{"report_id":"d51f4aac-c0a4-40a5-a617-be5c40a963f6","version":6,"status":"done","tags":[],"date":"2026-03-27T00:48:33Z","url":{"schema":"https","addr":"www.coinbasewalletextensionn.blogspot.com/","fqdn":"www.coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"title":"Coinbase Wallet Extension – Your Trusted Web3 \u0026 Crypto Wallet","dom":{"size":91533,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14749)","md5":"ae10aec460c5587f1a4f7b49f551e881","sha1":"09431dddb8058bba6665dca86b79e9012b3d61d2","sha256":"ecdcb2520947510ec1e1fa29e6dfa535fb0e815c8559de67743573246940b4a8","sha512":"71c3a4ee34dba3dcdc2398d016e824e502a59514855988aa926c1e817a8678bf90d847517bc2d6ff0b74ce2e7f1d8a2b8150b5b22e50ba3e1b939b0fc2695553","ssdeep":"768:IaGJ3H7cksu14IXFslP+AWYNd2QswP/13OmRNv+f5AfpUxnHeob4f1u0eJwOq9H3:h6n0uCER/jkQ7hFwX","tlshash":"da93177751123d1dc2734859b5c5bad8bb18c063e24744eee9bda66cc3cbdc252b232a","dom_hash":"domhashfba0ef656e7ac3817bec3500efd88ef8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.coinbasewalletextensionn.blogspot.com/","fqdn":"www.coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T00:48:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-03-22T22:42:38.000244Z","alert_count":0,"request_count":1,"received_data":12523,"sent_data":470,"comment":"","tags":null,"fingerprints":null},{"fqdn":"themes.googleusercontent.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":81747,"first_seen":"2012-05-24T07:24:02Z","last_seen":"2026-03-26T12:33:26.607301Z","alert_count":0,"request_count":1,"received_data":229087,"sent_data":559,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.coinbasewalletextensionn.blogspot.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-03-27T00:48:34.334493Z","last_seen":"2026-03-27T00:48:34.334493Z","alert_count":6,"request_count":2,"received_data":90267,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"resources.blogblog.com","ip":{"addr":"142.250.178.41","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-09-15","domain_rank":177645,"first_seen":"2017-01-30T04:47:40Z","last_seen":"2026-03-25T17:35:22.894716Z","alert_count":0,"request_count":1,"received_data":143978,"sent_data":479,"comment":"","tags":null,"fingerprints":null},{"fqdn":"coinbasewalletextensionn.blogspot.com","ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2026-03-27T00:48:34.332982Z","last_seen":"2026-03-27T00:48:34.332982Z","alert_count":12,"request_count":4,"received_data":109915,"sent_data":1936,"comment":"","tags":null,"fingerprints":[{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":87942,"sent_data":1178,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.250.178.41","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-03-23T11:30:49.090042Z","alert_count":0,"request_count":2,"received_data":152084,"sent_data":941,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-15T07:44:17.500893Z","times_seen":108173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f488687f23b8b2ad6f1d05c2d07b2735","sha1":"9fc276898b78f841cb27d76da4f17dbe8c77aefe","sha256":"9153ade8a8e5db45d8092225fe85f04f6af83889149e2f735d1815268a1003c9","sha512":"de641622763436813ae87369ae73c0f2d7123835e07e67005a30b4bc76dccf76f07be9c35b78614275144015af1f491458cf292e060df5ef74cefbeb267e7ce2","ssdeep":"","tlshash":"690189137108e71422a314347b8bba18fd2ac2520895453b391cf5324f07b63ce96be3","size":798,"data":"","first_seen":"2024-02-05T14:31:36Z","last_seen":"2026-07-15T07:44:17.506275Z","times_seen":74985,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","size":11792,"data":"","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-07-24T09:42:12.766269Z","times_seen":30090,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/2374235511-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.250.178.41","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8220f5522f53363521dee84f58627b09","sha1":"4a16607653fc7a5c5fd9076bd1868e7e4937f332","sha256":"d7fb410b1e328a3f7f1b79ebe72be55321df1c03c78af85e6171fe065aa31b26","sha512":"68d57231a9490d7416bb9a577f0ccc3a5b1f846183b11669d767a0dda191b8af57886a77f847646b94f98f25f611d487b4797d12621d2027a1fe3f00dbfeffc0","ssdeep":"1536:h8SKRZwIQRDGB+fSAcsM6jnb3EKbOqH0dh20c26BMBLIj6GYVfPyLq8LlCtw:ky+sx3EKSVWdj4Kmm","tlshash":"8ce3e79cb66270768363f1f1402f414eb237a8a9a948496c718cdce66eb4d4d523bf7c","size":143262,"data":"","first_seen":"2026-03-10T07:50:47.596868Z","last_seen":"2026-06-30T17:53:32.271528Z","times_seen":2006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/js/cookienotice.js","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-24T09:44:22.667342Z","times_seen":132025,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff25129337b4af543d248a03a0a7235b","sha1":"bf2c813278c43f231089eeacc8a5804ff3cc31d3","sha256":"e2017c567551dac0462cb3ddc8650214cc993a30228fdd98dc6bae9511735e8f","sha512":"46dc77c6d665043322925b7378c9c24feba9026018fb05fbdbb96c759b43d1c4d5c37b5dd09da7551e421de04567ee2b5d4002e5f3bd3a008ee7a02d98264ac0","ssdeep":"192:ZSRRR3RLXRjglhxyI/BRq2E2nhqcpllLVRRbmZ8QvG/AGQhGEqqmMxMRGVDFQGNz:ZSRRR3RLXRjg423dllRR+DR+qmM29Sqk","tlshash":"340297c7a1fcb0f95faca99de125aef1b29a4c05d481bc669cd819ec13057c294e5b20","size":8301,"data":"","first_seen":"2026-03-27T00:48:37.454917Z","last_seen":"2026-03-27T00:48:37.454917Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2470821300-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.41","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1149ba342465368267e688167df7cb33","sha1":"70107c26b398d30a7d4982099052cbddcf542553","sha256":"7e7a6455658f0a13944f65747993265e09ef6cb35cb13eb86d5912b388b8a6b9","sha512":"506876b12cc73e384bc277d4c3d37149e464d38328fa960a764414d66c6d0da692dfdc8d8dec7e7ff8fbada17e8b510165ab5b93b28d01ade87e4851b2004537","ssdeep":"1536:0hHF5vRqzF9JSnUQc6MYMe/41ieRzE83HN8zrAtSKUnvGigM1Km1uV7R9mKuHzrd:1F9Jgb41iexbmzrPKcgsupuHKaL3dJ","tlshash":"b9e3f9d8b79270628373b4b5003f010ff13ab8aae848896cb588d9e57d749695277f7c","size":148194,"data":"","first_seen":"2026-03-20T09:09:45.398506Z","last_seen":"2026-03-31T16:32:24.671362Z","times_seen":5410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.coinbasewalletextensionn.blogspot.com/","fqdn":"www.coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T00:48:10.418Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: www.coinbasewalletextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T09:50:53.836889Z","times_seen":17498896,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":40,"connect":14,"send":0,"wait":0,"receive":0,"ssl":156},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.coinbasewalletextensionn.blogspot.com/","fqdn":"www.coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T00:48:11.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:33 GMT","end":"Mon, 01 Jun 2026 08:37:32 GMT"},"fingerprint":{"sha1":"D3:07:C0:A8:C9:2A:76:AE:4C:33:54:89:9D:51:1D:56:BA:50:65:47","sha256":"8E:15:F8:C4:05:60:97:D6:34:60:16:B9:48:E5:1C:0E:B0:84:D2:18:36:EC:6F:F8:18:97:73:81:83:DC:C6:74"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.coinbasewalletextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://coinbasewalletextensionn.blogspot.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 27 Mar 2026 00:48:12 GMT\r\nexpires: Fri, 27 Mar 2026 00:48:12 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 210\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":89746,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-24T09:50:53.836889Z","times_seen":17498896,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":72,"dns":1,"connect":28,"send":0,"wait":646,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"www.coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/2374235511-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.250.178.41","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:06 GMT","end":"Mon, 01 Jun 2026 08:36:05 GMT"},"fingerprint":{"sha1":"61:EE:4A:E4:88:85:85:BA:78:DB:22:6C:C3:4D:54:47:2C:D0:1D:E8","sha256":"21:1A:2C:DB:B8:A6:51:62:16:E5:90:70:0C:10:3D:0C:4E:18:F1:42:DE:94:B7:FB:7D:C0:F0:A9:0A:E4:DF:8A"}}},"request":{"raw":"GET /blogblog/data/res/2374235511-indie_compiled.js HTTP/1.1\r\nHost: resources.blogblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 48861\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 12:43:21 GMT\r\nexpires: Mon, 30 Mar 2026 12:43:21 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 23 Mar 2026 11:48:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 302692\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143262,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1934)","md5":"8220f5522f53363521dee84f58627b09","sha1":"4a16607653fc7a5c5fd9076bd1868e7e4937f332","sha256":"d7fb410b1e328a3f7f1b79ebe72be55321df1c03c78af85e6171fe065aa31b26","sha512":"68d57231a9490d7416bb9a577f0ccc3a5b1f846183b11669d767a0dda191b8af57886a77f847646b94f98f25f611d487b4797d12621d2027a1fe3f00dbfeffc0","ssdeep":"1536:h8SKRZwIQRDGB+fSAcsM6jnb3EKbOqH0dh20c26BMBLIj6GYVfPyLq8LlCtw:ky+sx3EKSVWdj4Kmm","tlshash":"8ce3e79cb66270768363f1f1402f414eb237a8a9a948496c718cdce66eb4d4d523bf7c","first_seen":"2026-03-10T07:50:47.596868Z","last_seen":"2026-06-30T17:53:32.271528Z","times_seen":2006,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":127,"dns":27,"connect":14,"send":0,"wait":16,"receive":21,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/js/cookienotice.js","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:29 GMT","end":"Mon, 01 Jun 2026 08:37:28 GMT"},"fingerprint":{"sha1":"D5:E4:F4:CD:A5:39:02:8E:38:BE:2F:47:4E:0A:41:FF:B5:A6:E4:B4","sha256":"48:B2:43:03:3F:F5:4B:0E:F0:A0:7C:B3:AC:27:80:BD:06:E3:52:7D:70:72:62:29:FE:E1:CF:0E:B0:98:12:56"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: coinbasewalletextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\ndate: Fri, 27 Mar 2026 00:48:13 GMT\r\nexpires: Fri, 03 Apr 2026 00:48:13 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 26 Mar 2026 17:58:35 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-07-24T09:44:22.667342Z","times_seen":132025,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/responsive/sprite_v1_6.css.svg","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:29 GMT","end":"Mon, 01 Jun 2026 08:37:28 GMT"},"fingerprint":{"sha1":"D5:E4:F4:CD:A5:39:02:8E:38:BE:2F:47:4E:0A:41:FF:B5:A6:E4:B4","sha256":"48:B2:43:03:3F:F5:4B:0E:F0:A0:7C:B3:AC:27:80:BD:06:E3:52:7D:70:72:62:29:FE:E1:CF:0E:B0:98:12:56"}}},"request":{"raw":"GET /responsive/sprite_v1_6.css.svg HTTP/1.1\r\nHost: coinbasewalletextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2244\r\ndate: Fri, 27 Mar 2026 00:48:13 GMT\r\nexpires: Fri, 03 Apr 2026 00:48:13 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 26 Mar 2026 17:58:35 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4dcfc8144f556815c7a1d84ed4e959e","sha1":"22088bd6cdf970dcf7bfab9a74a4768548ca8890","sha256":"73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c","sha512":"bbf542916c5e6a7fff6742e1aff185d3129b24c2d4669e387fe257c2f1ee938871e2a825e4e7fb347b6e739190168c7ca347d4a7989ad334f15992cb83bad28e","ssdeep":"192:S0S54QQw+4C4qV7DnovzS/KuO7/Jk4UZgf+q:S0S54HP4C4g7DovzCKuO7/Jk4UZoJ","tlshash":"bdf1f266c7382b4818059778efaeb2b110edb4e935cc41d936094768b78a1dff86af41","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-07-24T09:42:12.961893Z","times_seen":29641,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinbasewalletextensionn.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 19:50:52 GMT\r\nexpires: Thu, 25 Mar 2027 19:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 104241\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T09:51:50.676101Z","times_seen":242154,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":100,"dns":0,"connect":7,"send":0,"wait":8,"receive":4,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/img/blogger_logo_round_35.png","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.41","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:06 GMT","end":"Mon, 01 Jun 2026 08:36:05 GMT"},"fingerprint":{"sha1":"61:EE:4A:E4:88:85:85:BA:78:DB:22:6C:C3:4D:54:47:2C:D0:1D:E8","sha256":"21:1A:2C:DB:B8:A6:51:62:16:E5:90:70:0C:10:3D:0C:4E:18:F1:42:DE:94:B7:FB:7D:C0:F0:A9:0A:E4:DF:8A"}}},"request":{"raw":"GET /img/blogger_logo_round_35.png HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2531\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 10:04:23 GMT\r\nexpires: Mon, 30 Mar 2026 10:04:23 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sun, 22 Mar 2026 17:49:18 GMT\r\ncontent-type: image/png\r\nage: 312230\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"838622483cbfed35380b4705f19d7cca","sha1":"7de684136affc969a24d61927afc18905cf2fc36","sha256":"183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a","sha512":"d2f77ab5ccb90653fe6480e3a5c488129e8050156e72a3d034eb93a1c3e1f2ce462603c08a05a8911a7f65a77b239bfdb6c4930119a5e6cbe8619f3fa3607e71","ssdeep":"","tlshash":"e7513c8dda1228d281356c2d9f2ae58adc694f0f72130744b9e97296475efb940818b0","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-07-24T09:42:12.802323Z","times_seen":29767,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T00:48:12.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:29 GMT","end":"Mon, 01 Jun 2026 08:37:28 GMT"},"fingerprint":{"sha1":"D5:E4:F4:CD:A5:39:02:8E:38:BE:2F:47:4E:0A:41:FF:B5:A6:E4:B4","sha256":"48:B2:43:03:3F:F5:4B:0E:F0:A0:7C:B3:AC:27:80:BD:06:E3:52:7D:70:72:62:29:FE:E1:CF:0E:B0:98:12:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: coinbasewalletextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Fri, 27 Mar 2026 00:48:13 GMT\r\ndate: Fri, 27 Mar 2026 00:48:13 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Wed, 25 Mar 2026 09:04:21 GMT\r\netag: W/\"8a9e9938eff8a96e39436ff3a4792123df02edc98f4515c5e9d0bc95ae0dda09\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 17751\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":89746,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14749)","md5":"215bdaa5e973de3eda0a8baea4ce7c7b","sha1":"80d03ddb5f33c5180c06cb8edc4f943ad971f28b","sha256":"e3d7ed4871acbbd0d46d90f43c07e8b29747ee478c1a0e785a67900e057d4dd8","sha512":"652fb3e99e1dfc01f26a673a7b07161bf29e78e701633b28ec331fe4ad4797fc9facdd8974d65fa0cd7c83a24f863f5b586d7ea83aed1da59063155a189bf56c","ssdeep":"768:JCSaGJ3H7cksu14IXFslP+AWYNd2QswP/13VRNv+f5AfpUxnHeob4f1u0eJwO0HS:JCh6nr4DjAQ7hFwV","tlshash":"9693193751523d0dc2734859b4c6bad8bb18c463e24354eed9bda66cc3cbec2527236a","first_seen":"2026-03-27T00:48:37.451075Z","last_seen":"2026-03-27T00:48:37.451075Z","times_seen":1,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":138,"dns":26,"connect":29,"send":0,"wait":649,"receive":44,"ssl":81},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 3475\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 27 Mar 2026 00:48:13 GMT\r\nexpires: Fri, 27 Mar 2026 00:48:13 GMT\r\ncache-control: public, max-age=0\r\nage: 0\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10473)","md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-07-24T09:42:12.766269Z","times_seen":30090,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":165,"dns":40,"connect":9,"send":0,"wait":18,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2470821300-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.250.178.41","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:06 GMT","end":"Mon, 01 Jun 2026 08:36:05 GMT"},"fingerprint":{"sha1":"61:EE:4A:E4:88:85:85:BA:78:DB:22:6C:C3:4D:54:47:2C:D0:1D:E8","sha256":"21:1A:2C:DB:B8:A6:51:62:16:E5:90:70:0C:10:3D:0C:4E:18:F1:42:DE:94:B7:FB:7D:C0:F0:A9:0A:E4:DF:8A"}}},"request":{"raw":"GET /static/v1/widgets/2470821300-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 52380\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 02:02:13 GMT\r\nexpires: Fri, 26 Mar 2027 02:02:13 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 25 Mar 2026 17:59:21 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 81960\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":148194,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4058)","md5":"1149ba342465368267e688167df7cb33","sha1":"70107c26b398d30a7d4982099052cbddcf542553","sha256":"7e7a6455658f0a13944f65747993265e09ef6cb35cb13eb86d5912b388b8a6b9","sha512":"506876b12cc73e384bc277d4c3d37149e464d38328fa960a764414d66c6d0da692dfdc8d8dec7e7ff8fbada17e8b510165ab5b93b28d01ade87e4851b2004537","ssdeep":"1536:0hHF5vRqzF9JSnUQc6MYMe/41ieRzE83HN8zrAtSKUnvGigM1Km1uV7R9mKuHzrd:1F9Jgb41iexbmzrPKcgsupuHKaL3dJ","tlshash":"b9e3f9d8b79270628373b4b5003f010ff13ab8aae848896cb588d9e57d749695277f7c","first_seen":"2026-03-20T09:09:45.398506Z","last_seen":"2026-03-31T16:32:24.671362Z","times_seen":5410,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":195,"dns":0,"connect":29,"send":0,"wait":16,"receive":10,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600","fqdn":"themes.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600 HTTP/1.1\r\nHost: themes.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncross-origin-resource-policy: cross-origin\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Sat, 28 Mar 2026 00:48:13 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Fri, 27 Mar 2026 00:48:13 GMT\r\nserver: fife\r\ncontent-length: 228521\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":228521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Sunset afterglow and twlight dunes in White Sands National Monument, software=Picasa], baseline, precision 8, 1600x1067, components 3","md5":"e66ef1f4c654be20558150214aa2b85a","sha1":"ad1dfbefad9a21e48aeeac1bae9f8a5b8ea1ef3c","sha256":"6a5482e0dc4e77a6be20281b13d7ef4d8b67521e73b66bc633ea4e4242934be9","sha512":"a5d066c57405a14eaea3ec9e661d905bf80efb03371ce298fce18acb8d545f73225daf18f55a124f42b98f9afd04adc94baf349df2e08f5d78f130c29c86e823","ssdeep":"6144:ZLvXzTZPaNDvJrIgKk1pfe+I4K8dAChaA:Zb2dEgKOpWkKGAqaA","tlshash":"982422a9fcbd9272cf0ee0708099ed094153ff308bde1b986455cf8db2eda44149d656","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-07-24T08:57:47.269012Z","times_seen":21379,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":198,"dns":27,"connect":17,"send":0,"wait":122,"receive":248,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:13.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://coinbasewalletextensionn.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 25 Mar 2026 19:50:52 GMT\r\nexpires: Thu, 25 Mar 2027 19:50:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 104241\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-24T09:51:50.676101Z","times_seen":242154,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":68,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinbasewalletextensionn.blogspot.com/favicon.ico","fqdn":"coinbasewalletextensionn.blogspot.com","domain":"coinbasewalletextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.250.178.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://coinbasewalletextensionn.blogspot.com/","date":"2026-03-27T00:48:14.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:29 GMT","end":"Mon, 01 Jun 2026 08:37:28 GMT"},"fingerprint":{"sha1":"D5:E4:F4:CD:A5:39:02:8E:38:BE:2F:47:4E:0A:41:FF:B5:A6:E4:B4","sha256":"48:B2:43:03:3F:F5:4B:0E:F0:A0:7C:B3:AC:27:80:BD:06:E3:52:7D:70:72:62:29:FE:E1:CF:0E:B0:98:12:56"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: coinbasewalletextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://coinbasewalletextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nexpires: Fri, 27 Mar 2026 00:48:14 GMT\r\ndate: Fri, 27 Mar 2026 00:48:14 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Wed, 25 Mar 2026 09:04:21 GMT\r\netag: W/\"8a9e9938eff8a96e39436ff3a4792123df02edc98f4515c5e9d0bc95ae0dda09\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel","md5":"59a0c7b6e4848ccdabcea0636efda02b","sha1":"30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340","sha256":"a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f","sha512":"bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4","ssdeep":"","tlshash":"5671c80736c29f79c4d082fa159ec674136766eb281b061b3e85f65a3d88135f911ac0","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-07-24T10:02:37.295299Z","times_seen":105896,"resource_available":false,"data":null}},"time_used":716,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":715,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"coinbasewalletextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}