{"report_id":"1d7580bf-d6a1-41c5-b993-bf0896539238","version":6,"status":"done","tags":[],"date":"2024-06-25T07:08:02Z","url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"title":"verifytocontinue.com"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T12:09:55Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-06-24 18:13:10","alert_count":0,"request_count":4,"received_data":3549,"sent_data":1308,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww12.verifytocontinue.com","ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-01-20","domain_rank":0,"first_seen":"2024-01-21 03:19:57","last_seen":"2024-04-12 23:06:24","alert_count":5,"request_count":5,"received_data":8668,"sent_data":2401,"comment":"","tags":null,"fingerprints":null},{"fqdn":"parking.parklogic.com","ip":{"addr":"67.225.218.50","port":80,"asn":32244,"as":"LIQUIDWEB","country":"United States","country_code":"US"},"domain_registered":"2007-02-28","domain_rank":121827,"first_seen":"2015-10-23 03:38:08","last_seen":"2024-06-23 18:38:58","alert_count":0,"request_count":2,"received_data":2351,"sent_data":926,"comment":"","tags":null,"fingerprints":null},{"fqdn":"d38psrni17bvxu.cloudfront.net","ip":{"addr":"18.239.102.108","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2022-09-22 18:48:38","last_seen":"2024-06-24 18:10:06","alert_count":0,"request_count":1,"received_data":11814,"sent_data":405,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.164","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2024-06-23 18:20:47","alert_count":0,"request_count":1,"received_data":74814,"sent_data":358,"comment":"","tags":null,"fingerprints":null},{"fqdn":"o.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":0,"first_seen":"2024-04-24 13:44:57","last_seen":"2024-06-24 18:14:39","alert_count":0,"request_count":4,"received_data":2800,"sent_data":1300,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2024-06-24 18:34:55","alert_count":0,"request_count":4,"received_data":196342,"sent_data":3603,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2024-06-24 20:35:36","alert_count":0,"request_count":2,"received_data":2086,"sent_data":995,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c77554570ae0fa8e4fb31747dc213058","sha1":"e989fbde07e6a68975c7a31e1d4df76afd90b96f","sha256":"c3f831fe1717c6d76a8950ac5e7dc88ceee7440d079b11584be5c6c5b3269e77","sha512":"130189a67dea3f0d7ba0591ffbff46f37993ae8b07409e84dfb571f6d31f1b20f97cf76b7cd0751450eec5f294906f95fd35f3dfa37d58bc80433f4c9b4064a9","ssdeep":"","tlshash":"171148b58c9b942f6b37592fa69a72816c41a1179c013a18b14cc7302fdc71d6470bf6","size":968,"data":"","first_seen":"2023-03-08T02:24:08Z","last_seen":"2026-01-15T16:13:58.011798Z","times_seen":181951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2f648ce8b6ac45404ebfd480c058ef6","sha1":"02bdf922b6e486ca38f4ef3cc392f9b1100f76e8","sha256":"4b9a6879529279f51050d27ba0fcfafe29cb6c6182316acd4d09dadd2b5c482d","sha512":"3d7c93b2e1a21cd2b38d2cf0dd4c88a4868be1b2f0d8d69a2a58fa0299326a0459b0e06d1cd4b28e959059a223aa87d3639489c6c9e09e36d51bd039e7eb7a04","ssdeep":"192:0AFgMPivNB0S8DCV26EHi3DCtkraarTWHUvgPMTJP3pikL5XiXh:0m6vNB0S2A26EHeDCtkGarTuUI0d/pi5","tlshash":"b702c8b2594219364edf324edebad61de49dfa13a83f7472f066c184238090ed5253f8","size":8290,"data":"","first_seen":"2024-08-19T18:58:37.137434Z","last_seen":"2024-08-19T18:58:37.137434Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"747da511cd2d0982a5f599c6a11be11d","sha1":"fb2c48ddae2cb1aeecbedf969ad8d82906c61dba","sha256":"1382d02fa25bd936b849c7801973f022689adc3ea488616b020ab4f11d162b60","sha512":"ae101d2015e0601d36fdbcd38a47329ff68cf57fb4d5efcf95b13152ebd8ec62efb45e914e320f83279afec7c6f4a7771e4dc121d9c55ee05af375a2c4dd8a5c","ssdeep":"","tlshash":"21018b4428e430f5864271fa8d4fc0097938940711058e513a2c63d51f9803dc7aaff9","size":669,"data":"","first_seen":"2024-08-19T18:58:37.138214Z","last_seen":"2024-08-19T18:58:37.138214Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"53d0dd97ba61304ca54789b815e61272","sha1":"6c736ccfa75ef3781c16c50a7734b7e48e13627b","sha256":"bf501fe693bbbfdd3cc98546a1aad9f6111ac826f59ef1ee37da5101497dc9b7","sha512":"93f5b822a6985e8391db74dda8496758bf81bb2a94653741ce036753db62cdcc012ef4794156d6ab2bd613be0bda33f50489f68743d196edd04183ea684256df","ssdeep":"","tlshash":"06900450047103470d430054554c5051cc35d5151751413d137344730351c30d011405","size":40,"data":"","first_seen":"2024-05-06T14:00:02Z","last_seen":"2025-09-14T05:32:32.130972Z","times_seen":28583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"parking.parklogic.com/page/enhance.js?pcId=12\u0026domain=verifytocontinue.com","fqdn":"parking.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"67.225.218.50","port":80,"asn":32244,"as":"LIQUIDWEB","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e27c06d93d0d9aa9fde51856ea8edc1","sha1":"048e810188a12462033674bd1c952b0dc35200fe","sha256":"39e8acf416c8d87b721923689b35817f71d6f1cd0d1aa4d1da90d9307b4fedc8","sha512":"8564fe9d1790ef4e7092a76be9492ef7fe26a7aab0dfebec3ac1e3ee26965f5b454f4384db8fcc9d6b1f6247de15097717c73939a18aeeddb1540e61fac9c343","ssdeep":"","tlshash":"4031850ea8604670a5911c7dba7536252e37f2863312d3616e1dc5815d8ee0fc3737ab","size":1741,"data":"","first_seen":"2024-06-25T06:57:50Z","last_seen":"2024-08-19T18:59:03.305233Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18f2edc58d8a7b9e6b82454e8658c157","sha1":"e5dfdd0fa61b3a5ef68dab382a0ba93e9e7b67fb","sha256":"2d9b07a0704d92dda4deae88bc582aeb659923c8d44d0e7362e13cb28d88d250","sha512":"21505594429d2550843f79a1b5aa1555f5f9cac9ae8c281ab5cf48bb5831e39075e826ce61837ad3d6a7ad9a1fb227963eae6e2186b388c9af611e35a0f46f92","ssdeep":"","tlshash":"88f0659805f622d326aa60584df6eb0375a09023a20555c4fa7ca3119f5bc5702ddb8a","size":483,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.022487Z","times_seen":185093,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f300e1eab6ce0b92c17d897bbe3dfd0","sha1":"e12df0d0158559f07514beae389761094c0cdced","sha256":"8e724380efc4dc7a14a7e7a26cf2c059453f1dc0bda3eeb5559ff58aa4b766d8","sha512":"387d9656f5ed33221d767836aa1071a115e5a69b7b15af1593b70ba99cadfb816f82ca4f4d90db5bb5d1c22b52c700dc4628846b459d78ad10c9a48f27534155","ssdeep":"3072:5GA1V2YNrqHtLzlHGX38XqXGRkCQvmDulhn:5bj2ZpzlHYX6klvmilV","tlshash":"2b047dd9b2b57026579398a0902f464fb236fc15e849c1b8f089d4e5bcb9da84373f78","size":190320,"data":"","first_seen":"2024-06-13T07:52:59Z","last_seen":"2024-08-19T20:09:07.953178Z","times_seen":651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww12.verifytocontinue.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjdhNmNiOTg2ZGJhfHx8MTcxOTI5OTI1Ny41OTAyfDVhMTQzNmRkMTY1YjIwZDQ3ZjFlMDg2MWE0ZGM5ZTJiNTMxODMwODN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDQwZWVhYjUxZmY3NmYxZGE4ZWU5MWQwN2YxNjViMjhkNzExMjE4ZmJ8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHx8\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2758074928654248\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301504%2C17301509\u0026client_gdprApplies=1\u0026format=r3%7Cs\u0026nocache=1281719299258530\u0026num=0\u0026output=afd_ads\u0026domain_name=ww12.verifytocontinue.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1719299258533\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=814\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=641883529\u0026rurl=http%3A%2F%2Fww12.verifytocontinue.com%2Fgo%2F8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c3cdb01813818a2480056c20ac38442d","sha1":"ce6e08e4d4c0bcc467de4caa8fdae077d2504641","sha256":"ba67fb15c82c26e5368561a58cf2b8cf8431f0c64a4ecc89c83ee3c0aef0976f","sha512":"99bfcaeb89677a3ff7b27d3f72a0278f2cc3cdcb1a4a41c2702ac446cb0e54a1b1166d500180f98cde1323b73fced1566da013cc60efafb3c12d4fbdaf525a24","ssdeep":"","tlshash":"8b111ca24c380631de771124182f7b91585e253122ca3609f54dadda30bce9faa181bb","size":926,"data":"","first_seen":"2024-08-19T18:58:37.140997Z","last_seen":"2024-08-19T18:58:37.140997Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"987b5535588b2688014f028eda7dfbe6","sha1":"57a205b6dea29289a369088e7f9cfad6e875c64d","sha256":"22e0575e88ca323362074670a19dfaf03b54a81d7e2ae2106160e20a8403937a","sha512":"44e57249248664ffbf4d97d5d3add9c4a7aa5a6e652fce3fb4caa127114b217ed26437b4800133682349150a00c232725567eab0c3fee8b2ab6cf5e8ddbdf59b","ssdeep":"3072:4GA1V2YNrqHtLzlHGX38XqXGRkCQvmDulhn:4bj2ZpzlHYX6klvmilV","tlshash":"c5047dd9b2b57026579398a0902f464fb236fc15e849c1b8f089d4e5bcb9da84373f78","size":190336,"data":"","first_seen":"2024-06-13T11:54:57Z","last_seen":"2024-08-19T20:08:30.046822Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b334e0123cf0cb113092022fb726782","sha1":"45abb42a6680499daa10d83d2859329de1843de2","sha256":"42591f96b9a41a7e2e5ecd0240dd7fecdcf03ef8454b57c68f08697474a4b579","sha512":"867e061d0f593815a87259d55d960e2000b776954b080157deabbf46850d7530b770d3d31abf6b901aee50bed5fa395be2ce4a6a075b703d07ff7c7c7b7d5cf6","ssdeep":"","tlshash":"6290040115134057505d05134375c101d5504c3f5005d531751c07435f1045f170075c","size":50,"data":"","first_seen":"2024-01-04T10:26:15Z","last_seen":"2026-01-15T16:13:58.023216Z","times_seen":184974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:36.74835052Z","timestamp":1719299256748,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"F661A4C5B81EDB82EC095D2D50B655E19536630577352B6ABBFC3962ADF3454C\"\r\nLast-Modified: Sun, 23 Jun 2024 01:53:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8162\r\nExpires: Tue, 25 Jun 2024 09:23:38 GMT\r\nDate: Tue, 25 Jun 2024 07:07:36 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"116d4d1edb43ea3783c92812f245f108","sha1":"02c09fc6450c50f5d2f7f6162fed01cf2c4bf6b8","sha256":"f661a4c5b81edb82ec095d2d50b655e19536630577352b6abbfc3962adf3454c","sha512":"f0a634e57794959630347a12281aea2ee67104b5287a3c468e491da7421b1deb933a82170f98525872fe67647b70b9536ed0249204107c19e10188bbdf38a37f","ssdeep":"","tlshash":"79f0057d017a7751f224151529e8d6645e40de953d0517a1b56010d3b026ffd4190089","first_seen":"2024-06-23T05:49:43Z","last_seen":"2024-08-19T19:08:18.438208Z","times_seen":25208,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:37.159219969Z","timestamp":1719299257159,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"D01CB238CF68EFECDCE74166A560DCF6989862AB6ADF726A764DEABB4F8EF017\"\r\nLast-Modified: Mon, 24 Jun 2024 23:47:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=8239\r\nExpires: Tue, 25 Jun 2024 09:24:56 GMT\r\nDate: Tue, 25 Jun 2024 07:07:37 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"a0df476aabc83408676a1db571e8e885","sha1":"a8522ed457ae3e068d543d0c52e3d041a14e8f72","sha256":"d01cb238cf68efecdce74166a560dcf6989862ab6adf726a764deabb4f8ef017","sha512":"542c9ba9d6eb79c8effe2628831c14e35c9734fe921188efd7d5853a2c0aae6e8eb5222a449893aa0361528dc4d2319dc28de6ed80ed8983cf967a171a1a5db4","ssdeep":"","tlshash":"9ef0055b23e2bd84b2b43f453ca6d71067046de43d08c1ece0d8d28734467fb4185414","first_seen":"2024-06-25T03:17:19Z","last_seen":"2024-08-19T18:59:50.373817Z","times_seen":2603,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:37.453597616Z","timestamp":1719299257453,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"D4178B58A3BA98404F5136DD600E8EE69CD3A669237D75CB632C1234EF647CBC\"\r\nLast-Modified: Mon, 24 Jun 2024 16:21:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3042\r\nExpires: Tue, 25 Jun 2024 07:58:19 GMT\r\nDate: Tue, 25 Jun 2024 07:07:37 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"b759b7db0b1e744941c094170ce2d69d","sha1":"455ac12d34df1d589a07c8e8c6403be6484d0a04","sha256":"d4178b58a3ba98404f5136dd600e8ee69cd3a669237d75cb632c1234ef647cbc","sha512":"a688cb1e2951301a14cff0c187bf534aaf7bc90d5868413f59d899e4b00e2d2ccd5417f01d4e0644bc73b1f3dc854486dc76a201efbc365a2b74c32c9c5e5b51","ssdeep":"","tlshash":"c4f00e5336b2be8005592b0a3849d627ad20abfcf00024cac8a063d155f6bfe9bc044e","first_seen":"2024-06-25T04:03:28Z","last_seen":"2024-08-19T18:59:41.647539Z","times_seen":3027,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-06-25T07:07:37.435Z","timestamp":1719299257435,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc HTTP/1.1\r\nHost: ww12.verifytocontinue.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 25 Jun 2024 07:07:37 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Buckets: bucket003\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_NuFFlr9ugLTvEztDRcjmspu/zN+LkARfNOBwtnCKqR9X6Legx70zzAJ9tE10wwluJaV0Xa7mfhjcv4sOmZLWbQ==\r\nX-Template: tpl_CleanPeppermintBlack_twoclick\r\nX-Language: norwegian\r\nAccept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-CH-Lifetime: 30\r\nX-Domain: verifytocontinue.com\r\nX-Subdomain: ww12\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5990,"size_decoded":15923,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (8330)","md5":"6c3afa728eac9684029c5f54296f32b6","sha1":"35f146dfe1c607a9dc52b5c4b9cd4155840200d8","sha256":"f60d705b2bc201b276ce42766be33ff27ea8fc6959654b7ccd1bc26c060eec80","sha512":"3a6ffa19763fcc15c0a03ba08dbed51b833b3c3903b8f09b5e02adaa252829f074fef4ea5e6c78e7402462d158ef57e352bd9d4e018e4c18b52433620c449458","ssdeep":"384:Ti4YoHMfOTD8WpVm6vNB0S2A26EHeDCtkGarTuUI0d/pik1SvsRu6:TiuMfifVdwuEHSCtkGarTuUI0d/wk1Sk","tlshash":"c26218a25cd3283a1ddf205dcfbae219b48cf1139a1bd871f49cd2a41f88a4d95317b8","first_seen":"2024-08-19T18:58:37.124548Z","last_seen":"2024-08-19T18:58:37.124548Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":21,"dns":1,"connect":20,"send":0,"wait":189,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"parking.parklogic.com/page/enhance.js?pcId=12\u0026domain=verifytocontinue.com","fqdn":"parking.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"67.225.218.50","port":80,"asn":32244,"as":"LIQUIDWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:37.820Z","timestamp":1719299257820,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /page/enhance.js?pcId=12\u0026domain=verifytocontinue.com HTTP/1.1\r\nHost: parking.parklogic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 25 Jun 2024 07:07:37 GMT\r\nServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9\r\nX-Powered-By: PHP/5.4.16\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/javascript\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1741,"size_decoded":1741,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (405)","md5":"3e27c06d93d0d9aa9fde51856ea8edc1","sha1":"048e810188a12462033674bd1c952b0dc35200fe","sha256":"39e8acf416c8d87b721923689b35817f71d6f1cd0d1aa4d1da90d9307b4fedc8","sha512":"8564fe9d1790ef4e7092a76be9492ef7fe26a7aab0dfebec3ac1e3ee26965f5b454f4384db8fcc9d6b1f6247de15097717c73939a18aeeddb1540e61fac9c343","ssdeep":"","tlshash":"4031850ea8604670a5911c7dba7536252e37f2863312d3616e1dc5815d8ee0fc3737ab","first_seen":"2024-06-25T06:57:50Z","last_seen":"2024-08-19T18:59:03.305233Z","times_seen":2,"resource_available":true,"data":null}},"time_used":362,"timings":{"blocked":115,"dns":1,"connect":121,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/track.php?domain=verifytocontinue.com\u0026toggle=browserjs\u0026uid=MTcxOTI5OTI1Ny41NTI0OjE2NGIyNWUyMzgwMzVjMTA5ZDdjYWUyMmE2YzBkOGE0ZjgxMTAwZDM2MTg4Zjg3MjNkZjdiYjgxZjNiOGI4MmU6NjY3YTZjYjk4NmRlNw%3D%3D","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:38.087Z","timestamp":1719299258087,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /track.php?domain=verifytocontinue.com\u0026toggle=browserjs\u0026uid=MTcxOTI5OTI1Ny41NTI0OjE2NGIyNWUyMzgwMzVjMTA5ZDdjYWUyMmE2YzBkOGE0ZjgxMTAwZDM2MTg4Zjg3MjNkZjdiYjgxZjNiOGI4MmU6NjY3YTZjYjk4NmRlNw%3D%3D HTTP/1.1\r\nHost: ww12.verifytocontinue.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 25 Jun 2024 07:07:38 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Custom-Track: browserjs\r\nAccept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-CH-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"parking.parklogic.com/page/scribe.php?pcId=12\u0026domain=verifytocontinue.com\u0026pId=2447\u0026usid=null\u0026utid=null\u0026query=null\u0026domainJs=ww12.verifytocontinue.com\u0026path=/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc\u0026ss=true\u0026lp=1","fqdn":"parking.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"67.225.218.50","port":80,"asn":32244,"as":"LIQUIDWEB","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:38.073Z","timestamp":1719299258073,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /page/scribe.php?pcId=12\u0026domain=verifytocontinue.com\u0026pId=2447\u0026usid=null\u0026utid=null\u0026query=null\u0026domainJs=ww12.verifytocontinue.com\u0026path=/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc\u0026ss=true\u0026lp=1 HTTP/1.1\r\nHost: parking.parklogic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww12.verifytocontinue.com/\r\nOrigin: http://ww12.verifytocontinue.com\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 25 Jun 2024 07:07:38 GMT\r\nServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9\r\nX-Powered-By: PHP/5.4.16\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":46,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text","md5":"1c9c8a0138ed611d1a1f1615e18dfe71","sha1":"6cd16376531f4c575df9b59abda36109fd38c683","sha256":"ee564a9b428b6c25099ec699bf6dd357fb97160372696361dd0eda70ab42523f","sha512":"0167353120d428af5d5934d6f37e12508354e5c75210c5df1216ac0c99b5c25fc05229162c3da67acc3db4b10e3a11f6e33b24cc8cb3fc5908b04b3b121264ca","ssdeep":"","tlshash":"2d900248841685667854054249160e0922359110d000d7a1440d45b281c801c6611750","first_seen":"2024-02-12T22:38:14Z","last_seen":"2024-08-20T09:47:53.458662Z","times_seen":314,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":124,"dns":1,"connect":123,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/ls.php?t=667a6cb9\u0026token=40eeab51ff76f1da8ee91d07f165b28d711218fb","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:38.223Z","timestamp":1719299258223,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /ls.php?t=667a6cb9\u0026token=40eeab51ff76f1da8ee91d07f165b28d711218fb HTTP/1.1\r\nHost: ww12.verifytocontinue.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 201 Created\r\nDate: Tue, 25 Jun 2024 07:07:38 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nAccept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-CH-Lifetime: 30\r\nX-Log-Success: 667a6cbaeb2693693e003a86\r\nCharset: utf-8\r\nAccess-Control-Allow-Origin: \r\nAccess-Control-Allow-Methods: POST, OPTIONS\r\nAccess-Control-Max-Age: 86400\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_rwiudhrFS3IMI9GzQoYivajQVZz04XeZYY2V1BpnLwT1x+jMGNJsugEvZ7faocd/rhv2k7kPZdccuO+ClpoFRg==\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":null,"data":{"size":16,"size_decoded":16,"mime_type":"text/javascript; charset=UTF-8","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-04-22T22:11:12.259369Z","times_seen":123156,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png","fqdn":"d38psrni17bvxu.cloudfront.net","domain":"d38psrni17bvxu.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"18.239.102.108","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:38.370Z","timestamp":1719299258370,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1\r\nHost: d38psrni17bvxu.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: image/png\r\nContent-Length: 11375\r\nConnection: keep-alive\r\nServer: nginx\r\nDate: Mon, 24 Jun 2024 17:27:20 GMT\r\nLast-Modified: Thu, 21 Mar 2024 11:48:11 GMT\r\nAccept-Ranges: bytes\r\nETag: \"65fc1e7b-2c6f\"\r\nX-Cache: Hit from cloudfront\r\nVia: 1.1 0ce4e0ab92519d33ff3c6cca42806b7e.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: AMS1-P3\r\nX-Amz-Cf-Id: sTFF6t2nxX3hzTkgoGKj-ekp2t_v-KgRFTLzQjJViuCXuYloiM5Dsw==\r\nAge: 49218\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11375,"size_decoded":11375,"mime_type":"image/png","magic":"PNG image data, 1500 x 600, 8-bit colormap, non-interlaced","md5":"0cb2e5165dc9324eb462199f04e1ffa9","sha1":"9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8","sha256":"67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865","sha512":"7a285c4a87b9f9093b7ba720d8fe08e0ad7e2ebde9ef8c8d11b70afa08245af8f8a7281c7b3fbe8bad21c3afde4f32634d3bd416822892aa47ba82c12f4b8191","ssdeep":"192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/","tlshash":"94329f86e207c9addc119cb16bd8e9384c673cc3c66925b748987669e4bb80475f049f","first_seen":"2023-04-05T14:20:44Z","last_seen":"2026-04-22T08:34:31.791617Z","times_seen":205207,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":14,"dns":50,"connect":16,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026adsdeli=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":80,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:38.368Z","timestamp":1719299258368,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026adsdeli=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Type: text/javascript; charset=UTF-8\r\nContent-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\nCross-Origin-Resource-Policy: cross-origin\r\nCross-Origin-Opener-Policy: same-origin; report-to=\"ads-afs-ui\"\r\nReport-To: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\nDate: Tue, 25 Jun 2024 07:07:38 GMT\r\nExpires: Tue, 25 Jun 2024 07:07:38 GMT\r\nCache-Control: private, max-age=3600\r\nETag: \"12022304434664944989\"\r\nX-Content-Type-Options: nosniff\r\nLink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\nContent-Encoding: gzip\r\nTransfer-Encoding: chunked\r\nServer: sffe\r\nX-XSS-Protection: 0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74010,"size_decoded":190320,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2248)","md5":"4f300e1eab6ce0b92c17d897bbe3dfd0","sha1":"e12df0d0158559f07514beae389761094c0cdced","sha256":"8e724380efc4dc7a14a7e7a26cf2c059453f1dc0bda3eeb5559ff58aa4b766d8","sha512":"387d9656f5ed33221d767836aa1071a115e5a69b7b15af1593b70ba99cadfb816f82ca4f4d90db5bb5d1c22b52c700dc4628846b459d78ad10c9a48f27534155","ssdeep":"3072:5GA1V2YNrqHtLzlHGX38XqXGRkCQvmDulhn:5bj2ZpzlHYX6klvmilV","tlshash":"2b047dd9b2b57026579398a0902f464fb236fc15e849c1b8f089d4e5bcb9da84373f78","first_seen":"2024-06-13T07:52:59Z","last_seen":"2024-08-19T20:09:07.953178Z","times_seen":651,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":20,"dns":2,"connect":21,"send":0,"wait":33,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/favicon.ico","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:38.373Z","timestamp":1719299258373,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww12.verifytocontinue.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 25 Jun 2024 07:07:38 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 0\r\nConnection: keep-alive\r\nServer: nginx\r\nLast-Modified: Thu, 20 Jun 2024 13:29:22 GMT\r\nETag: \"66742eb2-0\"\r\nAccept-Ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T22:09:28.753168Z","times_seen":14077014,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:38.671764867Z","timestamp":1719299258671,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Tue, 25 Jun 2024 07:07:38 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"56eb8824614f294a53089a802d04c1fa","sha1":"cf18eccbe93d02d757cb6af0868e83cc2c43620f","sha256":"a35dabc2daa57d07e014552ef2f6e76933785d26f9d4293e120d84be9aff3ab8","sha512":"fea9e8b2585eae782f78942b26d3955006c8bb51e6d47bf8264214b1942754f4e231e3191454282fef0156f3d864bb0a166d8528eb7f3158c8d742bb0f5507f1","ssdeep":"","tlshash":"14f0d45027d73905fd03972819ccb21d1cf196e8955c3615103972d93dd17a55b2077a","first_seen":"2024-06-24T13:52:53Z","last_seen":"2024-08-19T19:02:21.30099Z","times_seen":148,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww12.verifytocontinue.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjdhNmNiOTg2ZGJhfHx8MTcxOTI5OTI1Ny41OTAyfDVhMTQzNmRkMTY1YjIwZDQ3ZjFlMDg2MWE0ZGM5ZTJiNTMxODMwODN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDQwZWVhYjUxZmY3NmYxZGE4ZWU5MWQwN2YxNjViMjhkNzExMjE4ZmJ8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHx8\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2758074928654248\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301504%2C17301509\u0026client_gdprApplies=1\u0026format=r3%7Cs\u0026nocache=1281719299258530\u0026num=0\u0026output=afd_ads\u0026domain_name=ww12.verifytocontinue.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1719299258533\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=814\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=641883529\u0026rurl=http%3A%2F%2Fww12.verifytocontinue.com%2Fgo%2F8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:38.545Z","timestamp":1719299258545,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Jun 2024 06:43:30 GMT","end":"Mon, 26 Aug 2024 06:43:29 GMT"},"fingerprint":{"sha1":"F9:23:36:59:09:A0:92:DF:02:00:45:FA:78:BB:1A:E9:3F:9C:9C:FD","sha256":"08:A2:49:67:E8:00:5D:D1:B6:D2:E9:B9:86:6E:38:A4:FB:4B:5C:C8:F2:A4:0E:AB:CF:46:DB:F6:86:E9:CA:A2"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww12.verifytocontinue.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjdhNmNiOTg2ZGJhfHx8MTcxOTI5OTI1Ny41OTAyfDVhMTQzNmRkMTY1YjIwZDQ3ZjFlMDg2MWE0ZGM5ZTJiNTMxODMwODN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDQwZWVhYjUxZmY3NmYxZGE4ZWU5MWQwN2YxNjViMjhkNzExMjE4ZmJ8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHx8\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2758074928654248\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301504%2C17301509\u0026client_gdprApplies=1\u0026format=r3%7Cs\u0026nocache=1281719299258530\u0026num=0\u0026output=afd_ads\u0026domain_name=ww12.verifytocontinue.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1719299258533\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=814\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=641883529\u0026rurl=http%3A%2F%2Fww12.verifytocontinue.com%2Fgo%2F8f1a7367-a304-4f3b-a1dd-f78ba8a314cc HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Tue, 25 Jun 2024 07:07:38 GMT\r\nexpires: Tue, 25 Jun 2024 07:07:38 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-n2_FdxfDcnIvwDj4K0yRYA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3077\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3077,"size_decoded":15177,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14304)","md5":"edf5031b7bfe9868c52337df7eac7601","sha1":"60d6aee6ab3a9879745c1470c97b47c828bd5463","sha256":"47101e4366b5a8c1f2155ca8c459bab8d6d350fee4c421cad06068c3612dc43b","sha512":"8108e67afb8c6028354855bcc73953d52e3585b6e0a4cefbd725ee4cf6508a1ac57d5168bc85975e57854a22be0c9c0066906d50d644f4b73476e1ad5d12aa5d","ssdeep":"192:GE12ikpgnLLghzVLWr7e9uLuYFS3BFKkN:Gni8vzhweALuYUxwkN","tlshash":"4c6255376062172909079c541b6a6f6dc185d43ac49b36e948f35f25c7ebf828fe228e","first_seen":"2024-08-19T18:58:37.130906Z","last_seen":"2024-08-19T18:58:37.130906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":128,"dns":36,"connect":20,"send":0,"wait":146,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:39.13509503Z","timestamp":1719299259135,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Tue, 25 Jun 2024 07:07:39 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"56eb8824614f294a53089a802d04c1fa","sha1":"cf18eccbe93d02d757cb6af0868e83cc2c43620f","sha256":"a35dabc2daa57d07e014552ef2f6e76933785d26f9d4293e120d84be9aff3ab8","sha512":"fea9e8b2585eae782f78942b26d3955006c8bb51e6d47bf8264214b1942754f4e231e3191454282fef0156f3d864bb0a166d8528eb7f3158c8d742bb0f5507f1","ssdeep":"","tlshash":"14f0d45027d73905fd03972819ccb21d1cf196e8955c3615103972d93dd17a55b2077a","first_seen":"2024-06-24T13:52:53Z","last_seen":"2024-08-19T19:02:21.30099Z","times_seen":148,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:39.242049816Z","timestamp":1719299259242,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802\"\r\nLast-Modified: Sun, 23 Jun 2024 05:32:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=12168\r\nExpires: Tue, 25 Jun 2024 10:30:27 GMT\r\nDate: Tue, 25 Jun 2024 07:07:39 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"fe36e270c1ecfa3891cc7b505e7894b6","sha1":"ce43401e7146eb139a1e3caf7db957e6b9531dc3","sha256":"bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802","sha512":"5bb88dae1dd0ff26edac7aa9a96c18bed64736dc1f2b635f7148df70940faee6f770cdb67519169140253bebe537e8f0b361cbc7eaa5495477ca3cbbf34aabf5","ssdeep":"","tlshash":"ebf07e2a61fa7e62b6f024262e48a9334e210e7d34000d82307052d2b863fdc1bc404c","first_seen":"2024-06-23T11:25:10Z","last_seen":"2024-08-19T19:07:05.736639Z","times_seen":25848,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww12.verifytocontinue.com/track.php?domain=verifytocontinue.com\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTcxOTI5OTI1Ny41NTI0OjE2NGIyNWUyMzgwMzVjMTA5ZDdjYWUyMmE2YzBkOGE0ZjgxMTAwZDM2MTg4Zjg3MjNkZjdiYjgxZjNiOGI4MmU6NjY3YTZjYjk4NmRlNw%3D%3D","fqdn":"ww12.verifytocontinue.com","domain":"verifytocontinue.com","tld":"com"},"ip":{"addr":"76.223.26.96","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:39.310Z","timestamp":1719299259310,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /track.php?domain=verifytocontinue.com\u0026caf=1\u0026toggle=answercheck\u0026answer=yes\u0026uid=MTcxOTI5OTI1Ny41NTI0OjE2NGIyNWUyMzgwMzVjMTA5ZDdjYWUyMmE2YzBkOGE0ZjgxMTAwZDM2MTg4Zjg3MjNkZjdiYjgxZjNiOGI4MmU6NjY3YTZjYjk4NmRlNw%3D%3D HTTP/1.1\r\nHost: ww12.verifytocontinue.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 25 Jun 2024 07:07:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: nginx\r\nVary: Accept-Encoding\r\nX-Custom-Track: answercheck\r\nAccept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-CH-Lifetime: 30\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20,"size_decoded":20,"mime_type":"text/html; charset=UTF-8","magic":"gzip compressed data, max speed, from Unix","md5":"a4745abc5e7fdb89cc6df3069f3c6e69","sha1":"74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed","sha256":"d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf","sha512":"849461cb54ecde577246aad993d1ecabb879913e353ae322561c7c57605f571e23210fe12bdcef49faa99b5b003611976ff64348f620968271e38bba1c7d7f62","ssdeep":"","tlshash":"ce70000000003c30cc000030000fc000000c30003000c00300000030000300300c003f","first_seen":"2023-04-08T01:36:47Z","last_seen":"2025-03-02T02:51:47.01042Z","times_seen":42040,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-06-24","alert":"Sinkholed","trigger":"verifytocontinue.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:39.530927437Z","timestamp":1719299259530,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Tue, 25 Jun 2024 07:07:39 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"cca48b6a2ba4d2048c3f15692295c03e","sha1":"9320cc96fe8ed4e0e068774d142553a58a78f53b","sha256":"a444b5292c90ea22ab833f3866ca9e4071c8395f2c4e4ecf12604e6af340a0ad","sha512":"3560c29cd21bc9d0ae1dfb2a1a7cef35911fc56d15cea8dc373334b8801d0e2056642c777da21ba551b18c27c031145441e5262d629add335dcd4a8d5cbe1a69","ssdeep":"","tlshash":"51f0dc940635b8471f021851398fb9cd1455ea83569e3a8920f462d06f54afa1b28ba8","first_seen":"2024-06-24T20:44:00Z","last_seen":"2024-08-19T19:01:25.688788Z","times_seen":229,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww12.verifytocontinue.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjdhNmNiOTg2ZGJhfHx8MTcxOTI5OTI1Ny41OTAyfDVhMTQzNmRkMTY1YjIwZDQ3ZjFlMDg2MWE0ZGM5ZTJiNTMxODMwODN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDQwZWVhYjUxZmY3NmYxZGE4ZWU5MWQwN2YxNjViMjhkNzExMjE4ZmJ8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHx8\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2758074928654248\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301504%2C17301509\u0026client_gdprApplies=1\u0026format=r3%7Cs\u0026nocache=1281719299258530\u0026num=0\u0026output=afd_ads\u0026domain_name=ww12.verifytocontinue.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1719299258533\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=814\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=641883529\u0026rurl=http%3A%2F%2Fww12.verifytocontinue.com%2Fgo%2F8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:39.480Z","timestamp":1719299259480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Jun 2024 07:31:43 GMT","end":"Mon, 26 Aug 2024 07:31:42 GMT"},"fingerprint":{"sha1":"50:9C:ED:89:10:B8:24:7D:BB:42:FF:90:60:B3:52:F7:ED:70:0C:41","sha256":"93:F8:A7:6D:FE:76:FB:39:CD:ED:94:A1:AC:0C:4C:63:B7:EB:12:82:3F:22:AD:31:19:01:CA:0E:74:11:25:17"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 24 Jun 2024 20:09:59 GMT\r\nexpires: Tue, 25 Jun 2024 19:09:59 GMT\r\ncache-control: public, max-age=82800\r\nage: 39460\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-04-20T08:54:16.736094Z","times_seen":412185,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":56,"dns":0,"connect":8,"send":0,"wait":9,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww12.verifytocontinue.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjdhNmNiOTg2ZGJhfHx8MTcxOTI5OTI1Ny41OTAyfDVhMTQzNmRkMTY1YjIwZDQ3ZjFlMDg2MWE0ZGM5ZTJiNTMxODMwODN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDQwZWVhYjUxZmY3NmYxZGE4ZWU5MWQwN2YxNjViMjhkNzExMjE4ZmJ8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHx8\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2758074928654248\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301504%2C17301509\u0026client_gdprApplies=1\u0026format=r3%7Cs\u0026nocache=1281719299258530\u0026num=0\u0026output=afd_ads\u0026domain_name=ww12.verifytocontinue.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1719299258533\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=814\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=641883529\u0026rurl=http%3A%2F%2Fww12.verifytocontinue.com%2Fgo%2F8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:39.481Z","timestamp":1719299259481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Jun 2024 07:31:43 GMT","end":"Mon, 26 Aug 2024 07:31:42 GMT"},"fingerprint":{"sha1":"50:9C:ED:89:10:B8:24:7D:BB:42:FF:90:60:B3:52:F7:ED:70:0C:41","sha256":"93:F8:A7:6D:FE:76:FB:39:CD:ED:94:A1:AC:0C:4C:63:B7:EB:12:82:3F:22:AD:31:19:01:CA:0E:74:11:25:17"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 24 Jun 2024 22:39:34 GMT\r\nexpires: Tue, 25 Jun 2024 21:39:34 GMT\r\ncache-control: public, max-age=82800\r\nage: 30485\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-04-20T08:54:16.725642Z","times_seen":243743,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":58,"dns":2,"connect":21,"send":0,"wait":9,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"o.pki.goog/wr2","fqdn":"o.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-06-25T07:07:39.837140886Z","timestamp":1719299259837,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /wr2 HTTP/1.1\r\nHost: o.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Tue, 25 Jun 2024 07:07:39 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":472,"mime_type":"application/octet-stream","magic":"data","md5":"cca48b6a2ba4d2048c3f15692295c03e","sha1":"9320cc96fe8ed4e0e068774d142553a58a78f53b","sha256":"a444b5292c90ea22ab833f3866ca9e4071c8395f2c4e4ecf12604e6af340a0ad","sha512":"3560c29cd21bc9d0ae1dfb2a1a7cef35911fc56d15cea8dc373334b8801d0e2056642c777da21ba551b18c27c031145441e5262d629add335dcd4a8d5cbe1a69","ssdeep":"","tlshash":"51f0dc940635b8471f021851398fb9cd1455ea83569e3a8920f462d06f54afa1b28ba8","first_seen":"2024-06-24T20:44:00Z","last_seen":"2024-08-19T19:01:25.688788Z","times_seen":229,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=yvrjqq9mcmrp\u0026aqid=umx6Zv7pLuWwiM0P4vKboAY\u0026psid=7840396037\u0026pbt=bs\u0026adbx=375\u0026adby=132.1999969482422\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=641883529\u0026csala=8%7C0%7C652%7C99%7C160\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:40.950Z","timestamp":1719299260950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Jun 2024 06:43:30 GMT","end":"Mon, 26 Aug 2024 06:43:29 GMT"},"fingerprint":{"sha1":"F9:23:36:59:09:A0:92:DF:02:00:45:FA:78:BB:1A:E9:3F:9C:9C:FD","sha256":"08:A2:49:67:E8:00:5D:D1:B6:D2:E9:B9:86:6E:38:A4:FB:4B:5C:C8:F2:A4:0E:AB:CF:46:DB:F6:86:E9:CA:A2"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=yvrjqq9mcmrp\u0026aqid=umx6Zv7pLuWwiM0P4vKboAY\u0026psid=7840396037\u0026pbt=bs\u0026adbx=375\u0026adby=132.1999969482422\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=641883529\u0026csala=8%7C0%7C652%7C99%7C160\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Dba2gbx0YT26SiBtoQah4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 25 Jun 2024 07:07:40 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T22:09:28.753168Z","times_seen":14077014,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=f5utubqqyw1s\u0026aqid=umx6Zv7pLuWwiM0P4vKboAY\u0026psid=7840396037\u0026pbt=bv\u0026adbx=375\u0026adby=132.1999969482422\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=641883529\u0026csala=8%7C0%7C652%7C99%7C160\u0026lle=0\u0026ifv=1\u0026hpt=1","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww12.verifytocontinue.com/go/8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:41.450Z","timestamp":1719299261450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Jun 2024 06:43:30 GMT","end":"Mon, 26 Aug 2024 06:43:29 GMT"},"fingerprint":{"sha1":"F9:23:36:59:09:A0:92:DF:02:00:45:FA:78:BB:1A:E9:3F:9C:9C:FD","sha256":"08:A2:49:67:E8:00:5D:D1:B6:D2:E9:B9:86:6E:38:A4:FB:4B:5C:C8:F2:A4:0E:AB:CF:46:DB:F6:86:E9:CA:A2"}}},"request":{"raw":"GET /afs/gen_204?client=dp-teaminternet04_3ph\u0026output=uds_ads_only\u0026zx=f5utubqqyw1s\u0026aqid=umx6Zv7pLuWwiM0P4vKboAY\u0026psid=7840396037\u0026pbt=bv\u0026adbx=375\u0026adby=132.1999969482422\u0026adbh=496\u0026adbw=530\u0026adbah=160%2C160%2C160\u0026adbn=master-1\u0026eawp=partner-dp-teaminternet04_3ph\u0026errv=641883529\u0026csala=8%7C0%7C652%7C99%7C160\u0026lle=0\u0026ifv=1\u0026hpt=1 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww12.verifytocontinue.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-6NIE1px8SQgBLgRwvqQsjg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 25 Jun 2024 07:07:41 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T22:09:28.753168Z","times_seen":14077014,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=7840396037\u0026pcsa=false\u0026channel=000001%2Cbucket003\u0026client=dp-teaminternet04_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww12.verifytocontinue.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDN8fHx8fHw2NjdhNmNiOTg2ZGJhfHx8MTcxOTI5OTI1Ny41OTAyfDVhMTQzNmRkMTY1YjIwZDQ3ZjFlMDg2MWE0ZGM5ZTJiNTMxODMwODN8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDQwZWVhYjUxZmY3NmYxZGE4ZWU5MWQwN2YxNjViMjhkNzExMjE4ZmJ8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHx8\u0026max_radlink_len=40\u0026type=3\u0026uiopt=true\u0026swp=as-drid-2758074928654248\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301437%2C17301439%2C17301442%2C17301504%2C17301509\u0026client_gdprApplies=1\u0026format=r3%7Cs\u0026nocache=1281719299258530\u0026num=0\u0026output=afd_ads\u0026domain_name=ww12.verifytocontinue.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1719299258533\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=814\u0026frm=0\u0026uio=--\u0026cont=tc\u0026drt=0\u0026jsid=caf\u0026jsv=641883529\u0026rurl=http%3A%2F%2Fww12.verifytocontinue.com%2Fgo%2F8f1a7367-a304-4f3b-a1dd-f78ba8a314cc","date":"2024-06-25T07:07:39.171Z","timestamp":1719299259171,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Jun 2024 06:43:30 GMT","end":"Mon, 26 Aug 2024 06:43:29 GMT"},"fingerprint":{"sha1":"F9:23:36:59:09:A0:92:DF:02:00:45:FA:78:BB:1A:E9:3F:9C:9C:FD","sha256":"08:A2:49:67:E8:00:5D:D1:B6:D2:E9:B9:86:6E:38:A4:FB:4B:5C:C8:F2:A4:0E:AB:CF:46:DB:F6:86:E9:CA:A2"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Tue, 25 Jun 2024 07:07:39 GMT\r\nexpires: Tue, 25 Jun 2024 07:07:39 GMT\r\ncache-control: private, max-age=3600\r\netag: \"136273108514597968\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190336,"size_decoded":190336,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2248)","md5":"987b5535588b2688014f028eda7dfbe6","sha1":"57a205b6dea29289a369088e7f9cfad6e875c64d","sha256":"22e0575e88ca323362074670a19dfaf03b54a81d7e2ae2106160e20a8403937a","sha512":"44e57249248664ffbf4d97d5d3add9c4a7aa5a6e652fce3fb4caa127114b217ed26437b4800133682349150a00c232725567eab0c3fee8b2ab6cf5e8ddbdf59b","ssdeep":"3072:4GA1V2YNrqHtLzlHGX38XqXGRkCQvmDulhn:4bj2ZpzlHYX6klvmilV","tlshash":"c5047dd9b2b57026579398a0902f464fb236fc15e849c1b8f089d4e5bcb9da84373f78","first_seen":"2024-06-13T11:54:57Z","last_seen":"2024-08-19T20:08:30.046822Z","times_seen":298,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}