{"report_id":"0ee8df6f-4ac5-4508-9044-62ef8cc8d3e0","version":6,"status":"done","tags":[],"date":"2023-12-31T19:11:22Z","url":{"schema":"https","addr":"unioneterna.com/scarica/","fqdn":"unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"81.17.29.147","port":0,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"http","addr":"ww1.unioneterna.com/","fqdn":"ww1.unioneterna.com","domain":"unioneterna.com","tld":"com"},"title":"Unioneterna.com"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T05:48:39Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"unioneterna.com","ip":{"addr":"81.17.18.198","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"domain_registered":"2023-05-08","domain_rank":0,"first_seen":"2021-03-21 05:27:57","last_seen":"2023-12-18 08:39:40","alert_count":2,"request_count":1,"received_data":376,"sent_data":490,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww1.unioneterna.com","ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-05-08","domain_rank":0,"first_seen":"2023-06-28 15:23:54","last_seen":"2023-12-31 05:12:49","alert_count":8,"request_count":4,"received_data":37048,"sent_data":1795,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"172.217.19.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-12-09 10:58:51","alert_count":0,"request_count":1,"received_data":57637,"sent_data":426,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.147.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2023-12-31 14:08:21","alert_count":0,"request_count":2,"received_data":2094,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"142.250.181.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2023-12-31 05:16:09","alert_count":0,"request_count":4,"received_data":166609,"sent_data":3116,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null}]},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol319%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol476\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.unioneterna.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2298147197369106\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=7031704049857088\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.unioneterna.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1704049857090\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=588056317\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=588056317\u0026rurl=http%3A%2F%2Fww1.unioneterna.com%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.181.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3a5944b0daf10ffd1a14e28a93956027","sha1":"ee47a46cc37a0b4d3200e891b82f139b52055033","sha256":"7f9d326a24cd98a82de419eeb7d8a09920178ea69f7ffe2b00817dd19f207f33","sha512":"d7b39e1b8a8bd9358c90ae3c20a06ddce56f55d37566270a202ff338a6f57bc949b0acbbc07ec140d245d7a3c0a6fa22de9d03cac63d2bb5f6104baa02aecf6c","ssdeep":"","tlshash":"ba01d3966eb40232d9eb01271d4f3fa018dd18712187254aa04d7cdd207efdf67290bb","size":659,"data":"","first_seen":"2024-08-20T14:27:39.785495Z","last_seen":"2024-08-20T14:27:39.785495Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.181.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3799d79e6fab08455cd6ba8a7ae71ef","sha1":"a1def8b8dbf5a89700ac0c316b0b919a4b773309","sha256":"4bf9c54918782690aa666357beab40c94fc009460b0aa5a95e182db59ace5d89","sha512":"83921d1c7cf5a52d205f454c6bb3c60d6c30785f08843f922ba429df71f88e9dfa1bd7d0bcc40ff5d9865e45bc175b63717c72bba4bd5e82c9467606f4ce4beb","ssdeep":"1536:Z6/bgOGuWJWPy7qnyteyuHUhtgYKtpGvKRPX0ogQZhe0z6BerfjcLsRglCgWIjyt:m4fJhvXQZhe0HroLAgWI29ial4nXMR","tlshash":"e3e35c9977a1702653a350b4603f168fb23af96ae84845f4f198c4e47cb8da81237f7d","size":149504,"data":"","first_seen":"2023-12-13T18:23:56Z","last_seen":"2024-08-20T15:56:31.071205Z","times_seen":1170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.unioneterna.com/","fqdn":"ww1.unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8341d0a4e4450117fa3b2d5baa8ab037","sha1":"230ca5c34ecee6ed4a8631ab972594432b063ec2","sha256":"9a99a5999af0c5dabdae6f2237ddf8d3fb3b25912ba8c4086adcbc4b707169e9","sha512":"7c4a518f49b69c3d83473f0f6ac0ff003ad78008cb025623b0e6f078d07e9eb490c6331b9834fdfa50f41d0de8b1bc99ac5e519b7943011ae6be09b08dfd3545","ssdeep":"","tlshash":"85e07d2f20396d9ce831280a16994f84af9b25e6585078c9e78044d785546db945c68f","size":311,"data":"","first_seen":"2024-08-20T14:27:39.786486Z","last_seen":"2024-08-20T14:27:39.786486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.unioneterna.com/bonbeWRbG.js","fqdn":"ww1.unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","size":32054,"data":"","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"abafa0849308459af6d9407e8113b991","sha1":"ce0b4e1c84fdae81f302e3944ffabe95922cdba6","sha256":"dba14e89fd4e3f93c81704e1dba22cb195387a59c91392a36e47a4dbbe75d798","sha512":"0715074eba2f8809b473189d6b941d54bc0a84796af7dac6cf029c48e911d75f74f7b0669e79902002b448511ffbee7ea53cce68fd8ad9c4af522dddeaad2709","ssdeep":"1536:S6/bgOGuWJWPy7qnyteyuHUhtgYKtpGvKRPX0ogQZhe0z6BerfjcLsRglCgWIjyt:H4fJhvXQZhe0HroLAgWI29ial4nXMR","tlshash":"52e35c9977a1702653a350b4603f168fb23af96ae84845f4f198c4e47cb8da81237f7d","size":149479,"data":"","first_seen":"2023-12-13T18:30:42Z","last_seen":"2024-08-20T15:56:30.274125Z","times_seen":2655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"unioneterna.com/scarica/","fqdn":"unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"81.17.18.198","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-31T19:10:55.009Z","timestamp":1704049855009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"unioneterna.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Oct 2023 14:35:39 GMT","end":"Thu, 11 Jan 2024 14:35:38 GMT"},"fingerprint":{"sha1":"35:DE:8D:FE:B8:EF:6C:7C:F2:25:F6:AC:D8:44:C4:05:67:B7:FD:A8","sha256":"7E:C9:2E:3E:CD:B5:BA:A8:BA:CD:53:00:D0:50:46:63:A8:1E:B0:B3:62:31:B0:05:C2:4D:0F:01:AD:48:6A:4F"}}},"request":{"raw":"GET /scarica/ HTTP/1.1\r\nHost: unioneterna.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Sun, 31 Dec 2023 19:10:56 GMT\r\nlocation: http://ww1.unioneterna.com\r\nserver: Cowboy\r\nset-cookie: sid=53517407-a810-11ee-813f-133e5514677b; path=/; domain=.unioneterna.com; expires=Fri, 18 Jan 2092 22:25:04 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":11,"size_decoded":11,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"32682312d17c7cbf18e73594f5570319","sha1":"60e22121bdd0bc71cdb2bae2a3aa577006b2eae9","sha256":"e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47","sha512":"68337debb9cd659cece621af582ae2bc4b56b9cf06b26c45f4d9eb8beb91d3f36bead287218b5aa2bb4853a1cf1a12017ca57318d7e12f489884fdc6b261dfc1","ssdeep":"","tlshash":"3550000030c0300c0000000c0000030003000000000c033f0c3003c00c000000000003","first_seen":"2023-04-05T04:09:22Z","last_seen":"2025-03-02T06:14:56.641448Z","times_seen":15034,"resource_available":false,"data":null}},"time_used":947,"timings":{"blocked":200,"dns":68,"connect":35,"send":0,"wait":545,"receive":1,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww1.unioneterna.com/","fqdn":"ww1.unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-31T19:10:55.759Z","timestamp":1704049855759,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww1.unioneterna.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 31 Dec 2023 19:10:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1029\r\nx-request-id: a78498f1-4794-431d-bcaf-4ad85041e9b9\r\ncache-control: no-store, max-age=0\r\naccept-ch: sec-ch-prefers-color-scheme\r\ncritical-ch: sec-ch-prefers-color-scheme\r\nvary: sec-ch-prefers-color-scheme\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_sjaTLmkHlUiGjCvzvlOxBn/k+pLGh1w1nYOieCZ3rBMlmNaUe39pjhCJHv991scMhPW9mF22FC4XN0WigujpMg==\r\nset-cookie: parking_session=a78498f1-4794-431d-bcaf-4ad85041e9b9; expires=Sun, 31 Dec 2023 19:25:57 GMT; path=/\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1029,"size_decoded":1029,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (326)","md5":"6bdd6f87095fff4673f5037e60f8fcc8","sha1":"afb7cab368394b207e9755465a381e2dce922ee8","sha256":"ecc0d3a76ed178858f730a3ebe9f731af11a2947ab1e267b11e7a0b85079a1fa","sha512":"ae06e56aee0a123009f16c2ad53834364d508d7700f6f7000a6eb787d2dc70f78791f6ee2f973952552a667a0dcec2e0fdef0e9917ab451fae0d4abfda27f47a","ssdeep":"","tlshash":"7f11a53b24359d0e68f10a152da4d70c8d1b2a8eaa807dc4bfdcc1768ac07d3e85e6dd","first_seen":"2024-08-20T14:27:39.776719Z","last_seen":"2024-08-20T14:27:39.776719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1062,"timings":{"blocked":430,"dns":430,"connect":1,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww1.unioneterna.com/bonbeWRbG.js","fqdn":"ww1.unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww1.unioneterna.com/","date":"2023-12-31T19:10:56.638Z","timestamp":1704049856638,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bonbeWRbG.js HTTP/1.1\r\nHost: ww1.unioneterna.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.unioneterna.com/\r\nCookie: parking_session=a78498f1-4794-431d-bcaf-4ad85041e9b9\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sun, 31 Dec 2023 19:10:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 32054\r\nx-request-id: 4167355b-e70d-4480-b329-facdf1b3c20b\r\nset-cookie: parking_session=a78498f1-4794-431d-bcaf-4ad85041e9b9; expires=Sun, 31 Dec 2023 19:25:58 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32054,"size_decoded":32054,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32051)","md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww1.unioneterna.com/_fd","fqdn":"ww1.unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww1.unioneterna.com/","date":"2023-12-31T19:10:56.773Z","timestamp":1704049856773,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_fd HTTP/1.1\r\nHost: ww1.unioneterna.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww1.unioneterna.com/\r\nContent-Type: application/json\r\nOrigin: http://ww1.unioneterna.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=a78498f1-4794-431d-bcaf-4ad85041e9b9\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Sun, 31 Dec 2023 19:10:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 2086\r\nx-version: 2.110.6\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=a78498f1-4794-431d-bcaf-4ad85041e9b9; expires=Sun, 31 Dec 2023 19:25:58 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2086,"size_decoded":4029,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4029), with no line terminators","md5":"148d5ef6a6689a3df32199718ccbf54a","sha1":"d3777c44c7e81f89628bc7531147ad084d15123d","sha256":"12d5d41a3d4089fa1f317a6d324bdda259fffd6a3a5c03dd5b926e584a992998","sha512":"581ab5ccf59c005ebb8741e0dc0ada27c5fe375e0ad299f293d24726437d19b8ffb90830564acfec121e1f1820cf745cbe0025addfe46eca5537dc94979e7a08","ssdeep":"","tlshash":"db81b6bb0d5d7e9ceb52820320de85d5521d17c72cc2544a8a2ea3cbdb5951e35e433a","first_seen":"2024-08-20T14:27:39.778648Z","last_seen":"2024-08-20T14:27:39.778648Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.19.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww1.unioneterna.com/","date":"2023-12-31T19:10:56.915Z","timestamp":1704049856915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:09:47 GMT","end":"Mon, 12 Feb 2024 08:09:46 GMT"},"fingerprint":{"sha1":"50:3E:DA:12:EC:7F:39:A5:E9:4F:16:D7:D6:AA:BF:45:15:44:7F:E9","sha256":"98:2D:C0:52:3D:84:7D:B5:89:AE:22:3E:DD:D8:37:86:72:79:D7:32:40:D6:03:55:D8:A6:F1:70:53:DF:48:95"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.unioneterna.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 31 Dec 2023 19:10:58 GMT\r\nexpires: Sun, 31 Dec 2023 19:10:58 GMT\r\ncache-control: private, max-age=3600\r\netag: \"4119344319494620179\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56787,"size_decoded":56787,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression","md5":"18d7c18f4f67f089b77b3af92962496a","sha1":"0de5db339b4ccd6ae628875d27505d9034456505","sha256":"967a4bf431f8c7ee5b6284bd9149be0e7f9d51b868bad928678e26e4e7a0c22c","sha512":"23b6dbf73cc75af5ddc253a3dee3bc9530db8896f7230e7489215b100a8c9da7629d7c113318aa109a4334a4c71093eb3bb2de06fe716bb649132a94a51aeed8","ssdeep":"1536:C64nK6FMx9FI8hbbkI2U8fLVqCq8ucGPwvbt8aa6d6:C64npMxUYbbknU8TrnuciwpXu","tlshash":"3443f19da7b3408c0b57d33ab913e3fab40465aa97b640fb3471d64488f4c70a14bb6e","first_seen":"2024-08-20T14:27:39.779793Z","last_seen":"2024-08-20T14:27:39.779793Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":65,"dns":1,"connect":26,"send":0,"wait":32,"receive":39,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.147.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol319%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol476\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.unioneterna.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2298147197369106\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=7031704049857088\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.unioneterna.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1704049857090\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=588056317\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=588056317\u0026rurl=http%3A%2F%2Fww1.unioneterna.com%2F","date":"2023-12-31T19:10:57.718Z","timestamp":1704049857718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:08:31 GMT","end":"Mon, 12 Feb 2024 08:08:30 GMT"},"fingerprint":{"sha1":"17:E3:6E:DB:3C:C4:0E:B4:6D:D3:55:1A:70:F8:0B:23:86:54:69:D8","sha256":"9D:AE:60:BC:89:F8:54:D0:F1:1F:5E:48:9A:25:49:AB:1A:A0:0F:CE:41:C5:74:F8:71:DA:4E:13:BE:F5:F7:CE"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 Dec 2023 14:57:28 GMT\r\nexpires: Mon, 01 Jan 2024 13:57:28 GMT\r\ncache-control: public, max-age=82800\r\nage: 15211\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":444,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe7dd8c3c629cc6e9cd6d3e4d3cbe905","sha1":"59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18","sha256":"5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e","sha512":"1c663e07978d95c838aed54421a9c725d7311b8c002f436b30555affb26c25f6ebecff6af5c54ef112370a36a5f5aadf611304bffe76a59fb3d206e943cf153f","ssdeep":"","tlshash":"eff055bcd2ad4914a608c7017ef8a5174066f0c563cc01ceee81ac69f0614e43a63ade","first_seen":"2023-04-07T08:14:08Z","last_seen":"2026-05-03T16:41:57.827597Z","times_seen":69546,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":77,"dns":21,"connect":22,"send":0,"wait":23,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.147.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol319%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol476\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.unioneterna.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2298147197369106\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=7031704049857088\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.unioneterna.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1704049857090\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=588056317\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=588056317\u0026rurl=http%3A%2F%2Fww1.unioneterna.com%2F","date":"2023-12-31T19:10:57.719Z","timestamp":1704049857719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:08:31 GMT","end":"Mon, 12 Feb 2024 08:08:30 GMT"},"fingerprint":{"sha1":"17:E3:6E:DB:3C:C4:0E:B4:6D:D3:55:1A:70:F8:0B:23:86:54:69:D8","sha256":"9D:AE:60:BC:89:F8:54:D0:F1:1F:5E:48:9A:25:49:AB:1A:A0:0F:CE:41:C5:74:F8:71:DA:4E:13:BE:F5:F7:CE"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 31 Dec 2023 15:15:03 GMT\r\nexpires: Mon, 01 Jan 2024 14:15:03 GMT\r\ncache-control: public, max-age=82800\r\nage: 14156\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":83,"dns":22,"connect":27,"send":0,"wait":23,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.unioneterna.com/_tr","fqdn":"ww1.unioneterna.com","domain":"unioneterna.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww1.unioneterna.com/","date":"2023-12-31T19:10:57.774Z","timestamp":1704049857774,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww1.unioneterna.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww1.unioneterna.com/\r\nContent-Type: application/json\r\nContent-Length: 1613\r\nOrigin: http://ww1.unioneterna.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=a78498f1-4794-431d-bcaf-4ad85041e9b9\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Sun, 31 Dec 2023 19:10:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 22\r\nx-version: 2.110.6\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=a78498f1-4794-431d-bcaf-4ad85041e9b9; expires=Sun, 31 Dec 2023 19:25:59 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":2,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-08T15:52:29.26017Z","times_seen":407869,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"mnemonic_dns","sensor_type":"domain","title":"","description":"mnemonic secure dns","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://mnemonic.io","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-31","alert":"Sinkholed","trigger":"unioneterna.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=8ney15oc3n2y\u0026aqid=wryRZYaZJZL0mLAPhaWZmA4\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=588056317\u0026csala=5%7C0%7C466%7C106%7C21\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.181.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww1.unioneterna.com/","date":"2023-12-31T19:10:59.189Z","timestamp":1704049859189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:03:51 GMT","end":"Mon, 12 Feb 2024 08:03:50 GMT"},"fingerprint":{"sha1":"CC:43:B8:B1:97:47:17:A9:AD:50:52:49:F8:17:A6:48:24:6F:9D:79","sha256":"70:D1:19:EB:67:FB:D4:DE:F2:0E:81:C6:15:EC:3F:4C:84:AF:F1:99:D2:60:5F:79:64:A5:A7:E9:9F:60:55:4D"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=8ney15oc3n2y\u0026aqid=wryRZYaZJZL0mLAPhaWZmA4\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=588056317\u0026csala=5%7C0%7C466%7C106%7C21\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.unioneterna.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Aw92rLWYuTpazmU5zpTeCg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 31 Dec 2023 19:11:00 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+452; expires=Tue, 30-Dec-2025 19:11:00 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=laa3yj37zhsn\u0026aqid=wryRZYaZJZL0mLAPhaWZmA4\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=588056317\u0026csala=5%7C0%7C466%7C106%7C21\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.181.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww1.unioneterna.com/","date":"2023-12-31T19:10:59.691Z","timestamp":1704049859691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:03:51 GMT","end":"Mon, 12 Feb 2024 08:03:50 GMT"},"fingerprint":{"sha1":"CC:43:B8:B1:97:47:17:A9:AD:50:52:49:F8:17:A6:48:24:6F:9D:79","sha256":"70:D1:19:EB:67:FB:D4:DE:F2:0E:81:C6:15:EC:3F:4C:84:AF:F1:99:D2:60:5F:79:64:A5:A7:E9:9F:60:55:4D"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=laa3yj37zhsn\u0026aqid=wryRZYaZJZL0mLAPhaWZmA4\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=588056317\u0026csala=5%7C0%7C466%7C106%7C21\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.unioneterna.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-c-pw4HGalM_BKUJoxLq_gw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 31 Dec 2023 19:11:01 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+203; expires=Tue, 30-Dec-2025 19:11:01 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T15:53:20.525245Z","times_seen":14844059,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.181.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol319%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol476\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.unioneterna.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2298147197369106\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=7031704049857088\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.unioneterna.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1704049857090\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=588056317\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=588056317\u0026rurl=http%3A%2F%2Fww1.unioneterna.com%2F","date":"2023-12-31T19:10:57.556Z","timestamp":1704049857556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:03:51 GMT","end":"Mon, 12 Feb 2024 08:03:50 GMT"},"fingerprint":{"sha1":"CC:43:B8:B1:97:47:17:A9:AD:50:52:49:F8:17:A6:48:24:6F:9D:79","sha256":"70:D1:19:EB:67:FB:D4:DE:F2:0E:81:C6:15:EC:3F:4C:84:AF:F1:99:D2:60:5F:79:64:A5:A7:E9:9F:60:55:4D"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 31 Dec 2023 19:10:58 GMT\r\nexpires: Sun, 31 Dec 2023 19:10:58 GMT\r\ncache-control: private, max-age=3600\r\netag: \"4919391341535188679\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149504,"size_decoded":149504,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1888)","md5":"d3799d79e6fab08455cd6ba8a7ae71ef","sha1":"a1def8b8dbf5a89700ac0c316b0b919a4b773309","sha256":"4bf9c54918782690aa666357beab40c94fc009460b0aa5a95e182db59ace5d89","sha512":"83921d1c7cf5a52d205f454c6bb3c60d6c30785f08843f922ba429df71f88e9dfa1bd7d0bcc40ff5d9865e45bc175b63717c72bba4bd5e82c9467606f4ce4beb","ssdeep":"1536:Z6/bgOGuWJWPy7qnyteyuHUhtgYKtpGvKRPX0ogQZhe0z6BerfjcLsRglCgWIjyt:m4fJhvXQZhe0HroLAgWI29ial4nXMR","tlshash":"e3e35c9977a1702653a350b4603f168fb23af96ae84845f4f198c4e47cb8da81237f7d","first_seen":"2023-12-13T18:23:56Z","last_seen":"2024-08-20T15:56:31.071205Z","times_seen":1170,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol319%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol476\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.unioneterna.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2298147197369106\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=7031704049857088\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.unioneterna.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1704049857090\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=588056317\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=588056317\u0026rurl=http%3A%2F%2Fww1.unioneterna.com%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.181.206","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww1.unioneterna.com/","date":"2023-12-31T19:10:57.100Z","timestamp":1704049857100,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 20 Nov 2023 08:03:51 GMT","end":"Mon, 12 Feb 2024 08:03:50 GMT"},"fingerprint":{"sha1":"CC:43:B8:B1:97:47:17:A9:AD:50:52:49:F8:17:A6:48:24:6F:9D:79","sha256":"70:D1:19:EB:67:FB:D4:DE:F2:0E:81:C6:15:EC:3F:4C:84:AF:F1:99:D2:60:5F:79:64:A5:A7:E9:9F:60:55:4D"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol319%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol476\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.unioneterna.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2298147197369106\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=7031704049857088\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.unioneterna.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1704049857090\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=588056317\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=588056317\u0026rurl=http%3A%2F%2Fww1.unioneterna.com%2F HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.unioneterna.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Sun, 31 Dec 2023 19:10:58 GMT\r\nexpires: Sun, 31 Dec 2023 19:10:58 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-vX9I_np_GJR01HkIq5pSHQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2503\r\nx-xss-protection: 0\r\nset-cookie: CONSENT=PENDING+164; expires=Tue, 30-Dec-2025 19:10:58 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13594,"size_decoded":13594,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (12990)","md5":"ed5c3af0a829965b23698009c29534bb","sha1":"a80860268943130a886c2799d27f889e3181e3f9","sha256":"2317247c335edaedb007d32789abff714783c59124c23d1e2b4889540e0b95b1","sha512":"890da5f2c9f9b40a8f9564292ff93ce9c63886b3e4636bbf95047a9f3eeded873cda350eda855848a102439953ff03bf1a35c669514bcd47a84ee720267a0236","ssdeep":"96:GE/yk2iwlb5lphMzTronSc90IMvm0yEM6vfNYrWfPaMmaM8Dfw9eDEPvysM8D3wa:GE12ikpBn9+m0yEMcfWrnMmRyTT7kl","tlshash":"4952423770a227294507dc541b296f6dd191d43ac4ab31e948a35f25c7ebf828fe228e","first_seen":"2024-08-20T14:27:39.784457Z","last_seen":"2024-08-20T14:27:39.784457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":83,"dns":19,"connect":26,"send":0,"wait":125,"receive":2,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}