{"report_id":"8679eebf-11b6-484f-bb5c-1fc52dd67275","version":6,"status":"done","tags":["coinbase","crypto","phishing"],"date":"2026-02-18T19:17:14Z","url":{"schema":"http","addr":"coinbaseloginu.blogspot.ch","fqdn":"coinbaseloginu.blogspot.ch","domain":"blogspot.ch","tld":"ch"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"title":"coinbase","dom":{"size":139643,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14749)","md5":"9ef69d420b4d0f48d02529d6ff2d478c","sha1":"2a5e811693bf715b99bfe8b1b82480d556fdc564","sha256":"796535d40b72513a58ae2b48cfa98710f036caaccccd4a79ae748c0b3ebc851c","sha512":"74368dbf31db1c01c945e1267b02e8895d9809759caa5e6bde0e1f44e9743093c53e59e54d45e8351cbf5ca30068f1ab208f6441ee5c22b4b2084e420e5e8ddb","ssdeep":"1536:xZ6nlcIuYDNOALuTAKODmKH13blvM8aAAU8SOm3ntqyjlVrXM:xZAuvODm6dSkEm3ntqyjlVrXM","tlshash":"91d31a735452391a83734888b1e1f6cafa088493d6d244dfe4fda29c47daed36237359","dom_hash":"domhash91f1520c9468fbc920d645a3c77dbb6c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"coinbaseloginu.blogspot.ch","fqdn":"coinbaseloginu.blogspot.ch","domain":"blogspot.ch","tld":"ch"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T19:17:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"coinbaseloginu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-15T22:30:04.850164Z","alert_count":0,"request_count":1,"received_data":12523,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2026-02-16T04:48:43.873286Z","alert_count":0,"request_count":5,"received_data":9382,"sent_data":3536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coinbaseloginu.blogspot.com","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-01-09T18:09:03.937663Z","last_seen":"2026-02-08T09:52:57.72734Z","alert_count":20,"request_count":4,"received_data":157657,"sent_data":1866,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1138,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.251.143.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-02-16T06:28:30.153813Z","alert_count":0,"request_count":2,"received_data":152102,"sent_data":921,"comment":"","tags":null,"fingerprints":null},{"fqdn":"resources.blogblog.com","ip":{"addr":"142.251.143.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-09-15","domain_rank":177645,"first_seen":"2017-01-30T04:47:40Z","last_seen":"2026-02-18T15:21:44.46827Z","alert_count":0,"request_count":1,"received_data":143981,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"themes.googleusercontent.com","ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":81747,"first_seen":"2012-05-24T07:24:02Z","last_seen":"2026-02-12T08:48:47.274333Z","alert_count":0,"request_count":1,"received_data":229043,"sent_data":549,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coinbaseloginu.blogspot.ch","ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":138003,"sent_data":495,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-15T07:44:17.500893Z","times_seen":108173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","size":11792,"data":"","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-07-28T16:45:24.001542Z","times_seen":30209,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/js/cookienotice.js","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-28T16:59:06.051113Z","times_seen":132815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/1678292640-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.143.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d765dcff5d9fa532aac9075c17f443a7","sha1":"22817db90932496ee9618e9f73153756cfb5a10a","sha256":"0a330d386b8784c66c8fd687ca0cd2455f8157b399095ca712b539c96d5fc7b6","sha512":"7789c2f18a0db398a8bb1a5e0dad046071ddecbd96e43273acac9efb1e936fa4009f899acd1431ffeaecb11c64cb81c64735ebca5f2a71a848ff9fc24f1a2207","ssdeep":"1536:WFLo5vRqzFMVonPQ8nTIrB6Qfeanqt2psGrAGLKm/vTMaglSWk6oocU6xDoGo3/D:mFMVmbQfeCyGrZKYXgSRliGwb/bdJ","tlshash":"b9e3f9d8b79270628373b4b5003f010ff13ab9aae848886cb588d9e57d749695277f7c","size":148191,"data":"","first_seen":"2026-02-16T22:34:05.411054Z","last_seen":"2026-02-24T15:07:21.479663Z","times_seen":523,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f488687f23b8b2ad6f1d05c2d07b2735","sha1":"9fc276898b78f841cb27d76da4f17dbe8c77aefe","sha256":"9153ade8a8e5db45d8092225fe85f04f6af83889149e2f735d1815268a1003c9","sha512":"de641622763436813ae87369ae73c0f2d7123835e07e67005a30b4bc76dccf76f07be9c35b78614275144015af1f491458cf292e060df5ef74cefbeb267e7ce2","ssdeep":"","tlshash":"690189137108e71422a314347b8bba18fd2ac2520895453b391cf5324f07b63ce96be3","size":798,"data":"","first_seen":"2024-02-05T14:31:36Z","last_seen":"2026-07-15T07:44:17.506275Z","times_seen":74985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/1809905691-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.251.143.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2ff5efb15c427f3d6903a03a8175b70","sha1":"dd74c5ffc9086181ed9c034159e482cebb2179f0","sha256":"c54bbdb5fa55a150a11c7569aed086df31b2512924f925a83e7feb420d9b2da1","sha512":"f2813ae093ee01aa817726cf2a8630fea580217edfb4338dd01972013c155d2d3264529dd5c519e3892e69adc04e3cd827dd4c71fedde6d6dd5cd57cb5f51099","ssdeep":"1536:h8SKRZwIQRDGB+fScic8tVNjOiKQMZwMkWU+AbpBfdlfgN+cuZgBzY5d037Z:kyUcwOiKQJp5lKEgp+a","tlshash":"28e3e79cb6a270768363f1f5402f414eb237b869a948496c718ddce62eb4d49123bf7c","size":143265,"data":"","first_seen":"2026-01-22T23:25:45.174651Z","last_seen":"2026-02-27T00:04:22.44162Z","times_seen":685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"be479cee3cfb0dc837ef6d2a916df177","sha1":"18531773934659187e1cf2efae632424ee35370e","sha256":"391a0af840bcdbdf98c6d7e786d800092b88fba175bfb41a7cf3a41f712e9af2","sha512":"ee6f8229af8eac50acc7446ff14363d96a440d78c4778b0993095022c1ae53e47c35ca49fa19348f5291fa9a767621a0c73aabc2da874ffefbee7cd5d05005d4","ssdeep":"192:zQVRV3VLbVjUlhCyI/BRq2EKnhqcpllLBVRbtRtFQ5qM1aZLvZ8QvG/AGQhGEqVa:zQVRV3VLbVjUf2BdlltVbRtSkMahDR+w","tlshash":"d022b6c370fcb4f94fe9685ef035fea5768e0c15d4c2bc66986819a81a4d783d4a5b30","size":10059,"data":"","first_seen":"2026-02-18T12:27:42.537313Z","last_seen":"2026-02-18T19:19:39.938733Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 3475\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\nexpires: Wed, 18 Feb 2026 19:16:53 GMT\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10473)","md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-07-28T16:45:24.001542Z","times_seen":30209,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":87,"dns":1,"connect":8,"send":0,"wait":21,"receive":1,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKrhFSLuqvKjaG-9GuShHJleUZT1PAY5xq1KYCD0yi_BuYNwXSJ_MglKYAUc5TPkRaZjVPE9vIyJY0hatKriMwChVHq_ls8_jTjciiwzzNqLrtsxChqH_ITHgqMGeRdJg-m7BHVojmZ8URb88IgHLRWFbscu37zXERqrhKbFeVk2DHglNO8XFJebbbFpvk/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEiKrhFSLuqvKjaG-9GuShHJleUZT1PAY5xq1KYCD0yi_BuYNwXSJ_MglKYAUc5TPkRaZjVPE9vIyJY0hatKriMwChVHq_ls8_jTjciiwzzNqLrtsxChqH_ITHgqMGeRdJg-m7BHVojmZ8URb88IgHLRWFbscu37zXERqrhKbFeVk2DHglNO8XFJebbbFpvk/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"va8\"\r\nexpires: Thu, 19 Feb 2026 19:16:53 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"coinbase pro icon.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\nserver: fife\r\ncontent-length: 1216\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"c3e981cc0e8dd899f82b56097a478468","sha1":"810489d213cebe7387dec59f8b3b85e6f63e2f3f","sha256":"127721fa7a5b8d46cc13e68801b222fb6b92f7839193b739db160fdf29809d70","sha512":"5e9fdc32e0adb9005845981294317962e5e066788ad4715f0df3333ef080a84bda3bd77c522ebf2f203ce0866c96713fb7c2b3caa0d63b33fc11b6036451ebd5","ssdeep":"","tlshash":"8921d754b6842e1ae1bb4561b6d273b0c47005f3728acc4b6634a11c746fef7dbd9500","first_seen":"2026-01-09T18:09:06.605766Z","last_seen":"2026-03-02T13:18:38.820942Z","times_seen":15,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":174,"dns":36,"connect":10,"send":0,"wait":299,"receive":0,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/js/cookienotice.js","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: coinbaseloginu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 12:27:15 GMT\r\nexpires: Wed, 25 Feb 2026 12:27:15 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 18 Feb 2026 08:50:41 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 24578\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-28T16:59:06.051113Z","times_seen":132815,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"coinbaseloginu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinbaseloginu.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:05:52 GMT\r\nexpires: Sat, 13 Feb 2027 07:05:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 475861\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-28T19:54:10.457419Z","times_seen":948611,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":8,"receive":4,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T19:16:52.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbaseloginu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Wed, 18 Feb 2026 19:16:52 GMT\r\ndate: Wed, 18 Feb 2026 19:16:52 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Fri, 10 Jan 2025 11:35:27 GMT\r\netag: W/\"29d49578b152571b9c394821cc7c3c8c116b68395e601e6a908c4ed0b889442a\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 24274\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}],"data":{"size":137504,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (14749)","md5":"874a2274d48f4233ac6f8f111982de5c","sha1":"da53094007ef38bb22794f200c00d1bb667f6212","sha256":"94a6f5fd37b62d5a3c596d0bc4b2d7ffe9f7babce00c4ec684f3502eeec1334e","sha512":"86a50714e61df534453da9bd7be1fd49cec26ac077d5417bafcc7417fa66cdf91976c827fb811a745c879f90044bd26fbbd95a03869b2bcbe1b4908322657c87","ssdeep":"1536:H4Dd6nZy8yMM7mvhNqKODmR2Fh+iXq/xt2yjlVrX+:H4DduxODmRRxt2yjlVrX+","tlshash":"9cd33c775466791e83630888b0e2fbc8ba088453d5d344dee4fda35c8bd6a93a33635d","first_seen":"2026-02-18T12:27:42.53149Z","last_seen":"2026-02-18T19:19:39.935673Z","times_seen":3,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":95,"dns":26,"connect":7,"send":0,"wait":197,"receive":62,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"coinbaseloginu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjb7_aI_wIyuLKrI8xA8avVcEJ-f0DRG40jzzVdMPQQbI-LWwT4JvP92PzoYqfjB8tT967xpyozp4zuFvRIda2j1HhP7jjnB-Ow9giYWs_g_dyfN2w609SMJEgxcnojzlZNySuDxL1JgJ6HCMO-qhz_mPosgJW9jRly4iUeTvJu9U90fjmLCJmS7WkORVV9/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEjb7_aI_wIyuLKrI8xA8avVcEJ-f0DRG40jzzVdMPQQbI-LWwT4JvP92PzoYqfjB8tT967xpyozp4zuFvRIda2j1HhP7jjnB-Ow9giYWs_g_dyfN2w609SMJEgxcnojzlZNySuDxL1JgJ6HCMO-qhz_mPosgJW9jRly4iUeTvJu9U90fjmLCJmS7WkORVV9/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v9a\"\r\nexpires: Thu, 19 Feb 2026 19:16:53 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"coinbase pro icon.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\nserver: fife\r\ncontent-length: 1216\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"c3e981cc0e8dd899f82b56097a478468","sha1":"810489d213cebe7387dec59f8b3b85e6f63e2f3f","sha256":"127721fa7a5b8d46cc13e68801b222fb6b92f7839193b739db160fdf29809d70","sha512":"5e9fdc32e0adb9005845981294317962e5e066788ad4715f0df3333ef080a84bda3bd77c522ebf2f203ce0866c96713fb7c2b3caa0d63b33fc11b6036451ebd5","ssdeep":"","tlshash":"8921d754b6842e1ae1bb4561b6d273b0c47005f3728acc4b6634a11c746fef7dbd9500","first_seen":"2026-01-09T18:09:06.605766Z","last_seen":"2026-03-02T13:18:38.820942Z","times_seen":15,"resource_available":false,"data":null}},"time_used":647,"timings":{"blocked":176,"dns":37,"connect":10,"send":0,"wait":287,"receive":0,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/responsive/sprite_v1_6.css.svg","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET /responsive/sprite_v1_6.css.svg HTTP/1.1\r\nHost: coinbaseloginu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 18 Feb 2026 12:27:15 GMT\r\nexpires: Wed, 25 Feb 2026 12:27:15 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 18 Feb 2026 10:49:11 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 24578\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4dcfc8144f556815c7a1d84ed4e959e","sha1":"22088bd6cdf970dcf7bfab9a74a4768548ca8890","sha256":"73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c","sha512":"bbf542916c5e6a7fff6742e1aff185d3129b24c2d4669e387fe257c2f1ee938871e2a825e4e7fb347b6e739190168c7ca347d4a7989ad334f15992cb83bad28e","ssdeep":"192:S0S54QQw+4C4qV7DnovzS/KuO7/Jk4UZgf+q:S0S54HP4C4g7DovzCKuO7/Jk4UZoJ","tlshash":"bdf1f266c7382b4818059778efaeb2b110edb4e935cc41d936094768b78a1dff86af41","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-07-28T16:45:24.003288Z","times_seen":29767,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"coinbaseloginu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinbaseloginu.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:05:52 GMT\r\nexpires: Sat, 13 Feb 2027 07:05:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 475861\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-07-28T19:54:10.457419Z","times_seen":948611,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":8,"receive":10,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/img/blogger_logo_round_35.png","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.143.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:02 GMT","end":"Mon, 20 Apr 2026 08:39:01 GMT"},"fingerprint":{"sha1":"50:BA:5E:87:61:88:8B:49:82:D9:25:CE:F5:7F:E0:8A:0A:D3:09:B3","sha256":"93:93:14:98:C5:22:09:63:04:F0:04:4E:68:93:10:86:08:79:5F:E9:1A:E5:52:4A:18:69:7D:D6:BF:F5:D6:5B"}}},"request":{"raw":"GET /img/blogger_logo_round_35.png HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2531\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:03:40 GMT\r\nexpires: Fri, 20 Feb 2026 06:03:40 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 12 Feb 2026 08:56:35 GMT\r\ncontent-type: image/png\r\nage: 479593\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"838622483cbfed35380b4705f19d7cca","sha1":"7de684136affc969a24d61927afc18905cf2fc36","sha256":"183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a","sha512":"d2f77ab5ccb90653fe6480e3a5c488129e8050156e72a3d034eb93a1c3e1f2ce462603c08a05a8911a7f65a77b239bfdb6c4930119a5e6cbe8619f3fa3607e71","ssdeep":"","tlshash":"e7513c8dda1228d281356c2d9f2ae58adc694f0f72130744b9e97296475efb940818b0","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-07-28T16:45:24.00925Z","times_seen":29884,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.com/favicon.ico","fqdn":"coinbaseloginu.blogspot.com","domain":"coinbaseloginu.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinbaseloginu.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nexpires: Wed, 18 Feb 2026 19:16:53 GMT\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Fri, 10 Jan 2025 11:35:27 GMT\r\netag: W/\"29d49578b152571b9c394821cc7c3c8c116b68395e601e6a908c4ed0b889442a\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel","md5":"59a0c7b6e4848ccdabcea0636efda02b","sha1":"30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340","sha256":"a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f","sha512":"bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4","ssdeep":"","tlshash":"5671c80736c29f79c4d082fa159ec674136766eb281b061b3e85f65a3d88135f911ac0","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-07-28T16:59:06.062522Z","times_seen":106487,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-18","alert":"Phishing Block","trigger":"coinbaseloginu.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Coinbase","verdict":"phishing","severity":"medium","comment":"Associated with Coinbase phishing","tags":["coinbase","crypto","phishing"],"meta":null}]}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhG6ky2QhCV_j-HGd8dxuSB19mnMIakQ48ArA0naPJNjbgZ1vuOaa3hQnwJjegUwSx_dm11aLd97XFdYx6UFPJOkK5DIMvGlVgszSTMQQwvlmFdmFwHJPXURJjvmW5Udxv48ZV-4Gl8paisJ7AzUlN0Te1HZVlEOCn5Vlvg0sLA6adrJL7rzi75CZ1rVNrs/w945-h600-p-k-no-nu/gemini%20icon%202.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEhG6ky2QhCV_j-HGd8dxuSB19mnMIakQ48ArA0naPJNjbgZ1vuOaa3hQnwJjegUwSx_dm11aLd97XFdYx6UFPJOkK5DIMvGlVgszSTMQQwvlmFdmFwHJPXURJjvmW5Udxv48ZV-4Gl8paisJ7AzUlN0Te1HZVlEOCn5Vlvg0sLA6adrJL7rzi75CZ1rVNrs/w945-h600-p-k-no-nu/gemini%20icon%202.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"vb3\"\r\nexpires: Thu, 19 Feb 2026 19:16:53 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"gemini icon 2.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\nserver: fife\r\ncontent-length: 2152\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"1b1db60ce2a3cff32dcf5f8c076a48f2","sha1":"b82fb1aa91f2fe0daf0e8f532a54fe2ef8030232","sha256":"901c19f7fde52f316e47a1590e161467cb093a29aaa1e6e6544ffa693d7552b9","sha512":"f24f20c17c8a9476430d828bfd87236a1568452db94cbba0d90b0fd4e33862228f7e6af208d06905eb9ce5da85e8db28db39eaaae82e31d6477d6e276a885f28","ssdeep":"","tlshash":"ce41c947c7d590d4e99d623e20ad32aac95cb83801c698ab7141d5feb380e51f6892e6","first_seen":"2026-01-09T18:09:06.60816Z","last_seen":"2026-03-02T13:18:38.819702Z","times_seen":13,"resource_available":false,"data":null}},"time_used":630,"timings":{"blocked":169,"dns":41,"connect":8,"send":0,"wait":283,"receive":0,"ssl":126},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/1809905691-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.251.143.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:02 GMT","end":"Mon, 20 Apr 2026 08:39:01 GMT"},"fingerprint":{"sha1":"50:BA:5E:87:61:88:8B:49:82:D9:25:CE:F5:7F:E0:8A:0A:D3:09:B3","sha256":"93:93:14:98:C5:22:09:63:04:F0:04:4E:68:93:10:86:08:79:5F:E9:1A:E5:52:4A:18:69:7D:D6:BF:F5:D6:5B"}}},"request":{"raw":"GET /blogblog/data/res/1809905691-indie_compiled.js HTTP/1.1\r\nHost: resources.blogblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 48847\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:16:46 GMT\r\nexpires: Fri, 20 Feb 2026 06:16:46 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 12 Feb 2026 14:53:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 478807\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1934)","md5":"a2ff5efb15c427f3d6903a03a8175b70","sha1":"dd74c5ffc9086181ed9c034159e482cebb2179f0","sha256":"c54bbdb5fa55a150a11c7569aed086df31b2512924f925a83e7feb420d9b2da1","sha512":"f2813ae093ee01aa817726cf2a8630fea580217edfb4338dd01972013c155d2d3264529dd5c519e3892e69adc04e3cd827dd4c71fedde6d6dd5cd57cb5f51099","ssdeep":"1536:h8SKRZwIQRDGB+fScic8tVNjOiKQMZwMkWU+AbpBfdlfgN+cuZgBzY5d037Z:kyUcwOiKQJp5lKEgp+a","tlshash":"28e3e79cb6a270768363f1f5402f414eb237b869a948496c718ddce62eb4d49123bf7c","first_seen":"2026-01-22T23:25:45.174651Z","last_seen":"2026-02-27T00:04:22.44162Z","times_seen":685,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":51,"connect":30,"send":0,"wait":24,"receive":29,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbaseloginu.blogspot.ch/","fqdn":"coinbaseloginu.blogspot.ch","domain":"blogspot.ch","tld":"ch"},"ip":{"addr":"172.217.19.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T19:16:52.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbaseloginu.blogspot.ch\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://coinbaseloginu.blogspot.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Wed, 18 Feb 2026 19:16:52 GMT\r\nexpires: Wed, 18 Feb 2026 19:16:52 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 200\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":137504,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T19:56:24.066135Z","times_seen":17585749,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":118,"dns":28,"connect":7,"send":0,"wait":116,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"coinbaseloginu.blogspot.ch","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgroK-5yi5IEyg-G-l8Jw4ReQ0npDv5mj49XlFHXO00xqDteo8YnGV-_rooVR-E32Z-XlM4BQJDJUwGd4Kf5TscHYHKX62mrTKw2cLLulkhp_aldYBEW1AXLIKpFcKNAHIhYh9A18DkDI5y3mRYVHIrQbx4STLL9lOyP9UZPU7HOeTs0hIz878E3SO-wuaI/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEgroK-5yi5IEyg-G-l8Jw4ReQ0npDv5mj49XlFHXO00xqDteo8YnGV-_rooVR-E32Z-XlM4BQJDJUwGd4Kf5TscHYHKX62mrTKw2cLLulkhp_aldYBEW1AXLIKpFcKNAHIhYh9A18DkDI5y3mRYVHIrQbx4STLL9lOyP9UZPU7HOeTs0hIz878E3SO-wuaI/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v96\"\r\nexpires: Thu, 19 Feb 2026 19:16:53 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"coinbase pro icon.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\nserver: fife\r\ncontent-length: 1216\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"c3e981cc0e8dd899f82b56097a478468","sha1":"810489d213cebe7387dec59f8b3b85e6f63e2f3f","sha256":"127721fa7a5b8d46cc13e68801b222fb6b92f7839193b739db160fdf29809d70","sha512":"5e9fdc32e0adb9005845981294317962e5e066788ad4715f0df3333ef080a84bda3bd77c522ebf2f203ce0866c96713fb7c2b3caa0d63b33fc11b6036451ebd5","ssdeep":"","tlshash":"8921d754b6842e1ae1bb4561b6d273b0c47005f3728acc4b6634a11c746fef7dbd9500","first_seen":"2026-01-09T18:09:06.605766Z","last_seen":"2026-03-02T13:18:38.820942Z","times_seen":15,"resource_available":false,"data":null}},"time_used":611,"timings":{"blocked":166,"dns":39,"connect":10,"send":0,"wait":265,"receive":1,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9iUzXiGFJibfweV9FljEs84tH5pmWADDwUm9Yd-ZsCicw_ycKLqp2hCa61er38h0qwgIX5ffJY5jw3ltvTnc9PLWXLJ2iOH3ELfV2mUJUa_QqNplJavwS1du5df_9sEkO2B_rwfShstuiS4EgqgvB4XQhyNL_8mPq_eOW3m4_Ao10QjNdo22arih7ui_y/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEh9iUzXiGFJibfweV9FljEs84tH5pmWADDwUm9Yd-ZsCicw_ycKLqp2hCa61er38h0qwgIX5ffJY5jw3ltvTnc9PLWXLJ2iOH3ELfV2mUJUa_QqNplJavwS1du5df_9sEkO2B_rwfShstuiS4EgqgvB4XQhyNL_8mPq_eOW3m4_Ao10QjNdo22arih7ui_y/w128-h128-p-k-no-nu/coinbase%20pro%20icon.png HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v86\"\r\nexpires: Thu, 19 Feb 2026 19:16:53 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"coinbase pro icon.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\nserver: fife\r\ncontent-length: 1216\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1216,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit colormap, non-interlaced","md5":"c3e981cc0e8dd899f82b56097a478468","sha1":"810489d213cebe7387dec59f8b3b85e6f63e2f3f","sha256":"127721fa7a5b8d46cc13e68801b222fb6b92f7839193b739db160fdf29809d70","sha512":"5e9fdc32e0adb9005845981294317962e5e066788ad4715f0df3333ef080a84bda3bd77c522ebf2f203ce0866c96713fb7c2b3caa0d63b33fc11b6036451ebd5","ssdeep":"","tlshash":"8921d754b6842e1ae1bb4561b6d273b0c47005f3728acc4b6634a11c746fef7dbd9500","first_seen":"2026-01-09T18:09:06.605766Z","last_seen":"2026-03-02T13:18:38.820942Z","times_seen":15,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":193,"dns":40,"connect":21,"send":0,"wait":247,"receive":0,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/1678292640-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.143.137","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:02 GMT","end":"Mon, 20 Apr 2026 08:39:01 GMT"},"fingerprint":{"sha1":"50:BA:5E:87:61:88:8B:49:82:D9:25:CE:F5:7F:E0:8A:0A:D3:09:B3","sha256":"93:93:14:98:C5:22:09:63:04:F0:04:4E:68:93:10:86:08:79:5F:E9:1A:E5:52:4A:18:69:7D:D6:BF:F5:D6:5B"}}},"request":{"raw":"GET /static/v1/widgets/1678292640-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 52365\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 16 Feb 2026 01:53:54 GMT\r\nexpires: Tue, 16 Feb 2027 01:53:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Feb 2026 00:51:45 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 235379\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":148191,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4078)","md5":"d765dcff5d9fa532aac9075c17f443a7","sha1":"22817db90932496ee9618e9f73153756cfb5a10a","sha256":"0a330d386b8784c66c8fd687ca0cd2455f8157b399095ca712b539c96d5fc7b6","sha512":"7789c2f18a0db398a8bb1a5e0dad046071ddecbd96e43273acac9efb1e936fa4009f899acd1431ffeaecb11c64cb81c64735ebca5f2a71a848ff9fc24f1a2207","ssdeep":"1536:WFLo5vRqzFMVonPQ8nTIrB6Qfeanqt2psGrAGLKm/vTMaglSWk6oocU6xDoGo3/D:mFMVmbQfeCyGrZKYXgSRliGwb/bdJ","tlshash":"b9e3f9d8b79270628373b4b5003f010ff13ab9aae848886cb588d9e57d749695277f7c","first_seen":"2026-02-16T22:34:05.411054Z","last_seen":"2026-02-24T15:07:21.479663Z","times_seen":523,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":50,"connect":12,"send":0,"wait":9,"receive":18,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600","fqdn":"themes.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.20.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbaseloginu.blogspot.com/","date":"2026-02-18T19:16:53.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600 HTTP/1.1\r\nHost: themes.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbaseloginu.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Thu, 19 Feb 2026 19:16:53 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 18 Feb 2026 19:16:53 GMT\r\nserver: fife\r\ncontent-length: 228521\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":228521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Sunset afterglow and twlight dunes in White Sands National Monument, software=Picasa], baseline, precision 8, 1600x1067, components 3","md5":"e66ef1f4c654be20558150214aa2b85a","sha1":"ad1dfbefad9a21e48aeeac1bae9f8a5b8ea1ef3c","sha256":"6a5482e0dc4e77a6be20281b13d7ef4d8b67521e73b66bc633ea4e4242934be9","sha512":"a5d066c57405a14eaea3ec9e661d905bf80efb03371ce298fce18acb8d545f73225daf18f55a124f42b98f9afd04adc94baf349df2e08f5d78f130c29c86e823","ssdeep":"6144:ZLvXzTZPaNDvJrIgKk1pfe+I4K8dAChaA:Zb2dEgKOpWkKGAqaA","tlshash":"982422a9fcbd9272cf0ee0708099ed094153ff308bde1b986455cf8db2eda44149d656","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-07-28T13:26:56.736634Z","times_seen":21473,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":27,"connect":26,"send":0,"wait":74,"receive":58,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
