{"report_id":"e56aa418-9fbc-4cf8-870f-06183b5ce01d","version":6,"status":"done","tags":[],"date":"2026-02-15T02:04:46Z","url":{"schema":"http","addr":"phantomeextensionn.blogspot.fi","fqdn":"phantomeextensionn.blogspot.fi","domain":"blogspot.fi","tld":"fi"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"title":"Download Phantom Wallet Extension - Official Website","dom":{"size":93478,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (14749)","md5":"98debd38bc206fa5c94b7f67dd87d87b","sha1":"58f516e7b517f768274d4af9acdc8380333c9b05","sha256":"273d44fbfc142cd87e629d8147d4acba2e0523dc37c85bdb73fd18b4e2dd939d","sha512":"c1659ec0af77b5aa6c56e0199a963bbde6c6f128491c688f7b37e2c5a7520a016331ed185263d2c38a58d593cf56f8b0492569861f75f1a70a9d0c3d184d1450","ssdeep":"768:AeHV++m7XkBHE1rAsFl8+dH1A61hFw8/ImNmRNv+f5AfpUxnHeob4f1u0eJwOq9A:p6nbYGZqfQuDukZeV","tlshash":"72932877a5523d0dc2338849b5c5ba987b18c063d34744dee9bab668c3cbdc3527236a","dom_hash":"domhash4513a84c5638d7fd3773620a0836f177","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"phantomeextensionn.blogspot.fi","fqdn":"phantomeextensionn.blogspot.fi","domain":"blogspot.fi","tld":"fi"},"ip":{"addr":"216.58.207.225","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-22T02:04:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"phantomeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"phantomeextensionn.blogspot.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"themes.googleusercontent.com","ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":81747,"first_seen":"2012-05-24T07:24:02Z","last_seen":"2026-02-12T08:48:47.274333Z","alert_count":0,"request_count":1,"received_data":229043,"sent_data":553,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":2,"received_data":81926,"sent_data":1154,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-02-08T22:29:54.459767Z","alert_count":0,"request_count":1,"received_data":12523,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.blogger.com","ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1999-06-22","domain_rank":9514,"first_seen":"2012-05-22T07:35:03Z","last_seen":"2026-02-09T06:26:41.027224Z","alert_count":0,"request_count":2,"received_data":152088,"sent_data":929,"comment":"","tags":null,"fingerprints":null},{"fqdn":"phantomeextensionn.blogspot.com","ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-07-31","domain_rank":0,"first_seen":"2025-09-11T12:56:00.845749Z","last_seen":"2026-02-14T18:00:21.808612Z","alert_count":4,"request_count":4,"received_data":111841,"sent_data":1894,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"blogger.googleusercontent.com","ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4332,"first_seen":"2012-05-25T17:41:01Z","last_seen":"2026-02-09T04:18:14.018014Z","alert_count":0,"request_count":1,"received_data":66513,"sent_data":698,"comment":"","tags":null,"fingerprints":null},{"fqdn":"resources.blogblog.com","ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2000-09-15","domain_rank":177645,"first_seen":"2017-01-30T04:47:40Z","last_seen":"2026-02-11T12:14:53.350543Z","alert_count":0,"request_count":1,"received_data":143981,"sent_data":473,"comment":"","tags":null,"fingerprints":null},{"fqdn":"phantomeextensionn.blogspot.fi","ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-03-07","domain_rank":0,"first_seen":"2026-02-15T02:04:47.03722Z","last_seen":"2026-02-15T02:04:47.03722Z","alert_count":1,"request_count":1,"received_data":92191,"sent_data":499,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"38ee2f6ddbe8a478e5795030e72ba35d","sha1":"d332319b04b273e3b9a93ffa22ba9036d59b8e99","sha256":"97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319","sha512":"15610a3ce0ff69817776e355c350aebc006a7744a941c1258fe16a2e73445d964fd94885bd4b50bb2e9ea773a5f95bf1aa124fd90a3252ab2769d2870e5fbb95","ssdeep":"","tlshash":"20d02ef7f4d5ac218809a3200865e9083032e6feb3a08de094c0063a488a8ba9306fa0","size":275,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-06-07T08:09:46.269043Z","times_seen":108164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","size":11792,"data":"","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-06-08T20:53:19.569245Z","times_seen":28916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/js/cookienotice.js","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","size":6513,"data":"","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-06-08T21:13:36.720847Z","times_seen":121520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/1809905691-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2ff5efb15c427f3d6903a03a8175b70","sha1":"dd74c5ffc9086181ed9c034159e482cebb2179f0","sha256":"c54bbdb5fa55a150a11c7569aed086df31b2512924f925a83e7feb420d9b2da1","sha512":"f2813ae093ee01aa817726cf2a8630fea580217edfb4338dd01972013c155d2d3264529dd5c519e3892e69adc04e3cd827dd4c71fedde6d6dd5cd57cb5f51099","ssdeep":"1536:h8SKRZwIQRDGB+fScic8tVNjOiKQMZwMkWU+AbpBfdlfgN+cuZgBzY5d037Z:kyUcwOiKQJp5lKEgp+a","tlshash":"28e3e79cb6a270768363f1f5402f414eb237b869a948496c718ddce62eb4d49123bf7c","size":143265,"data":"","first_seen":"2026-01-22T23:25:45.174651Z","last_seen":"2026-02-27T00:04:22.44162Z","times_seen":685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f488687f23b8b2ad6f1d05c2d07b2735","sha1":"9fc276898b78f841cb27d76da4f17dbe8c77aefe","sha256":"9153ade8a8e5db45d8092225fe85f04f6af83889149e2f735d1815268a1003c9","sha512":"de641622763436813ae87369ae73c0f2d7123835e07e67005a30b4bc76dccf76f07be9c35b78614275144015af1f491458cf292e060df5ef74cefbeb267e7ce2","ssdeep":"","tlshash":"690189137108e71422a314347b8bba18fd2ac2520895453b391cf5324f07b63ce96be3","size":798,"data":"","first_seen":"2024-02-05T14:31:36Z","last_seen":"2026-06-07T08:09:46.277883Z","times_seen":74975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2097657844-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb8a66514708239499083a26630fe079","sha1":"153bb464d0514c06dce705c4f790ebf492d32ba0","sha256":"32e5c2b4ed9c53e7f79c91af0eeb45cfbadef286df5c50702656aa61fa5cca44","sha512":"77cd0cd678d3b22f7cbf9ef04754ce476e5c478adeeaa05e0d2724d79e7d7d6a9807b3ffc14550de1b98e7dc10908d3978f6bd2f087a5a9108941804d27b716b","ssdeep":"1536:WFLo5vRqzJMVonPQ8nTIrB6Qfeanqt2psGrAGLKm/vTMaglSWk6oocU6xDoGo3/D:mJMVmbQfeCyGrZKYXgSRliGwb/bdJ","tlshash":"fbe3f9d8b79270628373b4b5003f010ff13ab9aae848886cb588d9e57d749695277f7c","size":148197,"data":"","first_seen":"2026-02-12T06:16:56.455454Z","last_seen":"2026-02-16T23:51:40.009664Z","times_seen":732,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"20eb85bf366dedf212ae668081c96d7c","sha1":"f05eeaaf693215b456ba46fc94015b702dd42e64","sha256":"42afdbae3169586c0f5b1f666138b215b0d13e75d8ad97ce0085b0e7379e8173","sha512":"5c9683b7a9526c3cc49fb737d29ac0409a8f77dc5204241731da3c844f27c40aca62e090ccdd47f332fba896de55c62afca0579d0e1c2a3c08c2b7001f939433","ssdeep":"192:/M50R030L60jv9+swyI/BRq2E1akhqcpllLLx0RbcS8GNQZ8QvG/AGQhGEqRMxMc:/Y0R030L60jvd2mdllh0erDR+RM29Sqk","tlshash":"4e0297c770fcb0fa0faeec5fe115aea537560c15d982bc61d8692da4130a7c39495b30","size":8389,"data":"","first_seen":"2026-02-14T18:00:25.468874Z","last_seen":"2026-02-15T02:07:44.105957Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.blogger.com/img/blogger_logo_round_35.png","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:26.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:02 GMT","end":"Mon, 20 Apr 2026 08:39:01 GMT"},"fingerprint":{"sha1":"50:BA:5E:87:61:88:8B:49:82:D9:25:CE:F5:7F:E0:8A:0A:D3:09:B3","sha256":"93:93:14:98:C5:22:09:63:04:F0:04:4E:68:93:10:86:08:79:5F:E9:1A:E5:52:4A:18:69:7D:D6:BF:F5:D6:5B"}}},"request":{"raw":"GET /img/blogger_logo_round_35.png HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2531\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:03:40 GMT\r\nexpires: Fri, 20 Feb 2026 06:03:40 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 12 Feb 2026 08:56:35 GMT\r\ncontent-type: image/png\r\nage: 158446\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"838622483cbfed35380b4705f19d7cca","sha1":"7de684136affc969a24d61927afc18905cf2fc36","sha256":"183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a","sha512":"d2f77ab5ccb90653fe6480e3a5c488129e8050156e72a3d034eb93a1c3e1f2ce462603c08a05a8911a7f65a77b239bfdb6c4930119a5e6cbe8619f3fa3607e71","ssdeep":"","tlshash":"e7513c8dda1228d281356c2d9f2ae58adc694f0f72130744b9e97296475efb940818b0","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-06-08T20:53:19.567567Z","times_seen":28534,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/favicon.ico","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:26.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: phantomeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nexpires: Sun, 15 Feb 2026 02:04:26 GMT\r\ndate: Sun, 15 Feb 2026 02:04:26 GMT\r\ncache-control: private, max-age=86400\r\nlast-modified: Fri, 19 Sep 2025 01:37:23 GMT\r\netag: W/\"7be0dc5c82b817649323638c08e8d2d1c75adaae245f31909c99474964a1c186\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 412\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel","md5":"59a0c7b6e4848ccdabcea0636efda02b","sha1":"30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340","sha256":"a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f","sha512":"bcfebb2ca5af53031c636d5485125a1405ca8414d0bc8a5d34dd3b3feb4c7425be02cf4848867d91cf6d021d08630294f47bdc69d6cd04a1051972735b0f04d4","ssdeep":"","tlshash":"5671c80736c29f79c4d082fa159ec674136766eb281b061b3e85f65a3d88135f911ac0","first_seen":"2023-04-05T07:39:22Z","last_seen":"2026-06-08T21:13:36.714828Z","times_seen":99220,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"phantomeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggsvS0PT5M9jJ3NA_XfcocGyG1XWewp0SRvSdREn3PPjpZmxpRviFmX-tjmKf8CPg-GtkPt-yIe2o6qVhuHi3STBPj6SomXfdKbWSzMmGRnmV-7ZuHuvd8gKFWGXKChnw7QAm9aEJglAb1LZ3YWbvLrQKDV-RZGnrCTGU8oC7nInQQSAuNFQwJbVPaFYZF/w945-h600-p-k-no-nu/unnamed.jpg","fqdn":"blogger.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /img/b/R29vZ2xl/AVvXsEggsvS0PT5M9jJ3NA_XfcocGyG1XWewp0SRvSdREn3PPjpZmxpRviFmX-tjmKf8CPg-GtkPt-yIe2o6qVhuHi3STBPj6SomXfdKbWSzMmGRnmV-7ZuHuvd8gKFWGXKChnw7QAm9aEJglAb1LZ3YWbvLrQKDV-RZGnrCTGU8oC7nInQQSAuNFQwJbVPaFYZF/w945-h600-p-k-no-nu/unnamed.jpg HTTP/1.1\r\nHost: blogger.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1aa\"\r\nexpires: Mon, 16 Feb 2026 02:04:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 15 Feb 2026 02:04:26 GMT\r\nserver: fife\r\ncontent-length: 66046\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66046,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 945x600, components 3","md5":"fae50bb0929353653b62a46f923ccf75","sha1":"a19eaf2cb693823719aafdc01f23bc388a979097","sha256":"4e42ff9a86792932a53f1ddb73644d29467ef439150153593b6e2bb05a32ebed","sha512":"2405ae5085d633bafcf89ca693f3785445ce7365b421b79e1891fde072aadd5186e2775508f2f21f4810fd0755a2b596c38ffbce1bc477e67b210ea5c66b08fa","ssdeep":"1536:FGdmrnyyDAXYqg5wj07DqKe00IBgZPRyQinVIQ3AYDtzFNSXLu:FGdmBDR/wj07D7EzsV7VDtz3yu","tlshash":"2353bec2fe8144845eae0af62c93a453c88245f9afa7fd2d0c177da6e015f2c8767745","first_seen":"2025-09-11T12:56:03.809144Z","last_seen":"2026-02-15T02:07:44.098946Z","times_seen":34,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":107,"dns":0,"connect":21,"send":0,"wait":278,"receive":34,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.blogblog.com/blogblog/data/res/1809905691-indie_compiled.js","fqdn":"resources.blogblog.com","domain":"blogblog.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:02 GMT","end":"Mon, 20 Apr 2026 08:39:01 GMT"},"fingerprint":{"sha1":"50:BA:5E:87:61:88:8B:49:82:D9:25:CE:F5:7F:E0:8A:0A:D3:09:B3","sha256":"93:93:14:98:C5:22:09:63:04:F0:04:4E:68:93:10:86:08:79:5F:E9:1A:E5:52:4A:18:69:7D:D6:BF:F5:D6:5B"}}},"request":{"raw":"GET /blogblog/data/res/1809905691-indie_compiled.js HTTP/1.1\r\nHost: resources.blogblog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 48847\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:16:46 GMT\r\nexpires: Fri, 20 Feb 2026 06:16:46 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 12 Feb 2026 14:53:26 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 157660\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143265,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1934)","md5":"a2ff5efb15c427f3d6903a03a8175b70","sha1":"dd74c5ffc9086181ed9c034159e482cebb2179f0","sha256":"c54bbdb5fa55a150a11c7569aed086df31b2512924f925a83e7feb420d9b2da1","sha512":"f2813ae093ee01aa817726cf2a8630fea580217edfb4338dd01972013c155d2d3264529dd5c519e3892e69adc04e3cd827dd4c71fedde6d6dd5cd57cb5f51099","ssdeep":"1536:h8SKRZwIQRDGB+fScic8tVNjOiKQMZwMkWU+AbpBfdlfgN+cuZgBzY5d037Z:kyUcwOiKQJp5lKEgp+a","tlshash":"28e3e79cb6a270768363f1f5402f414eb237b869a948496c718ddce62eb4d49123bf7c","first_seen":"2026-01-22T23:25:45.174651Z","last_seen":"2026-02-27T00:04:22.44162Z","times_seen":685,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":114,"dns":33,"connect":21,"send":0,"wait":22,"receive":31,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/js/cookienotice.js","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET /js/cookienotice.js HTTP/1.1\r\nHost: phantomeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2026\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 19:17:54 GMT\r\nexpires: Sat, 21 Feb 2026 19:17:54 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 14 Feb 2026 17:56:01 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 24391\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6513,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"a705132a2174f88e196ec3610d68faa8","sha1":"3bad57a48d973a678fec600d45933010f6edc659","sha256":"068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568","sha512":"e947d33e0e9c5e6516f05e0ea696406e4e09b458f85021bc3a217071ae14879b2251e65aec5d1935ca9af2433d023356298321564e1a41119d41be7c2b2d36d5","ssdeep":"96:q54UPzHFcJZ7haKemb/m2GzrzCXAl/MStzo41Pm+YsttcVcbYhyjcso13EZDjiat:q5rPzHgxm2GzaXeMnuzYstyryPhZD9","tlshash":"4fd1630938a7127d125fa03fb6bf515ab66410238101db08786dfa785fd5f42a8e4ffa","first_seen":"2023-03-07T01:02:24Z","last_seen":"2026-06-08T21:13:36.720847Z","times_seen":121520,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"phantomeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.blogger.com/static/v1/widgets/2097657844-widgets.js","fqdn":"www.blogger.com","domain":"blogger.com","tld":"com"},"ip":{"addr":"142.251.142.233","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.blogger.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:02 GMT","end":"Mon, 20 Apr 2026 08:39:01 GMT"},"fingerprint":{"sha1":"50:BA:5E:87:61:88:8B:49:82:D9:25:CE:F5:7F:E0:8A:0A:D3:09:B3","sha256":"93:93:14:98:C5:22:09:63:04:F0:04:4E:68:93:10:86:08:79:5F:E9:1A:E5:52:4A:18:69:7D:D6:BF:F5:D6:5B"}}},"request":{"raw":"GET /static/v1/widgets/2097657844-widgets.js HTTP/1.1\r\nHost: www.blogger.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 52367\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 07:11:03 GMT\r\nexpires: Sat, 13 Feb 2027 07:11:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 12 Feb 2026 18:56:22 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 154402\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":148197,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4084)","md5":"eb8a66514708239499083a26630fe079","sha1":"153bb464d0514c06dce705c4f790ebf492d32ba0","sha256":"32e5c2b4ed9c53e7f79c91af0eeb45cfbadef286df5c50702656aa61fa5cca44","sha512":"77cd0cd678d3b22f7cbf9ef04754ce476e5c478adeeaa05e0d2724d79e7d7d6a9807b3ffc14550de1b98e7dc10908d3978f6bd2f087a5a9108941804d27b716b","ssdeep":"1536:WFLo5vRqzJMVonPQ8nTIrB6Qfeanqt2psGrAGLKm/vTMaglSWk6oocU6xDoGo3/D:mJMVmbQfeCyGrZKYXgSRliGwb/bdJ","tlshash":"fbe3f9d8b79270628373b4b5003f010ff13ab9aae848886cb588d9e57d749695277f7c","first_seen":"2026-02-12T06:16:56.455454Z","last_seen":"2026-02-16T23:51:40.009664Z","times_seen":732,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":101,"dns":4,"connect":21,"send":0,"wait":22,"receive":31,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/responsive/sprite_v1_6.css.svg","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET /responsive/sprite_v1_6.css.svg HTTP/1.1\r\nHost: phantomeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"blogger-tech\"\r\nreport-to: {\"group\":\"blogger-tech\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/blogger-tech\"}]}\r\ncontent-length: 2244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Feb 2026 19:17:54 GMT\r\nexpires: Sat, 21 Feb 2026 19:17:54 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Sat, 14 Feb 2026 13:51:20 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 24391\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7658,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4dcfc8144f556815c7a1d84ed4e959e","sha1":"22088bd6cdf970dcf7bfab9a74a4768548ca8890","sha256":"73d16aca9b019e42dd2de3a10e5049b5606268ce0d8e3a167b05b37acb9b0e9c","sha512":"bbf542916c5e6a7fff6742e1aff185d3129b24c2d4669e387fe257c2f1ee938871e2a825e4e7fb347b6e739190168c7ca347d4a7989ad334f15992cb83bad28e","ssdeep":"192:S0S54QQw+4C4qV7DnovzS/KuO7/Jk4UZgf+q:S0S54HP4C4g7DovzCKuO7/Jk4UZoJ","tlshash":"bdf1f266c7382b4818059778efaeb2b110edb4e935cc41d936094768b78a1dff86af41","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-06-08T20:53:19.567063Z","times_seen":28370,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"phantomeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600","fqdn":"themes.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"216.58.207.225","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:50 GMT","end":"Mon, 20 Apr 2026 08:40:49 GMT"},"fingerprint":{"sha1":"95:A9:86:49:F3:E0:E3:F9:36:BC:EC:4E:BF:FB:C5:AE:E2:1C:8D:04","sha256":"B6:B9:D6:54:FE:79:1C:50:57:A2:7B:55:2A:3D:2C:2B:A3:91:C5:B7:3D:65:94:38:4F:69:5E:EF:03:1B:9C:8F"}}},"request":{"raw":"GET /image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw\u0026options=w1600 HTTP/1.1\r\nHost: themes.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v1\"\r\nexpires: Mon, 16 Feb 2026 02:04:26 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Sun, 15 Feb 2026 02:04:26 GMT\r\nserver: fife\r\ncontent-length: 228521\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":228521,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=Sunset afterglow and twlight dunes in White Sands National Monument, software=Picasa], baseline, precision 8, 1600x1067, components 3","md5":"e66ef1f4c654be20558150214aa2b85a","sha1":"ad1dfbefad9a21e48aeeac1bae9f8a5b8ea1ef3c","sha256":"6a5482e0dc4e77a6be20281b13d7ef4d8b67521e73b66bc633ea4e4242934be9","sha512":"a5d066c57405a14eaea3ec9e661d905bf80efb03371ce298fce18acb8d545f73225daf18f55a124f42b98f9afd04adc94baf349df2e08f5d78f130c29c86e823","ssdeep":"6144:ZLvXzTZPaNDvJrIgKk1pfe+I4K8dAChaA:Zb2dEgKOpWkKGAqaA","tlshash":"982422a9fcbd9272cf0ee0708099ed094153ff308bde1b986455cf8db2eda44149d656","first_seen":"2023-04-05T15:37:11Z","last_seen":"2026-06-08T20:35:42.558935Z","times_seen":20665,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":81,"dns":26,"connect":7,"send":0,"wait":80,"receive":55,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://phantomeextensionn.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:51 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 168814\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-08T21:16:12.332851Z","times_seen":873942,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":66,"dns":1,"connect":24,"send":0,"wait":21,"receive":24,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/roboto/v50/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://phantomeextensionn.blogspot.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 03:10:51 GMT\r\nexpires: Sat, 13 Feb 2027 03:10:51 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 18 Nov 2025 19:00:07 GMT\r\ncontent-type: font/woff2\r\nage: 168814\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-06-08T21:16:12.332851Z","times_seen":873942,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":71,"dns":1,"connect":23,"send":0,"wait":39,"receive":15,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.fi/","fqdn":"phantomeextensionn.blogspot.fi","domain":"blogspot.fi","tld":"fi"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-15T02:04:24.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomeextensionn.blogspot.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nlocation: https://phantomeextensionn.blogspot.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 15 Feb 2026 02:04:25 GMT\r\nexpires: Sun, 15 Feb 2026 02:04:25 GMT\r\ncache-control: private, max-age=0\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 206\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":91688,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T21:16:18.866443Z","times_seen":16250262,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":103,"dns":18,"connect":20,"send":0,"wait":645,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"phantomeextensionn.blogspot.fi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"phantomeextensionn.blogspot.com/","fqdn":"phantomeextensionn.blogspot.com","domain":"phantomeextensionn.blogspot.com","tld":"blogspot.com"},"ip":{"addr":"142.251.38.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-15T02:04:25.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.blogspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:36 GMT","end":"Mon, 20 Apr 2026 08:40:35 GMT"},"fingerprint":{"sha1":"19:76:0C:5D:5F:07:34:96:B3:D1:1F:26:D7:45:DB:74:96:D7:C2:C8","sha256":"E6:94:D3:FD:FB:1D:1C:F0:6C:68:F2:15:2D:E1:66:45:E7:B5:3B:61:4C:95:2A:10:24:5B:B9:D7:FC:AE:54:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomeextensionn.blogspot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nexpires: Sun, 15 Feb 2026 02:04:25 GMT\r\ndate: Sun, 15 Feb 2026 02:04:25 GMT\r\ncache-control: private, max-age=0\r\nlast-modified: Fri, 19 Sep 2025 01:37:23 GMT\r\netag: W/\"7be0dc5c82b817649323638c08e8d2d1c75adaae245f31909c99474964a1c186\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 18450\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Blogger","description":"Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries.","website":"https://www.blogger.com","common_platform_enumeration":"","icon":"Blogger.png","categories":["Blogs"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":91688,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (14749)","md5":"0541601e5a35251ed4f0ec9c052480f3","sha1":"2bf6711c89feeff35c73b563e78aec1f8cebe5e0","sha256":"5b37c6a1c83e70ddd4ad8858c7a27629f004a7434b53b82974e04559b1f63029","sha512":"d540fcf395df67d5eba9f2bf0ca4ec5e07446005a663c75f7271ec45f7053888d0963c54f10b7f769b5795806f4dac239b8bb769897a9baf7805d4ff9332f629","ssdeep":"768:ve46HV++m7XkBHE1rAsFl8+dH1A61hFw8/ImeRNv+f5AfpUxnHeob4f1u0eJwO0/:ved6nvwX4Q6DukZej","tlshash":"6493287765563d0dc2334859b4c6bac87b18c063d34754eee9bea62cc3cb9c2527236a","first_seen":"2026-02-14T18:00:25.464585Z","last_seen":"2026-02-15T02:07:44.098409Z","times_seen":24,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":126,"dns":35,"connect":20,"send":0,"wait":154,"receive":47,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-15","alert":"Sinkholed","trigger":"phantomeextensionn.blogspot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomeextensionn.blogspot.com/","date":"2026-02-15T02:04:25.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /external_hosted/clipboardjs/clipboard.min.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomeextensionn.blogspot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 3475\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Feb 2026 02:04:25 GMT\r\nexpires: Sun, 15 Feb 2026 02:04:25 GMT\r\ncache-control: public, max-age=0\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11802,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10473)","md5":"a1a2e5bd3af1cf7d730f15dd7e308a1b","sha1":"6ab91a37884d5f70808157c5cb6ed7345d8f537a","sha256":"d5ecc1fcccdbc32c37aa7e46793befad6d98ff1a85d1760d732d710faf49a08e","sha512":"83c5a33104d537221d55eae2d1c3042dc1e8f505e5421b5cf6a72888cd8ab70fcec0e1f5f01e0dd63a45adf8fed6e0cac66da2053179c0546595324603b50079","ssdeep":"192:tZrSzYMRHQ/061SHY1XWe6B99bc8IHtam5PkJS953CZi7gwRATt+wuLJRKZOYuQC:XrQic60999bcIYim3yvwRQt+9LJqO7QC","tlshash":"aa32e79c728072b256d762ba803f514bb3319469649e8084713ee8f56e78eec5277f3c","first_seen":"2023-04-05T03:08:00Z","last_seen":"2026-06-08T20:53:19.569245Z","times_seen":28916,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":55,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}