{"report_id":"148ac053-2acc-449f-8dc7-d7ca8469fbe2","version":6,"status":"done","tags":["google"],"date":"2026-03-30T12:15:48Z","url":{"schema":"http","addr":"donate-google-com.review.software-moling.com","fqdn":"donate-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"title":"Sign in - Google Accounts","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"donate-google-com.review.software-moling.com","fqdn":"donate-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-04T12:15:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"accounts-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"donate-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"donate-google-com.review.software-moling.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"summary":[{"fqdn":"www-google-com.review.software-moling.com","ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-30T04:44:35.242173Z","last_seen":"2026-03-30T04:44:35.242174Z","alert_count":0,"request_count":1,"received_data":6282,"sent_data":492,"comment":"","tags":null,"fingerprints":null},{"fqdn":"donate-google-com.review.software-moling.com","ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-08-13","domain_rank":0,"first_seen":"2026-03-30T12:15:50.329386Z","last_seen":"2026-03-30T12:15:50.329386Z","alert_count":4,"request_count":2,"received_data":2420915,"sent_data":1257,"comment":"","tags":null,"fingerprints":null},{"fqdn":"review.software-moling.com","ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-30T04:44:35.24184Z","last_seen":"2026-03-30T04:44:35.24184Z","alert_count":0,"request_count":1,"received_data":46476,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"accounts-google-com.review.software-moling.com","ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-08-13","domain_rank":0,"first_seen":"2026-03-30T04:44:35.243031Z","last_seen":"2026-03-30T04:44:35.243031Z","alert_count":8,"request_count":4,"received_data":3638337,"sent_data":2823,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-29T22:42:45.780712Z","alert_count":0,"request_count":1,"received_data":956331,"sent_data":736,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-29T22:16:18.281815Z","alert_count":0,"request_count":2,"received_data":112182,"sent_data":1234,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"82f0be1a26110aee5e1ba9cc10068fbe","sha1":"f98d71c7d35ef90c0a304d029c425c388db57b18","sha256":"ef7ad54d8379d96b4bc3dd4b3903d0367d68afc3f24591f275711e513c64c58e","sha512":"13a1b8dd9e3913f9cdf68855d8abaff72b584867aee21856d92d48ca5a15d09a72ed00ad76ce2d1e372e168e9053409236ef2e9e3122fa381ed3c83bad145a15","ssdeep":"192:mI/xW0KE7j4m7ex8iJc75ZxUJpF6bnMUWWQKHH3+O:me1KEsm7ex8Kc1Z9fWWpHXv","tlshash":"d802ca46a601ccf9eeba0c969532ad8cbe0c023fd6c2657bf2d0cd7427926bf051659d","size":8275,"data":"","first_seen":"2026-03-30T12:15:52.048941Z","last_seen":"2026-03-30T12:15:52.048941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"81cc91607913d3ad74e21c31e10cb9f8","sha1":"ff5e8a390310ec5d8196137a0ce21c89555ead80","sha256":"a9a9117a45bf1648e9e78f0d999a81070ed45904daf7fa672318bb04fc8c4b44","sha512":"b17e0f72732764bf476781ff5f45e9d47ee14d26cc552648777c57e1ee1e03a82de26575a0d3132116b578c7ac07f1fd70375e19a2fe141bc31036f1e87181cb","ssdeep":"","tlshash":"c3c02bbc011b050cad03744c9f3b310a80d9404c30e43f00fa709840f04700ec8c084c","size":151,"data":"","first_seen":"2026-03-26T15:35:27.526443Z","last_seen":"2026-03-31T09:09:15.727621Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8161f84d468d4bac8fe60cbf6f43a798","sha1":"df3f9ecb375d9f08aa222d77fc117aae33afd761","sha256":"4b29f74f2b853ae35a630e26054c98887a1389fc1bf87b77bd0fe58691ab791f","sha512":"e93f3dd93cd08b07177e8c2856780e33752d800067ef8debac157b68aca0f78a90e4a63e5464bfda326a98158b7a70ba355eb4decf4c7a1238c65c7cd754cd91","ssdeep":"","tlshash":"903194f971a271319893a26ea1efe24e10323615070b95588faec0605c7865b36faf3d","size":1727,"data":"","first_seen":"2024-06-12T12:53:38Z","last_seen":"2026-06-08T14:53:22.054039Z","times_seen":15208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7fde1acea557f75e062bcfa00c3d5437","sha1":"60fd87c8f28677332a780c8f12e0bcab81814f6d","sha256":"9d31ed2f33b15971396147df53f54ad905c29e22a6902c1cda53248f581c7180","sha512":"8f698f7a517232d00c9e539310572b342b5c284a26abccf455fc4908fbc6de8d4888078448b23beed8adaa496995706d28a1d9600dd2e9782e81fd95bd5a4e5b","ssdeep":"","tlshash":"30c0c01f8223240a0c2afe2871552c5913429b8c08b023205406d0083cc3234010f070","size":171,"data":"","first_seen":"2026-03-30T12:15:52.05083Z","last_seen":"2026-03-30T12:19:07.707815Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5b17204cd55d18a8a2a41824d9fec28","sha1":"40e8060add70f00c034257f9d49a50dd799ba846","sha256":"3d0c04a7592aa05499634991244c8d7cce5e5f8b7a414ef8b83d6442b6d52612","sha512":"90e62bc6a184c80b47d53e87cdacee11b2b0ba45fae0ffa147da41bb89b96539f269aa1c8f0f3fa3829d919c26e10509e2496642e372229717380fe8c9aca5ba","ssdeep":"","tlshash":"a2600000030030c00000c03c3000000c0c0000c30303c030c000c0003c3000000300f3","size":12,"data":"","first_seen":"2023-03-07T01:11:32Z","last_seen":"2026-06-08T23:09:42.960285Z","times_seen":157182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"98eddf9cd7b072e3b2ee1905eadb1d65","sha1":"995d5cf1906a53b88e06ebb37a8e24d4ffe4881d","sha256":"fd3baa84414ca7f0bb1013f5b2197d036045170da5132ec5b3835b80a244c3b2","sha512":"83e4c034cd96231d80b80eb7f8c1b8ef988d8ce4fb9c6298612b5de35f737ae7d64f3ce9846f67b9ea1f3b8a9f76d1309b36fa02de93ba9028a665f9e85de6af","ssdeep":"","tlshash":"7d61c8ddb2167c23064757e3b29f100a797768a6a698842570ecc4e037f2c3446aff3a","size":3237,"data":"","first_seen":"2025-07-30T01:26:08.120923Z","last_seen":"2026-04-30T02:54:53.686309Z","times_seen":91039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b90579d967def1905d8e58bde1d6baa6","sha1":"d90906655ce68eb39abb59c16153675683d53d5c","sha256":"f984f4834618294a8c88f19ce3af90459eb4eef60144b2b9cb6a79d12a4621d5","sha512":"72173c364cfa1e41999bb6f938174991a5717eaba62253ddc31fbf21c9b5dde599d40dfb04d56b5d9fa4b975c85df0bf9f026779e4b864830fdd79947756d159","ssdeep":"","tlshash":"01c02b331383d9304d59d0173d6d23001c9a81cf0a02d40391004800bc10443a036ca2","size":130,"data":"","first_seen":"2023-03-07T01:11:32Z","last_seen":"2026-06-08T23:09:42.961409Z","times_seen":114838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ca9fc059879b598f3d6d3003cf130b3","sha1":"d641a68a8bccf23c0fe85576609870d5f36cdd9d","sha256":"3d2b5964246a6a054c9fb0a3a79e72b47de369280fd18b7e5e0bb42a441bb38b","sha512":"0eb7f98b501fa983b31b555b84ef0688a84439981695fcc4c4b298d3083bba89cce4e3496fc0c000832b34e4b2e5e6f22c065e238bf1160ea457bd16502b6054","ssdeep":"","tlshash":"40a002f8a019e080c92361b5c767770464a3021f39428c10690087996f6163b850568c","size":63,"data":"","first_seen":"2023-03-07T01:11:32Z","last_seen":"2026-06-07T08:09:46.274111Z","times_seen":122200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e55237ed6d5f7ce83bde8d0cca42e61","sha1":"946433d944cec22230c6079404ae7822fbd4d2c4","sha256":"749ef2a56cd808c47d0d1e4ef159a9dfb1b9cd1a87e98c9f976c9a8444e650ec","sha512":"de3ed4d5f1065d80b4af07a6f5c730ec3a775cb74ff030d410a4513123dfc2b411670382bdcd937047c532153a7e0c27e622794fa4c68f8f634306393dc49b73","ssdeep":"","tlshash":"bd9000b038088c3c2a8e000cbc3ce3e83c3208a0ba2b3880c0bc38882030eca0c00e8c","size":44,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-06-08T14:53:22.05711Z","times_seen":16469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c9945db1356bbae53a7236ca993c89d","sha1":"2749a520ffda0218c59b58d5cb1c7fb5eb57fe57","sha256":"3910471ae75ecaed61ab81e7ea5e4d31537e7c6f963f098c2835576bfeecd08f","sha512":"354c20524c7dc6244443c91391ffd9c0a8dd41709478d407b2323f643acbbbcd53eecd51822e38f5079f34018f5756ee8098782b5db2ee591d39cb42ad15c6dc","ssdeep":"","tlshash":"5521578295862df3ff8593606919f709bd3c5d375bd4e2b98fc04c9d01a49b3622889d","size":1429,"data":"","first_seen":"2026-03-30T12:15:52.054653Z","last_seen":"2026-03-30T12:15:52.054653Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9eaf65b651946aba5175ce8bc6c4938c","sha1":"5eb88eaaf88be1619ad0b5929e904211d93797d9","sha256":"9ab46daedc2ddce26f244b083b3e21eeb78406434f8f02a121a4cb1bbc6d923a","sha512":"17ab8345b2beead6fa88948e7993534cb4273fd65ac14f78f0f3c84d07169042798a0c684d774b8b66ee57c9738444abdebb64f820d31c55b0d493e05ec2db94","ssdeep":"","tlshash":"6ba00200e6013158d038c8c9f387734036cc7c61738a120e09302052b3f72c7c8a13c5","size":86,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-06-08T14:53:22.058393Z","times_seen":16284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"829f10bc964777285bba11b0a8f082d2","sha1":"a4c8b8beba29cd5bfb2d261e1e62d8e16782b933","sha256":"9e87405ddefd82f5445ba85941bc4d8a96e2d72294360590f5d0d7b9526f1591","sha512":"12f2020fbf96bd0bcff1a5633a41dc35e1387d3843816825032f0af2ad103cc854446502cddd57fae0b4c068c5bf286835f19195ecdab319922f5a9851d2c1ec","ssdeep":"","tlshash":"5d111274780876722c9747f0781bb5841413711f0b8ad601622cf9a15a7ad6e1c7979c","size":876,"data":"","first_seen":"2024-06-06T21:31:15Z","last_seen":"2026-06-08T23:09:42.964423Z","times_seen":88226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"39550661f5a14af2769c5fcd94c7c610","sha1":"2e364da7bf72ba2f3714774ee9908b03a7c5e255","sha256":"391868d740537883587cd1d2cad5a6483b8adfe19042f489afdae1e8b0afe2af","sha512":"bbc65810b55fbb750c1007b613abea017d459cdc89d760da0870145f49554c7128468c66209a6f8e8864fa72d54ab89aed97cc7d491da1c8d5f250776c4c85d8","ssdeep":"768:oO6PO9j8gZxnQAz6jG5zpdSzz3GIQev3/O2slt1cESTbjCKAJhZwotg9y49Q8tuY:UPO+gZGAFV+3q6","tlshash":"1083123a4102a425ebf7dd6331c92e696e08203783d6d467a12e8dec8ed707f17797a4","size":87729,"data":"","first_seen":"2026-03-30T12:15:52.0571Z","last_seen":"2026-03-30T12:15:52.0571Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c995495d7f368b1ace6997baded555f4","sha1":"ce3d5e7d7d2352f12e9bcd9d719bba6037347f68","sha256":"51943035f382b4daf2e5e410c58c7c5424df051d65c4a8b778ffa4deec6116a1","sha512":"a5493f4d8da9bedfbc34718f0a3cdb51d92f05e002dffb9496b583033171faa6c62a297fef40b48148216e655af181ef9e128616db36bf253f1fad0b60f35270","ssdeep":"","tlshash":"6d11745b72122cb3ae076760d836b54a1dac553b43c07abccdf01e0953685e32987118","size":909,"data":"","first_seen":"2026-03-30T12:15:52.058377Z","last_seen":"2026-03-30T12:15:52.058377Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9e8952c366e9a60554a7f71116454851","sha1":"d8963a9a25ef84a654ec8507b14c25fe5b6a6345","sha256":"939214f282a1f6c694222b65366d79fb5ddbec8afcf0520fdce377506f50b7fe","sha512":"970184f3304bfa3e7c1a1be9dac1982a6912494a44cc566b2c435d3a29097e17763aeaae3eed48c2b83940ea0687b8ae87e51d06e327a5e2e1f4cb6e93626646","ssdeep":"","tlshash":"03a022caa00330033f222b030088c2a08b88aa02c8c800000fb00a8ceac82c2a2382c8","size":73,"data":"","first_seen":"2024-06-09T23:04:43Z","last_seen":"2026-06-08T14:45:44.978042Z","times_seen":5945,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"a9bfd4f86c8e28e57067065666a57d15","sha1":"6aae4fb394d37456cc34a19eaf459722586200b5","sha256":"545194f26e27f74632d8d516542b340b7ea5dff58e05b2cfbd5f26c0d3eb44f8","sha512":"c5326515d2284342ca041b2205754dd3b4ddcfdfba42f7668fea9f61f4d8a1b03be97dc2f3eb3b139202f0221c14aedced32b1a76fcae6ec17ad8228fb58124a","ssdeep":"1536:MWFpCjC2v6mhjQDbryolfWqP9pPiXhMOOmr6bXmSHWpIpYPADL1phqT91EkPo2I:vFwjTCm5QDntEebXmUIPmiPlI","tlshash":"38d3199da3b9761f48a3ade3ee37dc1f95ae2ca4004cc48e6d33e698d47d4152c29d24","size":133876,"data":"","first_seen":"2026-03-30T12:15:52.059859Z","last_seen":"2026-03-30T12:15:52.059859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"007f0bcdd0cb66301a227412875a3b34","sha1":"1ea9c31287a0701a8ef15261824195f1baff1f45","sha256":"0089340a658afdee097cbc093c866e747e186dbb320817730b864b9a30ba5483","sha512":"72683bfa692fb36d0c7411cf8a2457c185c055aab92d03f1a3f84f0cf1b0f0eb9d3f47beaf54091976b2bb0dda89116616d46caf12be5f977afae53a48b43041","ssdeep":"","tlshash":"6e41624c56df0defb569271200142eba0dad352da39ba501389c2de58fc03f3416a65b","size":2023,"data":"","first_seen":"2023-04-07T20:36:24Z","last_seen":"2026-06-06T14:06:25.991204Z","times_seen":914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"157892e49693504cf9f1c5fe5eef04f7","sha1":"9a976dc3727700415ee97148460e13405a804b88","sha256":"863f7001309cd74cb627c6432bc1abbbf9f58963adacccb12938cb136dbe7a34","sha512":"ade23130ad3954e45585bc47f3ab6e078effb65c6704d5a004d4a02c3cfebd56b05f193c36165346518e745b80fecd32f5b8346da83cff6dcf5cb905c3d58362","ssdeep":"","tlshash":"b4d0a7d7710222937f1a9fd55c14cf5c950b7949cac090384ae5c046efbc7e259130c5","size":238,"data":"","first_seen":"2026-03-30T12:15:52.061308Z","last_seen":"2026-03-30T12:15:52.061308Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"21d15126f8049fa36cda6faa7a1894b9","sha1":"c5ccf91a6928eb8b5eada0ce4c863fed19a21589","sha256":"94dfe75aedef69cedf4687564627fd5bc4156cf993464768e336101b722f2a1e","sha512":"085b0cd8b09fed2419cdf7719c6c6439644ad781078e5fbec3c6ffdc5e0d73d0b90dc35dad438bee0c4f5c227b8e720e722798ed1a463390be98d86f74f9b031","ssdeep":"","tlshash":"d7d097db10c3d4087fbe0f069eb188bcaf1d4a03c88e80c30f348b29c548680f6499c8","size":252,"data":"","first_seen":"2026-03-30T12:15:52.062289Z","last_seen":"2026-03-30T12:15:52.062289Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"review.software-moling.com/overlay.js","fqdn":"review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ba7241a28753063b9449cc272f563f6","sha1":"87306ffd2e5adf5d8c901e1137ced0b6e774ae6e","sha256":"75584403ceaf7950f9e1c234d17a3976018d534e75faafe38b1ccb92bf6da006","sha512":"658682c084393b18dca1847dd449fe0c22426e9acc56cdeae40d8804e758df6168eb492cdcd3e5908188b6b43ee97fd81f7ecb9bd69571b4f551bbf829a7b989","ssdeep":"768:nlPRBRtInUjZSLkl7JbJVo7yCORvj6wa2LqNd2lRtEtwHjOn3r0xng:nlZ1IQZnqlOlj6jd2NEtwHjOn3r0xg","tlshash":"6323c66869f21075b9a3613e97afa24c733091432505d9003c9cf6082fdcdba63b6bf9","size":45794,"data":"","first_seen":"2026-03-30T04:44:39.870289Z","last_seen":"2026-03-30T14:40:07.297141Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"50371200cd5f1f923ab39ef2ef84f798","sha1":"5a3bbc0639a7a75c53fc1ce7a8c7a0433f6b3285","sha256":"6f32e65215e120986a7ab3e61b08961abcf448f7d1986d12f94dbab7ac2ccadc","sha512":"73908688f3f29f482cb37bd9fb39ef01210dc083cb39555b8ef7adcb75df7c03259f5a1ced11debc74d2ead9228f9113ef18581d470943eca8f49e2b3f7c6b41","ssdeep":"","tlshash":"90a001b2011ac0c0cd7056b6e377234179db292f68536e8088a891e93a2a717cd28ada","size":84,"data":"","first_seen":"2023-03-07T01:11:32Z","last_seen":"2026-06-08T23:09:42.967366Z","times_seen":104760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"86340eaa15f7d21ef77bdd87fe5f8152","sha1":"c51ea42d8f35237182957fa0efc3dd97ee395d60","sha256":"da9ab11578a64739cbf8079c36f7d6e74c5fcc1e3dd6c7608c370ab47cfd7e3b","sha512":"f2db0edd685ca94ddd9d3f00740c6d08ceefd726e4371412eb4bc99d4468f5aac2f4f72c415c2254e04a10b7ac856e5d700bb3caad89e571c362a169a3693f1f","ssdeep":"","tlshash":"05b09202e8001126e034c888ab17370532ca1c527a462909441151a675e3203dca02c0","size":104,"data":"","first_seen":"2025-03-03T03:46:29.515539Z","last_seen":"2026-06-08T23:09:42.967894Z","times_seen":74007,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc27fd65ac9d559e410d5f9e59fa2af9","sha1":"12cb4bb9a62a06bc0b0332ce5ec65b6940f9e796","sha256":"3f1052fd24552c91b3fc267e57efcf2b8f77c8163ef05039fba04328bf97e4cc","sha512":"2803cd6f723d0d53695925fd83a26debb3dbf4735ad949176c181ec06626ab769a59666cfe0f4a82101921c3d91d0037ccc4d3ffdfc57d1dbbe7d8a531eeff37","ssdeep":"","tlshash":"d8a00100e6013564d035c8c86347730432cc6811738a110a88703052b2f7357c8a03c4","size":86,"data":"","first_seen":"2023-03-07T01:20:09Z","last_seen":"2026-06-08T14:53:22.066058Z","times_seen":14023,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d53cce326177d90646719ec00b1e4c6","sha1":"2a2dad8e8070cc75f690632576913204e5507bea","sha256":"6ab1cae562e5dff84d14b438e774ef72c74dddf8216cc1a27757aea37b0d605b","sha512":"64b717004adf25ba99dbe39dd3a2c49e5e0a4e8a28d33009933c109b2a9a9877a705edfbfddb539fbf6c99d33e50766612f18d2f9f3a93596cf489830978563c","ssdeep":"","tlshash":"0f51754fb9f520a69eb32172b79f7b043623a0653017e76074edc184af5119b933abc9","size":3076,"data":"","first_seen":"2026-03-30T04:44:39.918884Z","last_seen":"2026-03-30T14:40:07.316535Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c840189c04054bcacc7f4426407269e2","sha1":"334e6973a6d53f88d680f6357d20d54723bab87d","sha256":"5b0b7fb7d8a979cad3880bca475be4d770b2a25e42b3175478c922bf721ffbac","sha512":"fc2dc866f5425d4bd0ac0bfd3d56d199fb79afddbea79799d31f07736adf4601cc32e12eb30b404c4ec83ccaf04931cbc489c658ee38453d86d99907baeeeb4c","ssdeep":"","tlshash":"0ff0ac593d360531aadb10eb1e3f6b982a72762a7235d04020dfd44ddb50994c3638c5","size":596,"data":"","first_seen":"2026-03-30T04:44:39.920119Z","last_seen":"2026-03-30T14:40:07.317285Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/favicon.ico","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","date":"2026-03-30T12:15:27.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts-google-com.review.software-moling.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 01:35:01 GMT","end":"Sat, 27 Jun 2026 01:35:00 GMT"},"fingerprint":{"sha1":"CF:1D:F3:4A:00:09:BF:FE:39:9E:DB:F8:64:11:B7:AE:0C:23:DB:15","sha256":"80:F3:F9:55:81:26:6E:CA:6E:B3:A4:CD:67:09:8F:D3:9F:A9:36:13:16:25:48:24:CE:72:EB:7C:CD:6C:5A:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: accounts-google-com.review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://accounts-google-com.review.software-moling.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-GAPS=1:HWVPQfbRzkmihwFrSw8LwH58JaxRJQ:LzyWA6U2JJSG6RIA\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 30 Mar 2026 12:15:27 GMT\r\nlocation: https://www-google-com.review.software-moling.com/favicon.ico\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"accounts-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/InteractiveLogin?continue=https://donate.google.com/history\u0026followup=https://donate.google.com/history\u0026passive=1209600\u0026dsh=S336093449:1774872926750321","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:15:26.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts-google-com.review.software-moling.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 01:35:01 GMT","end":"Sat, 27 Jun 2026 01:35:00 GMT"},"fingerprint":{"sha1":"CF:1D:F3:4A:00:09:BF:FE:39:9E:DB:F8:64:11:B7:AE:0C:23:DB:15","sha256":"80:F3:F9:55:81:26:6E:CA:6E:B3:A4:CD:67:09:8F:D3:9F:A9:36:13:16:25:48:24:CE:72:EB:7C:CD:6C:5A:0A"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://donate.google.com/history\u0026followup=https://donate.google.com/history\u0026passive=1209600\u0026dsh=S336093449:1774872926750321 HTTP/1.1\r\nHost: accounts-google-com.review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-GAPS=1:HWVPQfbRzkmihwFrSw8LwH58JaxRJQ:LzyWA6U2JJSG6RIA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 30 Mar 2026 12:15:26 GMT\r\nlocation: https://accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1209825,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"accounts-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:15:26.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts-google-com.review.software-moling.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 01:35:01 GMT","end":"Sat, 27 Jun 2026 01:35:00 GMT"},"fingerprint":{"sha1":"CF:1D:F3:4A:00:09:BF:FE:39:9E:DB:F8:64:11:B7:AE:0C:23:DB:15","sha256":"80:F3:F9:55:81:26:6E:CA:6E:B3:A4:CD:67:09:8F:D3:9F:A9:36:13:16:25:48:24:CE:72:EB:7C:CD:6C:5A:0A"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw HTTP/1.1\r\nHost: accounts-google-com.review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __Host-GAPS=1:HWVPQfbRzkmihwFrSw8LwH58JaxRJQ:LzyWA6U2JJSG6RIA\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\naccept-ranges: none\r\naccess-control-allow-headers: Content-Type, Authorization, Last-Event-ID\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncross-origin-resource-policy: same-site\r\ndate: Mon, 30 Mar 2026 12:15:26 GMT\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\npragma: no-cache\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\nreporting-endpoints: default=\"/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNyksowwEcB_A1-_2SHCRJO0grj6kxI5SkJS2x_f9yUIqhDZM2_vtTSMnr4EZG7SQnj1DyJo8iJK-ZzPO0REghDhx8D5_bJ2wiJDlMrShNUit2NGtKY0VQWQAj4c9KL_Rdn5AH5PFT6oUB8ELu1BkZob7qnBohLc5HRnB5feQGU9kFFcFglJ88IMX4qRu02X7SQc3YJdXCrjZAB_DRHqDIjgDlfwfIBIvtt7QK0Te3pAZVzh2FwqH_jo5BkXhPKsgbvad8-Okq5F94MhXxKyzoinkFhh6LeQS0KWbWQbnDzJXw7TYzy2Z-6bfwOwSHLfwF0x4Lz8F7ncCfkDUocA7MLgk8D5dbAl-D6k1gdYnIsRAPWjBAJlQ1iGyDyR6RZ-AGHsC5LLIEbdAJCXv4sHcl8iFs_Im8DftwBK6tEnbDkKaURyEyPPTBN3nCESvBzfUQTWqNq9nqsNmdskNuq5VcTtnutFW3yPUtDrddarVLVoPekKlPN2Sk6LOsTfp_6tO8XQ\"\r\nserver: ESF\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-auto-login: realm=com.google\u0026args=continue%3Dhttps://donate.google.com/history\r\nx-content-type-options: nosniff\r\nx-ua-compatible: IE=edge\r\nx-xss-protection: 0\r\ncontent-length: 1209825\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1209825,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (51834)","md5":"ed46dc11c2121f1c80c46204b90f6806","sha1":"041019f8682d31671556a3c184b55dcaf6a219f9","sha256":"6788ba925f8489d5c50b478901b9fba861c0ccfb2e9da10e7da52a051e129cbc","sha512":"827f5994d27f25eb0be01d85a008a09b2affd47fdb847931f0889637a99de820a2ca9318be11457bc56c5a557ffeb183a647c228db1bea3ffff0f70fa948779b","ssdeep":"6144:YCzq3j6/8+sq3j6/8+Kq3j6/8+tq3j6/8+Iq3j6/8+DSrG0QISNt1/rMoyqo6/8r:YCgSrGtMoGjTnuAEvsd","tlshash":"fd2574df9231a07ffd73a4bae980ed4af2884dd1e64a4676bc71991342eb5b61350330","first_seen":"2026-03-30T12:15:52.044575Z","last_seen":"2026-03-30T12:15:52.044575Z","times_seen":1,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":207,"receive":245,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"accounts-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.ssu_nbyPnrE.es5.O/am=Kf4GAACiCCQDYLj_TwYAAiCIBq5nAtAEIgMAAAAAAAAAABYIAJBG/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlFA4YAq6W22VedmvFhvR366oTof6A/dti=1/m=_b,_tp","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","date":"2026-03-30T12:15:27.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.ssu_nbyPnrE.es5.O/am=Kf4GAACiCCQDYLj_TwYAAiCIBq5nAtAEIgMAAAAAAAAAABYIAJBG/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlFA4YAq6W22VedmvFhvR366oTof6A/dti=1/m=_b,_tp HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://accounts-google-com.review.software-moling.com/\r\nOrigin: https://accounts-google-com.review.software-moling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"boq-infra/identity-boq-js-css-signers\"\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\ncontent-length: 276578\r\ndate: Mon, 30 Mar 2026 12:15:27 GMT\r\nexpires: Tue, 30 Mar 2027 12:15:27 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Wed, 25 Mar 2026 00:25:21 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":955374,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"bcc022b2fbbb7f34623184a4af9b4014","sha1":"4602d758f3751b91720ced8730ff84010e16124b","sha256":"c4699176aa78aba406c263491c4e2061f910a58e0bbb5daa16ae3970715ac0fe","sha512":"b822ec3a68ceb10a7f3b9a43afc77654b4a9fffaf78716d1d9023a6c4abd81ff86597696bc7b38ac9789b0170ec00bf6237d3e0c39adba6f67fcc9be245ed84a","ssdeep":"6144:aXEInGwu+t4TzByy4Sk6NeUl+AnD/aDAq1ByF6Umpr+Iq2/SFrBedHQ:aXNGAxCl+tcxbIq2/SFrEHQ","tlshash":"56152ae9b6e1f463671367f0c42b111da22f247da22d5468f0e5dbd2ae70ab80477f18","first_seen":"2026-03-26T15:12:24.036107Z","last_seen":"2026-03-31T18:28:16.366281Z","times_seen":346,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":88,"dns":0,"connect":21,"send":0,"wait":32,"receive":82,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","date":"2026-03-30T12:15:27.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://accounts-google-com.review.software-moling.com/\r\nOrigin: https://accounts-google-com.review.software-moling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 22:56:38 GMT\r\nexpires: Sat, 27 Mar 2027 22:56:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nage: 220729\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55256, version 1.0","md5":"1e2d4737305eea41ee9198e3fd3f59c2","sha1":"abff05d701173ab7eae355be60ad30cf7f63536b","sha256":"351ba345250baf98ce325b4017ac9b96c9498f6644937ef558dc5993af676f2a","sha512":"469723131222dec7ea745b528fe62586da62d02505b6904a4b97157259dd37c26bf0d7012538ec6ab999c4a82d44f97ad7a1bc526cea9e8ee1cd30ff218fbce8","ssdeep":"768:aE9HsQuRLPPTiTRi06pYSINz9AdaTV7n5qAsVUdRwRuIDzjYTXqq2emOr8d/cNPk:aE9HsHPPR06bIhedCaAb+u2veJ8KNad","tlshash":"354302a0446ef3ca3e6ffd7d9f225d5124e22a354838caf6103721793f58b959cc1a88","first_seen":"2025-03-31T13:07:07.270523Z","last_seen":"2026-06-08T13:03:06.248725Z","times_seen":700,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":32,"dns":1,"connect":7,"send":0,"wait":12,"receive":11,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www-google-com.review.software-moling.com/favicon.ico","fqdn":"www-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","date":"2026-03-30T12:15:27.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www-google-com.review.software-moling.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 01:35:27 GMT","end":"Sat, 27 Jun 2026 01:35:26 GMT"},"fingerprint":{"sha1":"5F:97:C6:CC:40:C8:CA:21:3B:C2:3F:30:85:75:0B:59:25:D9:39:F1","sha256":"2A:1A:AF:82:9D:AC:43:51:7B:B2:86:C8:29:98:BF:39:92:A0:F9:52:15:25:A8:55:26:08:E5:5B:3F:D7:F3:B9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www-google-com.review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://accounts-google-com.review.software-moling.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-headers: Content-Type, Authorization, Last-Event-ID\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\nage: 10653\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=691200\r\ncontent-type: image/x-icon\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 30 Mar 2026 09:17:55 GMT\r\nexpires: Tue, 07 Apr 2026 09:17:55 GMT\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\nserver: sffe\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\ncontent-length: 5430\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f3418a443e7d841097c714d69ec4bcb8","sha1":"49263695f6b0cdd72f45cf1b775e660fdc36c606","sha256":"6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770","sha512":"82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563","ssdeep":"48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B","tlshash":"65b1b8b7e6c63030c85805bc49373a6d1e1b6ee31a9cf064fecc326a1a320d175256be","first_seen":"2023-04-05T04:39:39Z","last_seen":"2026-06-08T23:17:40.651297Z","times_seen":78617,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":27,"connect":35,"send":0,"wait":90,"receive":4,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donate-google-com.review.software-moling.com/","fqdn":"donate-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:15:25.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donate-google-com.review.software-moling.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 03:33:18 GMT","end":"Sat, 27 Jun 2026 03:33:17 GMT"},"fingerprint":{"sha1":"62:D8:E5:5F:99:C7:CD:26:E3:B2:0E:09:29:7F:B8:0A:C1:F7:1F:D8","sha256":"1A:33:3B:1A:26:AD:41:CB:DC:71:2B:97:12:C9:6D:DA:A9:7D:D5:90:90:4F:5A:5D:05:84:AA:45:91:26:B0:AF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: donate-google-com.review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 30 Mar 2026 12:15:26 GMT\r\nlocation: https://donate-google-com.review.software-moling.com/history\r\nset-cookie: NID=530=WnJuNiekz7LYueQvQRTAVxMjEHr3Z9eitkh-A4Oum584_o3lqiD_Ru-AHTQy53ObsLPbrju0AtZ_WbtR1bmxpWjOm4CuFa6bX3QsUutdhF4zVSkoXqMUL4O4OnksiqCDMEqPHyadV0qaVOG7g0yOvFaf2z3VhNXgwTU0XGK4VQOs5cKbVr6LB9sWvQjyZOXx49t6Br1hY5dB-g; expires=Tue, 29-Sep-2026 12:15:26 GMT; HttpOnly; Path=/; SameSite=None; Secure\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1209825,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":1256,"timings":{"blocked":126,"dns":54,"connect":31,"send":0,"wait":1003,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"donate-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"donate-google-com.review.software-moling.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donate-google-com.review.software-moling.com/history","fqdn":"donate-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:15:26.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donate-google-com.review.software-moling.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 03:33:18 GMT","end":"Sat, 27 Jun 2026 03:33:17 GMT"},"fingerprint":{"sha1":"62:D8:E5:5F:99:C7:CD:26:E3:B2:0E:09:29:7F:B8:0A:C1:F7:1F:D8","sha256":"1A:33:3B:1A:26:AD:41:CB:DC:71:2B:97:12:C9:6D:DA:A9:7D:D5:90:90:4F:5A:5D:05:84:AA:45:91:26:B0:AF"}}},"request":{"raw":"GET /history HTTP/1.1\r\nHost: donate-google-com.review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: NID=530=WnJuNiekz7LYueQvQRTAVxMjEHr3Z9eitkh-A4Oum584_o3lqiD_Ru-AHTQy53ObsLPbrju0AtZ_WbtR1bmxpWjOm4CuFa6bX3QsUutdhF4zVSkoXqMUL4O4OnksiqCDMEqPHyadV0qaVOG7g0yOvFaf2z3VhNXgwTU0XGK4VQOs5cKbVr6LB9sWvQjyZOXx49t6Br1hY5dB-g\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 30 Mar 2026 12:15:26 GMT\r\nlocation: https://accounts-google-com.review.software-moling.com/ServiceLogin?passive=1209600\u0026continue=https://donate.google.com/history\u0026followup=https://donate.google.com/history\r\nset-cookie: NID=530=oFf6bx2spHnvIw4zcMB8wHeDGkoGugp7NfKaQpv1kv8i_RIz6HzM2JTOv84MbBJEK7UvrbKXB-TqxLYYI1x2RA3qogM_J1nLw9MRmXDb4lprKNn3vWO0mtEb9LqVRgYHmCSTrALC-I_9cbEVjT3IB1ycpPMKfvkEvJLMzMbxu4KvgU2-Z2c03TiW0jRcjNs6nmuto1Nk1xsiIA; expires=Tue, 29-Sep-2026 12:15:26 GMT; HttpOnly; Path=/; SameSite=None; Secure\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1209825,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"donate-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-30","alert":"Phishing Block","trigger":"donate-google-com.review.software-moling.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts-google-com.review.software-moling.com/ServiceLogin?passive=1209600\u0026continue=https://donate.google.com/history\u0026followup=https://donate.google.com/history","fqdn":"accounts-google-com.review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"168.119.114.11","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-30T12:15:26.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts-google-com.review.software-moling.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 01:35:01 GMT","end":"Sat, 27 Jun 2026 01:35:00 GMT"},"fingerprint":{"sha1":"CF:1D:F3:4A:00:09:BF:FE:39:9E:DB:F8:64:11:B7:AE:0C:23:DB:15","sha256":"80:F3:F9:55:81:26:6E:CA:6E:B3:A4:CD:67:09:8F:D3:9F:A9:36:13:16:25:48:24:CE:72:EB:7C:CD:6C:5A:0A"}}},"request":{"raw":"GET /ServiceLogin?passive=1209600\u0026continue=https://donate.google.com/history\u0026followup=https://donate.google.com/history HTTP/1.1\r\nHost: accounts-google-com.review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Mon, 30 Mar 2026 12:15:26 GMT\r\nlocation: https://accounts-google-com.review.software-moling.com/InteractiveLogin?continue=https://donate.google.com/history\u0026followup=https://donate.google.com/history\u0026passive=1209600\u0026dsh=S336093449:1774872926750321\r\nset-cookie: __Host-GAPS=1:HWVPQfbRzkmihwFrSw8LwH58JaxRJQ:LzyWA6U2JJSG6RIA; Expires=Wed, 29-Mar-2028 12:15:26 GMT; HttpOnly; Priority=HIGH; Path=/; SameSite=None; Secure\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1209825,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T23:17:23.623528Z","times_seen":16252840,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":141,"dns":70,"connect":31,"send":0,"wait":84,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-30","alert":"Sinkholed","trigger":"accounts-google-com.review.software-moling.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Google","verdict":"phishing","severity":"medium","comment":"Asset commenly seen with Google phishing","tags":["google"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","date":"2026-03-30T12:15:27.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:39 GMT","end":"Mon, 01 Jun 2026 08:37:38 GMT"},"fingerprint":{"sha1":"31:A8:B5:C1:CD:F5:51:78:A9:8C:E3:B4:73:92:CF:C0:6D:69:48:19","sha256":"81:9A:84:FB:F5:4C:AB:82:DF:C1:27:CC:60:46:A6:23:A8:49:56:99:47:CF:C4:05:3F:0D:87:31:DD:2C:23:A2"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://accounts-google-com.review.software-moling.com/\r\nOrigin: https://accounts-google-com.review.software-moling.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55256\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 22:56:38 GMT\r\nexpires: Sat, 27 Mar 2027 22:56:38 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nage: 220729\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55256, version 1.0","md5":"1e2d4737305eea41ee9198e3fd3f59c2","sha1":"abff05d701173ab7eae355be60ad30cf7f63536b","sha256":"351ba345250baf98ce325b4017ac9b96c9498f6644937ef558dc5993af676f2a","sha512":"469723131222dec7ea745b528fe62586da62d02505b6904a4b97157259dd37c26bf0d7012538ec6ab999c4a82d44f97ad7a1bc526cea9e8ee1cd30ff218fbce8","ssdeep":"768:aE9HsQuRLPPTiTRi06pYSINz9AdaTV7n5qAsVUdRwRuIDzjYTXqq2emOr8d/cNPk:aE9HsHPPR06bIhedCaAb+u2veJ8KNad","tlshash":"354302a0446ef3ca3e6ffd7d9f225d5124e22a354838caf6103721793f58b959cc1a88","first_seen":"2025-03-31T13:07:07.270523Z","last_seen":"2026-06-08T13:03:06.248725Z","times_seen":700,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":42,"dns":0,"connect":12,"send":0,"wait":10,"receive":8,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"review.software-moling.com/overlay.js","fqdn":"review.software-moling.com","domain":"software-moling.com","tld":"com"},"ip":{"addr":"216.150.1.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accounts-google-com.review.software-moling.com/v3/signin/identifier?continue=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026dsh=S336093449%3A1774872926750321\u0026followup=https%3A%2F%2Fdonate.google.com%2Fhistory\u0026passive=1209600\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\u0026ifkv=AT1y2_XvAT517a1ZTIjg5orfmRj3HUe44Xn9vevDWWYPXXK-yYLwaBu16KK1ogP8I2Bq_IRugmMDrw","date":"2026-03-30T12:15:27.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"review.software-moling.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Mar 2026 17:19:06 GMT","end":"Wed, 17 Jun 2026 17:19:05 GMT"},"fingerprint":{"sha1":"89:F5:DB:52:B2:CA:1C:D6:20:2D:E8:D9:85:BE:0C:B7:65:86:F6:A5","sha256":"0A:CB:98:DB:24:F6:1C:7F:39:CE:0E:55:1E:91:4C:DC:BA:89:8C:98:7B:44:CA:E2:79:18:06:B2:60:C9:17:A3"}}},"request":{"raw":"GET /overlay.js HTTP/1.1\r\nHost: review.software-moling.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://accounts-google-com.review.software-moling.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\nage: 10811\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"overlay.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Mon, 30 Mar 2026 12:15:27 GMT\r\netag: W/\"0680d030f122ca3d4a27f20e90a5c0fe\"\r\nlast-modified: Mon, 30 Mar 2026 09:15:16 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /overlay.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::j25v7-1774872927815-4d55bbf116a1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":45926,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"8ba7241a28753063b9449cc272f563f6","sha1":"87306ffd2e5adf5d8c901e1137ced0b6e774ae6e","sha256":"75584403ceaf7950f9e1c234d17a3976018d534e75faafe38b1ccb92bf6da006","sha512":"658682c084393b18dca1847dd449fe0c22426e9acc56cdeae40d8804e758df6168eb492cdcd3e5908188b6b43ee97fd81f7ecb9bd69571b4f551bbf829a7b989","ssdeep":"768:nlPRBRtInUjZSLkl7JbJVo7yCORvj6wa2LqNd2lRtEtwHjOn3r0xng:nlZ1IQZnqlOlj6jd2NEtwHjOn3r0xg","tlshash":"6323c66869f21075b9a3613e97afa24c733091432505d9003c9cf6082fdcdba63b6bf9","first_seen":"2026-03-30T04:44:39.870289Z","last_seen":"2026-03-30T14:40:07.297141Z","times_seen":6,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":113,"dns":86,"connect":1,"send":0,"wait":73,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}