{"report_id":"80307169-a585-4cef-86ae-c34954d8177c","version":0,"status":"done","tags":[],"date":"2026-06-29T06:53:32Z","url":{"schema":"http","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.97","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"title":"Log in to your paypal account","dom":{"size":13783,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4174)","md5":"7da846649dd35bdee6a411dd04780638","sha1":"1e3fa09c51c6a9405239810e1bf542324165d7d9","sha256":"5927743e9137ddbf92ab4f78c810cc0ff88ecaba8955d06343ad848f48bb012e","sha512":"e9202108274ce4a340a252e60ae3c278500268a1d376716ca5429a19753a752db69ab9e6277e4dadc6744baa1ff7509b511b5bd06304c716d5938289379c1798","ssdeep":"384:DWWdPhcic7abVRO3VLbOjUy2rdll6VFmk:6WdPhcic7aR4FOj2rYYk","tlshash":"2152d9c3746cd82a672188ccf9b1bf24f24b8d2bd585acd9f4e09c392ac9bb39511351","dom_hash":"domhash94de9b493df015d17b9a6bf08deaa703","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.207.97","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T06:53:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"paypal-signin.blogspot.com","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-03-20T00:51:36.44188Z","last_seen":"2026-06-28T20:01:15.953152Z","alert_count":6,"request_count":3,"received_data":21564,"sent_data":1478,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]}]},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-06-22T19:44:20.428552Z","alert_count":0,"request_count":2,"received_data":183065,"sent_data":1032,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":6,"received_data":29429,"sent_data":3085,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":41692,"first_seen":"2012-09-07T15:11:00Z","last_seen":"2026-06-23T01:20:22.618828Z","alert_count":0,"request_count":1,"received_data":21686,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/js/cookienotice.js","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-27T07:00:54.328367Z","times_seen":132703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/3935100173-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fa8569f70712e22407e6d8beaf100f7","sha1":"5c1bc170a603e047cc416d330a6045bc6d5e38e0","sha256":"fb184518d6c1c2f26d1678247dee283a6c9a0ce3c64df8e9a7cabf32c3b3c266","sha512":"ab77c5fa9552c47c24c3d0df5c4277ddeca11b83f1236345f89b0d05602d9108174c5c3a93cada1ac711d0c381107d49b4cc130c64916642c7780a3d2c328203","ssdeep":"1536:TS5N5GyrI6+on3Q8yTMrC6steazNUGOR9KAKmKRWV5bTglSWKJooVoEkDM8yQ2lJ:d6+zcstey29KUKIfgsKYR8yQCEM51d","tlshash":"e6e3f9c8b79670628373b4b5002f010ff13ab9aaf848896cb588d8e57d749695277f7c","size":150645,"data":"","first_seen":"2026-06-22T11:23:36.862073Z","last_seen":"2026-07-02T19:57:43.621779Z","times_seen":2049,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Varela+Round","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.070Z","timestamp":1782715990070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Varela+Round HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:53:10 GMT\r\ndate: Mon, 29 Jun 2026 06:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1509,"size_decoded":1187,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"13666c4ed3c63e67258311b8bcef6f02","sha1":"b2aa55df75239d4804e3d16b4d567959acfc1e15","sha256":"b5aeb00fcc4a65559bc88c27f4271fce06832f57a7ce54af75b10c41d38026df","sha512":"dd1dfb702d79db265cd4acdc930ebe7c56742a7403cae783ee944293282c26f056c58f27bcc4322d4c04be337456773f7c95b823d596b293065e6af85bd694b3","ssdeep":"","tlshash":"0531c0a01426b504aba30ce622ce7e30cd4fa244b050d936affe2c9deca6d29731570d","first_seen":"2025-09-15T15:28:37.927277Z","last_seen":"2026-07-26T08:35:53.147682Z","times_seen":5474,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.075Z","timestamp":1782715990075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Rubik:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:53:10 GMT\r\ndate: Mon, 29 Jun 2026 06:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7482,"size_decoded":1522,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"441d7abcb3d55c95e4ac58ff41c5090c","sha1":"51b8b03819d010ff6b7eddba477c362803d90a34","sha256":"a626af4c6a56980dc0916323dec8d7511523bc3f62f7817f017dbfab3100c5db","sha512":"2d9e9114dcb41d1b01ebc175f77e5743c3b24431b5f1548d8bdec17a5be138f442533c13cb77c8125028cfc94b22b2e2c808a5da04baa629005da6845c9caddb","ssdeep":"192:DhCl+sGAvAE8hCl3sflWAJyhClFsdXoAzp:4lVNl8fl+X","tlshash":"63f1bbe1981e54447f472cc263ce2d33de0e6255308485299afe1f9aacbbc2273617ce","first_seen":"2026-03-20T00:51:38.687704Z","last_seen":"2026-07-23T08:42:08.938362Z","times_seen":21,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":39,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.080Z","timestamp":1782715990080,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Open+Sans:300 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:53:10 GMT\r\ndate: Mon, 29 Jun 2026 06:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":2249,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d1176214f07ac0cf2ce00911f79816c3","sha1":"3b1a2e84576036d3efd1a33cbf7cdbc2a1572e8b","sha256":"b05334331ff7fa0642c94ad9558af7418c05e55be12d5be4bddc5829d0ed610d","sha512":"0061afb08cbca9c1e89971f51a148cd156fe9092600677b2df582817f0efe1bddb0d6ee2d9ea5fda616bef5cac4a07ab9daf29e89c1ef5aa12919219b0c9c042","ssdeep":"96:ZO1MqJO1MpFZ8O1MZO1MaYO1MMO1MGy+aZjzBrWO1MCubqGIFuV4UO1MtO1MeJc9:NqdaNa40GqKdbqGIwV4MpO7Q","tlshash":"c4c150900417545867471ce223cebe30ee0fa2606040c07a6bfd8b5beee7da9a37536d","first_seen":"2025-09-17T19:05:49.090441Z","last_seen":"2026-07-27T05:22:00.525599Z","times_seen":10782,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":42,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.083Z","timestamp":1782715990083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 06:14:57 GMT","end":"Sat, 01 Aug 2026 07:14:54 GMT"},"fingerprint":{"sha1":"87:39:8B:D4:F5:C1:CE:D2:17:B0:DA:A6:93:21:38:E7:CA:4B:7E:2A","sha256":"22:95:0A:F1:20:E2:D1:60:17:3F:96:BF:26:3A:90:BA:38:84:38:04:30:52:7D:AE:EA:74:8D:58:1E:F7:C7:0B"}}},"request":{"raw":"GET /font-awesome/4.1.0/css/font-awesome.min.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 06:53:10 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"bbfef9385083d307ad2692c0cf99f611\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:53 GMT\r\ncdn-cachedat: 04/11/2025 08:48:35\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e010432e87ad29d3d44b5177a737278b\r\ncdn-cache: HIT\r\nage: 6535351\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a133033a2a040883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20766,"size_decoded":5570,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20604)","md5":"bbfef9385083d307ad2692c0cf99f611","sha1":"63a234ea4d60f6643a60a4d79e28f291b93c1743","sha256":"b769324e0921f9f649611113e65f528ebae5e140da8a7e63c5d6ea7bc7a33bc0","sha512":"efb922772183246596989d0c54ed02469fba9d181944aebb7eb515051be72f5cc2726730f45902431a431eae7649e6d6f8a5930279ee5f4424dbf3105a8816a1","ssdeep":"192:xq9jjI+ab2edrK/TUKIErArKlcZJVrJ3ee+cR6waWW215Uvf0:+jPyW/TUK1+KlkJ5de2UWWyAf0","tlshash":"c99266f8e54d01c66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5bba","first_seen":"2023-04-05T10:34:03Z","last_seen":"2026-07-27T05:29:59.099789Z","times_seen":10563,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":4,"connect":18,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/favicon.ico","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.451Z","timestamp":1782715990451,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paypal-signin.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon; charset=UTF-8\r\nexpires: Mon, 29 Jun 2026 06:53:11 GMT\r\ndate: Mon, 29 Jun 2026 06:53:11 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Sat, 07 Sep 2024 23:03:47 GMT\r\netag: W/\"46dcb12c1f603e121e1ce7ce77e75916e053bf6de8b3c49d55168050d385f96e\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 461\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":1150,"size_decoded":938,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"a3ecc57f21cd2b78e6703bbb2212e3a5","sha1":"e0fa915fa910304bf2d26743d928934f766d3099","sha256":"a1d33619377fadcba41467774e9762cc83b94d36db79eaedace7c316c778067e","sha512":"5ab6708a832bdbc9f1ce4c39b8d55bf823506062937cf10f7bc29e7620854ad1e52bc42a72775c9759719d77d2e061a9c8e199e73315c45f55f3f85186dc11cf","ssdeep":"","tlshash":"be218b807ad1d198c27c05b4f29eebfac016cc22cb315e1b4c75bd5ab6795118c6384e","first_seen":"2023-06-20T20:19:20Z","last_seen":"2026-07-23T08:42:08.93349Z","times_seen":25,"resource_available":false,"data":null}},"time_used":608,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":607,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.073Z","timestamp":1782715990073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Lato HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:53:10 GMT\r\ndate: Mon, 29 Jun 2026 06:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":774,"size_decoded":1029,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"98e279faae11b60b01b3fad919ce13be","sha1":"8ac03eee80ee8fd37129ee7500a5877642e45eb9","sha256":"eafe40853325aa2a8172690347ad08deabfbd918181feb135d7ba5817966d232","sha512":"77f31dcfeb5b47a3e5a9f377e65587b6230363e7f016e48464f371bbb4d0487e53245e66b5d5ddb59b00345c27372340a9aec7aa4671c1001a797fe2a60b58de","ssdeep":"","tlshash":"6f01bd91096ba40897830cc612cd7d32ef1f624064499821eeff14d8bc67c699362b0d","first_seen":"2025-09-17T00:10:35.559729Z","last_seen":"2026-07-27T06:31:48.500653Z","times_seen":25345,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":34,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.077Z","timestamp":1782715990077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Open+Sans HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:53:10 GMT\r\ndate: Mon, 29 Jun 2026 06:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":2249,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"52fd336aac376e54df69f73afa4d9a1e","sha1":"ff01fecffbb6ad52a66fc2464c9a06d64ac49ce4","sha256":"0493c5aeeeee76553b77f584271225f936ff2901a1838303744debf8e99728e3","sha512":"6221444a13a3adb37f5064882fa86db9f2e836e7ce90aecc12ac7345281799d902140f502e5a5b8f08d1651f217844cab59ed53e9d3f4b0e9d52d8ba4f6bd3b3","ssdeep":"96:ZOEM9JOEMWDFZ8OEMjkOEMFYOEMhOEMNy+aZjzBrWOEMzubqGIFuV4UOEMCOEMN4:w9AWjBF1INqbCbqGIwV4Rzlqx","tlshash":"25c14d900017545467471ce723cebe30ee4fa2606040d07aabfd8b9aeed6da9a37532d","first_seen":"2025-09-17T00:02:10.461951Z","last_seen":"2026-07-27T06:39:52.574398Z","times_seen":21651,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.085Z","timestamp":1782715990085,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=Montserrat:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 06:53:10 GMT\r\ndate: Mon, 29 Jun 2026 06:53:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3634,"size_decoded":1269,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"21505d27bd02f1df730476479b0790db","sha1":"8406d5dd1183c72d674d9257cae5e461d54e7b8b","sha256":"d50f451c09ef85e63a5acdca187d40ad69be69f9b389cfb6aac6b96eb6dbec11","sha512":"c308d5ada9f158734475da11df2166a08c4e3dd01e9d3c3a9d65c39e196cfd007652e96a1905d57486109ff4d7da1e662942f2f41079b0fdc346027f3361300a","ssdeep":"","tlshash":"7271ae51101ae500a7472cc923cf7e26cd4e21667494c4367bfe2ca8ade6c365321b3d","first_seen":"2025-09-05T00:59:45.838605Z","last_seen":"2026-07-27T05:54:51.856764Z","times_seen":11493,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":49,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/js/cookienotice.js","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.087Z","timestamp":1782715990087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: paypal-signin.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 28 Jun 2026 20:00:52 GMT\r\nexpires: Sun, 05 Jul 2026 20:00:52 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sun, 28 Jun 2026 14:30:24 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 39138\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6513,"size_decoded":2718,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-27T07:00:54.328367Z","times_seen":132703,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/3935100173-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.090Z","timestamp":1782715990090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:35:53 GMT","end":"Mon, 31 Aug 2026 08:35:52 GMT"},"fingerprint":{"sha1":"2F:CC:C3:FD:70:CC:E0:BC:C3:01:6B:8D:C5:A9:D5:F3:5D:D3:8C:1D","sha256":"19:D9:36:5A:00:E2:D5:FB:B9:03:CC:A0:AD:72:C5:20:2B:67:2B:F4:6C:7D:C9:79:76:E2:56:FB:7E:7F:56:05"}}},"request":{"raw":"GET /static/v1/widgets/3935100173-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 53207\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 02:24:05 GMT\r\nexpires: Tue, 29 Jun 2027 02:24:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 27 Jun 2026 22:34:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 16145\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":150645,"size_decoded":53922,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4058)","md5":"4fa8569f70712e22407e6d8beaf100f7","sha1":"5c1bc170a603e047cc416d330a6045bc6d5e38e0","sha256":"fb184518d6c1c2f26d1678247dee283a6c9a0ce3c64df8e9a7cabf32c3b3c266","sha512":"ab77c5fa9552c47c24c3d0df5c4277ddeca11b83f1236345f89b0d05602d9108174c5c3a93cada1ac711d0c381107d49b4cc130c64916642c7780a3d2c328203","ssdeep":"1536:TS5N5GyrI6+on3Q8yTMrC6steazNUGOR9KAKmKRWV5bTglSWKJooVoEkDM8yQ2lJ:d6+zcstey29KUKIfgsKYR8yQCEM51d","tlshash":"e6e3f9c8b79670628373b4b5002f010ff13ab9aaf848896cb588d8e57d749695277f7c","first_seen":"2026-06-22T11:23:36.862073Z","last_seen":"2026-07-02T19:57:43.621779Z","times_seen":2049,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":5,"connect":19,"send":0,"wait":15,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T06:53:09.226Z","timestamp":1782715989226,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paypal-signin.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Mon, 29 Jun 2026 06:53:09 GMT\r\ndate: Mon, 29 Jun 2026 06:53:09 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Sat, 07 Sep 2024 23:03:47 GMT\r\netag: W/\"46dcb12c1f603e121e1ce7ce77e75916e053bf6de8b3c49d55168050d385f96e\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3652\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]}],"data":{"size":12241,"size_decoded":4143,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4174)","md5":"a3280b12a37cd350cc817160361f8ba4","sha1":"4d7441be49d61548998d2d5fe5cbbcb65261b93c","sha256":"3d1e16f4c79674e6687a057d35b202350fd18eacf802fe995aedd05406412850","sha512":"9aeff4f3f7d3f7ec00ae9a1d90406499acf501f9f520f27d0962e9051440b2bd5019244ce0ac37e9782fbb6d73590b69d6bf8e676197285543adf393f7d6f0bc","ssdeep":"192:wbwORZyYwORZcPh4uk0MbiijCKD38SiAqWMmbVRO3VLbOjUOfI0uRq2EVghqcpl2:wwORZyYwORZcPhcDtc7mbVRO3VLbOjUg","tlshash":"2542b6c3787cd4196b208c8cf866fe14f20b8d2bd981ace9e5e49c3929c97b3d112795","first_seen":"2026-06-29T06:53:33.361936Z","last_seen":"2026-06-29T06:53:33.361936Z","times_seen":1,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":32,"connect":17,"send":0,"wait":192,"receive":8,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/4165133002-widget_css_bundle.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-06-29T06:53:10.067Z","timestamp":1782715990067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:35:53 GMT","end":"Mon, 31 Aug 2026 08:35:52 GMT"},"fingerprint":{"sha1":"2F:CC:C3:FD:70:CC:E0:BC:C3:01:6B:8D:C5:A9:D5:F3:5D:D3:8C:1D","sha256":"19:D9:36:5A:00:E2:D5:FB:B9:03:CC:A0:AD:72:C5:20:2B:67:2B:F4:6C:7D:C9:79:76:E2:56:FB:7E:7F:56:05"}}},"request":{"raw":"GET /static/v1/widgets/4165133002-widget_css_bundle.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 6777\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 06:30:04 GMT\r\nexpires: Tue, 29 Jun 2027 06:30:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 29 Jun 2026 02:16:02 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 1386\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":30999,"size_decoded":7483,"mime_type":"text/css","magic":"ASCII text, with very long lines (30998)","md5":"e6fbca3b5b73fa62f3ca7bf5caa13e0a","sha1":"120bac7d413a6cd3806d869fae6e1096b4683e24","sha256":"0847041ca7093100e9e009a3d477cefb582d0a39f220eda3b48f44769b9a947c","sha512":"36cab9e1e0c039171ffcf2d8b9a7406323de43a50bceaf984e823d36cd83f3d7122ab45b6ec23f47cf20cf8b786adecbf64830ed4ff563dea45fa76160164f49","ssdeep":"384:OVysImDyPWquJMpx/SCYW0h8+OU8ya4Xw8wuJ86YKSQCNL/J69nKg93jW1gngRe4:OnIm6IvW0qIg8VJw1gngRLFr/","tlshash":"26d2da72a590211db137d725b883ba8c3218d963e7135eeed555b2b8cfc66de102332d","first_seen":"2026-05-06T11:26:34.907363Z","last_seen":"2026-07-27T04:01:26.377173Z","times_seen":4159,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":16,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}