{"report_id":"1fb61a0e-d276-4de6-a912-dedabc3807ba","version":6,"status":"done","tags":[],"date":"2025-10-03T11:56:03Z","url":{"schema":"http","addr":"kdwise-connect.sabacloud.co/","fqdn":"kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"103.224.182.246","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","fqdn":"ww25.kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"title":"sabacloud.co"},"submit":{"url":{"schema":"http","addr":"kdwise-connect.sabacloud.co/","fqdn":"kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"103.224.182.246","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-07T11:56:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ww25.kdwise-connect.sabacloud.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-28T22:11:46.355495Z","alert_count":0,"request_count":1,"received_data":159755,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":65181,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-09-28T22:16:45.793687Z","alert_count":0,"request_count":2,"received_data":2046,"sent_data":1006,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":5365,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-09-28T22:16:45.190841Z","alert_count":0,"request_count":4,"received_data":175851,"sent_data":3295,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"ww25.kdwise-connect.sabacloud.co","ip":{"addr":"199.59.243.228","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-11-03","domain_rank":0,"first_seen":"2025-10-03T11:56:04.132641Z","last_seen":"2025-10-03T11:56:04.132641Z","alert_count":4,"request_count":4,"received_data":46498,"sent_data":2140,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kdwise-connect.sabacloud.co","ip":{"addr":"103.224.182.246","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":1559,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","fqdn":"ww25.kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"199.59.243.228","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c20b0f4288993917fc12f89a23b9fde","sha1":"b1b251f9381c52686c50c98e9c19631773ad2c75","sha256":"4973c0192d5b5eb6039a2946b1eae0f244ba8ef64b5491f0e91f855f1f8ceb50","sha512":"8777ffd4e1b8be290064a1a5ff65030015bb942a127ce84e965f3cd4ff83a0fd01062dd251278d6b24e2492bc17f2a45fa0c69e7c4227eab7138c5d4dd8a4ee9","ssdeep":"","tlshash":"f7f0dc0e71689dceb8b1b22b0e15aec45fd860c11e92988ee28e4ce2484595b464c0eb","size":465,"data":"","first_seen":"2025-10-03T11:56:09.510935Z","last_seen":"2025-10-03T11:56:09.510935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.kdwise-connect.sabacloud.co/bLKqrystt.js","fqdn":"ww25.kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"199.59.243.228","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"958df7937adfec9bc20b14b7fff891f8","sha1":"bd45611bceae0cdda0fb3c3b9445b6f0eed4995c","sha256":"40c39476fa8cec4a8d5eed23acc6c6a99d686b58eb16fff4ee199eac5f8f0619","sha512":"0586e20b3bdefe90612c16df0206fedcb048cb2bec475b01a32a3c94fabc13aaf90f44db2615bda3cf8f790ce6f063b6328b30c42f4ddc8d0f36c08ab5b1c256","ssdeep":"768:TP2y1o5VcJ7n85NdxBB5gPzGIPNMalnEE0xNE2X0Ddem+euROgvMzLXWI+6l8XOD:TualnEE0xNEGR+4M","tlshash":"98033ab23ab7e07046e2c5dae8779215f338214a3405c068f96cc8de3a5e947d73ab75","size":38577,"data":"","first_seen":"2025-08-25T22:40:35.311663Z","last_seen":"2025-10-15T16:11:44.232108Z","times_seen":35895,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"876c8d2494fbcc57c7a0e09ef625b4be","sha1":"1b5da245c5c8719a184d85441f048b23f4a76b9b","sha256":"dbef9124c93b844f0166916c06539b88b20253d3a878e5918a47b34b20317c69","sha512":"7f99e0c5a1c8d8e124113cb9428c8068dd282b9996909b995a72f060e73e7bfa6042f1607d62a5b9e20ee3391a71960a06f6767229c04f5596788dff11aa5387","ssdeep":"1536:1dzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:r4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"a9f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","size":159038,"data":"","first_seen":"2025-10-02T15:45:35.042408Z","last_seen":"2025-10-06T10:09:13.169202Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol447%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20251003-2155-42ad-9354-58e940f7d607\u0026type=3\u0026swp=as-drid-2281830005875978\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=1511759492542944\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.kdwise-connect.sabacloud.co\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759492542944\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fsubid1%3D20251003-2155-42ad-9354-58e940f7d607","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8adc1a18277629eeeaa0ba5b585ca06f","sha1":"f2b6d1f2fd7565ffb93e807de5ece4db3da3b5c9","sha256":"f1b0477fa87eccf85b420a5660c76c189325eaae7840addd0afa8331d3b1c1f3","sha512":"92b90a574439b72ce0a9ca5699a49b0ace9e60f8e63fd3058fbb12aa65ed33807bf6a49eef3a8cae6a6e1f70c0755b6aad2f0417d97b7dd6c4c72eed508ed9cc","ssdeep":"","tlshash":"b8f08b9558640332d96301254e0f3be1985b14b032cb2548941fb8ce217cedea22c0aa","size":532,"data":"","first_seen":"2025-10-03T11:56:09.513209Z","last_seen":"2025-10-03T11:56:09.513209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"62445a4023d11c4f88eef2fa8151f4ad","sha1":"2085d818cfbf3fe0c4d2dbdf240f3837cbc2be57","sha256":"0356bd7dcc3ab6e14582313107efa7b14bd31299e7245b6859417220f59f882d","sha512":"359c06933e27113d4ed43c9e431dc4a4bd770d2d148815bb108463fc838277b40d832f6feb05b7dfadb5ce840ef6b38b97e330d1c21043e9283c389ea41247b7","ssdeep":"1536:2dzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:i4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"7bf34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","size":159045,"data":"","first_seen":"2025-10-01T14:30:35.171886Z","last_seen":"2025-10-06T20:39:07.903577Z","times_seen":1364,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol447%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20251003-2155-42ad-9354-58e940f7d607\u0026type=3\u0026swp=as-drid-2281830005875978\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=1511759492542944\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.kdwise-connect.sabacloud.co\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759492542944\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fsubid1%3D20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:43.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 14:30:29 GMT\r\nexpires: Fri, 03 Oct 2025 13:30:29 GMT\r\ncache-control: public, max-age=82800\r\nage: 77114\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-04-18T19:14:04.851775Z","times_seen":412183,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":84,"dns":3,"connect":8,"send":0,"wait":8,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=86r3s670d798\u0026cd_fexp=72717108\u0026aqid=v7nfaL_oBIq7xdwPgrS3wAI\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=813237002\u0026csala=2%7C0%7C255%7C36%7C5\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:44.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=86r3s670d798\u0026cd_fexp=72717108\u0026aqid=v7nfaL_oBIq7xdwPgrS3wAI\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=813237002\u0026csala=2%7C0%7C255%7C36%7C5\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.kdwise-connect.sabacloud.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-V1aQzTfI8YvicsunCyDIWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 03 Oct 2025 11:55:44 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T09:23:21.870352Z","times_seen":13929305,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","fqdn":"ww25.kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"199.59.243.228","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T11:55:42.220Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?subid1=20251003-2155-42ad-9354-58e940f7d607 HTTP/1.1\r\nHost: ww25.kdwise-connect.sabacloud.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 03 Oct 2025 11:55:41 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 1214\r\nX-Request-Id: ab65b5d6-ff51-4fb9-93b3-f0290e982982\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: sec-ch-prefers-color-scheme\r\nCritical-Ch: sec-ch-prefers-color-scheme\r\nVary: sec-ch-prefers-color-scheme\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_xKkds7E6s5Wfm+0GeaX0WrO4eO95A9pcHYxeWBAj7duEukvB5BXo6FAtVtcxhDFTtz1UuYnUVkuYulTYaPBL2g==\r\nSet-Cookie: parking_session=ab65b5d6-ff51-4fb9-93b3-f0290e982982; expires=Fri, 03 Oct 2025 12:10:42 GMT; path=/\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1214,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (482)","md5":"aecdcb4d6ad127123867b2a276aee46f","sha1":"7092679efe56a1f2a3d5d76c8f79462f11951058","sha256":"093d670cd408ec72000069e8d30079c7274784ecd5b2c1d834ff3fbfaa6abee5","sha512":"9b785f1a7974e3f790b01aba3cd2419f171bc84995d114cad164095deb6d5c1ebe7ad6e22c80c1c2133d447ff2d00ec14e60ee1ef5fcd0217c1811b432c598f9","ssdeep":"","tlshash":"8a21b45a24659c4f24f0a2150d30f60c8d0923c96782accafadde4bb4cc8e92941e5dc","first_seen":"2025-10-03T11:56:09.496983Z","last_seen":"2025-10-03T11:56:09.496983Z","times_seen":1,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":379,"dns":377,"connect":2,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ww25.kdwise-connect.sabacloud.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww25.kdwise-connect.sabacloud.co/_fd?subid1=20251003-2155-42ad-9354-58e940f7d607","fqdn":"ww25.kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"199.59.243.228","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:42.784Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /_fd?subid1=20251003-2155-42ad-9354-58e940f7d607 HTTP/1.1\r\nHost: ww25.kdwise-connect.sabacloud.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607\r\nContent-Type: application/json\r\nOrigin: http://ww25.kdwise-connect.sabacloud.co\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=ab65b5d6-ff51-4fb9-93b3-f0290e982982\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 03 Oct 2025 11:55:41 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 5185\r\nX-Request-Id: ae698b3d-6d25-4ba7-8797-5540cecea37f\r\nSet-Cookie: parking_session=ab65b5d6-ff51-4fb9-93b3-f0290e982982; expires=Fri, 03 Oct 2025 12:10:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5185,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (5185), with no line terminators","md5":"0baea515282b918cb1aa9750dbd1e32d","sha1":"412715887f066577e0f2c0013b883e5061628476","sha256":"9b550c3995a2de8d4a104746e716a30c3dfa628b44522765515447b432f49f63","sha512":"23750a0dd4753e8127a583aff5aa5d80e803c0e449d307ff7eac91206ec30f4a4a08d994f8c155af5dbd71424147c5ff30c193818a93b8b123a9429107d67084","ssdeep":"96:N9SQNw8pMmYHQy8zPULGQQGJ2ITTAwSY7P5oof:CQNw8i9HQy8zS/vNnq45oof","tlshash":"66b160f69e98399bdb07561370cf03e9034f96ae26b6222d594fda4c4a0d60fb4d012f","first_seen":"2025-10-03T11:56:09.499945Z","last_seen":"2025-10-03T11:56:09.499945Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ww25.kdwise-connect.sabacloud.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww25.kdwise-connect.sabacloud.co/bLKqrystt.js","fqdn":"ww25.kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"199.59.243.228","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:42.741Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /bLKqrystt.js HTTP/1.1\r\nHost: ww25.kdwise-connect.sabacloud.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607\r\nCookie: parking_session=ab65b5d6-ff51-4fb9-93b3-f0290e982982\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 03 Oct 2025 11:55:41 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 38577\r\nX-Request-Id: 17a3d164-1e15-41cf-adda-cccf57b7f0ed\r\nSet-Cookie: parking_session=ab65b5d6-ff51-4fb9-93b3-f0290e982982; expires=Fri, 03 Oct 2025 12:10:42 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38577,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38574)","md5":"958df7937adfec9bc20b14b7fff891f8","sha1":"bd45611bceae0cdda0fb3c3b9445b6f0eed4995c","sha256":"40c39476fa8cec4a8d5eed23acc6c6a99d686b58eb16fff4ee199eac5f8f0619","sha512":"0586e20b3bdefe90612c16df0206fedcb048cb2bec475b01a32a3c94fabc13aaf90f44db2615bda3cf8f790ce6f063b6328b30c42f4ddc8d0f36c08ab5b1c256","ssdeep":"768:TP2y1o5VcJ7n85NdxBB5gPzGIPNMalnEE0xNE2X0Ddem+euROgvMzLXWI+6l8XOD:TualnEE0xNEGR+4M","tlshash":"98033ab23ab7e07046e2c5dae8779215f338214a3405c068f96cc8de3a5e947d73ab75","first_seen":"2025-08-25T22:40:35.311663Z","last_seen":"2025-10-15T16:11:44.232108Z","times_seen":35895,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ww25.kdwise-connect.sabacloud.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol447%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20251003-2155-42ad-9354-58e940f7d607\u0026type=3\u0026swp=as-drid-2281830005875978\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=1511759492542944\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.kdwise-connect.sabacloud.co\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759492542944\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fsubid1%3D20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:43.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 03 Oct 2025 11:55:43 GMT\r\nexpires: Fri, 03 Oct 2025 11:55:43 GMT\r\ncache-control: private, max-age=3600\r\netag: \"7665136422895880357\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159045,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"62445a4023d11c4f88eef2fa8151f4ad","sha1":"2085d818cfbf3fe0c4d2dbdf240f3837cbc2be57","sha256":"0356bd7dcc3ab6e14582313107efa7b14bd31299e7245b6859417220f59f882d","sha512":"359c06933e27113d4ed43c9e431dc4a4bd770d2d148815bb108463fc838277b40d832f6feb05b7dfadb5ce840ef6b38b97e330d1c21043e9283c389ea41247b7","ssdeep":"1536:2dzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:i4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"7bf34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","first_seen":"2025-10-01T14:30:35.171886Z","last_seen":"2025-10-06T20:39:07.903577Z","times_seen":1364,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.kdwise-connect.sabacloud.co/_tr","fqdn":"ww25.kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"199.59.243.228","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:43.292Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww25.kdwise-connect.sabacloud.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607\r\nContent-Type: application/json\r\nContent-Length: 2053\r\nOrigin: http://ww25.kdwise-connect.sabacloud.co\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=ab65b5d6-ff51-4fb9-93b3-f0290e982982\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 03 Oct 2025 11:55:42 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 2\r\nX-Request-Id: 68ef93b0-8c29-4e51-9024-9f3db4da6909\r\nSet-Cookie: parking_session=ab65b5d6-ff51-4fb9-93b3-f0290e982982; expires=Fri, 03 Oct 2025 12:10:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-19T09:23:02.255148Z","times_seen":397868,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"ww25.kdwise-connect.sabacloud.co","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=8fo0gbkiqlrz\u0026cd_fexp=72717108\u0026aqid=v7nfaL_oBIq7xdwPgrS3wAI\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=813237002\u0026csala=2%7C0%7C255%7C36%7C5\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:44.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=8fo0gbkiqlrz\u0026cd_fexp=72717108\u0026aqid=v7nfaL_oBIq7xdwPgrS3wAI\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=813237002\u0026csala=2%7C0%7C255%7C36%7C5\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.kdwise-connect.sabacloud.co/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-hxobOPyufoTmsDXKh-bJwQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 03 Oct 2025 11:55:44 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T09:23:21.870352Z","times_seen":13929305,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kdwise-connect.sabacloud.co/","fqdn":"kdwise-connect.sabacloud.co","domain":"sabacloud.co","tld":"co"},"ip":{"addr":"103.224.182.246","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T11:55:41.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cenphotrafficschool.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 Aug 2025 08:43:19 GMT","end":"Mon, 24 Nov 2025 08:43:18 GMT"},"fingerprint":{"sha1":"C8:41:C9:24:61:53:2C:28:52:2C:4B:D6:1F:8D:0F:AD:70:B9:61:4B","sha256":"AA:BC:17:F4:B2:A0:95:9B:24:7F:DD:77:7F:FE:15:3B:95:EF:B7:C7:5D:27:70:84:4E:CC:19:4E:55:D5:42:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: kdwise-connect.sabacloud.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Fri, 03 Oct 2025 11:55:42 GMT\r\nserver: Apache\r\nset-cookie: __tad=1759492542.7640850; expires=Mon, 01 Oct 2035 11:55:42 GMT; Max-Age=315360000\r\nlocation: http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607\r\ncontent-length: 2\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-19T09:23:21.870352Z","times_seen":13929305,"resource_available":true,"data":null}},"time_used":896,"timings":{"blocked":339,"dns":0,"connect":163,"send":0,"wait":218,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:42.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:37:19 GMT","end":"Mon, 08 Dec 2025 08:37:18 GMT"},"fingerprint":{"sha1":"71:09:AD:C8:6A:D2:25:DB:C9:D9:5E:5B:C1:06:E1:0D:D6:39:D6:F0","sha256":"A9:72:F7:39:49:86:27:92:AA:EE:65:04:99:A9:0E:A8:02:70:01:E6:72:46:C2:FB:DC:5E:5E:6B:DC:B8:27:A0"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026bodis=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.kdwise-connect.sabacloud.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 03 Oct 2025 11:55:42 GMT\r\nexpires: Fri, 03 Oct 2025 11:55:42 GMT\r\ncache-control: private, max-age=3600\r\netag: \"16604002904011979001\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159038,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"876c8d2494fbcc57c7a0e09ef625b4be","sha1":"1b5da245c5c8719a184d85441f048b23f4a76b9b","sha256":"dbef9124c93b844f0166916c06539b88b20253d3a878e5918a47b34b20317c69","sha512":"7f99e0c5a1c8d8e124113cb9428c8068dd282b9996909b995a72f060e73e7bfa6042f1607d62a5b9e20ee3391a71960a06f6767229c04f5596788dff11aa5387","ssdeep":"1536:1dzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:r4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"a9f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","first_seen":"2025-10-02T15:45:35.042408Z","last_seen":"2025-10-06T10:09:13.169202Z","times_seen":60,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":58,"dns":1,"connect":8,"send":0,"wait":23,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol447%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20251003-2155-42ad-9354-58e940f7d607\u0026type=3\u0026swp=as-drid-2281830005875978\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=1511759492542944\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.kdwise-connect.sabacloud.co\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759492542944\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fsubid1%3D20251003-2155-42ad-9354-58e940f7d607","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww25.kdwise-connect.sabacloud.co/?subid1=20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:42.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol447%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20251003-2155-42ad-9354-58e940f7d607\u0026type=3\u0026swp=as-drid-2281830005875978\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=1511759492542944\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.kdwise-connect.sabacloud.co\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759492542944\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fsubid1%3D20251003-2155-42ad-9354-58e940f7d607 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.kdwise-connect.sabacloud.co/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Fri, 03 Oct 2025 11:55:43 GMT\r\nexpires: Fri, 03 Oct 2025 11:55:43 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-uvkjsE0JvaHaA-fqGL9EwA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2904\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":13986,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13509)","md5":"720cfd99b6d7de7044b87dfbac8d0592","sha1":"813db499b5da35a752ac1006cafd2bb69fc3c4d4","sha256":"a57c9272ccd35363fa00a76789da8e6b22b428fb45e7ce4c69471ec974718bac","sha512":"de5ceba8ec52ac718ba55ebc9d94a075f5a16ce6075bcfc9deacb0e457dc164291e708564e8483fc3fc5ea7ec5a7e2507def658080cfcb657eea12885c85dfe7","ssdeep":"96:GE/yk2iIlb5lphMzwronbo4tm0yEM6vfNYrWtwcMwD0w96Dlwe+lVuMwDzw96DJL:GE12iMpgbogm0yEMcfWrcIXwibSnlk9l","tlshash":"3f52343760a227295503dc541b256f6dd181d43ac46f36e848b35b26c7ebf828be62ce","first_seen":"2025-10-03T11:56:09.507382Z","last_seen":"2025-10-03T11:56:09.507382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":51,"dns":3,"connect":8,"send":0,"wait":166,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol111%2Cpid-bodis-gcontrol447%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20251003-2155-42ad-9354-58e940f7d607\u0026type=3\u0026swp=as-drid-2281830005875978\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300000%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=1511759492542944\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.kdwise-connect.sabacloud.co\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759492542944\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=http%3A%2F%2Fww25.kdwise-connect.sabacloud.co%2F%3Fsubid1%3D20251003-2155-42ad-9354-58e940f7d607","date":"2025-10-03T11:55:43.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 16:20:07 GMT\r\nexpires: Fri, 03 Oct 2025 15:20:07 GMT\r\ncache-control: public, max-age=82800\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 70536\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":50,"dns":4,"connect":9,"send":0,"wait":8,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}