{"report_id":"042e539a-81cc-44a9-a06e-02ebb30fd72c","version":6,"status":"done","tags":[],"date":"2023-12-01T20:01:28Z","url":{"schema":"http","addr":"ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"title":"Fwiwk.biz"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:39:50Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2023-12-01 05:10:35","alert_count":0,"request_count":2,"received_data":2094,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"parking.parklogic.com","ip":{"addr":"67.225.218.50","port":80,"asn":32244,"as":"LIQUIDWEB","country":"United States","country_code":"US"},"domain_registered":"2007-02-28","domain_rank":121827,"first_seen":"2015-10-23 03:38:08","last_seen":"2023-12-01 05:05:54","alert_count":0,"request_count":1,"received_data":926,"sent_data":363,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww7.fwiwk.biz","ip":{"addr":"199.59.243.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-04-29","domain_rank":0,"first_seen":"2023-07-28 02:15:43","last_seen":"2023-12-01 15:22:37","alert_count":8,"request_count":4,"received_data":37551,"sent_data":1917,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":55681,"sent_data":420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2023-12-01 05:10:33","alert_count":0,"request_count":4,"received_data":155711,"sent_data":3156,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-01T20:01:16Z","timestamp":1701460876,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":48880,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .biz TLD","source":"{\"timestamp\":\"2023-12-01T20:01:16.348105+0000\",\"flow_id\":506233761845193,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.146\",\"src_port\":48880,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027863,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .biz TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":3666,\"rrname\":\"ww7.fwiwk.biz\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":84,\"bytes_toclient\":0,\"start\":\"2023-12-01T20:01:16.348105+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-01T20:01:16Z","timestamp":1701460876,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44103,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .biz TLD","source":"{\"timestamp\":\"2023-12-01T20:01:16.348270+0000\",\"flow_id\":932219355680878,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.146\",\"src_port\":44103,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027863,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .biz TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":40153,\"rrname\":\"ww7.fwiwk.biz\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":84,\"bytes_toclient\":0,\"start\":\"2023-12-01T20:01:16.348270+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null}]},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"874a9639750ae434c10140eb1a983849","sha1":"075e222560bb798ac08f476e157afa2782d3c85b","sha256":"a49690ce6db822bd1ae860ad7687076d3259019e7353ecdd86cd02066fd6bee8","sha512":"94386e4fbf366ed6f6e27d5f2ae3b6b0b40d1c42df303ed013648c15910a64ea24a9bb2fbfbad60aef361ed2ad89cdf56e50c3a2d71109e78d816e15e656e461","ssdeep":"1536:crPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:32sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"d8e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149642,"data":"","first_seen":"2023-11-09T14:10:10Z","last_seen":"2023-12-13T17:50:06Z","times_seen":1323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww7.fwiwk.biz%3Fcaf%26usid%3D23%26utid%3D5101018028\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2348603269777440\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=7431701460877927\u0026num=0\u0026output=afd_ads\u0026domain_name=ww7.fwiwk.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460877930\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww7.fwiwk.biz%2Fdyusfwvlljjyjq%3Fusid%3D23%26utid%3D5101018028","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"efcd47517d042703ef570e88cb0852cd","sha1":"3aa8152569bbeb8290fa73545065fe3ddd6775d5","sha256":"d5df7bcfedad88c96dc8242d4af8568c5e553dd9134889944f10918037066fa4","sha512":"efd24d1fcc1a91619429655d803eaf6ae406ae60c879d10dcad8896a2c58ff09c20ac15bbd35d05bdcb8de7b8dcbcb3dcd08328cf1fcbf8617a6f6e754bcdf37","ssdeep":"","tlshash":"6101d39919640171d46751162d5f3fd01cdc147122cb3589a04d7cde207dbdf72250bb","size":659,"data":"","first_seen":"2024-08-20T17:08:46.276265Z","last_seen":"2024-08-20T17:08:46.276265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9a3b8aa7c3ee71293420c78d533d8a","sha1":"b69a3d5a4f6b61c5fdd3db5b86fbdb523ee5f771","sha256":"186613929472e8751503e597d47c60d27c81f74943f407c844600f77b461ebcc","sha512":"a3181048751cc63a0428d2a2a00d9c559a39d71102790566512fd06ceb1e5af9482bd3097e481713138897b6f7cfcb2b5ccf4935be3d8d098b76677009bc9537","ssdeep":"1536:crPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:32sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"48e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149606,"data":"","first_seen":"2023-11-09T17:06:27Z","last_seen":"2023-12-07T21:10:03Z","times_seen":896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"parking.parklogic.com/page/enhance.js?pcId=7\u0026domain=Fwiwk.biz","fqdn":"parking.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"67.225.218.50","port":80,"asn":32244,"as":"LIQUIDWEB","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"89ac7f0e927769efef0df87fef122003","sha1":"d79a3b166540c5ca599b3133ea776c8c281eb01c","sha256":"7f1c18144a576c2c690fbbe722f90bb12cecbd88e742bd6df44775678b0ad85a","sha512":"00d4698f0c08fba242941dec1f39cdfd3827dd066cba07328ba4b7240515ebcdd487dffd6da87a39bab7393493aa903afc06445eb58c48f9c5167f8b96af63dc","ssdeep":"","tlshash":"6c01f45a0c910c32e51a107d3c21735e7c17b3f6ca86d3714c584271dca98b512e5395","size":664,"data":"","first_seen":"2023-11-29T09:29:28Z","last_seen":"2023-12-13T02:53:22Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0ae9917fedb8257de789a1378a26078e","sha1":"bc8a699c12dcd196fa1c7095e02a637bab4204fb","sha256":"1f7bb248e346632295c1b4f05cf6eb6ba124db05f8773503729fe8bce5eceaa8","sha512":"5d1841ece5836bb84d1247d7a8f15743e32e46f579676ca30d4052fd685a05cb1a09f66b2b95c1903b1e467935dcff0cc8121830a170799653c0e16b2b827c17","ssdeep":"","tlshash":"0fe0f16eb005b08cf43074020df98d9c37d4c064ac18edc6f1ea0c8e2d9018f600c5de","size":391,"data":"","first_seen":"2024-08-20T17:08:46.277408Z","last_seen":"2024-08-20T17:08:46.277408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww7.fwiwk.biz/bElLfDXnp.js","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","size":32054,"data":"","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"861d68186896fe7c13194b20d900fb4b","sha1":"2adef30241b2a6125259639e4f660076806a410b","sha256":"94b8715a441a8cfe4356a5f0a988bf584023973a8089b6ffa80f70a2560846f9","sha512":"170a677bbfe88289fcb7601f4f147faabf5e980c83675da1946a8656e930975608f075afbd1c6fcc6d290359b52035393257445b9c11c60a72e3825fb6f79dc6","ssdeep":"","tlshash":"e3e0d82a281485305de90c8db4a6aa897851f2548213c916844d404558a0fd6acba7aa","size":351,"data":"","first_seen":"2023-03-07T12:03:50Z","last_seen":"2024-08-21T09:42:16.197418Z","times_seen":1449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"488fcef10f6f3c506e0761713d720ffa","sha1":"1b7682e43d6b29f248c4d4161ce7b80b7c616166","sha256":"31e87cf9d7a1eb9a0aff2a7c34b7daf50fd8f216f1f8bc487681438e5e4bf3b5","sha512":"05b68b4bf50d6d3a1cf3ab135c1bfa447c30b96eff9da2b91b4ffdefd9a2ea7295c51899ab6a1d1e37681b4cfdd22c3c307ea29a49ae8e0d914451c4d9508aed","ssdeep":"","tlshash":"19c080170c39813455d54cc870b9df0dc119d345c651c91484dc448279987cddc753fb","size":168,"data":"","first_seen":"2023-07-29T19:00:41Z","last_seen":"2024-08-21T06:26:05.610895Z","times_seen":957,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-01T20:01:16.371Z","timestamp":1701460876371,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /dyusfwvlljjyjq?usid=23\u0026utid=5101018028 HTTP/1.1\r\nHost: ww7.fwiwk.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 01 Dec 2023 20:01:12 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1109\r\nx-request-id: 968fd2b7-22b5-403d-a285-d3770fbceb18\r\ncache-control: no-store, max-age=0\r\naccept-ch: sec-ch-prefers-color-scheme\r\ncritical-ch: sec-ch-prefers-color-scheme\r\nvary: sec-ch-prefers-color-scheme\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_COxaOnRQYwf/t+iwVtjUbJaUFIlm/YaFw8esu/QeKlwhq1BHCaahKtrxIuhFZM5Z2obRscFr6Hu9oUqCyLMdfQ==\r\nset-cookie: parking_session=968fd2b7-22b5-403d-a285-d3770fbceb18; expires=Fri, 01 Dec 2023 20:16:12 GMT; path=/\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1109,"size_decoded":0,"mime_type":"","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (406)","md5":"b741dc0092de5c6c9a306adfb9cde3b9","sha1":"719b21978d455fe8a378af6dd1e0974953f20b43","sha256":"0cc6f4913823e05e3da78f42d16e6a0f19689e0973cb7d2ff7114fabe6360016","sha512":"7dd7337865e272a736b77403352a526896b72693788e0cf275feac0897304c24d9cd83975833fa2688314d5f28e42ce64916c454baf816c01f0680d9aa56a391","ssdeep":"","tlshash":"7311b6372405940da4f146001cf0ea0c4c89836eaa45acc279ede06b1ec03e3f48e3dc","first_seen":"2023-12-01T21:01:28Z","last_seen":"2023-12-01T21:01:28Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":202,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":214},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww7.fwiwk.biz/bElLfDXnp.js","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:17.324Z","timestamp":1701460877324,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bElLfDXnp.js HTTP/1.1\r\nHost: ww7.fwiwk.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028\r\nCookie: parking_session=968fd2b7-22b5-403d-a285-d3770fbceb18\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 01 Dec 2023 20:01:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 32054\r\nx-request-id: 54f5b3e0-fad7-4a82-8899-9f2e05921d03\r\nset-cookie: parking_session=968fd2b7-22b5-403d-a285-d3770fbceb18; expires=Fri, 01 Dec 2023 20:16:12 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32054,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32051)","md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww7.fwiwk.biz/_fd?usid=23\u0026utid=5101018028","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:17.442Z","timestamp":1701460877442,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_fd?usid=23\u0026utid=5101018028 HTTP/1.1\r\nHost: ww7.fwiwk.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028\r\nContent-Type: application/json\r\nOrigin: http://ww7.fwiwk.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=968fd2b7-22b5-403d-a285-d3770fbceb18\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Fri, 01 Dec 2023 20:01:12 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 2509\r\nx-version: 2.110.4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=968fd2b7-22b5-403d-a285-d3770fbceb18; expires=Fri, 01 Dec 2023 20:16:12 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2509,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4901), with no line terminators","md5":"eaed3efa3d5e27a04b2aaa5a61e2ea47","sha1":"84724822f5933b7b07b480dc1a58d19a47e5c5fe","sha256":"c2b814102e14bc07b454528fc08f236bf9841531eaa2adf0816ecec99a133fb8","sha512":"c697cada783d1369ffb4936045afe26e18f58ad3ae30c7238ce00f5461d2ce8e32e3db6f4ffc2ebbf80a23c9b9ce38d6c527fac5167209fe4dba1686d2db2403","ssdeep":"96:hLajveI5UPv8l9PULGQwC7O3OpEiS40WVRtN30jSVbhViWnwa0iXGNebAwv:VIJ5CwS/7O+pEiS4LRtN3dn3nwa0imeL","tlshash":"58a1faef0a5d7eacdb52820336ef55d5822e47cf2cd35046491de3c68a68a0e35d027e","first_seen":"2023-12-01T21:01:28Z","last_seen":"2023-12-01T21:01:28Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:17.602Z","timestamp":1701460877602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww7.fwiwk.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 01 Dec 2023 20:01:12 GMT\r\nexpires: Fri, 01 Dec 2023 20:01:12 GMT\r\ncache-control: private, max-age=3600\r\netag: \"13859965838328933494\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54830,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression\\012- data","md5":"3bd3f4517b39aa35f3ad1cee4cb15507","sha1":"c23399552b5509540edb986b6d50d627abeb8f6f","sha256":"1efa3b84efe58ab2b9e2a0599c9b9b64ab41f16a37bb916af5044ceb6e9ac253","sha512":"2fd7c179f5d367a63885d032ef506e35d23c8c18e702f1f480a6dce26f8ce5b533f4e020e6cd0af75446f73390e52ac2d1dcce5ce945f86decbc70a2c73ad348","ssdeep":"768:VGf2x0/QaHRbNdmVCdf+RjuF622ciS+JLnfNLt2qFr5dsEJBOeCgZqFvUaSsp74f:a28QaxbVGRqFEcATNpH1lJBogZ5gpiX","tlshash":"7c33f1c815be144e8b92a73702d5787a74fdc72849885cbd3de4a68f410ff8a56c394c","first_seen":"2023-11-30T17:01:12Z","last_seen":"2023-12-01T23:40:31Z","times_seen":15,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":73,"dns":7,"connect":9,"send":0,"wait":30,"receive":12,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww7.fwiwk.biz%3Fcaf%26usid%3D23%26utid%3D5101018028\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2348603269777440\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=7431701460877927\u0026num=0\u0026output=afd_ads\u0026domain_name=ww7.fwiwk.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460877930\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww7.fwiwk.biz%2Fdyusfwvlljjyjq%3Fusid%3D23%26utid%3D5101018028","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:17.947Z","timestamp":1701460877947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww7.fwiwk.biz%3Fcaf%26usid%3D23%26utid%3D5101018028\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2348603269777440\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=7431701460877927\u0026num=0\u0026output=afd_ads\u0026domain_name=ww7.fwiwk.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460877930\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww7.fwiwk.biz%2Fdyusfwvlljjyjq%3Fusid%3D23%26utid%3D5101018028 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww7.fwiwk.biz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Fri, 01 Dec 2023 20:01:13 GMT\r\nexpires: Fri, 01 Dec 2023 20:01:13 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-_tzFvmNj5-v66ETgczim4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2596\r\nx-xss-protection: 0\r\nset-cookie: CONSENT=PENDING+890; expires=Sun, 30-Nov-2025 20:01:13 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2596,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (13112)","md5":"0ffe0976aa1ff8b36e205fc2dc177211","sha1":"8d53478200069e450cf09b3acfacee64263dba2d","sha256":"bbe43364a137ef4bd7e4e54215d05a4c74a0752f956e25e74c9c7184003ffee5","sha512":"a43616071837e31198647dd450749e52ccd8d818f215dc1cbf9fdda4789b37b5d2d610f5daf6523912307d114c3a1ce5169cfae2cdb1a257b85a5d798cf6f0b6","ssdeep":"96:GE/yk2iwlb5lphMzTronSc90IMvm0yEM6vfNYrWBpKM8Duw9eDEfM8Dpw9eDxeda:GE12ikpBn9+m0yEMcfWrWpCHencPskf","tlshash":"ba5244377062272d4503ec541b296f6dd181d43ac46f35e948e35b26c7ebf828be228e","first_seen":"2023-12-01T21:01:28Z","last_seen":"2023-12-01T21:01:28Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":61,"dns":1,"connect":8,"send":0,"wait":98,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww7.fwiwk.biz%3Fcaf%26usid%3D23%26utid%3D5101018028\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2348603269777440\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=7431701460877927\u0026num=0\u0026output=afd_ads\u0026domain_name=ww7.fwiwk.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460877930\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww7.fwiwk.biz%2Fdyusfwvlljjyjq%3Fusid%3D23%26utid%3D5101018028","date":"2023-12-01T20:01:18.642Z","timestamp":1701460878642,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 01 Dec 2023 05:30:23 GMT\r\nexpires: Sat, 02 Dec 2023 04:30:23 GMT\r\ncache-control: public, max-age=82800\r\nage: 52250\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (306)","md5":"fe7dd8c3c629cc6e9cd6d3e4d3cbe905","sha1":"59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18","sha256":"5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e","sha512":"1c663e07978d95c838aed54421a9c725d7311b8c002f436b30555affb26c25f6ebecff6af5c54ef112370a36a5f5aadf611304bffe76a59fb3d206e943cf153f","ssdeep":"","tlshash":"eff055bcd2ad4914a608c7017ef8a5174066f0c563cc01ceee81ac69f0614e43a63ade","first_seen":"2023-04-07T08:14:08Z","last_seen":"2026-06-08T18:18:07.17184Z","times_seen":69566,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":59,"dns":0,"connect":9,"send":0,"wait":9,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww7.fwiwk.biz%3Fcaf%26usid%3D23%26utid%3D5101018028\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2348603269777440\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=7431701460877927\u0026num=0\u0026output=afd_ads\u0026domain_name=ww7.fwiwk.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460877930\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww7.fwiwk.biz%2Fdyusfwvlljjyjq%3Fusid%3D23%26utid%3D5101018028","date":"2023-12-01T20:01:18.643Z","timestamp":1701460878643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 01 Dec 2023 10:40:51 GMT\r\nexpires: Sat, 02 Dec 2023 09:40:51 GMT\r\ncache-control: public, max-age=82800\r\nage: 33622\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with no line terminators","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":67,"dns":1,"connect":9,"send":0,"wait":9,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww7.fwiwk.biz/_tr","fqdn":"ww7.fwiwk.biz","domain":"fwiwk.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:18.685Z","timestamp":1701460878685,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww7.fwiwk.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028\r\nContent-Type: application/json\r\nContent-Length: 1689\r\nOrigin: http://ww7.fwiwk.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=968fd2b7-22b5-403d-a285-d3770fbceb18\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Fri, 01 Dec 2023 20:01:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 22\r\nx-version: 2.110.4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=968fd2b7-22b5-403d-a285-d3770fbceb18; expires=Fri, 01 Dec 2023 20:16:13 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-02T01:23:08.416684Z","times_seen":455022,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-01","alert":"Sinkholed","trigger":"fwiwk.biz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"parking.parklogic.com/page/enhance.js?pcId=7\u0026domain=Fwiwk.biz","fqdn":"parking.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"67.225.218.50","port":80,"asn":32244,"as":"LIQUIDWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:18.596Z","timestamp":1701460878596,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /page/enhance.js?pcId=7\u0026domain=Fwiwk.biz HTTP/1.1\r\nHost: parking.parklogic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww7.fwiwk.biz/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 01 Dec 2023 20:01:13 GMT\r\nServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9\r\nX-Powered-By: PHP/5.4.16\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":664,"size_decoded":0,"mime_type":"text/javascript","magic":"HTML document, ASCII text, with very long lines (394)","md5":"89ac7f0e927769efef0df87fef122003","sha1":"d79a3b166540c5ca599b3133ea776c8c281eb01c","sha256":"7f1c18144a576c2c690fbbe722f90bb12cecbd88e742bd6df44775678b0ad85a","sha512":"00d4698f0c08fba242941dec1f39cdfd3827dd066cba07328ba4b7240515ebcdd487dffd6da87a39bab7393493aa903afc06445eb58c48f9c5167f8b96af63dc","ssdeep":"","tlshash":"6c01f45a0c910c32e51a107d3c21735e7c17b3f6ca86d3714c584271dca98b512e5395","first_seen":"2023-11-29T09:29:28Z","last_seen":"2023-12-13T02:53:22Z","times_seen":142,"resource_available":true,"data":null}},"time_used":390,"timings":{"blocked":130,"dns":3,"connect":127,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=v0cfj2d3pvhz\u0026aqid=iTtqZZK6DODJxdwP3-Cz-A8\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=193\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=8%7C0%7C560%7C80%7C37\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:20.115Z","timestamp":1701460880115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=v0cfj2d3pvhz\u0026aqid=iTtqZZK6DODJxdwP3-Cz-A8\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=193\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=8%7C0%7C560%7C80%7C37\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww7.fwiwk.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-WfbpKZhyYG-hTcy9g7sdQQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 01 Dec 2023 20:01:15 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+658; expires=Sun, 30-Nov-2025 20:01:15 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=pr3lijo43zpb\u0026aqid=iTtqZZK6DODJxdwP3-Cz-A8\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=193\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=8%7C0%7C560%7C80%7C37\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww7.fwiwk.biz/dyusfwvlljjyjq?usid=23\u0026utid=5101018028","date":"2023-12-01T20:01:20.618Z","timestamp":1701460880618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=pr3lijo43zpb\u0026aqid=iTtqZZK6DODJxdwP3-Cz-A8\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=193\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=8%7C0%7C560%7C80%7C37\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww7.fwiwk.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-su4vTVjb3WRkh-GpFH2l9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 01 Dec 2023 20:01:15 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+532; expires=Sun, 30-Nov-2025 20:01:15 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-02T01:33:02.630323Z","times_seen":18226584,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww7.fwiwk.biz%3Fcaf%26usid%3D23%26utid%3D5101018028\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2348603269777440\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=7431701460877927\u0026num=0\u0026output=afd_ads\u0026domain_name=ww7.fwiwk.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460877930\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww7.fwiwk.biz%2Fdyusfwvlljjyjq%3Fusid%3D23%26utid%3D5101018028","date":"2023-12-01T20:01:18.469Z","timestamp":1701460878469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 01 Dec 2023 20:01:13 GMT\r\nexpires: Fri, 01 Dec 2023 20:01:13 GMT\r\ncache-control: private, max-age=3600\r\netag: \"3722365951821017964\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149606,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1888)","md5":"dd9a3b8aa7c3ee71293420c78d533d8a","sha1":"b69a3d5a4f6b61c5fdd3db5b86fbdb523ee5f771","sha256":"186613929472e8751503e597d47c60d27c81f74943f407c844600f77b461ebcc","sha512":"a3181048751cc63a0428d2a2a00d9c559a39d71102790566512fd06ceb1e5af9482bd3097e481713138897b6f7cfcb2b5ccf4935be3d8d098b76677009bc9537","ssdeep":"1536:crPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:32sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"48e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","first_seen":"2023-11-09T17:06:27Z","last_seen":"2023-12-07T21:10:03Z","times_seen":896,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}