vXc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b63568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/coinbase_wallet_logo_bg.svg | 172.66.47.99 | 200 OK | 590 B |
URL GET HTTP/3coinbase-io.pages.dev/coinbase_wallet_logo_bg.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hashf73f875554179f89568368c812c4ef83 fe349534bfcec99913f6be718223919eb14a6b57 714575ca79a5f94ce459009ae8e69c287068ce277bd7501dfd3b97fe62ab0cb8
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /coinbase_wallet_logo_bg.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"85493a64510852fb6d39f70bf3f02d84"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LcV%2FKMFcYwEwq5E5UWRqYm%2FEiaXGlzXuiN%2FtF5hT0NXqXcwwo1gEdltCqj4nDGYCjJo22IGgn0lAKm8%2BCI8Onvidema0aABruQIPLPPbR%2FOOZYCa2%2BGZJkDj%2B3WOJZL%2B2us%2BS6FNvgU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b7a568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 | 216.58.207.227 | 200 OK | 9.6 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 IP216.58.207.227:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint8F:81:43:71:C4:F3:8C:FA:6D:EC:B4:5E:1F:58:71:AA:48:42:0E:E9 ValidityMon, 04 Mar 2024 07:16:39 GMT - Mon, 27 May 2024 07:16:38 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 9628, version 1.0 Hashd9ac47c7e500fb7083b8d595eaf6fe12 112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933 495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://coinbase-io.pages.dev
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 16 Apr 2024 07:14:20 GMT
expires: Wed, 16 Apr 2025 07:14:20 GMT
cache-control: public, max-age=31536000
age: 867
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/new-card-icon.svg | 172.66.47.99 | 200 OK | 714 B |
URL GET HTTP/3coinbase-io.pages.dev/new-card-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash29f5842f6badb03abe8b90d48e41d367 a5b93e7cac0650301ff710234fedd5b87f411a3d 49b5f7ccb80fb0e814924a0e9d2ac7f58dc0e35bdec8c91f7bb170f94457aad4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-card-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"2d42ecd053fed1ebebb816aa0fc977ca"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BdK567Bua58UUr91AA0N%2Fd0LlDppi9of%2Fzz%2F37rSf08agLEfGyGum34fEVlnojrWFV%2B8H%2BoFbf3RjRyNXQBx%2BDvgHFxEJSK%2Bp6jcErNn%2BMhL5STkzairsiJTbeQ7%2F17PqeEcBCP6z1s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b7e568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-private-client-icon.svg | 172.66.47.99 | 200 OK | 594 B |
URL GET HTTP/3coinbase-io.pages.dev/new-private-client-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash089ebdb9935fc49e0522c84fc602033c bbc7bc4182cdd03e262da1e148d9c0bff842b067 65aaff3cc6b87d5fdfb290b48906e57c910ca8a107f748903f4fa7be5c3b38a4
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-private-client-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"0b56871e9ea5c3f58116f7c65cf9cde2"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4KXM2Wn4oaW9tnKfnUZvtBg8KWO%2FgZYa8%2FQfMAmML6jISZ%2BIzh4gqetgIoUsYVvQ4slBecAl5Khw89FiDnXRY9vzCBGXuwG6oW9X6ETLKkWyU5JDZzaWxLNFO%2F7z4MtihauB%2BsMBF2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df5b94568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/ec8b63007fcc272a.woff2 | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/ec8b63007fcc272a.woff2 IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
Size563 kB (562691 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /ec8b63007fcc272a.woff2 HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: text/html; charset=utf-8
content-length: 562691
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oJGIEQCGnKc1HO9sZjP%2BjNVZB0R4S3P76T39GEtvrBmrgMAbjoaKk4%2B4ECoQxkhX5ueSBaPl0TgLxLVb%2B%2Fi5f0M8X1h8Untk9XJcEs6Hj0jzUBkpSUU9yDbELgNQS6XawJSLOUHNtZs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275e8ae42568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/cf313fe804162f10.png | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/cf313fe804162f10.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
Size563 kB (562691 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /cf313fe804162f10.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:48 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=frRb70gKhQA18RvhMd8wd5FPBYPVNs67uNTezigICmOiM3Fd3LD7lfVS0rK2uYoPZP8u%2Brc1r98yqnnGenXfoaKMH8eprrwZ0I18f%2BwMhFE70oAJufWPsheORrJM3K6p%2BvJqNzZauSA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275ec4a79568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-institutional-icon.svg | 172.66.47.99 | 200 OK | 915 B |
URL GET HTTP/3coinbase-io.pages.dev/new-institutional-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash2540bfc8f40303a845625461914b762c fb130469f98a6186966fc30d8dc907bb8ed835cb f451b09bf85e9f45716bb83df1f18f7cb059c66059dead5c91346b040ad6b13b
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-institutional-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"9c32825c79e73a5d8936ae3c91477271"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RI8e2y9zMobyHyESAqUwu0VNBp7KBtB1oZWtzKxq%2FoQeczCNdwPWkUUN6Irj0jbAQLe4DlGsb%2Bb6778il0DY8orxQR5uH7EmkqO3xA0iMJhzTA9ny0WSUdfyuUyphQXgY%2FTKbmonz5k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bb4568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/PaySDK.svg | 172.66.47.99 | 200 OK | 804 B |
URL GET HTTP/3coinbase-io.pages.dev/PaySDK.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash100fc089ec5a211a8947c78d3fdca1f0 4816ca9488d068fca1b58179a94a79b38a9d7b41 ec3bc8a8adf347974f90cbc835f72676deea504b1b66eb80753f908960e69c00
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /PaySDK.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"27a87a22032304b98f465e0775a8ca99"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eqbMCe7HIbhnaHkQAoBtGI9QFl8Xop3AVz%2FTTPnlTOa20jl%2B5G5scDp8IW6%2B64SPAub7bDH2CRVbjdwpwBgKeebRhZXbJCT5RL1x6C2Zu3l9CW6wcyCK6bAtHNPBO5cR50%2BLRK3MP30%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bc3568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-earn-icon.svg | 172.66.47.99 | 200 OK | 594 B |
URL GET HTTP/3coinbase-io.pages.dev/new-earn-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash0dc32551b9ad145c1ec408976fbbb630 34f8ae4686fc08d13b641cca87ac7e1ca364f9c1 29efff3edd5f9b320631c6bbb85f14497a67e3e366015fc172bb3900726b33ff
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-earn-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3dbb96fd58da47a891a7adec5a16bfb8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4nEbwGNdZ%2Bng6otnnjIVuOhSF2aPZhfBu6Br%2FmaN6UEMEp9TQwrSSA4ctggMS8CXhPs79BkVRvw4hLwfvoS7SyV3Zo%2B3tjAnHX8ygqQdlb8U9DfdWxIjJ22aWVeWO70%2B6aAoZM0S8SM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df5b97568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-assetHub-icon.svg | 172.66.47.99 | 200 OK | 1.0 kB |
URL GET HTTP/3coinbase-io.pages.dev/new-assetHub-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash8f8d2e3f355e6ea0fa66159a12c5c8af 3be2c14cf39ec78a9ef68694b5004bc71655f638 2f6938303d695da1f959ed3492ffaa545d8c0264e60e3550a5fe6755c22d0072
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-assetHub-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"fef289f37fa217ebc187d94576d19f74"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dezyqD1BA88T0cVXkVWjhlNA8o2bDGZVQtVge68EoOC6Yn3lP%2BDnyLl7zvDpSuft0GpoGxcKhUlgDfEWzlfxHWkFo8tJSdlkZUXXkBw9bmXU58igtXj9nxfltA7IIkTOcHXbkPvpc1w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bb9568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/WalletSDK.svg | 172.66.47.99 | 200 OK | 622 B |
URL GET HTTP/3coinbase-io.pages.dev/WalletSDK.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash945cb8402fc202c59033329022c980ba cf94d5ab4fdf77d224c18a930d380195c3c38b50 f23f76d12062a813d13c6ac37fc8256ab931be546577a777cd0fce7793181ef9
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /WalletSDK.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"0bcc2891aae4eaa50fe31ae9163ea03a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L03toLaXq0g0iDWNIsYdmwmClFp72Km6IHUZQ3SVe1pz7rvKPtbAa4l3gBUwdqoDVh45lDO8wO7usbLcOW5FNzR%2BGv%2FegAbYI4W8MW4B9F9nfiq%2B%2BUK743W%2BQ2TEJbGqfzTGLY2iMoU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bc8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/chart-0.svg | 172.66.47.99 | 200 OK | 468 B |
URL GET HTTP/3coinbase-io.pages.dev/chart-0.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash6d438201eea6e7728c23c7cbcda69666 e7e6405fe00722d71ddbdeb8f2e143bd23d928e8 59906ca4227a893075f970b8412754bb06aeb7c405a3ab51fc1d8c642c5200e3
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /chart-0.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"3d0f3f11e52306120e7af5530dc35afb"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sWdI7giMEQ%2FXN9%2FeRzMyObkNJxbmN40uEkdffe3tEUVKf8wiqJmheXcrFVRcRlfJpX2qav4mQCLffyeNsc7RBbSnuwnHQUTLUrdiUZebb2R0Xrr1N5DPWw4ZWdA46xo%2FYjHzAMr2%2F%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b65568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/NFT.svg | 172.66.47.99 | 200 OK | 605 B |
URL GET HTTP/3coinbase-io.pages.dev/NFT.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash94573631fb2c81a831593e004d13454b 5cb249b3a7a74a94793db8961539a794ec05ae7c 9e3beebb8c11166a530139499c084bec783ee629a8de0edb7572897c31e691af
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /NFT.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"5a4573215fe10326d6bd2321c2446ab7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CN2ygT5mG%2FsmY3SVZyzSgUo%2BeqCx5HZLDpKJe4Y09hqTn5Iy3qrrYOMuzXP5IBN2aVj757rKIumnbW3MriJku4N%2BwVAET215nnfh57bH7%2Fc8WSAoStrXvuLW990kll8Zi3AxaHhSrjA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df5b98568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/b57ac673f06a4b0338a596817eb0a50ce16e2059f327dc117744449a47915cb2.png | 172.66.47.99 | 200 OK | 2.6 kB |
URL GET HTTP/3coinbase-io.pages.dev/b57ac673f06a4b0338a596817eb0a50ce16e2059f327dc117744449a47915cb2.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typePNG image data, 128 x 128, 8-bit colormap, non-interlaced Hash8f8d12b8691a706a99e7544bd33527c2 1ecd8325658f45911e28e94afb85f3aba3ea38c4 8022fd53c251f18cb39cefede445f1c78a3b265989232f0bb46b9c4622e55a9e
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /b57ac673f06a4b0338a596817eb0a50ce16e2059f327dc117744449a47915cb2.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: image/png
content-length: 2589
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "d25276f876d5348f41ded0a5aa9c809e"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHJDQVzUXgmBWGzBXeq0%2F4MlauGc3xlJXM2sTaGzLLAJ9O0cU4G%2BWG7Hsrvlk%2BzZIacPtAAbbpdflqU7mKkKy9I2dAZ1%2F%2F3xkqgdI3m0kIsQmq3MCFhQ7hVguxDCYcO3aBtvLSQFdr8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275eb1921568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/05d2153dba2045ba.woff2 | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/05d2153dba2045ba.woff2 IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
Size563 kB (562691 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /05d2153dba2045ba.woff2 HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: text/html; charset=utf-8
content-length: 562691
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=408gujVzj9p359Aeh9HUuTgUZT7vu78NFcMuXuojTk1Y9nMaT8DUdpZFit%2F1hIWBgtIhhdGxu4wGeJq2GNU1sJSqN1AB8MegQNO8Q9Ef9Sx1%2FFf0%2BP32FboHoTJ0iXYLQh5lMPezU38%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275e89e2a568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/2ee8edba4f470a10.png | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/2ee8edba4f470a10.png IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
Size563 kB (562691 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /2ee8edba4f470a10.png HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:48 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3bTWPfYhJG%2BMSm4TsFATiaEVcCqMdGENtPIYYZPX6261h5N8425pVlfyra%2B%2BsVndEQ9NF3p72uzlTEDsO3Q0b3ac5ER2OQqYRIGctSpXKi1L%2B%2BeFjDn%2BG1sylKbhrL%2BF4doyK%2BY80fo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275ec4a77568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/decentralizedIdentity-0.svg | 172.66.47.99 | 200 OK | 937 B |
URL GET HTTP/3coinbase-io.pages.dev/decentralizedIdentity-0.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash6eb90a0f79023f103b955de3cfa5db65 127a815b382668812daa10b5c86d5be7c897edfb 189ba3d20e4b1fb314e7d13a431b2376a852816c54cca120c53cf396afa0c868
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /decentralizedIdentity-0.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"fc97c75e49d52acdaa344e208576f787"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2bZ89y%2FEWxPqJKkxvyIqEpFTQxK14uwhZE6H%2BAS6VG5gvgdDSbbXUxe9NZH1DI1x2CWDulkdpvmULd3dcDUZSS%2BgLaPNz6Gz%2BHfG2vk0p9BOIVyt4t1xSkbd1SKNGgDd0bJ0wjSSVQ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b74568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/metamask.svg | 172.66.47.99 | 200 OK | 3.9 kB |
URL GET HTTP/3coinbase-io.pages.dev/metamask.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hashf7571336199dfacc5db2ac3caf1c19ab 2afba6f1737170f0101edb695536ff55bdf2c558 383ab6916ff000a4be9e4d379b6b889a3c1aa92f46dcd642f96eaf320d64c4ff
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /metamask.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"cf844cf41394391e878d8ae786dafeff"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rzBUBt7X9qm%2FZJt6hXovUPfibPdJtP0RgFa6WIoUbzKwWFmxQdI2p5e%2BE5PiwU6jw4%2FNvEd5keNMiMvNGTnbnVMp5lOmCJw1zSoJjZzi4hstQ6j%2Fp2mtBYbiIbpLqZggbW9SKMc79uY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8be8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/04385265cb71a9e1.woff2 | 172.66.47.99 | 200 OK | 563 kB |
URL GET HTTP/3coinbase-io.pages.dev/04385265cb71a9e1.woff2 IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
Size563 kB (562691 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /04385265cb71a9e1.woff2 HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:47 GMT
content-type: text/html; charset=utf-8
content-length: 562691
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: "430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zePkje0uCtaSbU6ig6O86CxnBklcurpm%2B98U7PwWTxYRPlArM6jK7Of%2FzJWYGWqIWb5g5v1Zeyx2bYeRbpwCrXffZtdG%2FynpGCHrSkmdT40CZM%2FTQgQawkO56c40xyYHiU3OICZSRdc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275e8de86568f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-commerce-icon.svg | 172.66.47.99 | 200 OK | 772 B |
URL GET HTTP/3coinbase-io.pages.dev/new-commerce-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hashd47a9ff2e04625a4bcecd49758b55e6b 8cc0c7a1441f1b9620e356a83c86506c70bc3925 fec581e507ea84d7a374409ae34f6954681291dd0254fd1c773899d8a3dbfc71
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-commerce-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"61718e7e959b3af240e8aca850061aa7"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=daxxrQtfGqNSPScCBIn64d8jE1sFBztxRoyCG8XzobMxLoy5k2dmNj7D6T9X5ErZDihxWqCFc3jaFAx3KkhEYMd%2BDfiDlTnZegEVZsvkl9fvRTo%2FW9NiHRQ8DdTPEAelkgFrh87TecY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bb8568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/faucet.svg | 172.66.47.99 | 200 OK | 1.6 kB |
URL GET HTTP/3coinbase-io.pages.dev/faucet.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash4918f70f512994a5b8b54ee1063334f3 873f918c8a0376c0ae6f110dd07f1b3d8e693e08 d061da56b3f180b81571e4c7867df041758b1da9da58a5dcccb460d343272545
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /faucet.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"aa046ac903937a27bbb232a0edcd8c0a"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KjYIxRnJubWp4toqpjhhCsdtvCIWpab8RRub0gSdF3Y4IOZE6PHw7v0f%2FYS3CeT%2BCNVij8gjjXa9oRz%2B9oiPM9tkwi5PtuqeItvHVFHzH3Whl5%2F%2Fw%2B%2BU%2BhROAaYj0%2Ft%2Ft%2BgmHU5fLNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8be0568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-exchange-icon.svg | 172.66.47.99 | 200 OK | 931 B |
URL GET HTTP/3coinbase-io.pages.dev/new-exchange-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash1ce2911c3ff53734f49e6852a1212fff 0cad053844733ca5adc30c1bb5d0b4a0561d2290 597e684c0ad21d68af41363fceddf56323354b7cb2038828392fc8d2131ac314
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-exchange-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"dbf5a9fcf905cdc9c4df79482736accc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7vqQYprLXcQ8J3vtrC9SpNVK87ApQ6AWClpUdiWNlI10%2F7m2y8yvhcVGKZ1mWtEcanJwhXztnhQhwZsjuM9ucHK2Z%2FGIn%2FRSTvf8OI7I%2FnFy0iOMWAi8mtHeRUYweUPPh9w60Jt1X%2BM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df7bbc568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/Earn-asset-logged-out.svg | 172.66.47.99 | 200 OK | 1.4 kB |
URL GET HTTP/3coinbase-io.pages.dev/Earn-asset-logged-out.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hashf279e5bfa5bc5c7d5da65e9cef2bf9f2 694e812d4dab7c4a74f4a075e656c441ecac50c1 52766d8fa111ff0f2bff59e4077d84086f0670a2e53278865e1cb176a7c33e9a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /Earn-asset-logged-out.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"dba74f77af1c153656ca7b4146bfe501"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VKQAFlUqiHxzc29Xo52OkP%2BUJCW03WIIoCQzzUX1xiNqRSzSZZGII4sEnQ3fkByKB0hWNcrNiZY5FEDZqNExfmB7otiqQbqzc38kD1jhFMkMQ5wM%2BGe%2F9iGI2NHUcIr7mPPdS%2FsxypM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b7b568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/coinbase.svg | 172.66.47.99 | 200 OK | 795 B |
URL GET HTTP/3coinbase-io.pages.dev/coinbase.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash384a3faf860916138483dd81e6fd6936 245864e47a0817efabe38f9e0f02dc50d174fd10 913876f64e3961f5c208600aebf6f364dd011b0223021240b24e8ade56491e95
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /coinbase.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"1755e8276b0512bc08a77dc45d1b0dbc"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DMAfwVI%2FUEqAXjkhcbRB1WTCMmgcwH26KYmr3nFi%2Bwa1QsCezEYlqxQWWYW9nbZt%2BcN0j4Q%2FwAhg1xASGZX47iSc5%2FcxiYyyA8s1%2BRcUHpeXHjsYNRAD3JruIYFgW6NUzjGpXWAiDi8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df8be9568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| | 172.66.47.99 | 200 OK | 563 kB |
URL User Request GET HTTP/2IP172.66.47.99:443
CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
Size563 kB (562691 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET / HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 16 Apr 2024 07:28:45 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"430023f32c806a0c43809ad59388c188"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kLZmjTNdVd4skTWCdO4Sk7BW5JKNZqIli%2BNdncsDhG1tpsRMT3Sou%2Fc775fqIS4m%2BYYVmlf1G62Opih15CWfEdR7pvsr7KlqJBEsYmpUGHH%2FuBU4DgvRoc5MS5kOlsFRwg6%2BNLFJXyM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275dd0fd656b1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| coinbase-io.pages.dev/Consumer_Wordmark.svg | 172.66.47.99 | 200 OK | 3.8 kB |
URL GET HTTP/3coinbase-io.pages.dev/Consumer_Wordmark.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash25941a3f7489f4d515a130339dd6d712 5d973d5d5c7c5e51e97aaf9a8f368d6b0916c8ff 49c02ea70d6e406e4233e354392ee497433154fbcfd73ed148db9e83821c204a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /Consumer_Wordmark.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"b66efb12e7c083414f3b238f8f736138"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eM6lf5xj5ykz%2BY5n6KSHW9RkHw%2FQZS14eHTLWo3DWH846dHYJzdsF8dGJIh7427ysCocU5EkihTwDOOxCp%2BKUTGf90ujJ5x8ctKcUzvqLtfammTluR4fDQkh4wqoSHqXeKCv%2F3ouWnk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df4b64568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| coinbase-io.pages.dev/new-borrow-icon.svg | 172.66.47.99 | 200 OK | 783 B |
URL GET HTTP/3coinbase-io.pages.dev/new-borrow-icon.svg IP172.66.47.99:443
Requested byhttps://coinbase-io.pages.dev/ CertificateIssuerLet's Encrypt Subjectcoinbase-io.pages.dev FingerprintDC:25:89:7D:1A:B3:64:75:F5:21:93:81:C1:0F:0A:C1:62:38:91:CE ValidityFri, 29 Mar 2024 00:01:20 GMT - Thu, 27 Jun 2024 00:01:19 GMT
File typeSVG Scalable Vector Graphics image Hash130cf5ac71b29c07a7eb445692ebc5a2 e3b11c902a89f482c77c75e2302a9f2e15db500c 835b888a62b0c29e086ceb4241741835e0b0aa62c09bb4e53173430628f8d5e0
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Coinbase |
GET /new-borrow-icon.svg HTTP/1.1
Host: coinbase-io.pages.dev
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://coinbase-io.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 16 Apr 2024 07:28:46 GMT
content-type: image/svg+xml
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
etag: W/"76e8ae8a5278f73f41314022e329d85f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKgANmlzxdxdiBhO1pXJ26SKnX%2BDzL1JGAUFhCG5PFkj1Dz5oiQMAB%2Fq5uZmpNHBTMK0ZsBhTpNWCqXCkyaaVE5o2YnAXjjX6NGDZJoMiPLRAeRP8rOBIsnneiWIn3Gh5Pqo%2F6lkVe0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 875275df5b95568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|