{"report_id":"8904cc80-2650-40ae-9478-0c0d2acb5412","version":0,"status":"done","tags":[],"date":"2026-09-14T18:37:38Z","url":{"schema":"http","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.201.193","port":0,"asn":15169,"as":"Google LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"title":"Log in to your paypal account","dom":{"size":13782,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4174)","md5":"48bc494188d9380758f701b04f157a7e","sha1":"1b037675f264b9715915d28adb075365adcd0583","sha256":"f217893bf545a546a2f6709c7c3a4e482f6c47e0b09329fc0906e7cfaeadfc27","sha512":"74828b454755fe7a34da9c81dd11be943542dd5affe413bf32a6e68a5b2e41667ac8e1ac5ab6f6455b32bbf3aef76eec832cacdf919d413b95c1a342c89f2a04","ssdeep":"384:DWWdPhcicshbVRO3VLbOjU82rdll6VFmk:6WdPhcicshR4FOd2rYYk","tlshash":"8352d9c3746cd82a672188ccf971bf24f24b8d2bd585acd9f4e09c392ac9bb39511365","dom_hash":"domhash94de9b493df015d17b9a6bf08deaa703","first_seen":"2026-09-14T18:37:39.509188Z","last_seen":"2026-09-14T18:37:39.509188Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.201.193","port":0,"asn":15169,"as":"Google LLC","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T18:37:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"paypal-signin.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"paypal-signin.blogspot.com","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-03-20T00:51:36.44188Z","last_seen":"2026-09-02T02:43:29.629069Z","alert_count":12,"request_count":3,"received_data":21551,"sent_data":1478,"comment":"","tags":null,"fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":6,"received_data":29389,"sent_data":3085,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-09-08T03:12:28.090155Z","alert_count":0,"request_count":2,"received_data":184459,"sent_data":1031,"comment":"","tags":null,"fingerprints":null},{"fqdn":"netdna.bootstrapcdn.com","ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":41692,"first_seen":"2012-09-07T15:11:00Z","last_seen":"2026-09-08T14:10:50.763511Z","alert_count":0,"request_count":1,"received_data":21686,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2536df5500472e1de28034f4c07a067d","sha1":"c5fa7462aa7e964efd6dbf6e56caff6a128158c0","sha256":"b815fbb81f71ce5cdff4631273a38f936b6c85ab06cd3d045d4de7bc41dfd3d9","sha512":"5eeca9855bb1ed2ad469634d09ec143f6580e1c301f6c7695c72bafaf5b5fd0c5014cc00b5ba9f47bc229e84c63afbe1d2ae2afd4d5301d94341182494644f15","ssdeep":"","tlshash":"c0d02ef7f4d5ac218809a3200825e9083032e6feb3a04de094c0053a088a8ba9306fa0","size":271,"data":"","first_seen":"2026-05-25T18:38:39.672755Z","last_seen":"2026-09-14T19:59:29.569256Z","times_seen":15562,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87fecb72fc66afeed4e3c67d8bf07348","sha1":"1a6e5c407df475125d22da377dc5fffc306d9c35","sha256":"46fc7d54c764103aa52d10c56764fdf7b07f2adf9d81d1be2dee1a686534c24b","sha512":"c6394150fe784d323d1984c6b79de6279396c58576504af9f42610a034eba9ffc34615f10278471f7d65d697052ea500fc171fed1c9819a1f8e5d2d09728beb4","ssdeep":"","tlshash":"5701bd137008e71421a314307b8bba18fd2ac2520895453b391cf5324f07b63ced6be3","size":790,"data":"","first_seen":"2026-05-25T18:38:39.709469Z","last_seen":"2026-09-14T19:44:02.20388Z","times_seen":14284,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"29c2e5321f8b356f292f1ab59a5eb0bb","sha1":"f2cc32d6ac8b3a5be9cf76aae0ea833e6851ccfb","sha256":"bf00135c563c1df9db0ab8de2a4663ffaaf0ea489e0c8a3ad8648dbc963f4cf5","sha512":"a3b4dffd0bce482fb60cabc210f2112ad2c72dcecd886e96b7ebea2e75bb0bdf32c8fde55c560d85713936aba5e789a090669ce6390bb87e282ba00bf80aa8c6","ssdeep":"96:2bRXRO3RXLRZOjRKlEemA7F0/fHTUOwjouRq2EV5u6AhqcNHllL2RXRscivYa:2bVRO3VLbOjUQfI0uRq2EVghqcpllL2K","tlshash":"999164c364bce0f6df609d8df52dbe54f38e0d17ea81bca3e85488a42949b679400b30","size":4511,"data":"","first_seen":"2026-09-14T18:37:39.535283Z","last_seen":"2026-09-14T18:37:39.535283Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/851759228-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6cca111dd448c68eab0e8a16263b976","sha1":"0a1b67880e9fc9d4fa3355ffad7678b585a0036c","sha256":"834eacc83b6be1a82ba8436ed269e672a0015847fa3a1b7f5eb1e60f20772453","sha512":"fe92d647f785c6a797f9b051a1ec52e42a3a9543594b645ac720c197577ddf36c7f6332e62cd41f5835fa343794cba3b08522e5a937e67c6db976a042a189921","ssdeep":"1536:9/zFMZ7URKdvOnTAQcIE2NVtbkeKzW0muCyfMWARdKSHrQuGm8B9BsXb1bO1Av2O:HKdvuN3bkeKWzwMWwKnJd9oY38Y3DzA","tlshash":"7ee30bdcb69670628373b4b1003f010ff13a79aae848496cb188d9e57e7496a5277f7c","size":152056,"data":"","first_seen":"2026-09-13T18:10:36.215518Z","last_seen":"2026-09-14T20:28:16.097571Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/js/cookienotice.js","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-09-14T19:44:02.173426Z","times_seen":139325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T18:37:08.658Z","timestamp":1789411028658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:53 GMT","end":"Mon, 02 Nov 2026 08:38:52 GMT"},"fingerprint":{"sha1":"A5:E5:FE:0E:04:C4:30:8F:7A:3D:F5:02:6D:A4:3D:CB:95:9F:2D:4C","sha256":"E5:D9:84:9E:E7:B4:35:6A:DD:4A:6F:A7:67:FB:E5:71:B3:EF:8F:E1:FA:E6:6E:6B:17:3D:88:9B:FE:84:E2:7F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: paypal-signin.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Mon, 14 Sep 2026 18:37:09 GMT\r\ndate: Mon, 14 Sep 2026 18:37:09 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Sat, 07 Sep 2024 23:03:47 GMT\r\netag: W/\"46dcb12c1f603e121e1ce7ce77e75916e053bf6de8b3c49d55168050d385f96e\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3653\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]}],"data":{"size":12240,"size_decoded":4144,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4174)","md5":"b4de0e56f25ce2992837b76d84decfdc","sha1":"a9a3b8c95a633fda924e624a52e11e4deea63422","sha256":"551356a0553390bd83f84447a526c35ed8281a533cac51ceb04e2ad0f3deb130","sha512":"6ab1ac1cf7d34bd50bf747514cec9b1ebe1888eda40e58001b7c99644c75e6da581921e82421634236f1f2c5b6558a8c08fe4d42e27f6ef8fbfec42d268ea56c","ssdeep":"192:wbwORZyYwORZcPh4uk0MbiijCKD38SiAqkNbVRO3VLbOjUQfI0uRq2EVghqcpll0:wwORZyYwORZcPhcDtcsNbVRO3VLbOjU2","tlshash":"df42a6c3786cd419ab208c8cf865fe14f20b8d2bd981ace5e5e89c7929c97b3d112795","first_seen":"2026-09-14T18:37:39.512808Z","last_seen":"2026-09-14T18:37:39.512808Z","times_seen":1,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":34,"connect":23,"send":0,"wait":727,"receive":10,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"paypal-signin.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Varela+Round","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.946Z","timestamp":1789411029946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Varela+Round HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 18:37:10 GMT\r\ndate: Mon, 14 Sep 2026 18:37:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1509,"size_decoded":1187,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"13666c4ed3c63e67258311b8bcef6f02","sha1":"b2aa55df75239d4804e3d16b4d567959acfc1e15","sha256":"b5aeb00fcc4a65559bc88c27f4271fce06832f57a7ce54af75b10c41d38026df","sha512":"dd1dfb702d79db265cd4acdc930ebe7c56742a7403cae783ee944293282c26f056c58f27bcc4322d4c04be337456773f7c95b823d596b293065e6af85bd694b3","ssdeep":"","tlshash":"0531c0a01426b504aba30ce622ce7e30cd4fa244b050d936affe2c9deca6d29731570d","first_seen":"2025-09-15T15:28:37.927277Z","last_seen":"2026-09-14T18:37:39.515922Z","times_seen":5538,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":11,"connect":15,"send":0,"wait":37,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Rubik:400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.949Z","timestamp":1789411029949,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Rubik:400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 18:37:10 GMT\r\ndate: Mon, 14 Sep 2026 18:37:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7482,"size_decoded":1502,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"441d7abcb3d55c95e4ac58ff41c5090c","sha1":"51b8b03819d010ff6b7eddba477c362803d90a34","sha256":"a626af4c6a56980dc0916323dec8d7511523bc3f62f7817f017dbfab3100c5db","sha512":"2d9e9114dcb41d1b01ebc175f77e5743c3b24431b5f1548d8bdec17a5be138f442533c13cb77c8125028cfc94b22b2e2c808a5da04baa629005da6845c9caddb","ssdeep":"192:DhCl+sGAvAE8hCl3sflWAJyhClFsdXoAzp:4lVNl8fl+X","tlshash":"63f1bbe1981e54447f472cc263ce2d33de0e6255308485299afe1f9aacbbc2273617ce","first_seen":"2026-03-20T00:51:38.687704Z","last_seen":"2026-09-14T18:37:39.516933Z","times_seen":26,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":36,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.952Z","timestamp":1789411029952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Open+Sans:300 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 18:37:10 GMT\r\ndate: Mon, 14 Sep 2026 18:37:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":2249,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"d1176214f07ac0cf2ce00911f79816c3","sha1":"3b1a2e84576036d3efd1a33cbf7cdbc2a1572e8b","sha256":"b05334331ff7fa0642c94ad9558af7418c05e55be12d5be4bddc5829d0ed610d","sha512":"0061afb08cbca9c1e89971f51a148cd156fe9092600677b2df582817f0efe1bddb0d6ee2d9ea5fda616bef5cac4a07ab9daf29e89c1ef5aa12919219b0c9c042","ssdeep":"96:ZO1MqJO1MpFZ8O1MZO1MaYO1MMO1MGy+aZjzBrWO1MCubqGIFuV4UO1MtO1MeJc9:NqdaNa40GqKdbqGIwV4MpO7Q","tlshash":"c4c150900417545867471ce223cebe30ee0fa2606040c07a6bfd8b5beee7da9a37536d","first_seen":"2025-09-17T19:05:49.090441Z","last_seen":"2026-09-14T18:37:39.520734Z","times_seen":13550,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":5,"connect":18,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.956Z","timestamp":1789411029956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Montserrat:400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 18:37:10 GMT\r\ndate: Mon, 14 Sep 2026 18:37:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3634,"size_decoded":1249,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"21505d27bd02f1df730476479b0790db","sha1":"8406d5dd1183c72d674d9257cae5e461d54e7b8b","sha256":"d50f451c09ef85e63a5acdca187d40ad69be69f9b389cfb6aac6b96eb6dbec11","sha512":"c308d5ada9f158734475da11df2166a08c4e3dd01e9d3c3a9d65c39e196cfd007652e96a1905d57486109ff4d7da1e662942f2f41079b0fdc346027f3361300a","ssdeep":"","tlshash":"7271ae51101ae500a7472cc923cf7e26cd4e21667494c4367bfe2ca8ade6c365321b3d","first_seen":"2025-09-05T00:59:45.838605Z","last_seen":"2026-09-14T19:29:45.483858Z","times_seen":12195,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/favicon.ico","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:10.351Z","timestamp":1789411030351,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:53 GMT","end":"Mon, 02 Nov 2026 08:38:52 GMT"},"fingerprint":{"sha1":"A5:E5:FE:0E:04:C4:30:8F:7A:3D:F5:02:6D:A4:3D:CB:95:9F:2D:4C","sha256":"E5:D9:84:9E:E7:B4:35:6A:DD:4A:6F:A7:67:FB:E5:71:B3:EF:8F:E1:FA:E6:6E:6B:17:3D:88:9B:FE:84:E2:7F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: paypal-signin.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/x-icon; charset=UTF-8\r\nexpires: Mon, 14 Sep 2026 18:37:11 GMT\r\ndate: Mon, 14 Sep 2026 18:37:11 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Sat, 07 Sep 2024 23:03:47 GMT\r\netag: W/\"46dcb12c1f603e121e1ce7ce77e75916e053bf6de8b3c49d55168050d385f96e\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 461\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":1150,"size_decoded":938,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"a3ecc57f21cd2b78e6703bbb2212e3a5","sha1":"e0fa915fa910304bf2d26743d928934f766d3099","sha256":"a1d33619377fadcba41467774e9762cc83b94d36db79eaedace7c316c778067e","sha512":"5ab6708a832bdbc9f1ce4c39b8d55bf823506062937cf10f7bc29e7620854ad1e52bc42a72775c9759719d77d2e061a9c8e199e73315c45f55f3f85186dc11cf","ssdeep":"","tlshash":"be218b807ad1d198c27c05b4f29eebfac016cc22cb315e1b4c75bd5ab6795118c6384e","first_seen":"2023-06-20T20:19:20Z","last_seen":"2026-09-14T18:37:39.522799Z","times_seen":30,"resource_available":false,"data":null}},"time_used":732,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":731,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"paypal-signin.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/4165133002-widget_css_bundle.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.943Z","timestamp":1789411029943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:27 GMT","end":"Mon, 02 Nov 2026 08:37:26 GMT"},"fingerprint":{"sha1":"FC:F1:C7:AB:FB:02:20:69:AA:A2:77:72:E6:1D:A9:C1:BE:13:DD:FB","sha256":"DD:50:74:C4:0E:E3:3B:00:3D:65:D4:25:37:0C:13:82:12:B9:C6:5E:AB:54:B2:22:29:2B:DE:6A:5E:A8:C8:C4"}}},"request":{"raw":"GET /static/v1/widgets/4165133002-widget_css_bundle.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 6777\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:36:03 GMT\r\nexpires: Thu, 09 Sep 2027 10:36:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 09 Sep 2026 07:11:58 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 460867\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30999,"size_decoded":7485,"mime_type":"text/css","magic":"ASCII text, with very long lines (30998)","md5":"e6fbca3b5b73fa62f3ca7bf5caa13e0a","sha1":"120bac7d413a6cd3806d869fae6e1096b4683e24","sha256":"0847041ca7093100e9e009a3d477cefb582d0a39f220eda3b48f44769b9a947c","sha512":"36cab9e1e0c039171ffcf2d8b9a7406323de43a50bceaf984e823d36cd83f3d7122ab45b6ec23f47cf20cf8b786adecbf64830ed4ff563dea45fa76160164f49","ssdeep":"384:OVysImDyPWquJMpx/SCYW0h8+OU8ya4Xw8wuJ86YKSQCNL/J69nKg93jW1gngRe4:OnIm6IvW0qIg8VJw1gngRLFr/","tlshash":"26d2da72a590211db137d725b883ba8c3218d963e7135eeed555b2b8cfc66de102332d","first_seen":"2026-05-06T11:26:34.907363Z","last_seen":"2026-09-14T18:37:39.525284Z","times_seen":5473,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":16,"connect":18,"send":0,"wait":18,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.948Z","timestamp":1789411029948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Lato HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 18:37:10 GMT\r\ndate: Mon, 14 Sep 2026 18:37:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":774,"size_decoded":1049,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"98e279faae11b60b01b3fad919ce13be","sha1":"8ac03eee80ee8fd37129ee7500a5877642e45eb9","sha256":"eafe40853325aa2a8172690347ad08deabfbd918181feb135d7ba5817966d232","sha512":"77f31dcfeb5b47a3e5a9f377e65587b6230363e7f016e48464f371bbb4d0487e53245e66b5d5ddb59b00345c27372340a9aec7aa4671c1001a797fe2a60b58de","ssdeep":"","tlshash":"6f01bd91096ba40897830cc612cd7d32ef1f624064499821eeff14d8bc67c699362b0d","first_seen":"2025-09-17T00:10:35.559729Z","last_seen":"2026-09-14T20:17:42.75754Z","times_seen":29381,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":10,"connect":19,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.951Z","timestamp":1789411029951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Open+Sans HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 18:37:10 GMT\r\ndate: Mon, 14 Sep 2026 18:37:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5973,"size_decoded":2229,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"52fd336aac376e54df69f73afa4d9a1e","sha1":"ff01fecffbb6ad52a66fc2464c9a06d64ac49ce4","sha256":"0493c5aeeeee76553b77f584271225f936ff2901a1838303744debf8e99728e3","sha512":"6221444a13a3adb37f5064882fa86db9f2e836e7ce90aecc12ac7345281799d902140f502e5a5b8f08d1651f217844cab59ed53e9d3f4b0e9d52d8ba4f6bd3b3","ssdeep":"96:ZOEM9JOEMWDFZ8OEMjkOEMFYOEMhOEMNy+aZjzBrWOEMzubqGIFuV4UOEMCOEMN4:w9AWjBF1INqbCbqGIwV4Rzlqx","tlshash":"25c14d900017545467471ce723cebe30ee4fa2606040d07aabfd8b9aeed6da9a37532d","first_seen":"2025-09-17T00:02:10.461951Z","last_seen":"2026-09-14T20:22:29.132451Z","times_seen":22760,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":7,"connect":15,"send":0,"wait":51,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"netdna.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css","fqdn":"netdna.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.10.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.954Z","timestamp":1789411029954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 06:52:42 GMT","end":"Fri, 27 Nov 2026 07:52:32 GMT"},"fingerprint":{"sha1":"F6:58:F9:2B:5B:29:DD:D1:99:3E:40:DB:56:17:DC:42:4E:6A:E9:05","sha256":"F3:FF:92:2E:B0:B0:F9:26:38:04:80:FE:73:FB:B7:4A:8E:03:4E:26:D7:44:86:CA:E3:D0:83:59:81:32:88:A3"}}},"request":{"raw":"GET /font-awesome/4.1.0/css/font-awesome.min.css HTTP/1.1\r\nHost: netdna.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 18:37:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"bbfef9385083d307ad2692c0cf99f611\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:53 GMT\r\ncdn-cachedat: 04/11/2025 08:48:35\r\ncdn-proxyver: 1.22\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1053\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: e010432e87ad29d3d44b5177a737278b\r\ncdn-cache: HIT\r\nage: 5748781\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a3b180595dce4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20766,"size_decoded":5570,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20604)","md5":"bbfef9385083d307ad2692c0cf99f611","sha1":"63a234ea4d60f6643a60a4d79e28f291b93c1743","sha256":"b769324e0921f9f649611113e65f528ebae5e140da8a7e63c5d6ea7bc7a33bc0","sha512":"efb922772183246596989d0c54ed02469fba9d181944aebb7eb515051be72f5cc2726730f45902431a431eae7649e6d6f8a5930279ee5f4424dbf3105a8816a1","ssdeep":"192:xq9jjI+ab2edrK/TUKIErArKlcZJVrJ3ee+cR6waWW215Uvf0:+jPyW/TUK1+KlkJ5de2UWWyAf0","tlshash":"c99266f8e54d01c66731c48bff85b36862baf33dd5804d99f11f294c29d22a912c5bba","first_seen":"2023-04-05T10:34:03Z","last_seen":"2026-09-14T18:37:39.530643Z","times_seen":11020,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":10,"connect":12,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"paypal-signin.blogspot.com/js/cookienotice.js","fqdn":"paypal-signin.blogspot.com","domain":"paypal-signin.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.957Z","timestamp":1789411029957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:38:53 GMT","end":"Mon, 02 Nov 2026 08:38:52 GMT"},"fingerprint":{"sha1":"A5:E5:FE:0E:04:C4:30:8F:7A:3D:F5:02:6D:A4:3D:CB:95:9F:2D:4C","sha256":"E5:D9:84:9E:E7:B4:35:6A:DD:4A:6F:A7:67:FB:E5:71:B3:EF:8F:E1:FA:E6:6E:6B:17:3D:88:9B:FE:84:E2:7F"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: paypal-signin.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Mon, 14 Sep 2026 18:37:09 GMT\r\nexpires: Mon, 21 Sep 2026 18:37:09 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 14 Sep 2026 16:36:14 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":2706,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-09-14T19:44:02.173426Z","times_seen":139325,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"paypal-signin.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"paypal-signin.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/851759228-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://paypal-signin.blogspot.com/","date":"2026-09-14T18:37:09.960Z","timestamp":1789411029960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:27 GMT","end":"Mon, 02 Nov 2026 08:37:26 GMT"},"fingerprint":{"sha1":"FC:F1:C7:AB:FB:02:20:69:AA:A2:77:72:E6:1D:A9:C1:BE:13:DD:FB","sha256":"DD:50:74:C4:0E:E3:3B:00:3D:65:D4:25:37:0C:13:82:12:B9:C6:5E:AB:54:B2:22:29:2B:DE:6A:5E:A8:C8:C4"}}},"request":{"raw":"GET /static/v1/widgets/851759228-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://paypal-signin.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 53736\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 02:28:54 GMT\r\nexpires: Fri, 10 Sep 2027 02:28:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 10 Sep 2026 00:43:51 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 403696\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":152056,"size_decoded":54432,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4058)","md5":"a6cca111dd448c68eab0e8a16263b976","sha1":"0a1b67880e9fc9d4fa3355ffad7678b585a0036c","sha256":"834eacc83b6be1a82ba8436ed269e672a0015847fa3a1b7f5eb1e60f20772453","sha512":"fe92d647f785c6a797f9b051a1ec52e42a3a9543594b645ac720c197577ddf36c7f6332e62cd41f5835fa343794cba3b08522e5a937e67c6db976a042a189921","ssdeep":"1536:9/zFMZ7URKdvOnTAQcIE2NVtbkeKzW0muCyfMWARdKSHrQuGm8B9BsXb1bO1Av2O:HKdvuN3bkeKWzwMWwKnJd9oY38Y3DzA","tlshash":"7ee30bdcb69670628373b4b1003f010ff13a79aae848496cb188d9e57e7496a5277f7c","first_seen":"2026-09-13T18:10:36.215518Z","last_seen":"2026-09-14T20:28:16.097571Z","times_seen":54,"resource_available":true,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":17,"receive":16,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}