{"report_id":"5e42a9c8-bd7c-413d-a632-21794d7ea42f","version":6,"status":"done","tags":[],"date":"2025-12-20T16:03:22Z","url":{"schema":"http","addr":"www.mail.onlyfans.com=jstapaules1@gmail.com","fqdn":"gmail.com","domain":"gmail.com","tld":"com"},"ip":{"addr":"142.251.38.101","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"title":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.mail.onlyfans.com=jstapaules1@gmail.com","fqdn":"gmail.com","domain":"gmail.com","tld":"com"},"ip":{"addr":"142.251.38.101","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T16:03:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"gmail.com","ip":{"addr":"172.217.21.165","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1995-08-13","domain_rank":238,"first_seen":"2012-05-21T12:17:02Z","last_seen":"2025-12-20T13:44:14.705704Z","alert_count":0,"request_count":2,"received_data":1211336,"sent_data":872,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mail.google.com","ip":{"addr":"142.250.178.69","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":315,"first_seen":"2013-11-23T23:03:12Z","last_seen":"2025-12-15T06:26:36.152235Z","alert_count":0,"request_count":1,"received_data":1211448,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"accounts.google.com","ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-12-15T00:11:33.757655Z","alert_count":0,"request_count":3,"received_data":3639370,"sent_data":2539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-14T22:13:59.416786Z","alert_count":0,"request_count":2,"received_data":112100,"sent_data":1142,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-14T22:23:55.110524Z","alert_count":0,"request_count":1,"received_data":864535,"sent_data":682,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.mail.onlyfans.com=jstapaules1@gmail.com/","fqdn":"gmail.com","domain":"gmail.com","tld":"com"},"ip":{"addr":"172.217.21.165","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T16:02:57.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gmail.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:01 GMT","end":"Wed, 25 Feb 2026 15:53:00 GMT"},"fingerprint":{"sha1":"9E:35:21:47:72:44:A2:09:40:75:D5:EE:6B:92:D6:FA:3C:40:55:46","sha256":"CB:30:6B:DF:F4:F1:7F:AE:74:48:8E:27:E9:CD:29:6C:78:AF:69:BB:66:92:0C:68:29:AD:D0:F0:7D:9C:38:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gmail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://mail.google.com/mail/u/0/\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nserver: sffe\r\ncontent-length: 230\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 15:53:51 GMT\r\nexpires: Sat, 20 Dec 2025 16:23:51 GMT\r\ncache-control: public, max-age=1800\r\ncontent-type: text/html; charset=UTF-8\r\nage: 546\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":65,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.mail.onlyfans.com=jstapaules1@gmail.com/","fqdn":"gmail.com","domain":"gmail.com","tld":"com"},"ip":{"addr":"172.217.21.165","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T16:03:16.454Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: gmail.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nLocation: https://mail.google.com/mail/u/0/\r\nCross-Origin-Resource-Policy: cross-origin\r\nX-Content-Type-Options: nosniff\r\nServer: sffe\r\nContent-Length: 230\r\nX-XSS-Protection: 0\r\nDate: Sat, 20 Dec 2025 15:53:21 GMT\r\nExpires: Sat, 20 Dec 2025 16:23:21 GMT\r\nCache-Control: public, max-age=1800\r\nContent-Type: text/html; charset=UTF-8\r\nAge: 595\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":1210550,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":20,"dns":0,"connect":21,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mail.google.com/mail/u/0/","fqdn":"mail.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.69","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T16:03:16.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mail.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"C8:C1:AF:AD:8E:23:FA:77:D2:E8:C0:F0:ED:ED:54:91:89:EE:88:09","sha256":"D9:A3:0B:79:58:B4:D6:C1:27:BD:3D:8E:21:91:D4:0D:6D:9F:9C:C6:1B:78:2A:5A:A8:5A:F6:2F:B2:2D:18:B3"}}},"request":{"raw":"GET /mail/u/0/ HTTP/1.1\r\nHost: mail.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 20 Dec 2025 16:03:16 GMT\r\nlocation: https://accounts.google.com/ServiceLogin?service=mail\u0026passive=1209600\u0026osid=1\u0026continue=https://mail.google.com/mail/u/0/\u0026followup=https://mail.google.com/mail/u/0/\u0026emr=1\r\nstrict-transport-security: max-age=10886400; includeSubDomains\r\ncross-origin-resource-policy: same-site\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1210550,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":75,"dns":2,"connect":15,"send":0,"wait":45,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?service=mail\u0026passive=1209600\u0026osid=1\u0026continue=https://mail.google.com/mail/u/0/\u0026followup=https://mail.google.com/mail/u/0/\u0026emr=1","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T16:03:16.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /ServiceLogin?service=mail\u0026passive=1209600\u0026osid=1\u0026continue=https://mail.google.com/mail/u/0/\u0026followup=https://mail.google.com/mail/u/0/\u0026emr=1 HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:_YrpRqUhfM62sO_cg_rYT8g3K8aI_A:rpfSHCm-ZQDNuv_a; Expires=Mon, 20-Dec-2027 16:03:16 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 20 Dec 2025 16:03:16 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://mail.google.com/mail/u/0/\u0026emr=1\u0026followup=https://mail.google.com/mail/u/0/\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026dsh=S1242650080:1766246596707906\u0026ifkv=Ac2yZaW--OXqFaGdsjzrvu4SEcFRSTf3B7EejdPHQJ40IuTKRoF0onctT35kZCtd67YU81ew6QI6Cw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy: script-src 'nonce-apw1o3pV_g0OP8V5pLeM1A' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1210550,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":72,"dns":1,"connect":15,"send":0,"wait":22,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://mail.google.com/mail/u/0/\u0026emr=1\u0026followup=https://mail.google.com/mail/u/0/\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026dsh=S1242650080:1766246596707906\u0026ifkv=Ac2yZaW--OXqFaGdsjzrvu4SEcFRSTf3B7EejdPHQJ40IuTKRoF0onctT35kZCtd67YU81ew6QI6Cw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T16:03:16.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://mail.google.com/mail/u/0/\u0026emr=1\u0026followup=https://mail.google.com/mail/u/0/\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026dsh=S1242650080:1766246596707906\u0026ifkv=Ac2yZaW--OXqFaGdsjzrvu4SEcFRSTf3B7EejdPHQJ40IuTKRoF0onctT35kZCtd67YU81ew6QI6Cw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Host-GAPS=1:_YrpRqUhfM62sO_cg_rYT8g3K8aI_A:rpfSHCm-ZQDNuv_a\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 20 Dec 2025 16:03:16 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-1NyttBWHgmXBjMOMPk8-MA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 425\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1210550,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.150.84","port":443,"asn":15169,"as":"GOOGLE","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T16:03:16.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:32 GMT","end":"Wed, 25 Feb 2026 15:57:31 GMT"},"fingerprint":{"sha1":"F5:06:14:04:6B:D5:32:C9:BA:A9:B4:13:02:C3:F0:62:2A:24:BC:90","sha256":"D8:34:74:17:27:E1:E2:E3:A9:BB:5D:58:F5:DB:40:51:4E:6C:34:33:BF:88:83:62:03:97:DC:4B:FB:67:B5:45"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; __Host-GAPS=1:_YrpRqUhfM62sO_cg_rYT8g3K8aI_A:rpfSHCm-ZQDNuv_a\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=utf-8\r\nx-frame-options: DENY\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nx-auto-login: realm=com.google\u0026args=service%3Dmail%26continue%3Dhttps://mail.google.com/mail/u/0/\r\nlink: \u003chttps://workspace.google.com/gmail/\u003e; rel=\"canonical\"\r\nx-ua-compatible: IE=edge\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 20 Dec 2025 16:03:16 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport, script-src 'nonce-TESiY7eX5UinIPX67a9XTQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.Ul3L5L4ZTmM.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\nreporting-endpoints: default=\"/v3/signin/_/AccountsSignInUi/web-reports?context=eJwNw00ogwEYB_C17XlIDpKklZohpsa2UiRJ0sr2bpycNFteLNpme6dQkhCSMh-Jizgo5eYgSqmVr3zMpjbmIPK5HMRy4_-rX8aYoixDJWspVckONXvy-rYneSMuZb7JV3A8fkHzOL1-SctYu3VF9djdHqZe_PKGKYUG9TXVoWflmvxoao2QGTcWIrSJczlRWkRfXpRGUFsVJR06126oE0PaGB3j12CMsoZi1JCKkQmdaXHyouEoTpX4cnZLH5h7e0cqVNYkKB0dgQSJeBJN0DnKSu5JifenTfyAryYzJ3E4aOZR3NFZeBeDzxZeQsenhUX8I4EVLLC2XGAd5rcKXIApv8BKSWDxQGAXfmus_IvPE1Z-x9k9KwexcN_KJTgl2Hga37ts_ImTPTaewYK4jYvxprCZH1Hd0sxFmJ2ZHppbPeWs4-3kj1xT4fT02V0doltySQOdPo9bEt0djoDUHXD5RV-_6LMb9cZKg1FfXa432r36f2cgrWY\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1210550,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (52366)","md5":"196d555cf95b698c4fe4a9c3aaf45d00","sha1":"406e2730aadc7d7cc7f35de5ef14ee5df7d975b7","sha256":"dda012c2a65a5f36a89ac488ce348549c650ac3605f33c549472714d04f459db","sha512":"2a8df8652f986d18344947850595c1d47a921e947f9283133fd212a789a0a0ff65f587aa8d32d417ac399086a358806f13f5e1a5e6948b74c8446520d7614b1f","ssdeep":"6144:BCKq3j6T8+Fq3j6T8+Kq3j6T8+tq3j6T8+Qq3j6T8+VScpEQISNR1/4k8Tqo6T8y:BC6Scpyk8OjT82AQD","tlshash":"622596db9231b07ffd73a4baa5c0ed49f6884dc1e64a4676bc709a1342eb6b61351330","first_seen":"2025-12-20T16:03:24.294783Z","last_seen":"2025-12-20T16:03:24.294783Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","date":"2025-12-20T16:03:17.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://accounts.google.com/\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:38:32 GMT\r\nexpires: Sun, 20 Dec 2026 10:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19485\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55216, version 1.0","md5":"79a898c4178c1c3da9702e53272b28f4","sha1":"47039421fbe12912a6ec8731181f20b0d084eda9","sha256":"d1f470e35f02537a3290ad9015b7c81fe9ca3295f6e691ef564520bcb6314501","sha512":"0a7894f91f314ada88b69e8e710e42fc3c69e5abba5149a52a3ae7aacbc09bcd6332626c1c5bf9f7637d5d1ced6fac7e3a0cffeb780b733b879b71fc7322813a","ssdeep":"768:GM5rYySQ4HdDApsqID60V1GIchzku+4/Asgjo4f7vmyKjrE7iE7RvJ80cDrATlkO:HIe0mxoNkAY4fFK07vM0cDrqzAhHSTf","tlshash":"f04301ebb01a1189e6a2207112261979609b84e19f3fa118717f638d8cd7bfd75d8374","first_seen":"2025-03-21T06:19:09.564073Z","last_seen":"2026-04-20T14:04:19.233967Z","times_seen":88506,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":37,"dns":4,"connect":9,"send":0,"wait":8,"receive":12,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","date":"2025-12-20T16:03:17.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCIhMl07v0x.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://accounts.google.com/\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 55216\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:38:32 GMT\r\nexpires: Sun, 20 Dec 2026 10:38:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 19485\r\nlast-modified: Tue, 29 Oct 2024 18:37:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55216,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55216, version 1.0","md5":"79a898c4178c1c3da9702e53272b28f4","sha1":"47039421fbe12912a6ec8731181f20b0d084eda9","sha256":"d1f470e35f02537a3290ad9015b7c81fe9ca3295f6e691ef564520bcb6314501","sha512":"0a7894f91f314ada88b69e8e710e42fc3c69e5abba5149a52a3ae7aacbc09bcd6332626c1c5bf9f7637d5d1ced6fac7e3a0cffeb780b733b879b71fc7322813a","ssdeep":"768:GM5rYySQ4HdDApsqID60V1GIchzku+4/Asgjo4f7vmyKjrE7iE7RvJ80cDrATlkO:HIe0mxoNkAY4fFK07vM0cDrqzAhHSTf","tlshash":"f04301ebb01a1189e6a2207112261979609b84e19f3fa118717f638d8cd7bfd75d8374","first_seen":"2025-03-21T06:19:09.564073Z","last_seen":"2026-04-20T14:04:19.233967Z","times_seen":88506,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":40,"dns":2,"connect":11,"send":0,"wait":14,"receive":6,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.Ul3L5L4ZTmM.es5.O/am=Cf8PSIAYAAACI79kAhzpBgAwQBywBJoAGQAAAAAAQAAAsAEAINEI/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlELDjKZSn_HeCHGb7tZfugbUcboQg/dti=1/m=_b,_tp","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026dsh=S1242650080%3A1766246596707906\u0026emr=1\u0026followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F\u0026ifkv=Ac2yZaXbRCtKuCLVA7dCDvvHLl7Yicv8vcn0FRQGh7v7OeDSzTX7HpV2szkrhn-UVhPVqKdetwxTnw\u0026osid=1\u0026passive=1209600\u0026service=mail\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","date":"2025-12-20T16:03:17.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.Ul3L5L4ZTmM.es5.O/am=Cf8PSIAYAAACI79kAhzpBgAwQBywBJoAGQAAAAAAQAAAsAEAINEI/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlELDjKZSn_HeCHGb7tZfugbUcboQg/dti=1/m=_b,_tp HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://accounts.google.com/\r\nOrigin: https://accounts.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: https://accounts.google.com\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/identity-boq-js-css-signers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"boq-infra/identity-boq-js-css-signers\"\r\nreport-to: {\"group\":\"boq-infra/identity-boq-js-css-signers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/boq-infra/identity-boq-js-css-signers\"}]}\r\ncontent-length: 251095\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:42:44 GMT\r\nexpires: Sun, 20 Dec 2026 10:42:44 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nage: 19233\r\nlast-modified: Tue, 09 Dec 2025 17:25:37 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":863508,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (558)","md5":"20d2124d6d52e2632c967aa56ba8820b","sha1":"2d01547a62064f2a04470ca2cd2eed5497f270ff","sha256":"ebd4e83cdd60764e22cc42f4e110a3d0eeccc20e1d4017812e002256135b0b61","sha512":"e9ba8e1ed951b2496e987af89c8cd5d31f88b5cdb646993ddc4ecb1a18808770674a47fca02bb39b76edb7a4fed3c391c19f120fd1f971d1934a1809ebcfe503","ssdeep":"12288:ZNmiiyxZbOR5RGNrxDkY862mmqygXxv0ACawCFXLvkucDpJO2oMkgpzhTowR9oxJ:meBKw","tlshash":"53053bf6b5e079e35723a7a0c42f510db21f2469712d5858f0e6efd29e70a6804b7f28","first_seen":"2025-12-11T19:36:17.573248Z","last_seen":"2026-01-06T15:38:23.703284Z","times_seen":336,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":90,"dns":4,"connect":21,"send":0,"wait":23,"receive":78,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
