{"report_id":"c0bfeee6-230c-4b2b-b94c-05b1e9522d0d","version":6,"status":"done","tags":[],"date":"2026-04-27T04:41:00Z","url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"192.178.25.1","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"title":"MetaMask Chrome Extension – Your Secure Gateway to Web3","dom":{"size":92164,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14749)","md5":"9db089b67cbd29a544ffa5833dab1413","sha1":"eb05c84f611d8263bc6870076a1ce1b4fea691a9","sha256":"683acd72432f5f5695e7834161d377cb39db7d0f3dc407bf6fb859c3b3bd5b58","sha512":"e0a885c9d7c615cddf4a0ecdcaa08c180ca6a7ea29b692b81298660f553f0fc5340757f3189c3492e0be87e181ea2c64102f45e3c49c36f851b74866fe8de1d3","ssdeep":"768:naGJ3H7cksu14IXFslP+AWYNd2QswP/13OmRNv+f5AfpUxnHeob4f1u0eJwOq9Hh:46nJzJgv/MhVxzRnU","tlshash":"2793277752523d1dd2378859b4c5bac87b18c423c24754efe9baa628c3cbdc3527236a","dom_hash":"domhashfcd0c09ceb7be91d00a019662aa2b0ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"192.178.25.1","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-01T04:41:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"themes.googleusercontent.com","ip":{"addr":"192.178.25.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":81747,"first_seen":"2012-05-24T07:24:02Z","last_seen":"2026-04-23T18:43:13.974247Z","alert_count":0,"request_count":1,"received_data":229087,"sent_data":559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-26T22:16:47.246638Z","alert_count":0,"request_count":2,"received_data":87942,"sent_data":1178,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-04-20T14:14:27.367268Z","alert_count":0,"request_count":2,"received_data":154279,"sent_data":940,"comment":"","tags":null,"fingerprints":null},{"fqdn":"metamaskchromeextensionn.blogspot.com","ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-03-27T00:49:15.961464Z","last_seen":"2026-04-12T13:41:10.761372Z","alert_count":16,"request_count":4,"received_data":110577,"sent_data":1936,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"resources.blogblog.com","ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-09-15","domain_rank":177645,"first_seen":"2017-01-30T04:47:40Z","last_seen":"2026-04-22T21:23:53.646997Z","alert_count":0,"request_count":1,"received_data":143978,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-04-26T22:44:22.368934Z","alert_count":0,"request_count":1,"received_data":12523,"sent_data":470,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-27T14:17:56.036881Z","times_seen":100948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f488687f23b8b2ad6f1d05c2d07b2735","sha1":"9fc276898b78f841cb27d76da4f17dbe8c77aefe","sha256":"9153ade8a8e5db45d8092225fe85f04f6af83889149e2f735d1815268a1003c9","sha512":"de641622763436813ae87369ae73c0f2d7123835e07e67005a30b4bc76dccf76f07be9c35b78614275144015af1f491458cf292e060df5ef74cefbeb267e7ce2","ssdeep":"","tlshash":"690189137108e71422a314347b8bba18fd2ac2520895453b391cf5324f07b63ce96be3","size":798,"data":"","first_seen":"2024-02-05T14:31:36Z","last_seen":"2026-04-27T14:17:56.044249Z","times_seen":69107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","size":11792,"data":"","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-04-27T12:18:11.827689Z","times_seen":27815,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/js/cookienotice.js","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-27T14:17:55.989503Z","times_seen":113616,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20ae6354e7708edc3fdd91ea0bb30153","sha1":"a9c3be93288003c596fdc96f6903203d04c7c648","sha256":"c2b14a28f836d4128419335f94f3f824da82b316a179ef7a5c9ca336277d48c6","sha512":"50948432e16a0d4e9fe3026350fea6c098a2524914660ee5fa2530e927ebbb1366588736bb9f619d07438bd1dac9d18fe9c866ac0764e4ca849f44105cf38ecd","ssdeep":"192:UX0bEjRj3jLFjjWlhn0yI/BRq2E1nhqcpllLajRbuZ8QvG/AGQhGEq1CMxMRGVD3:oNjRj3jLFjjWh2idll+jyDR+1CM29Sqk","tlshash":"d90274c362fcb0f97fadf89ef015afa2775a4c15c882b8279c951d64170a7839099b34","size":8251,"data":"","first_seen":"2026-04-27T04:41:07.127227Z","last_seen":"2026-04-27T04:41:07.127227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/344097953-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f855586debfdf27b0fd99faaf6d8dfc6","sha1":"a8af641b12e0dd2446a8ac2b4a7bf5ba5ec010c9","sha256":"5a18ec4e4e30a213f31c2df0e682b7f30be2786ea9b011eb38129bd896189281","sha512":"1d1df94a5ca9dfb39756bce2f0784bb6b1c798f8f8b68dffbe569346db2000340e33960617c71bdcaf096251beddff97ba75a81065519ea5eda6e0ac584d43f4","ssdeep":"1536:TS5N5GyrI6+on3Q8yTMrC6steazNUGOR9KAKmKRWV5bTglSWKJooVoEkDZwyQ2lU:d6+zcstey29KUKIfgsKYMwyQCEUgGYd","tlshash":"f8e3f9c8b79670628373b4b5002f010ff13ab9aaf848896cb588d8e57d749695277f7c","size":150388,"data":"","first_seen":"2026-04-02T15:11:59.202898Z","last_seen":"2026-04-27T14:17:55.982543Z","times_seen":4411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/2374235511-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8220f5522f53363521dee84f58627b09","sha1":"4a16607653fc7a5c5fd9076bd1868e7e4937f332","sha256":"d7fb410b1e328a3f7f1b79ebe72be55321df1c03c78af85e6171fe065aa31b26","sha512":"68d57231a9490d7416bb9a577f0ccc3a5b1f846183b11669d767a0dda191b8af57886a77f847646b94f98f25f611d487b4797d12621d2027a1fe3f00dbfeffc0","ssdeep":"1536:h8SKRZwIQRDGB+fSAcsM6jnb3EKbOqH0dh20c26BMBLIj6GYVfPyLq8LlCtw:ky+sx3EKSVWdj4Kmm","tlshash":"8ce3e79cb66270768363f1f1402f414eb237a8a9a948496c718cdce66eb4d4d523bf7c","size":143262,"data":"","first_seen":"2026-03-10T07:50:47.596868Z","last_seen":"2026-04-27T09:15:25.038483Z","times_seen":774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamaskchromeextensionn.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 10:17:38 GMT\r\nexpires: Fri, 23 Apr 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325380\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-27T14:20:29.934385Z","times_seen":102344,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":97,"dns":0,"connect":14,"send":0,"wait":16,"receive":18,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://metamaskchromeextensionn.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 10:17:38 GMT\r\nexpires: Fri, 23 Apr 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325380\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-27T14:20:29.934385Z","times_seen":102344,"resource_available":false,"data":null}},"time_used":360,"timings":{"blocked":166,"dns":1,"connect":29,"send":0,"wait":15,"receive":8,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/img/blogger_logo_round_35.png","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:34:54 GMT","end":"Mon, 22 Jun 2026 08:34:53 GMT"},"fingerprint":{"sha1":"6D:AE:C6:B9:5C:AE:46:78:9F:EF:BE:7A:3C:16:57:C8:94:20:C6:10","sha256":"FB:5F:FE:42:62:E3:F2:5E:6A:70:72:2D:BD:0E:8B:CD:94:94:F9:24:E9:4A:3F:52:C3:5B:53:B4:35:C6:36:5C"}}},"request":{"raw":"GET /img/blogger_logo_round_35.png HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2531\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 22 Apr 2026 20:09:13 GMT\r\nexpires: Wed, 29 Apr 2026 20:09:13 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 22 Apr 2026 07:52:58 GMT\r\ncontent-type: image/png\r\nage: 376285\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"838622483cbfed35380b4705f19d7cca","sha1":"7de684136affc969a24d61927afc18905cf2fc36","sha256":"183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a","sha512":"d2f77ab5ccb90653fe6480e3a5c488129e8050156e72a3d034eb93a1c3e1f2ce462603c08a05a8911a7f65a77b239bfdb6c4930119a5e6cbe8619f3fa3607e71","ssdeep":"","tlshash":"e7513c8dda1228d281356c2d9f2ae58adc694f0f72130744b9e97296475efb940818b0","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-04-27T14:12:29.872694Z","times_seen":27351,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/favicon.ico","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:28 GMT","end":"Mon, 22 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"13:56:1A:64:D1:78:BC:8F:99:7D:E8:29:61:D4:0F:BA:95:EE:78:43","sha256":"BC:C3:E0:1B:2F:4C:91:EA:F9:4F:2F:07:73:9A:D6:B2:56:EF:63:92:8C:AF:B3:77:EA:5E:A7:30:3D:4B:12:61"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: metamaskchromeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon; charset=UTF-8\r\nexpires: Mon, 27 Apr 2026 04:40:38 GMT\r\ndate: Mon, 27 Apr 2026 04:40:38 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Sat, 28 Mar 2026 01:55:54 GMT\r\netag: W/\"372e102437f0575e12b1e87b0f7f5451d583ca170249991b0cbf46f3a3fd65e5\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel","md5":"59a0c7b6e4848ccdabcea0636efda02b","sha1":"30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340","sha256":"a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f","sha512":"bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4","ssdeep":"","tlshash":"5671c80736c29f79c4d082fa159ec674136766eb281b061b3e85f65a3d88135f911ac0","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-04-27T14:17:55.987142Z","times_seen":93680,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-27T04:40:37.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:28 GMT","end":"Mon, 22 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"13:56:1A:64:D1:78:BC:8F:99:7D:E8:29:61:D4:0F:BA:95:EE:78:43","sha256":"BC:C3:E0:1B:2F:4C:91:EA:F9:4F:2F:07:73:9A:D6:B2:56:EF:63:92:8C:AF:B3:77:EA:5E:A7:30:3D:4B:12:61"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: metamaskchromeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Mon, 27 Apr 2026 04:40:37 GMT\r\ndate: Mon, 27 Apr 2026 04:40:37 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Sat, 28 Mar 2026 01:55:54 GMT\r\netag: W/\"372e102437f0575e12b1e87b0f7f5451d583ca170249991b0cbf46f3a3fd65e5\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 17959\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":90393,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14749)","md5":"67f04b4a96f20723067b186ffb13e135","sha1":"d76368d622d3c47fbb73e8a64805e85d61c1d5dc","sha256":"bedb0dfe2e89378765fd1356267368b7623a206ce7778698f9c514715e412168","sha512":"bd006e96f16b5c3e304ad804836147c856820272a0349a764f868e053fcd658d9551642d1e66c8927e738b2dd68856d963c5942492d3d4dd947a17649c3c8e07","ssdeep":"768:nicaGJ3H7cksu14IXFslP+AWYNd2QswP/13VRNv+f5AfpUxnHeob4f1u0eJwO0HG:niH6nan4MFVxzRnW","tlshash":"a293273715523d0dd2334c59b4c6bbc87b18c423d24754eee9baa628c3cb9c7927636a","first_seen":"2026-04-27T04:41:07.121387Z","last_seen":"2026-04-27T04:41:07.121387Z","times_seen":1,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":214,"dns":64,"connect":7,"send":0,"wait":183,"receive":47,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/2374235511-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:34:54 GMT","end":"Mon, 22 Jun 2026 08:34:53 GMT"},"fingerprint":{"sha1":"6D:AE:C6:B9:5C:AE:46:78:9F:EF:BE:7A:3C:16:57:C8:94:20:C6:10","sha256":"FB:5F:FE:42:62:E3:F2:5E:6A:70:72:2D:BD:0E:8B:CD:94:94:F9:24:E9:4A:3F:52:C3:5B:53:B4:35:C6:36:5C"}}},"request":{"raw":"GET /blogblog/data/res/2374235511-indie_compiled.js HTTP/1.1\r\nHost: resources.blogblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 48861\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 06:06:40 GMT\r\nexpires: Thu, 30 Apr 2026 06:06:40 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Wed, 22 Apr 2026 07:52:58 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 340438\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143262,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1934)","md5":"8220f5522f53363521dee84f58627b09","sha1":"4a16607653fc7a5c5fd9076bd1868e7e4937f332","sha256":"d7fb410b1e328a3f7f1b79ebe72be55321df1c03c78af85e6171fe065aa31b26","sha512":"68d57231a9490d7416bb9a577f0ccc3a5b1f846183b11669d767a0dda191b8af57886a77f847646b94f98f25f611d487b4797d12621d2027a1fe3f00dbfeffc0","ssdeep":"1536:h8SKRZwIQRDGB+fSAcsM6jnb3EKbOqH0dh20c26BMBLIj6GYVfPyLq8LlCtw:ky+sx3EKSVWdj4Kmm","tlshash":"8ce3e79cb66270768363f1f1402f414eb237a8a9a948496c718cdce66eb4d4d523bf7c","first_seen":"2026-03-10T07:50:47.596868Z","last_seen":"2026-04-27T09:15:25.038483Z","times_seen":774,"resource_available":true,"data":null}},"time_used":459,"timings":{"blocked":201,"dns":79,"connect":21,"send":0,"wait":22,"receive":30,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/js/cookienotice.js","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:28 GMT","end":"Mon, 22 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"13:56:1A:64:D1:78:BC:8F:99:7D:E8:29:61:D4:0F:BA:95:EE:78:43","sha256":"BC:C3:E0:1B:2F:4C:91:EA:F9:4F:2F:07:73:9A:D6:B2:56:EF:63:92:8C:AF:B3:77:EA:5E:A7:30:3D:4B:12:61"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: metamaskchromeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Mon, 27 Apr 2026 04:40:38 GMT\r\nexpires: Mon, 04 May 2026 04:40:38 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sun, 26 Apr 2026 10:48:59 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-04-27T14:17:55.989503Z","times_seen":113616,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/344097953-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:34:54 GMT","end":"Mon, 22 Jun 2026 08:34:53 GMT"},"fingerprint":{"sha1":"6D:AE:C6:B9:5C:AE:46:78:9F:EF:BE:7A:3C:16:57:C8:94:20:C6:10","sha256":"FB:5F:FE:42:62:E3:F2:5E:6A:70:72:2D:BD:0E:8B:CD:94:94:F9:24:E9:4A:3F:52:C3:5B:53:B4:35:C6:36:5C"}}},"request":{"raw":"GET /static/v1/widgets/344097953-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 53143\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 23 Apr 2026 02:10:04 GMT\r\nexpires: Fri, 23 Apr 2027 02:10:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 22 Apr 2026 10:50:17 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 354634\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":150388,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4058)","md5":"f855586debfdf27b0fd99faaf6d8dfc6","sha1":"a8af641b12e0dd2446a8ac2b4a7bf5ba5ec010c9","sha256":"5a18ec4e4e30a213f31c2df0e682b7f30be2786ea9b011eb38129bd896189281","sha512":"1d1df94a5ca9dfb39756bce2f0784bb6b1c798f8f8b68dffbe569346db2000340e33960617c71bdcaf096251beddff97ba75a81065519ea5eda6e0ac584d43f4","ssdeep":"1536:TS5N5GyrI6+on3Q8yTMrC6steazNUGOR9KAKmKRWV5bTglSWKJooVoEkDZwyQ2lU:d6+zcstey29KUKIfgsKYMwyQCEUgGYd","tlshash":"f8e3f9c8b79670628373b4b5002f010ff13ab9aaf848896cb588d8e57d749695277f7c","first_seen":"2026-04-02T15:11:59.202898Z","last_seen":"2026-04-27T14:17:55.982543Z","times_seen":4411,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":215,"dns":77,"connect":21,"send":0,"wait":21,"receive":31,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 3475\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 27 Apr 2026 04:40:38 GMT\r\nexpires: Mon, 27 Apr 2026 04:40:38 GMT\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10473)","md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-04-27T12:18:11.827689Z","times_seen":27815,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":119,"dns":1,"connect":29,"send":0,"wait":40,"receive":1,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metamaskchromeextensionn.blogspot.com/responsive/sprite_v1_6.css.svg","fqdn":"metamaskchromeextensionn.blogspot.com","domain":"metamaskchromeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:28 GMT","end":"Mon, 22 Jun 2026 08:36:27 GMT"},"fingerprint":{"sha1":"13:56:1A:64:D1:78:BC:8F:99:7D:E8:29:61:D4:0F:BA:95:EE:78:43","sha256":"BC:C3:E0:1B:2F:4C:91:EA:F9:4F:2F:07:73:9A:D6:B2:56:EF:63:92:8C:AF:B3:77:EA:5E:A7:30:3D:4B:12:61"}}},"request":{"raw":"GET /responsive/sprite_v1_6.css.svg HTTP/1.1\r\nHost: metamaskchromeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2244\r\ndate: Mon, 27 Apr 2026 04:40:38 GMT\r\nexpires: Mon, 04 May 2026 04:40:38 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sun, 26 Apr 2026 13:50:29 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4dcfc8144f556815c7a1d84ed4e959e","sha1":"22088bd6cdf970dcf7bfab9a74a4768548ca8890","sha256":"73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c","sha512":"bbf542916c5e6a7fff6742e1aff185d3129b24c2d4669e387fe257c2f1ee938871e2a825e4e7fb347b6e739190168c7ca347d4a7989ad334f15992cb83bad28e","ssdeep":"192:S0S54QQw+4C4qV7DnovzS/KuO7/Jk4UZgf+q:S0S54HP4C4g7DovzCKuO7/Jk4UZoJ","tlshash":"bdf1f266c7382b4818059778efaeb2b110edb4e935cc41d936094768b78a1dff86af41","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-04-27T12:18:11.782167Z","times_seen":27245,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-27","alert":"Phishing Block","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-27","alert":"Sinkholed","trigger":"metamaskchromeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600","fqdn":"themes.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"192.178.25.1","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://metamaskchromeextensionn.blogspot.com/","date":"2026-04-27T04:40:38.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:43 GMT","end":"Mon, 22 Jun 2026 08:36:42 GMT"},"fingerprint":{"sha1":"65:DE:BF:81:62:CE:90:47:14:E9:61:43:8D:95:D4:22:C1:F3:5A:FB","sha256":"DC:C4:DF:D4:F7:96:B2:09:07:2C:BA:BD:85:AC:CC:3C:98:B5:73:99:AB:EB:91:B2:11:7D:E2:D5:04:76:F9:0C"}}},"request":{"raw":"GET /image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600 HTTP/1.1\r\nHost: themes.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://metamaskchromeextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Tue, 28 Apr 2026 04:40:39 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Mon, 27 Apr 2026 04:40:39 GMT\r\nserver: fife\r\ncontent-length: 228521\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":228521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Sunset afterglow and twlight dunes in White Sands National Monument, software=Picasa], baseline, precision 8, 1600x1067, components 3","md5":"e66ef1f4c654be20558150214aa2b85a","sha1":"ad1dfbefad9a21e48aeeac1bae9f8a5b8ea1ef3c","sha256":"6a5482e0dc4e77a6be20281b13d7ef4d8b67521e73b66bc633ea4e4242934be9","sha512":"a5d066c57405a14eaea3ec9e661d905bf80efb03371ce298fce18acb8d545f73225daf18f55a124f42b98f9afd04adc94baf349df2e08f5d78f130c29c86e823","ssdeep":"6144:ZLvXzTZPaNDvJrIgKk1pfe+I4K8dAChaA:Zb2dEgKOpWkKGAqaA","tlshash":"982422a9fcbd9272cf0ee0708099ed094153ff308bde1b986455cf8db2eda44149d656","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-04-27T06:28:27.747671Z","times_seen":20095,"resource_available":false,"data":null}},"time_used":1289,"timings":{"blocked":264,"dns":64,"connect":22,"send":0,"wait":680,"receive":74,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}