{"report_id":"76969010-399a-46c4-9d7a-9f6a1ed9b556","version":6,"status":"done","tags":[],"date":"2026-01-23T17:48:10Z","url":{"schema":"https","addr":"nhhkl.blogspot.com/","fqdn":"nhhkl.blogspot.com","domain":"nhhkl.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.74.1","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nhhkl.blogspot.com/","fqdn":"nhhkl.blogspot.com","domain":"nhhkl.blogspot.com","tld":"blogspot.com"},"title":"Free Fire","dom":{"size":7943,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (500)","md5":"5a0212f87daa10f5d845617fd3cd2fe0","sha1":"2b6c755359ca9ad4b059a3b49f5d83129295436c","sha256":"320b01efa6744c39ac6f20e759621fd57ea2fe70f39eae040ea80a174cc04840","sha512":"8e10e9eb055f60a7d20e911fa028dfddcac04a38f4442baffd0ebadc54d6fdbf11827daac352fa79f88739c0f6f23e87450d62919286906850469827ae722abe","ssdeep":"96:rIPfVVxtARPy48S8k45USz+45RaIkata89+RzydNAYt9+kex8KdRonI7B1g/M:rIlzeRPyfS8LUSZRa2b9wmtI98IT","tlshash":"d4f152a862fa0d2b819386e938db7409bd01d297d35c24e5bf6d44f10fc7d61980f19b","dom_hash":"domhashc59d69afccb598c37df8c553a509577e","first_seen":"2025-10-27T18:39:22.543444Z","last_seen":"2026-04-11T23:49:29.608389Z","times_seen":11,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nhhkl.blogspot.com/","fqdn":"nhhkl.blogspot.com","domain":"nhhkl.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.74.1","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-27T17:48:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-23","alert":"Phishing Block","trigger":"nhhkl.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-12-20","alert":"Phishing - Other","trigger":"nhhkl.blogspot.com/","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"nhhkl.blogspot.com","ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2025-02-12T12:58:32.316958Z","last_seen":"2025-12-15T02:41:41.601982Z","alert_count":10,"request_count":3,"received_data":18803,"sent_data":1359,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2026-01-19T00:18:50.12354Z","alert_count":0,"request_count":1,"received_data":292,"sent_data":504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"resources.blogblog.com","ip":{"addr":"142.250.74.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-09-15","domain_rank":177645,"first_seen":"2017-01-30T04:47:40Z","last_seen":"2026-01-21T11:14:16.3406Z","alert_count":0,"request_count":1,"received_data":139902,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xmanonline.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2021-09-16T19:04:57Z","last_seen":"2026-01-05T12:10:43.585815Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.74.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-01-19T03:10:52.729342Z","alert_count":0,"request_count":2,"received_data":185779,"sent_data":911,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/719476776-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"956c9dc25db2a4460b24be3fa6138ca8","sha1":"96f48ccc760c16ed8387427ec691fb40b52b5903","sha256":"26db19b92c8dcdf6e3d1286007a44605047527fd0a38b70bace743ba278c31ac","sha512":"2a7c68f308544bfdb5d3d334ae7391f1e090f2b90c1d4e6dd733bc1a42a1a6fea34218687e1f346b91827689dd7e7836c03762534973f209c951c5c8d2dc6511","ssdeep":"3072:Rxf9/z5Be1CUrrPKfgY4pGQi6MoICvgATJ:B8rPKfgDGet9J","tlshash":"1de3fac8b79270668373b4b5003f010ff13ab4aae848896cb188d9e57d7496a5677f7c","size":147913,"data":"","first_seen":"2026-01-22T23:25:45.191906Z","last_seen":"2026-02-01T07:00:13.219101Z","times_seen":384,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/4268249124-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.250.74.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9b7139c3f8f82e013aa992f753c03f4","sha1":"0a4071be84cc34970421f0266a9db7ba55d7094c","sha256":"a8454fe2730c057837da9a6480eb7c575cef285637feac76542489382e8dbd60","sha512":"84f2274505f817d91f93d780e6418c8e4a24e67691399a1b2d2020776ec3dea41bf39c67b5f687881dfe9afa8ec8d90a204e308db01308adce892402ce846075","ssdeep":"1536:gjurwWn9wVNY6p6UKXStOqBI05G/Cs3EYE7EHPhQSEhqCaKc+j+tz1lIpF9aKXR0:surluPIYoPaJoyj+NI3LXe","tlshash":"e9d3e79db6527076d263f4e5402f414eb237a8a9f94889acb18cdce12db4c49523bf7c","size":139187,"data":"","first_seen":"2023-03-07T13:49:41Z","last_seen":"2026-07-30T05:22:24.48638Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/335934321-css_bundle_v2.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nhhkl.blogspot.com/","date":"2026-01-23T17:47:48.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:50:52 GMT","end":"Mon, 23 Mar 2026 19:50:51 GMT"},"fingerprint":{"sha1":"DE:CC:19:56:35:EF:52:B3:A2:1E:C1:AC:BB:6C:45:E1:A4:66:42:E1","sha256":"DA:39:64:1E:46:D2:CE:23:EE:EF:98:AA:48:6B:A8:1A:E2:2D:AF:44:15:4F:E4:A1:B0:62:61:E4:B1:F5:9C:A8"}}},"request":{"raw":"GET /static/v1/widgets/335934321-css_bundle_v2.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhhkl.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 7889\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:00:50 GMT\r\nexpires: Sat, 23 Jan 2027 13:00:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 23 Jan 2026 07:48:24 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 17219\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36440,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36439)","md5":"ce585acc7ca8a4f3f403913680268942","sha1":"0c73f9e8db39a0b1895957a2ddec5a837107b4bc","sha256":"5789c053186779491978dc1c38c57faeb6e0166267e2102f1be5d9a7488ea1e4","sha512":"6b22ec3df39993e57ee9b2ffd00cd79fca1febf441263228dd8facf7bf67bafd09fa6f37d607332fb3118b0cb9a06bde48ce47fbcc617ab0089c27926e21ff13","ssdeep":"384:YN90OhFqDg3A2VysImDyPWquJMpx/SCYW0h8+Rl9yarwuJ86YKSQCNL/J69nKg9f:YN90OhIsJnIm6IvW0t1VJw1gngRLFr2","tlshash":"a9f2c9719590342df127d726b893ba8c3224d563e7634eeee516b6b8cec5ada003331d","first_seen":"2026-01-13T02:06:02.577431Z","last_seen":"2026-05-07T16:22:50.705019Z","times_seen":9121,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":203,"dns":65,"connect":21,"send":0,"wait":10,"receive":1,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/719476776-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.74.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhhkl.blogspot.com/","date":"2026-01-23T17:47:48.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:50:52 GMT","end":"Mon, 23 Mar 2026 19:50:51 GMT"},"fingerprint":{"sha1":"DE:CC:19:56:35:EF:52:B3:A2:1E:C1:AC:BB:6C:45:E1:A4:66:42:E1","sha256":"DA:39:64:1E:46:D2:CE:23:EE:EF:98:AA:48:6B:A8:1A:E2:2D:AF:44:15:4F:E4:A1:B0:62:61:E4:B1:F5:9C:A8"}}},"request":{"raw":"GET /static/v1/widgets/719476776-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhhkl.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 52234\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 13:03:23 GMT\r\nexpires: Sat, 23 Jan 2027 13:03:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 22 Jan 2026 00:50:49 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 17065\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147913,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4084)","md5":"956c9dc25db2a4460b24be3fa6138ca8","sha1":"96f48ccc760c16ed8387427ec691fb40b52b5903","sha256":"26db19b92c8dcdf6e3d1286007a44605047527fd0a38b70bace743ba278c31ac","sha512":"2a7c68f308544bfdb5d3d334ae7391f1e090f2b90c1d4e6dd733bc1a42a1a6fea34218687e1f346b91827689dd7e7836c03762534973f209c951c5c8d2dc6511","ssdeep":"3072:Rxf9/z5Be1CUrrPKfgY4pGQi6MoICvgATJ:B8rPKfgDGet9J","tlshash":"1de3fac8b79270668373b4b5003f010ff13ab4aae848896cb188d9e57d7496a5677f7c","first_seen":"2026-01-22T23:25:45.191906Z","last_seen":"2026-02-01T07:00:13.219101Z","times_seen":384,"resource_available":true,"data":null}},"time_used":288,"timings":{"blocked":128,"dns":61,"connect":10,"send":0,"wait":13,"receive":11,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhhkl.blogspot.com/favicon.ico","fqdn":"nhhkl.blogspot.com","domain":"nhhkl.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhhkl.blogspot.com/","date":"2026-01-23T17:47:49.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:04 GMT","end":"Mon, 23 Mar 2026 19:52:03 GMT"},"fingerprint":{"sha1":"D8:08:BB:3F:7A:76:D3:E0:9A:E5:75:8E:F8:BD:BD:00:90:1B:CF:9B","sha256":"6F:2B:6A:C4:E1:33:02:53:52:44:7E:1E:86:97:DA:2F:62:12:C7:8D:EE:3A:31:73:AA:61:84:26:07:41:A2:51"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nhhkl.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhhkl.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon; charset=UTF-8\r\nexpires: Fri, 23 Jan 2026 17:47:49 GMT\r\ndate: Fri, 23 Jan 2026 17:47:49 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Mon, 04 Aug 2025 23:22:46 GMT\r\netag: W/\"589af2e6993b4ee21db070fdf385d3c777a902fef763cabf8f9919ccfb272994\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel","md5":"59a0c7b6e4848ccdabcea0636efda02b","sha1":"30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340","sha256":"a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f","sha512":"bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4","ssdeep":"","tlshash":"5671c80736c29f79c4d082fa159ec674136766eb281b061b3e85f65a3d88135f911ac0","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-08-06T00:48:26.519856Z","times_seen":107071,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-23","alert":"Phishing Block","trigger":"nhhkl.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/zFdxGE77vvD2w5xHy6jkVuElKv-U9_9qLkRYK8OnbDeJPtjSZ82UPq5w6hJ-SA=w35","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nhhkl.blogspot.com/","date":"2026-01-23T17:47:49.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:19 GMT","end":"Mon, 23 Mar 2026 19:52:18 GMT"},"fingerprint":{"sha1":"D7:C1:50:3A:11:E3:C8:E7:F2:5B:60:F3:9C:59:72:5D:F4:96:F9:59","sha256":"BE:6E:88:B4:65:AE:9C:C6:5D:EB:49:CD:32:9F:F9:53:53:20:88:32:AB:4E:FF:B6:AF:38:5B:A3:8A:FC:B7:76"}}},"request":{"raw":"GET /zFdxGE77vvD2w5xHy6jkVuElKv-U9_9qLkRYK8OnbDeJPtjSZ82UPq5w6hJ-SA=w35 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhhkl.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=UTF-8\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\ndate: Fri, 23 Jan 2026 17:47:49 GMT\r\nserver: fife\r\ncontent-length: 1007\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T01:00:56.500297Z","times_seen":17734268,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":97,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhhkl.blogspot.com/","fqdn":"nhhkl.blogspot.com","domain":"nhhkl.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-23T17:47:48.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:04 GMT","end":"Mon, 23 Mar 2026 19:52:03 GMT"},"fingerprint":{"sha1":"D8:08:BB:3F:7A:76:D3:E0:9A:E5:75:8E:F8:BD:BD:00:90:1B:CF:9B","sha256":"6F:2B:6A:C4:E1:33:02:53:52:44:7E:1E:86:97:DA:2F:62:12:C7:8D:EE:3A:31:73:AA:61:84:26:07:41:A2:51"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nhhkl.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Fri, 23 Jan 2026 17:47:48 GMT\r\ndate: Fri, 23 Jan 2026 17:47:48 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Mon, 04 Aug 2025 23:22:46 GMT\r\netag: W/\"589af2e6993b4ee21db070fdf385d3c777a902fef763cabf8f9919ccfb272994\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 2690\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":6998,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3924)","md5":"634e6ec484cb159003d54b6be6635c18","sha1":"eccf3d390301c53cacecf30f313a59343355b13d","sha256":"90be69ba9778e8499c9c3a35c51aad5b20d38f6593db47ecd87fa64de3112ffb","sha512":"be74c22a58129f808c39ad6b999119b4259a6cea00229d070b4c2fecfa9d87ff48a4cc5156b1cd8c26d92cf5f14576d3e25b9452d9b84ebc917034ba9dec770e","ssdeep":"192:xMbHXCKD38SiAqXryt7TwRw3wLGwjrlhqyI/BRq2EdChqcpllLiwRb5:ORcfryt7TwRw3wLGwjrX2fdllOwH","tlshash":"bbe1c7c3bcb9d4ba5f209ddcf565fe00f64b8811d980eca5e4c4ac792a06f93e8407a0","first_seen":"2026-01-23T17:48:11.391068Z","last_seen":"2026-01-23T17:48:11.391068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":566,"timings":{"blocked":165,"dns":78,"connect":9,"send":0,"wait":228,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"phishtank","sensor_type":"Blocklist","title":"PhishTank","description":"PhishTank","scan_date":"2025-12-20","alert":"Phishing - Other","trigger":"nhhkl.blogspot.com/","verdict":"phishing","severity":"medium","comment":"Other","link":"http://phishtank.com","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-23","alert":"Phishing Block","trigger":"nhhkl.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/4268249124-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.250.74.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhhkl.blogspot.com/","date":"2026-01-23T17:47:48.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:50:52 GMT","end":"Mon, 23 Mar 2026 19:50:51 GMT"},"fingerprint":{"sha1":"DE:CC:19:56:35:EF:52:B3:A2:1E:C1:AC:BB:6C:45:E1:A4:66:42:E1","sha256":"DA:39:64:1E:46:D2:CE:23:EE:EF:98:AA:48:6B:A8:1A:E2:2D:AF:44:15:4F:E4:A1:B0:62:61:E4:B1:F5:9C:A8"}}},"request":{"raw":"GET /blogblog/data/res/4268249124-indie_compiled.js HTTP/1.1\r\nHost: resources.blogblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhhkl.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 47754\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 23 Jan 2026 01:45:02 GMT\r\nexpires: Fri, 30 Jan 2026 01:45:02 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 03 Sep 2020 06:22:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 57766\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139187,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1797)","md5":"c9b7139c3f8f82e013aa992f753c03f4","sha1":"0a4071be84cc34970421f0266a9db7ba55d7094c","sha256":"a8454fe2730c057837da9a6480eb7c575cef285637feac76542489382e8dbd60","sha512":"84f2274505f817d91f93d780e6418c8e4a24e67691399a1b2d2020776ec3dea41bf39c67b5f687881dfe9afa8ec8d90a204e308db01308adce892402ce846075","ssdeep":"1536:gjurwWn9wVNY6p6UKXStOqBI05G/Cs3EYE7EHPhQSEhqCaKc+j+tz1lIpF9aKXR0:surluPIYoPaJoyj+NI3LXe","tlshash":"e9d3e79db6527076d263f4e5402f414eb237a8a9f94889acb18cdce12db4c49523bf7c","first_seen":"2023-03-07T13:49:41Z","last_seen":"2026-07-30T05:22:24.48638Z","times_seen":391,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":129,"dns":62,"connect":8,"send":0,"wait":13,"receive":11,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nhhkl.blogspot.com/js/cookienotice.js","fqdn":"nhhkl.blogspot.com","domain":"nhhkl.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.142.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nhhkl.blogspot.com/","date":"2026-01-23T17:47:48.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:52:04 GMT","end":"Mon, 23 Mar 2026 19:52:03 GMT"},"fingerprint":{"sha1":"D8:08:BB:3F:7A:76:D3:E0:9A:E5:75:8E:F8:BD:BD:00:90:1B:CF:9B","sha256":"6F:2B:6A:C4:E1:33:02:53:52:44:7E:1E:86:97:DA:2F:62:12:C7:8D:EE:3A:31:73:AA:61:84:26:07:41:A2:51"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: nhhkl.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhhkl.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Fri, 23 Jan 2026 17:47:48 GMT\r\nexpires: Fri, 30 Jan 2026 17:47:48 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Fri, 23 Jan 2026 09:53:42 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-08-06T00:48:30.889569Z","times_seen":133691,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-23","alert":"Phishing Block","trigger":"nhhkl.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-23","alert":"Sinkholed","trigger":"nhhkl.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xmanonline.com/new/freefire.php?userid=289","fqdn":"xmanonline.com","domain":"xmanonline.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nhhkl.blogspot.com/","date":"2026-01-23T17:47:49.064Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /new/freefire.php?userid=289 HTTP/1.1\r\nHost: xmanonline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nhhkl.blogspot.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T01:00:56.500297Z","times_seen":17734268,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}