{"report_id":"c5af2951-63bb-4939-b8b7-1e30a48255d4","version":0,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-06-29T19:33:56Z","url":{"schema":"https","addr":"www.phishingforfacebook.blogspot.com/","fqdn":"www.phishingforfacebook.blogspot.com","domain":"phishingforfacebook.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.201.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phishingforfacebook.blogspot.com/","fqdn":"phishingforfacebook.blogspot.com","domain":"phishingforfacebook.blogspot.com","tld":"blogspot.com"},"title":"Facebook","dom":{"size":598999,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (29305)","md5":"291446ddd3b10ce3689c6ddaf6fee983","sha1":"abfc5649e36525fd880e924a0ac33bd0d50a6f5b","sha256":"e0684fa652550a08490c0fe8c8e5d999611ad471781b6b28a239529e63db0fc0","sha512":"61a63bbc70cc649fd2bdf224592716921513c48036e4edb93bfd55dfca684535e7b8b632ab2f5fb1686ba6b7da444ebef725a08ffc036cde3a3b345d12f48521","ssdeep":"3072:rHTFJger2PXtNFGDE5HbzKv+mxYuvBvJrBiQIXPvqO+S:rHTsrdNFGD4HbzKvrxYuvBiT","tlshash":"f1d468a6c1b342735cb6e4c291fe677278f2a83be15214aad7eca37d42ccd02359151b","dom_hash":"domhashf6a2bc930c5725ea49bd9d45675b54e5","first_seen":"2026-06-29T19:33:58.582487Z","last_seen":"2026-06-29T19:33:58.582487Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.phishingforfacebook.blogspot.com/","fqdn":"www.phishingforfacebook.blogspot.com","domain":"phishingforfacebook.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"216.58.201.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T19:33:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"www.phishingforfacebook.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"phishingforfacebook.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"www.phishingforfacebook.blogspot.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-03-19T23:37:44.347853Z","last_seen":"2026-06-13T02:09:54.318769Z","alert_count":3,"request_count":1,"received_data":0,"sent_data":505,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.178.73","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-06-22T19:44:20.428552Z","alert_count":0,"request_count":3,"received_data":188959,"sent_data":1630,"comment":"","tags":null,"fingerprints":null},{"fqdn":"apis.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1075,"first_seen":"2013-05-06T20:20:21Z","last_seen":"2026-06-29T09:48:04.482383Z","alert_count":0,"request_count":2,"received_data":250129,"sent_data":1130,"comment":"","tags":null,"fingerprints":null},{"fqdn":"resources.blogblog.com","ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-09-15","domain_rank":177645,"first_seen":"2017-01-30T04:47:40Z","last_seen":"2026-06-25T23:47:28.055469Z","alert_count":0,"request_count":1,"received_data":820,"sent_data":579,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pagead2.googlesyndication.com","ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2003-01-21","domain_rank":610,"first_seen":"2012-05-21T07:15:40Z","last_seen":"2026-06-22T22:11:44.042553Z","alert_count":0,"request_count":1,"received_data":643,"sent_data":504,"comment":"","tags":null,"fingerprints":null},{"fqdn":"phishingforfacebook.blogspot.com","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-03-02T20:03:15.105663Z","last_seen":"2026-06-29T19:33:24.215102Z","alert_count":8,"request_count":2,"received_data":601216,"sent_data":968,"comment":"","tags":null,"fingerprints":[{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"apis.google.com/js/platform.js","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b257fdcbf5f163851e314067c02828e","sha1":"b8829b374e757a2a85ac8f795d2c7a2843e460a8","sha256":"31735fe9313ad6cb73a5d3e3a6b04036c8b4ca1b2a90dc5575c99d62cf7fdd38","sha512":"b77d4ef4acf184902e1764a486fb41586ad313b68005889038150b49d086cf3ab3a8a12bc63875944d966a1cab29adf7c5980f18c8ebc4db14c6fb8190aaa13f","ssdeep":"1536:0DGSJRzsqdJ0mzAyPIxG531y/fN6M6GZBJQL:2RzjVIU5A63GJ8","tlshash":"6553dad976a5702283a3b5a5103f010ef17f6da9fc4c98a8b199c4e42d74e89017bf7d","size":64840,"data":"","first_seen":"2026-05-12T19:55:22.287772Z","last_seen":"2026-07-06T20:14:25.357881Z","times_seen":7060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.phishingforfacebook.blogspot.com/","fqdn":"www.phishingforfacebook.blogspot.com","domain":"phishingforfacebook.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T19:33:31.502Z","timestamp":1782761611502,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.phishingforfacebook.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"www.phishingforfacebook.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"www.phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2872013778-css_bundle_v2.css","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.73","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:32.928Z","timestamp":1782761612928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:35:53 GMT","end":"Mon, 31 Aug 2026 08:35:52 GMT"},"fingerprint":{"sha1":"2F:CC:C3:FD:70:CC:E0:BC:C3:01:6B:8D:C5:A9:D5:F3:5D:D3:8C:1D","sha256":"19:D9:36:5A:00:E2:D5:FB:B9:03:CC:A0:AD:72:C5:20:2B:67:2B:F4:6C:7D:C9:79:76:E2:56:FB:7E:7F:56:05"}}},"request":{"raw":"GET /static/v1/widgets/2872013778-css_bundle_v2.css HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 8054\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 02:59:36 GMT\r\nexpires: Tue, 29 Jun 2027 02:59:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 28 Jun 2026 10:30:09 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 59636\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36892,"size_decoded":8761,"mime_type":"text/css","magic":"ASCII text, with very long lines (36891)","md5":"f38204ec27e9a48aa32eb0934aa7d6ff","sha1":"5b4aa9c113ea26cc00132e1edf540524a136f678","sha256":"db90f4269e749e3eb64eca94f2fe69bd93252b774058e5d3d68666f943307963","sha512":"f856c4f3d7292ed717a6895b02048d1b7e0c5440f54ee04e6609452829b5563034e08a3069ebf46c770cbad8169ae5ae710c7cfebc5c29e9e73085a2a096813b","ssdeep":"768:YN90OhIsJnIm6IvW0qIg8VJw1gngRLFr2:GIX+vw3i","tlshash":"65f2c9729591342db127d726b893ba8c3124d563e7234aeee519b6b8cec69de103331c","first_seen":"2026-05-06T07:37:15.390942Z","last_seen":"2026-08-09T08:44:09.306686Z","times_seen":8302,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":4,"connect":16,"send":0,"wait":18,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/js/platform.js","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:32.931Z","timestamp":1782761612931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apis.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:39:24 GMT","end":"Mon, 31 Aug 2026 08:39:23 GMT"},"fingerprint":{"sha1":"55:8D:06:F6:07:4E:53:94:62:E0:C2:46:72:8C:95:67:35:E9:26:2E","sha256":"07:34:B1:4A:BE:3A:22:44:5D:09:A2:08:EA:64:45:70:0C:CB:6E:80:E5:5C:91:51:31:A7:82:DA:EB:39:6E:64"}}},"request":{"raw":"GET /js/platform.js HTTP/1.1\r\nHost: apis.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\naccess-control-allow-origin: *\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gapi-team\"\r\nreport-to: {\"group\":\"gapi-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gapi-team\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24729\r\ndate: Mon, 29 Jun 2026 19:33:32 GMT\r\nexpires: Mon, 29 Jun 2026 19:33:32 GMT\r\ncache-control: private, max-age=1800, stale-while-revalidate=1800\r\netag: \"fbd796c4f743d7d3\"\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":64840,"size_decoded":25587,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1863)","md5":"9b257fdcbf5f163851e314067c02828e","sha1":"b8829b374e757a2a85ac8f795d2c7a2843e460a8","sha256":"31735fe9313ad6cb73a5d3e3a6b04036c8b4ca1b2a90dc5575c99d62cf7fdd38","sha512":"b77d4ef4acf184902e1764a486fb41586ad313b68005889038150b49d086cf3ab3a8a12bc63875944d966a1cab29adf7c5980f18c8ebc4db14c6fb8190aaa13f","ssdeep":"1536:0DGSJRzsqdJ0mzAyPIxG531y/fN6M6GZBJQL:2RzjVIU5A63GJ8","tlshash":"6553dad976a5702283a3b5a5103f010ef17f6da9fc4c98a8b199c4e42d74e89017bf7d","first_seen":"2026-05-12T19:55:22.287772Z","last_seen":"2026-07-06T20:14:25.357881Z","times_seen":7060,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":31,"receive":13,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/3935100173-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.73","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:32.942Z","timestamp":1782761612942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:35:53 GMT","end":"Mon, 31 Aug 2026 08:35:52 GMT"},"fingerprint":{"sha1":"2F:CC:C3:FD:70:CC:E0:BC:C3:01:6B:8D:C5:A9:D5:F3:5D:D3:8C:1D","sha256":"19:D9:36:5A:00:E2:D5:FB:B9:03:CC:A0:AD:72:C5:20:2B:67:2B:F4:6C:7D:C9:79:76:E2:56:FB:7E:7F:56:05"}}},"request":{"raw":"GET /static/v1/widgets/3935100173-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 53207\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 02:24:05 GMT\r\nexpires: Tue, 29 Jun 2027 02:24:05 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 27 Jun 2026 22:34:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 61767\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":150645,"size_decoded":53922,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4058)","md5":"4fa8569f70712e22407e6d8beaf100f7","sha1":"5c1bc170a603e047cc416d330a6045bc6d5e38e0","sha256":"fb184518d6c1c2f26d1678247dee283a6c9a0ce3c64df8e9a7cabf32c3b3c266","sha512":"ab77c5fa9552c47c24c3d0df5c4277ddeca11b83f1236345f89b0d05602d9108174c5c3a93cada1ac711d0c381107d49b4cc130c64916642c7780a3d2c328203","ssdeep":"1536:TS5N5GyrI6+on3Q8yTMrC6steazNUGOR9KAKmKRWV5bTglSWKJooVoEkDM8yQ2lJ:d6+zcstey29KUKIfgsKYR8yQCEM51d","tlshash":"e6e3f9c8b79670628373b4b5002f010ff13ab9aaf848896cb588d8e57d749695277f7c","first_seen":"2026-06-22T11:23:36.862073Z","last_seen":"2026-07-02T19:57:43.621779Z","times_seen":2049,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":17,"receive":22,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/img/icon18_edit_allbkg.gif","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.250.178.105","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:32.945Z","timestamp":1782761612945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:35:53 GMT","end":"Mon, 31 Aug 2026 08:35:52 GMT"},"fingerprint":{"sha1":"2F:CC:C3:FD:70:CC:E0:BC:C3:01:6B:8D:C5:A9:D5:F3:5D:D3:8C:1D","sha256":"19:D9:36:5A:00:E2:D5:FB:B9:03:CC:A0:AD:72:C5:20:2B:67:2B:F4:6C:7D:C9:79:76:E2:56:FB:7E:7F:56:05"}}},"request":{"raw":"GET /img/icon18_edit_allbkg.gif HTTP/1.1\r\nHost: resources.blogblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 162\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 10:27:28 GMT\r\nexpires: Mon, 06 Jul 2026 10:27:28 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 29 Jun 2026 05:53:36 GMT\r\ncontent-type: image/gif\r\nage: 32765\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":162,"size_decoded":820,"mime_type":"image/gif","magic":"GIF image data, version 89a, 18 x 18","md5":"c991641178ff05adf0d004298b5eafa9","sha1":"d8f6ce8ecd92b86d49849360f6b81ceb10b4c941","sha256":"ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b","sha512":"6a845a5db1f1388df00f09fde3787c5a8846c4f1f8041476bc011553821f9bd90fb2937ac10be45eb5dd1749105ccd4f7339faa044ecc7386caf9b59b374eb3b","ssdeep":"","tlshash":"d2c02b51970fd276c9a18c3a868f64bb60008066795d250e00dd7c1828ac06e14cce4c","first_seen":"2023-04-05T07:39:21Z","last_seen":"2026-08-09T08:41:36.323985Z","times_seen":34672,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":57,"dns":2,"connect":16,"send":0,"wait":18,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/dyn-css/authorization.css?targetBlogID=3473492138314449745\u0026zx=73de0d68-6192-45ca-a742-4fed40056653","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:33.069Z","timestamp":1782761613069,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /dyn-css/authorization.css?targetBlogID=3473492138314449745\u0026zx=73de0d68-6192-45ca-a742-4fed40056653 HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.ch0Jz-JlMrQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_YD4KoV8fTh_kLhktsiThAm3yJ5A/cb=gapi.loaded_0?le=scs,fedcm_migration_mod","fqdn":"apis.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:33.083Z","timestamp":1782761613083,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:36:12 GMT","end":"Mon, 31 Aug 2026 08:36:11 GMT"},"fingerprint":{"sha1":"2D:E3:10:81:62:4D:5B:4A:4F:1A:9B:0B:17:7A:F7:2F:7F:EF:63:16","sha256":"A2:49:DF:6D:58:4B:B7:5F:6D:03:40:BE:4D:EE:0C:9E:F4:49:E0:80:D1:16:ED:B3:4A:0C:5F:11:BC:5D:D6:35"}}},"request":{"raw":"GET /_/scs/abc-static/_/js/k=gapi.lb.en.ch0Jz-JlMrQ.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_YD4KoV8fTh_kLhktsiThAm3yJ5A/cb=gapi.loaded_0?le=scs,fedcm_migration_mod HTTP/1.1\r\nHost: apis.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"social-frontend-mpm-access\"\r\nreport-to: {\"group\":\"social-frontend-mpm-access\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access\"}]}\r\ncontent-length: 60136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 23 Jun 2026 18:32:16 GMT\r\nexpires: Wed, 23 Jun 2027 18:32:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 522077\r\nlast-modified: Sat, 02 May 2026 15:20:04 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":183515,"size_decoded":61052,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1260)","md5":"58afa9bacbd921bfbf49e3a1f0108ea0","sha1":"7a8852c89c14bc2e7676ffd89ca6e9a97ce74a47","sha256":"b909d2dceaf01a374db6f0492d863aa31a4d50cf1582026648ccd9397736fb24","sha512":"0fc1d8b322309ad8242823aca9d8d368e62a47cdc86f556cd94b7396f3524681c21a99f8bcfdb602229b6ff1f866c6f76d3d3d1fb5ae5c9254d9a90ff50941b9","ssdeep":"3072:eI7yvHU+IbpOJKjcOAM3s0MiT1lSraVs+4vFXVuw83BNTy81Nldw27MA:t7yc+IbV/MvtXwN3BRyGP","tlshash":"2404f7d9b6a270668373b1a4503f010eb27f98adf4484dacb298d8e16df95490277f7c","first_seen":"2026-05-13T00:45:28.9804Z","last_seen":"2026-07-06T19:05:22.592211Z","times_seen":4686,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pagead2.googlesyndication.com/pagead/js/google_top_exp.js","fqdn":"pagead2.googlesyndication.com","domain":"googlesyndication.com","tld":"com"},"ip":{"addr":"142.250.178.34","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:33.087Z","timestamp":1782761613087,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /pagead/js/google_top_exp.js HTTP/1.1\r\nHost: pagead2.googlesyndication.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 11:01:42 GMT\r\nexpires: Mon, 13 Jul 2026 11:01:42 GMT\r\ncache-control: public, max-age=1209600\r\nage: 30711\r\netag: 13036835877489095579\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T08:49:06.392568Z","times_seen":17796480,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phishingforfacebook.blogspot.com/","fqdn":"phishingforfacebook.blogspot.com","domain":"phishingforfacebook.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T19:33:31.611Z","timestamp":1782761611611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phishingforfacebook.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Mon, 29 Jun 2026 19:33:32 GMT\r\ndate: Mon, 29 Jun 2026 19:33:32 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Sat, 12 Oct 2024 00:27:12 GMT\r\netag: W/\"2a1e01d9ab6c7895b83322d6cb5e1bd341d3c933a592e3cc931ce692fbc9994a\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 61760\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":593522,"size_decoded":62252,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (29310)","md5":"371f3993910a750c3d00e04fe05e08f9","sha1":"1236d999fb2c111012f14760693a184bd5a6e337","sha256":"9424681860e9411e12438f0041a7ff0abce042054e9e60710a8a397c61637019","sha512":"aa7d2e36811322809833df0c6d5155a78559889256a141f860896903e8a5c62dbf753afead6a9d429e9c41af13c2288cf8b382b34a4d65aaa766fdcb4f5e8d9e","ssdeep":"3072:LLaHThRTe2Vq9bYEDQNHbzQ+mxYuvBvJrB94IbPvqO+u:SHTj/obYEDYHbzQrxYuvB3","tlshash":"12c458a6c1b342735cb6e4c291fe677278f2a83be15214aad7eca37d42ccd02359151b","first_seen":"2026-06-29T19:33:58.59196Z","last_seen":"2026-06-29T19:33:58.59196Z","times_seen":1,"resource_available":true,"data":null}},"time_used":897,"timings":{"blocked":-1,"dns":37,"connect":16,"send":0,"wait":634,"receive":172,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"phishingforfacebook.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"phishingforfacebook.blogspot.com/js/cookienotice.js","fqdn":"phishingforfacebook.blogspot.com","domain":"phishingforfacebook.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phishingforfacebook.blogspot.com/","date":"2026-06-29T19:33:32.941Z","timestamp":1782761612941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:37:48 GMT","end":"Mon, 31 Aug 2026 08:37:47 GMT"},"fingerprint":{"sha1":"58:44:C3:D1:EC:CE:8D:0D:4A:84:73:3B:42:60:8A:F6:FE:B8:97:F0","sha256":"1F:15:2E:A8:63:37:51:01:00:A2:BD:35:32:E7:97:DD:A1:7B:24:29:3C:04:9B:BC:A8:EC:09:08:78:19:EA:00"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: phishingforfacebook.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://phishingforfacebook.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 29 Jun 2026 19:32:52 GMT\r\nexpires: Mon, 06 Jul 2026 19:32:52 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 29 Jun 2026 13:21:20 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 40\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":6513,"size_decoded":2715,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-08-09T08:44:09.32799Z","times_seen":134143,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-29","alert":"Sinkholed","trigger":"phishingforfacebook.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-06-29","alert":"Phishing Block","trigger":"phishingforfacebook.blogspot.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}}]}