{"report_id":"285558e7-c417-4c6d-8c1d-8739c485ce92","version":6,"status":"done","tags":[],"date":"2025-07-12T00:28:01Z","url":{"schema":"http","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","fqdn":"ww25.anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"title":"anbuifoenbi.com"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-20T00:28:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ob.roundprinceforest.com","ip":{"addr":"3.164.230.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":0,"first_seen":"2024-05-27T15:07:55Z","last_seen":"2025-07-10T06:46:54.282488Z","alert_count":0,"request_count":1,"received_data":114933,"sent_data":450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"script.anura.io","ip":{"addr":"18.175.20.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2016-03-22","domain_rank":43801,"first_seen":"2017-05-19T19:00:19Z","last_seen":"2025-07-05T22:14:55.9155Z","alert_count":0,"request_count":1,"received_data":82940,"sent_data":520,"comment":"","tags":null,"fingerprints":null},{"fqdn":"obs.roundprinceforest.com","ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2022-08-01","domain_rank":0,"first_seen":"2024-05-03T09:09:40Z","last_seen":"2025-07-06T07:11:52.362067Z","alert_count":0,"request_count":2,"received_data":4021,"sent_data":5024,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-07-09T21:22:56.557701Z","alert_count":0,"request_count":2,"received_data":2046,"sent_data":1006,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-09T15:12:38.343179Z","alert_count":0,"request_count":1,"received_data":144654,"sent_data":447,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":0,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-07-09T16:42:01.474648Z","alert_count":0,"request_count":4,"received_data":160422,"sent_data":3240,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww25.anbuifoenbi.com","ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-12-18","domain_rank":0,"first_seen":"2025-07-12T00:28:17.30428Z","last_seen":"2025-07-12T00:28:17.30428Z","alert_count":0,"request_count":4,"received_data":46294,"sent_data":2687,"comment":"","tags":null,"fingerprints":null},{"fqdn":"anbuifoenbi.com","ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":39340,"sent_data":1905,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T00:27:40Z","timestamp":1752280060,"ip_dst":{"addr":"18.159.105.57","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"ip_src":{"addr":"172.18.0.24","port":32970,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)","source":"{\"timestamp\":\"2025-07-12T00:27:40.806991+0000\",\"flow_id\":1224669860221007,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.24\",\"src_port\":32970,\"dest_ip\":\"18.159.105.57\",\"dest_port\":443,\"proto\":\"UDP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2033077,\"rev\":2,\"signature\":\"ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard Low Port)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2021_06_03\"],\"deployment\":[\"alert_only\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_04_24\"]}},\"app_proto\":\"failed\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":62,\"bytes_toclient\":0,\"start\":\"2025-07-12T00:27:40.806991+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2025-07-12T00:27:41Z","timestamp":1752280061,"ip_dst":{"addr":"172.18.0.24","port":45570,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2025-07-12T00:27:41.381593+0000\",\"flow_id\":1462761372358500,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"35.172.245.152\",\"src_port\":443,\"dest_ip\":\"172.18.0.24\",\"dest_port\":45570,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.roundprinceforest.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:C5:28:41:AA:D5:35:56:B5:84:04:20:BD:B0:6A:90:BB\",\"fingerprint\":\"66:a4:d1:a0:9e:4b:8f:97:62:09:0b:29:98:69:c8:43:8b:e2:0c:22\",\"sni\":\"obs.roundprinceforest.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-07-03T00:00:00\",\"notafter\":\"2025-10-01T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3932,\"start\":\"2025-07-12T00:27:41.038756+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol100%2Cpid-bodis-gcontrol401%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250712-1027-39bd-bf23-8bf7df01a984\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2670805077781048\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=5271752280062865\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.anbuifoenbi.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1752280062867\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=780142884\u0026rurl=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fsubid1%3D20250712-1027-39bd-bf23-8bf7df01a984","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"62296d202926c6c6eb831342fa86307d","sha1":"e473c53e92a7518ece6c53e80a268aa237bf022e","sha256":"48716301f83c4affdae12711a85ea81a1ea1f93594b2fd9b75db6489808e422e","sha512":"40d7a41c7ef409dea04bceec1b8c96a7dcd487a686a5d5d40ee739a52e7f9b1e0bcf7d34b584ee0df44b212a4c2e92aa3ae8052b771266808ed792e20f4d417b","ssdeep":"","tlshash":"ddf050e529644231c56b41161d0b3f94645915b132872645b45da89f14bcf9e931c4be","size":518,"data":"","first_seen":"2025-07-12T00:28:21.82731Z","last_seen":"2025-07-12T00:28:21.82731Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1deac6a547b742f3c118fd54b6751e1a","sha1":"6eb70c3fdfc3c9f7815471ef9b27935c32bfb280","sha256":"3fda97b5a19027c2433ba9f0bcfd8bfaa8d979e8b7956fa32f784d9554982f1a","sha512":"88547836cec4ca4c4d656b064516d25c152eea18cf6f8c594b28abbf10601435dbc0182c2f8cfd3bfba8dac97c4d911ee95b4e2812f14d68ff782e7d7f266947","ssdeep":"","tlshash":"56f0814b6f47d010c9a800b709bcf6086214b564b81eec3ad1c4c98f55b5ef53d06f78","size":579,"data":"","first_seen":"2025-07-12T00:28:21.829276Z","last_seen":"2025-07-12T00:28:21.829276Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T03:44:18.277428Z","times_seen":331613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b2c2041f8d99c45e0f21474fe4f8b7bc","sha1":"0b876666393469c726a2e3edbb29544c03a92154","sha256":"17f5bfdbae6b35ae8bc3b27c069526d694021fe1e37a8027678e770fbb05e061","sha512":"401fafee1b739893eea01d7a74ddc334d123ec98208c7ccbfbc8cdbcaa51f0dc3c94cb1efc856e65a13640428c189f44a82e3f9036c3d69924d62074e800f412","ssdeep":"","tlshash":"016000c0cc30000c0c000030003030300000c0000c300330c03000c030300f00c03000","size":17,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-04-04T02:23:53.841573Z","times_seen":13691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/js/fingerprint/iife.min.js","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","size":34240,"data":"","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-04-04T03:46:27.235602Z","times_seen":34685,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","fqdn":"ww25.anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"07ceaf3b53f2fece26c9f38a92afe530","sha1":"198391cf2d95734c212e898d78906799a892ed05","sha256":"36b9cef45783e63aadd8eb60f913d7bf703c0e8ba2285ba1ee843d1ddacc992c","sha512":"321654459227063c2cbdde9688cf474aceefedb9cc4a1333322c277a706eebb118d79deb1df67aaaa74b52319394614945af485efd589a8d8a5d5173b8d23f81","ssdeep":"","tlshash":"94e0a3ba265d46c9d035340f0bed2fd8970232b608167de6ffd42c5137104c21799c9e","size":433,"data":"","first_seen":"2025-07-12T00:28:21.833394Z","last_seen":"2025-07-12T00:28:21.833394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"80114adeaafc65a750b50863217efc45","sha1":"24b9bedc5c13c50f2600e65fc690067ee0199d73","sha256":"a97173ff9b232318f4fe419406d34086110657edcb52ebcc33aa09e9e3cf7a7f","sha512":"c9937ae584b5009455935accc4e8c6290a40359b396c5598fb5f2e3808c1411d56106dbcadbea5f2766068e1c67af368554beca6f2902af1a6aaafd8df7048c0","ssdeep":"1536:GU0k3E8T88nj/N39xoaQoh8E3OjYzwbXO+Dy2l7wu8gQQJe/FKb6+XbgmSW3mgKd:dxGEejvbXO+ZEu+hr3W31KkFc","tlshash":"76e34b9d73a5343253a3a4b4603f018fb13af965e80888a4b199c9f47cb4da94277f7d","size":143938,"data":"","first_seen":"2025-07-10T21:51:04.100111Z","last_seen":"2025-07-14T19:29:51.880497Z","times_seen":618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f14687d5d74dd41ee54d1a135575c8f5","sha1":"9f852396143e213611b6050ee3ada5d2e111b4ca","sha256":"d3a3b84caba8d8ec2c0cf6e2d87586ce62c55cf575cbee5771c35e935128e901","sha512":"91e3e05b7bfbee181896405fd67856413d665a66a159257718c62a499e00c274a89d02a9a5f7413d3dd721a4448ecdb16820d4dfb842aa3cabc00238113bdbda","ssdeep":"1536:kU0k3E8T88nj/N39xoaQoh8E3OjYzwbXO+Dy2l7wu8gQQJe/FKb6+XbgmSW3mgKd:fxGEejvbXO+ZEu+hr3W31KkFc","tlshash":"fde34b9d73a5343253a3a4b4603f018fb13af965e80888a4b199c9f47cb4da94277f7d","size":143954,"data":"","first_seen":"2025-07-08T16:04:35.129291Z","last_seen":"2025-07-14T19:41:03.237023Z","times_seen":448,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-04-04T03:44:18.311221Z","times_seen":352261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.roundprinceforest.com/i/32fab0ca089656568b50774c4a9a2780.js","fqdn":"ob.roundprinceforest.com","domain":"roundprinceforest.com","tld":"com"},"ip":{"addr":"3.164.230.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7560464fed0f368df7711bc25bcda3e","sha1":"ecc1edfae3d5bdf6d64e2b1d00c57625195fdd26","sha256":"3ced6780a42f95a184f8436fdcaaa0622e661e063e052d99720229b8d23a4bd8","sha512":"03031156a886b64a28ef6801086d2b63208b030ee94686ef078b748f156db6d2f9bf39b1c11ab56d61ff0c4ca22f1bc14535175b817f535c0bff47831ecc4e2f","ssdeep":"1536:SeEWyNialgKaklqf/ut9MjmecxwjciYtMwlzirsxtjC3UHHLondoHuLJpb5NNw7P:peNHjaetKmeHju5tjTuFUI+o0","tlshash":"92b3d7adf2e6702503933465047f410ae27b5e513c4b8284d6bae5d4ac7ce8e517bfac","size":114407,"data":"","first_seen":"2025-07-10T05:05:22.06377Z","last_seen":"2025-07-13T13:19:23.031658Z","times_seen":107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0673f6d901e0fae1d516477501339c83","sha1":"5b4eb489453330f46403830bb0abae3ef081bdbe","sha256":"85649a1117b5acd9819c6d8ffca7ac46e8e6166aec00252f24ff04ad39c79925","sha512":"9e5ee6acbb49b61e47c3101baebb61741524afd8e7bd40618de13e2b657789d8b07effc3cd707e24a2aba75a04f5564c2975d889f44ab4279f71b6b6b7ba6f43","ssdeep":"","tlshash":"4df0dc4cb4da386379b810ae8ef4040fc17b4249048df8bce006ab28dc0215be068deb","size":511,"data":"","first_seen":"2025-07-12T00:28:21.836945Z","last_seen":"2025-07-12T00:28:21.836945Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T03:44:18.314834Z","times_seen":331667,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"script.anura.io/request.js?646628627779\u0026instance=1631640258\u0026additional=%7B%22uuid%22%3A%2220250712-1027-39bd-bf23-8bf7df01a984%22%7D","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"18.175.20.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"954fe5ec3f608ce284df2a40fb502cd9","sha1":"cdd42a2b586a967e2a5ad03e91dce8649728e522","sha256":"59cbdfc5fa97d1f7b6569bb2ca23cd8906bfee68c7391b20ed0707d3891c0abf","sha512":"785bc2008a9082d498278a99f7805ac877963585eda7729029a3ea48c88862bda3ab7d06ab9756947c894da23c1cfd2c051d78d68aeb8eb900886ad09bf834da","ssdeep":"1536:7bL/R/Gc0GLz/nEvrMQzOJv4OO4zLAADB62gAk/6G:nL/Ic0G/Jv4OoV","tlshash":"f083d5e67572f0140e6245e9217f050ff3ba0a75a89c1090c7e9d8f43cb599f8a3ab8d","size":82561,"data":"","first_seen":"2025-07-12T00:28:21.79568Z","last_seen":"2025-07-12T00:28:21.79568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.anbuifoenbi.com/bbhQsCybz.js","fqdn":"ww25.anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5b3b845837b2e753a93ba9038520a6","sha1":"e763bdd00c1711f3a9a72f423c56d514b767e29f","sha256":"c48dace724886452187a7ec405be5106812819b348039052c7eb50ff4940676f","sha512":"647d18988a3c43abf96800589a0832fc2ac7304d992e7a738f75d509b4b0cd7d35b6db543b256176fca9e751e8972286baaf78aeb5eba0658faacd844586a8d5","ssdeep":"768:TP2y16QVcJ7n85NdxBB5gPCGIPNMalnEE0xNE2X0Ddem+euROgvMzLXWI+673XOW:2dalnEE0xNEGR+ZJ","tlshash":"68033ba23ab7e47046e2c5dae8779215f338210a3405c068f96cc8de365ee47d73ab75","size":38313,"data":"","first_seen":"2025-07-09T17:47:53.47897Z","last_seen":"2025-07-15T18:38:38.802415Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-04-04T03:44:18.29572Z","times_seen":331567,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.roundprinceforest.com/ct?id=87243\u0026url=https%3A%2F%2Fanbuifoenbi.com%2F\u0026sf=0\u0026tpi=\u0026ch=cheq4ppc\u0026uvid=20250712-1027-39bd-bf23-8bf7df01a984\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1752280060984\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=9300990518561270122615021202207981178622196815692518269602211101251251168205513001177721\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=uedX58lndi\u0026pto=1840\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1752280060.yPQp61Cr2iwy6FQO\u0026suid=1.1752280060.58ApCwphKY9cDhmn\u0026tuid=1.1752280060.GxNqKtqM9fenUDoa\u0026fbc=-\u0026gtm=-\u0026it=4%2C928%2C139\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obs.roundprinceforest.com","domain":"roundprinceforest.com","tld":"com"},"ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f19fbb33103e2c91091973b406b5ee8d","sha1":"3f8cdd969947b0556f76bb67cf5b4f5f2c19b1d1","sha256":"8742cda40ce615ceed3cb7f13bd7110a8236c734867f81b0daaec55432e7e680","sha512":"219524e25a6f245aaf3837c7770700601dba1ebc972ac590155c403181a275a25aa4bd911d527390cee46a6c8171b61c015c0b2ce38171ed9b267a2a88fecff9","ssdeep":"","tlshash":"92610a66760b0df352ae96bad72dace627c3ea2605e5d4f26067f5410ec7b283f44840","size":3281,"data":"","first_seen":"2025-07-12T00:28:21.809567Z","last_seen":"2025-07-12T00:28:21.809567Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"script.anura.io/request.js?646628627779\u0026instance=1631640258\u0026additional=%7B%22uuid%22%3A%2220250712-1027-39bd-bf23-8bf7df01a984%22%7D","fqdn":"script.anura.io","domain":"anura.io","tld":"io"},"ip":{"addr":"18.175.20.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"","requested_by":"https://anbuifoenbi.com/","date":"2025-07-12T00:27:40.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"script.anura.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sun, 15 Sep 2024 00:00:00 GMT","end":"Wed, 15 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"CC:B4:48:82:BF:CC:04:FB:C7:35:8F:3F:D3:69:3F:10:96:9A:EF:C8","sha256":"3E:61:7E:69:03:E5:91:70:F0:A4:74:33:2C:72:68:4F:62:6E:75:4C:6A:B9:74:FA:4E:DA:32:67:90:0A:96:59"}}},"request":{"raw":"GET /request.js?646628627779\u0026instance=1631640258\u0026additional=%7B%22uuid%22%3A%2220250712-1027-39bd-bf23-8bf7df01a984%22%7D HTTP/1.1\r\nHost: script.anura.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anbuifoenbi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 12 Jul 2025 00:27:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: nginx\r\nvary: Accept-Encoding\r\nexpires: Sun, 28 Dec 1980 18:57:00 EST\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0, post-check=0, pre-check=0\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82561,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2335)","md5":"954fe5ec3f608ce284df2a40fb502cd9","sha1":"cdd42a2b586a967e2a5ad03e91dce8649728e522","sha256":"59cbdfc5fa97d1f7b6569bb2ca23cd8906bfee68c7391b20ed0707d3891c0abf","sha512":"785bc2008a9082d498278a99f7805ac877963585eda7729029a3ea48c88862bda3ab7d06ab9756947c894da23c1cfd2c051d78d68aeb8eb900886ad09bf834da","ssdeep":"1536:7bL/R/Gc0GLz/nEvrMQzOJv4OO4zLAADB62gAk/6G:nL/Ic0G/Jv4OoV","tlshash":"f083d5e67572f0140e6245e9217f050ff3ba0a75a89c1090c7e9d8f43cb599f8a3ab8d","first_seen":"2025-07-12T00:28:21.79568Z","last_seen":"2025-07-12T00:28:21.79568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":156,"dns":23,"connect":25,"send":0,"wait":78,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.roundprinceforest.com/mon","fqdn":"obs.roundprinceforest.com","domain":"roundprinceforest.com","tld":"com"},"ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://anbuifoenbi.com/","date":"2025-07-12T00:27:42.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.roundprinceforest.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 03 Jul 2025 00:00:00 GMT","end":"Wed, 01 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"66:A4:D1:A0:9E:4B:8F:97:62:09:0B:29:98:69:C8:43:8B:E2:0C:22","sha256":"F1:0F:96:81:A9:E2:B7:14:23:14:B7:68:DA:70:97:89:4C:4D:6F:38:F5:33:4C:28:49:43:51:E0:F5:06:D7:F3"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obs.roundprinceforest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2483\r\nOrigin: https://anbuifoenbi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anbuifoenbi.com/\r\nCookie: cg_uuid=c66221402a6809b9fe4dc6800d9a8cf0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: https://anbuifoenbi.com\r\ncontent-type: application/json\r\ndate: Sat, 12 Jul 2025 00:27:42 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol100%2Cpid-bodis-gcontrol401%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250712-1027-39bd-bf23-8bf7df01a984\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2670805077781048\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=5271752280062865\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.anbuifoenbi.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1752280062867\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=780142884\u0026rurl=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fsubid1%3D20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:43.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:22 GMT","end":"Mon, 15 Sep 2025 08:41:21 GMT"},"fingerprint":{"sha1":"F0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14","sha256":"34:4D:C1:2D:82:88:21:BA:22:AB:93:60:7B:9D:85:79:EB:78:7D:AE:2A:67:49:2E:D8:64:B8:17:6F:A5:42:55"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Jul 2025 12:09:46 GMT\r\nexpires: Sat, 12 Jul 2025 11:09:46 GMT\r\ncache-control: public, max-age=82800\r\nage: 44277\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-04-01T02:57:50.32115Z","times_seen":412182,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":79,"dns":1,"connect":7,"send":0,"wait":10,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:42.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:42:14 GMT","end":"Mon, 15 Sep 2025 08:42:13 GMT"},"fingerprint":{"sha1":"18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73","sha256":"C2:66:D2:BC:13:71:4F:72:4A:DE:85:BA:8D:BA:D1:40:C2:E6:CB:25:A3:25:62:EB:D9:17:BF:87:E7:EF:4D:67"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026bodis=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.anbuifoenbi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sat, 12 Jul 2025 00:27:42 GMT\r\nexpires: Sat, 12 Jul 2025 00:27:42 GMT\r\ncache-control: private, max-age=3600\r\netag: \"6865523881645703502\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143938,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1888)","md5":"80114adeaafc65a750b50863217efc45","sha1":"24b9bedc5c13c50f2600e65fc690067ee0199d73","sha256":"a97173ff9b232318f4fe419406d34086110657edcb52ebcc33aa09e9e3cf7a7f","sha512":"c9937ae584b5009455935accc4e8c6290a40359b396c5598fb5f2e3808c1411d56106dbcadbea5f2766068e1c67af368554beca6f2902af1a6aaafd8df7048c0","ssdeep":"1536:GU0k3E8T88nj/N39xoaQoh8E3OjYzwbXO+Dy2l7wu8gQQJe/FKb6+XbgmSW3mgKd:dxGEejvbXO+ZEu+hr3W31KkFc","tlshash":"76e34b9d73a5343253a3a4b4603f018fb13af965e80888a4b199c9f47cb4da94277f7d","first_seen":"2025-07-10T21:51:04.100111Z","last_seen":"2025-07-14T19:29:51.880497Z","times_seen":618,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":96,"dns":1,"connect":8,"send":0,"wait":30,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol100%2Cpid-bodis-gcontrol401%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250712-1027-39bd-bf23-8bf7df01a984\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2670805077781048\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=5271752280062865\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.anbuifoenbi.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1752280062867\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=780142884\u0026rurl=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fsubid1%3D20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:43.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:32 GMT","end":"Mon, 15 Sep 2025 08:43:31 GMT"},"fingerprint":{"sha1":"8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89","sha256":"77:59:98:EB:7D:F5:E2:EF:F7:F9:75:2E:52:E6:76:CC:90:6B:83:A7:F3:27:FF:64:E7:68:62:26:0B:FD:36:B4"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sat, 12 Jul 2025 00:27:43 GMT\r\nexpires: Sat, 12 Jul 2025 00:27:43 GMT\r\ncache-control: private, max-age=3600\r\netag: \"13016417740107302477\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143954,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1888)","md5":"f14687d5d74dd41ee54d1a135575c8f5","sha1":"9f852396143e213611b6050ee3ada5d2e111b4ca","sha256":"d3a3b84caba8d8ec2c0cf6e2d87586ce62c55cf575cbee5771c35e935128e901","sha512":"91e3e05b7bfbee181896405fd67856413d665a66a159257718c62a499e00c274a89d02a9a5f7413d3dd721a4448ecdb16820d4dfb842aa3cabc00238113bdbda","ssdeep":"1536:kU0k3E8T88nj/N39xoaQoh8E3OjYzwbXO+Dy2l7wu8gQQJe/FKb6+XbgmSW3mgKd:fxGEejvbXO+ZEu+hr3W31KkFc","tlshash":"fde34b9d73a5343253a3a4b4603f018fb13af965e80888a4b199c9f47cb4da94277f7d","first_seen":"2025-07-08T16:04:35.129291Z","last_seen":"2025-07-14T19:41:03.237023Z","times_seen":448,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.anbuifoenbi.com/_tr","fqdn":"ww25.anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:43.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.anbuifoenbi.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 20:43:46 GMT","end":"Sun, 21 Sep 2025 20:43:45 GMT"},"fingerprint":{"sha1":"58:A3:B0:36:59:7D:2F:E5:80:17:80:FC:DC:BA:6B:E1:BD:DB:6E:27","sha256":"CD:A9:B7:1E:B4:14:2C:88:B0:88:50:1E:50:4E:FE:99:A7:B6:56:3E:CB:3B:BA:64:A8:B7:85:AC:33:15:B6:4A"}}},"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww25.anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984\r\nContent-Type: application/json\r\nContent-Length: 2021\r\nOrigin: https://ww25.anbuifoenbi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cq_duid=1.1752280060.yPQp61Cr2iwy6FQO; _cq_suid=1.1752280060.58ApCwphKY9cDhmn; parking_session=73525034-7af1-4697-90b6-945d03f51e75\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Jul 2025 00:27:43 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 2\r\nX-Request-Id: 9ebe6dde-4be0-4f45-abfa-28f6e85e3a1c\r\nSet-Cookie: parking_session=73525034-7af1-4697-90b6-945d03f51e75; expires=Sat, 12 Jul 2025 00:42:43 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-04-04T03:44:20.50954Z","times_seen":390748,"resource_available":true,"data":null}},"time_used":218,"timings":{"blocked":90,"dns":3,"connect":1,"send":0,"wait":38,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=xyrzy81j3fjv\u0026cd_fexp=72717108\u0026aqid=_6txaODBA6WmjuwPq96WiQU\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=780142884\u0026csala=7%7C0%7C361%7C148%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:44.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:32 GMT","end":"Mon, 15 Sep 2025 08:43:31 GMT"},"fingerprint":{"sha1":"8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89","sha256":"77:59:98:EB:7D:F5:E2:EF:F7:F9:75:2E:52:E6:76:CC:90:6B:83:A7:F3:27:FF:64:E7:68:62:26:0B:FD:36:B4"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=xyrzy81j3fjv\u0026cd_fexp=72717108\u0026aqid=_6txaODBA6WmjuwPq96WiQU\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=780142884\u0026csala=7%7C0%7C361%7C148%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.anbuifoenbi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-J9UEOYe4TuMcDr09EO3pdA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sat, 12 Jul 2025 00:27:44 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/js/fingerprint/iife.min.js","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://anbuifoenbi.com/","date":"2025-07-12T00:27:40.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anbuifoenbi.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 17:49:21 GMT","end":"Wed, 17 Sep 2025 17:49:20 GMT"},"fingerprint":{"sha1":"60:8E:8C:47:6B:AF:48:07:F2:6C:D6:3D:02:E0:A4:88:03:74:26:60","sha256":"06:95:C0:C2:FA:75:D2:D4:70:D7:92:B9:38:79:B4:B7:F1:B0:00:73:42:5D:29:79:B5:C2:95:98:C3:D3:E6:75"}}},"request":{"raw":"GET /js/fingerprint/iife.min.js HTTP/1.1\r\nHost: anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anbuifoenbi.com/\r\nCookie: __tad=1752280059.7319336\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sat, 12 Jul 2025 00:27:40 GMT\r\nserver: Apache\r\nlast-modified: Tue, 22 Oct 2024 03:25:40 GMT\r\netag: \"85c0-6250852d63500-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 14345\r\ncontent-type: application/javascript\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34240,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33896), with CRLF line terminators","md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-04-04T03:46:27.235602Z","times_seen":34685,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":319,"dns":2,"connect":148,"send":0,"wait":155,"receive":143,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obs.roundprinceforest.com/ct?id=87243\u0026url=https%3A%2F%2Fanbuifoenbi.com%2F\u0026sf=0\u0026tpi=\u0026ch=cheq4ppc\u0026uvid=20250712-1027-39bd-bf23-8bf7df01a984\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1752280060984\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=9300990518561270122615021202207981178622196815692518269602211101251251168205513001177721\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=uedX58lndi\u0026pto=1840\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1752280060.yPQp61Cr2iwy6FQO\u0026suid=1.1752280060.58ApCwphKY9cDhmn\u0026tuid=1.1752280060.GxNqKtqM9fenUDoa\u0026fbc=-\u0026gtm=-\u0026it=4%2C928%2C139\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D","fqdn":"obs.roundprinceforest.com","domain":"roundprinceforest.com","tld":"com"},"ip":{"addr":"35.172.245.152","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://anbuifoenbi.com/","date":"2025-07-12T00:27:41.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.roundprinceforest.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Thu, 03 Jul 2025 00:00:00 GMT","end":"Wed, 01 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"66:A4:D1:A0:9E:4B:8F:97:62:09:0B:29:98:69:C8:43:8B:E2:0C:22","sha256":"F1:0F:96:81:A9:E2:B7:14:23:14:B7:68:DA:70:97:89:4C:4D:6F:38:F5:33:4C:28:49:43:51:E0:F5:06:D7:F3"}}},"request":{"raw":"GET /ct?id=87243\u0026url=https%3A%2F%2Fanbuifoenbi.com%2F\u0026sf=0\u0026tpi=\u0026ch=cheq4ppc\u0026uvid=20250712-1027-39bd-bf23-8bf7df01a984\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1752280060984\u0026hl=2\u0026op=0\u0026ag=2881387774\u0026rand=9300990518561270122615021202207981178622196815692518269602211101251251168205513001177721\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=linux%20x86_64\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=W1siZWYiLDQwNDBdLFsiYWJuY2giLDE2XSxbLTgsIi0iXSxbLTU1LCIwIl0sWy02MCwiLSJdLFstNjgsIi0iXSxbLTcsIi0iXSxbLTEyLCJcIjFcIiJdLFstMTUsIi0iXSxbLTE3LCI0OCJdLFstMjYsIi0iXSxbLTI3LCItIl0sWy0yOSwiLSJdLFstNTIsIi0iXSxbLTU5LCItIl0sWy02MSwiLSJdLFstMSwiTGludXggeDg2XzY0Il0sWy0xMCwiLSJdLFstNiwie1wid1wiOltcIjBcIixcIl9fY3RjZ19jdF84NzI0M19leGVjXCJdLFwiblwiOltdLFwiZFwiOltdfSJdLFstMzIsIi0iXSxbLTQyLCI4ODMzOTkwMTYiXSxbLTQ0LCIwLDUsMCw1Il0sWy01OCwiLSJdLFstNCwiLSJdLFstMTYsIjAiXSxbLTYyLCI1OCJdLFstNSwiLSJdLFstMjUsIi0iXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstNDgsIltcIi1cIixcIi1cIixcIi1cIixcIi1cIixcIi1cIl0iXSxbLTU0LCJ7XCJoXCI6W10sXCJkXCI6W10sXCJiXCI6W1wiMjU2NDU1NDYwM1wiLFwiMTczNTIyNzA2MFwiLFwiMTM2MTE0Mjc0NVwiLFwiMTgwNDM0ODE3XCJdLFwic1wiOjF9Il0sWy02MywiLSJdLFstNzIsIkV4VT0iXSxbLTIsIjEwLElzTjluR25XYkFZQUl4TmZRYU9xR0UwQ0ZBUXNjRzAwSW5oT2JZQkFLWVVPelFPNkVYMDIwSW1HTGN1NjJ1cmRQL2MyZDJwTm1WWkF3ZjMvLzh6NzlHckhhMVd1M09tWFBQdmUiXSxbLTE5LCJbMCwwLDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMCwwLDAsMCxcIi1cIixcIi1cIiwxMjgwLDEwMjQsbnVsbF0iXSxbLTI4LCJlbi1VUyxlbiJdLFstNDUsIi0iXSxbLTQ2LCIwIl0sWy01MCwiLSJdLFstNTMsIjAwMSJdLFstNjYsIi0iXSxbLTY5LCJMaW51eCB4ODZfNjR8fHw0OHwtfC0iXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTExLCJ7XCJ0XCI6XCJcIixcIm1cIjpbXX0iXSxbLTIwLCItIl0sWy0yNCwiW10iXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDAxMTEwMDEwMDAwMDEwMDAwMDAwMDAxMCJdLFstNTYsImxhbmRzY2FwZS1wcmltYXJ5Il0sWy02NCwiLSJdLFstNjUsIi0iXSxbLTcxLCJhMDEwMDEwMTEwMDEwMDEwMTAwMDEwMTAwMTEwMTEwMDAwMDAxMCJdLFstOSwiLSJdLFstMTMsIi0iXSxbLTE0LCItIl0sWy0yMSwiLSJdLFsxMiwie1wiY3R4XCI6XCJ3ZWJnbFwiLFwidlwiOlwibWVzYVwiLFwiclwiOlwibGx2bXBpcGVcIixcInNsdlwiOlwid2ViZ2wgZ2xzbCBlcyAxLjBcIixcImd2ZXJcIjpcIndlYmdsIDEuMFwiLFwiZ3ZlblwiOlwibW96aWxsYVwiLFwiYmVuXCI6NzksXCJ3Z2xcIjoxLFwiZ3JlblwiOlwibGx2bXBpcGVcIixcInNlZlwiOjQ5NDE5NTA0MyxcInNlY1wiOlwiXCJ9Il0sWy00NywiVVRDLGVuLVVTLGxhdG4sZ3JlZ29yeSJdLFstNTEsIi0iXSxbLTcwLCItIl0sWy0xOCwiWzEsMCwwLDBdIl0sWy0yMiwiW1wiblwiLFwiblwiXSJdLFstMjMsIisiXSxbLTM1LCJbMTc1MjI4MDA2MDk3OSwwXSJdLFstNTcsIlMzbFJUVTFKU2dNV0ZsWmJGMHRXVEZkZFNVdFFWMXBjWDFaTFhFcE5GMXBXVkJaUUZnb0xYMWhiQ1ZwWUNRRUFEd3dQREE4Qld3d0pEZzROV2cxWUFGZ0xEZ0VKRjFOS0F3Z0REd29BRHc4VkRnZ0FGazBYWEVGSlZrdE5TaFlGZVZGTlRVbEtBeFlXVmxzWFMxWk1WMTFKUzFCWFdseGZWa3RjU2swWFdsWlVGbEFXQ2d0ZldGc0pXbGdKQVFBUERBOE1Ed0ZiREFrT0RnMWFEVmdBV0FzT0FRa1hVMG9EQ0FNUERRZ1BDeFZLWEUxdFVGUmNWa3hOR1ZGWVYxMVZYRXNURGdnQUZrMFhYRUZKVmt0TlNoWUZlVkZOVFVsS0F4WVdWbHNYUzFaTVYxMUpTMUJYV2x4ZlZrdGNTazBYV2xaVUZsQVdDZ3RmV0ZzSldsZ0pBUT09Il0sWy02NywiLSJdLFsiYm5jaCIsNjkwXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTMxLCJmYWxzZSJdLFstMzQsIi0iXSxbLTM4LCJjLC0xLC0xLDMwLDAsMSwwLDE3MiwzMjEsMTY5LC0xLDAsLCwxODM2LDE4MzUiXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZSxmYWxzZV0iXSxbLTQwLCIzNyJdLFstNDEsIi0iXSxbLTQ5LCItIl0sWy0zMywiLSJdLFstMzcsIi0iXSxbImRkYiIsIjAsMTAsMSwwLDAsNiwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMywwLDAsMSwwLDAsMiwxLDcsMCwwLDMyLDAsMCwxLDAsMCwxLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwxLDAiXSxbImNiIiwiMCwwLDAsMCwwLDAsMCwwLDEsMiw1LDAsODIsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDEsMCwxLDAsMCwwLDAsMCwwLDEsMCwwLDExLDAsMCwwLDEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsNSwwLDQsMiwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDEsMCwwLDAsMiwwIl1d\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=uedX58lndi\u0026pto=1840\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1752280060.yPQp61Cr2iwy6FQO\u0026suid=1.1752280060.58ApCwphKY9cDhmn\u0026tuid=1.1752280060.GxNqKtqM9fenUDoa\u0026fbc=-\u0026gtm=-\u0026it=4%2C928%2C139\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Og%3D%3D HTTP/1.1\r\nHost: obs.roundprinceforest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anbuifoenbi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: text/javascript\r\ndate: Sat, 12 Jul 2025 00:27:41 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=c66221402a6809b9fe4dc6800d9a8cf0; Max-Age=29030400; Path=/; Expires=Sat, 13 Jun 2026 00:27:41 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: https://anbuifoenbi.com\r\ncontent-length: 1132\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3281,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3281), with no line terminators","md5":"f19fbb33103e2c91091973b406b5ee8d","sha1":"3f8cdd969947b0556f76bb67cf5b4f5f2c19b1d1","sha256":"8742cda40ce615ceed3cb7f13bd7110a8236c734867f81b0daaec55432e7e680","sha512":"219524e25a6f245aaf3837c7770700601dba1ebc972ac590155c403181a275a25aa4bd911d527390cee46a6c8171b61c015c0b2ce38171ed9b267a2a88fecff9","ssdeep":"","tlshash":"92610a66760b0df352ae96bad72dace627c3ea2605e5d4f26067f5410ec7b283f44840","first_seen":"2025-07-12T00:28:21.809567Z","last_seen":"2025-07-12T00:28:21.809567Z","times_seen":1,"resource_available":true,"data":null}},"time_used":870,"timings":{"blocked":376,"dns":33,"connect":107,"send":0,"wait":117,"receive":0,"ssl":233},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","fqdn":"ww25.anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-12T00:27:41.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.anbuifoenbi.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 20:43:46 GMT","end":"Sun, 21 Sep 2025 20:43:45 GMT"},"fingerprint":{"sha1":"58:A3:B0:36:59:7D:2F:E5:80:17:80:FC:DC:BA:6B:E1:BD:DB:6E:27","sha256":"CD:A9:B7:1E:B4:14:2C:88:B0:88:50:1E:50:4E:FE:99:A7:B6:56:3E:CB:3B:BA:64:A8:B7:85:AC:33:15:B6:4A"}}},"request":{"raw":"GET /?subid1=20250712-1027-39bd-bf23-8bf7df01a984 HTTP/1.1\r\nHost: ww25.anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: _cq_duid=1.1752280060.yPQp61Cr2iwy6FQO; _cq_suid=1.1752280060.58ApCwphKY9cDhmn\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Jul 2025 00:27:41 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 1182\r\nX-Request-Id: 73525034-7af1-4697-90b6-945d03f51e75\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: sec-ch-prefers-color-scheme\r\nCritical-Ch: sec-ch-prefers-color-scheme\r\nVary: sec-ch-prefers-color-scheme\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Ug6Rvqq+Z0s7TFp6Vl7uRynkfP0q9RNzfd5LQbWWZTUBip/LY13QqKiCJUffEa72x8ScFJTPtL7126ohACyvKw==\r\nSet-Cookie: parking_session=73525034-7af1-4697-90b6-945d03f51e75; expires=Sat, 12 Jul 2025 00:42:42 GMT; path=/\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1182,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (450)","md5":"3c39f23ad40a095fac03ea88383a95a8","sha1":"a27480bd1f7c1046f8fba5e449cb4a59bd10d3ff","sha256":"0b476025f9e53d3cca1824f44a2617201afbb7902c9a6258eaa3bba32fe87ddf","sha512":"ab1a006378083aa1dc784cbb080a7ab352fa5b429b66d102ec2ffb701ea3e1f5b0267b4a02207c07ef80958340d9586b8ed1e8c14df9318750690a3bb6a2cdd2","ssdeep":"","tlshash":"1e21aab71446484a60b004551df8fa5c8d03336d86027cd1bfdcf0767ac05c1a56f9dc","first_seen":"2025-07-12T00:28:21.812735Z","last_seen":"2025-07-12T00:28:21.812735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":277,"dns":197,"connect":1,"send":0,"wait":39,"receive":0,"ssl":82},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.anbuifoenbi.com/bbhQsCybz.js","fqdn":"ww25.anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:42.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.anbuifoenbi.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 20:43:46 GMT","end":"Sun, 21 Sep 2025 20:43:45 GMT"},"fingerprint":{"sha1":"58:A3:B0:36:59:7D:2F:E5:80:17:80:FC:DC:BA:6B:E1:BD:DB:6E:27","sha256":"CD:A9:B7:1E:B4:14:2C:88:B0:88:50:1E:50:4E:FE:99:A7:B6:56:3E:CB:3B:BA:64:A8:B7:85:AC:33:15:B6:4A"}}},"request":{"raw":"GET /bbhQsCybz.js HTTP/1.1\r\nHost: ww25.anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984\r\nCookie: _cq_duid=1.1752280060.yPQp61Cr2iwy6FQO; _cq_suid=1.1752280060.58ApCwphKY9cDhmn; parking_session=73525034-7af1-4697-90b6-945d03f51e75\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Jul 2025 00:27:41 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 38313\r\nX-Request-Id: ff5f5397-c038-48c1-9d8a-ca5f1c4b11c0\r\nSet-Cookie: parking_session=73525034-7af1-4697-90b6-945d03f51e75; expires=Sat, 12 Jul 2025 00:42:42 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38313,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38310)","md5":"3a5b3b845837b2e753a93ba9038520a6","sha1":"e763bdd00c1711f3a9a72f423c56d514b767e29f","sha256":"c48dace724886452187a7ec405be5106812819b348039052c7eb50ff4940676f","sha512":"647d18988a3c43abf96800589a0832fc2ac7304d992e7a738f75d509b4b0cd7d35b6db543b256176fca9e751e8972286baaf78aeb5eba0658faacd844586a8d5","ssdeep":"768:TP2y16QVcJ7n85NdxBB5gPCGIPNMalnEE0xNE2X0Ddem+euROgvMzLXWI+673XOW:2dalnEE0xNEGR+ZJ","tlshash":"68033ba23ab7e47046e2c5dae8779215f338210a3405c068f96cc8de365ee47d73ab75","first_seen":"2025-07-09T17:47:53.47897Z","last_seen":"2025-07-15T18:38:38.802415Z","times_seen":513,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":88,"dns":1,"connect":2,"send":0,"wait":39,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.anbuifoenbi.com/_fd?subid1=20250712-1027-39bd-bf23-8bf7df01a984","fqdn":"ww25.anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:42.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.anbuifoenbi.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Jun 2025 20:43:46 GMT","end":"Sun, 21 Sep 2025 20:43:45 GMT"},"fingerprint":{"sha1":"58:A3:B0:36:59:7D:2F:E5:80:17:80:FC:DC:BA:6B:E1:BD:DB:6E:27","sha256":"CD:A9:B7:1E:B4:14:2C:88:B0:88:50:1E:50:4E:FE:99:A7:B6:56:3E:CB:3B:BA:64:A8:B7:85:AC:33:15:B6:4A"}}},"request":{"raw":"POST /_fd?subid1=20250712-1027-39bd-bf23-8bf7df01a984 HTTP/1.1\r\nHost: ww25.anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984\r\nContent-Type: application/json\r\nOrigin: https://ww25.anbuifoenbi.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cq_duid=1.1752280060.yPQp61Cr2iwy6FQO; _cq_suid=1.1752280060.58ApCwphKY9cDhmn; parking_session=73525034-7af1-4697-90b6-945d03f51e75\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 12 Jul 2025 00:27:41 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 5201\r\nX-Request-Id: c4d145e2-9554-4378-9cd4-959290b8f699\r\nSet-Cookie: parking_session=73525034-7af1-4697-90b6-945d03f51e75; expires=Sat, 12 Jul 2025 00:42:42 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5201,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (5201), with no line terminators","md5":"1cb021505ee7c7fe07b1885cd097e04a","sha1":"4ecf5198433bab04a5f6041345678bf6f202486f","sha256":"f2099ecf5a35b34234e68ef1c05248e63331c8413a683b9f9e5d8dfdfc8fe03a","sha512":"1b7780276d9adbd40307ee3594d6ecfd44fadecfa2087b68faf61623d1a5ee4e3410ddba80ef8148af030ddf191fb4ed73ffc37837ca0a94a66dcf8700581e1e","ssdeep":"96:N9KCSI7JgS4P2MYgI9sDhzX9WERyXyRCGK3tvnChMp:aZI7JRwY59czX9WgCGK3tvKO","tlshash":"ddb1a5da8f193896c74a850376dd07db934fc2bf327ea16d825f8944860a50f39e032b","first_seen":"2025-07-12T00:28:21.816172Z","last_seen":"2025-07-12T00:28:21.816172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":80,"dns":1,"connect":1,"send":0,"wait":50,"receive":1,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-12T00:27:39.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anbuifoenbi.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 17:49:21 GMT","end":"Wed, 17 Sep 2025 17:49:20 GMT"},"fingerprint":{"sha1":"60:8E:8C:47:6B:AF:48:07:F2:6C:D6:3D:02:E0:A4:88:03:74:26:60","sha256":"06:95:C0:C2:FA:75:D2:D4:70:D7:92:B9:38:79:B4:B7:F1:B0:00:73:42:5D:29:79:B5:C2:95:98:C3:D3:E6:75"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sat, 12 Jul 2025 00:27:39 GMT\r\nserver: Apache\r\nset-cookie: __tad=1752280059.7319336; expires=Tue, 10-Jul-2035 00:27:39 GMT; Max-Age=315360000\r\naccept-ch: Device-Memory, Content-DPR, DPR, Viewport-Width, Width, Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Form-Factors, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-WoW64\r\npermissions-policy: ch-device-memory=(self \"https://*.anura.io\"), ch-content-dpr=(self \"https://*.anura.io\"), ch-dpr=(self \"https://*.anura.io\"), ch-viewport-width=(self \"https://*.anura.io\"), ch-width=(self \"https://*.anura.io\"), ch-ua=(self \"https://*.anura.io\"), ch-ua-arch=(self \"https://*.anura.io\"), ch-ua-bitness=(self \"https://*.anura.io\"), ch-ua-form-factors=(self \"https://*.anura.io\"), ch-ua-full-version=(self \"https://*.anura.io\"), ch-ua-full-version-list=(self \"https://*.anura.io\"), ch-ua-mobile=(self \"https://*.anura.io\"), ch-ua-model=(self \"https://*.anura.io\"), ch-ua-platform=(self \"https://*.anura.io\"), ch-ua-platform-version=(self \"https://*.anura.io\"), ch-ua-wow64=(self \"https://*.anura.io\")\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 965\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1908,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4f5269ea1a5264ed8afa95c31ac50bf1","sha1":"cbc72c364e9518bd971b19050bcbffd2aff4c80f","sha256":"88a2a78b42d8307f76a10f79b9bd5531693fa263758a892e04c89fdc801defce","sha512":"a7274d85b713bf90c1dbc9ed14c873a6c512f3ce344019fa8eb9514cc72816d8e6d8ef68c3ac63c7bf069c18d00edfdaf24557eff6f7f930702d38590d47d329","ssdeep":"","tlshash":"5c41404e7d82d41299a800dd8db8e60dc167e314a58dfc78e0c0d9659c607e9ac28fae","first_seen":"2025-07-12T00:28:21.818399Z","last_seen":"2025-07-12T00:28:21.818399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1150,"timings":{"blocked":491,"dns":169,"connect":148,"send":0,"wait":168,"receive":0,"ssl":170},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ob.roundprinceforest.com/i/32fab0ca089656568b50774c4a9a2780.js","fqdn":"ob.roundprinceforest.com","domain":"roundprinceforest.com","tld":"com"},"ip":{"addr":"3.164.230.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://anbuifoenbi.com/","date":"2025-07-12T00:27:40.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.roundprinceforest.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 19 May 2025 00:00:00 GMT","end":"Wed, 17 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:AE:C6:B0:E9:35:1E:46:9B:81:CA:9E:DF:BA:32:FD:77:8D:24:F2","sha256":"C5:A4:6E:2F:2B:B8:4C:A4:84:E0:53:19:D0:62:92:2C:F3:AD:F4:62:AA:48:AB:78:B7:52:75:E1:ED:68:55:9C"}}},"request":{"raw":"GET /i/32fab0ca089656568b50774c4a9a2780.js HTTP/1.1\r\nHost: ob.roundprinceforest.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anbuifoenbi.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 42002\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Fri, 11 Jul 2025 13:51:39 GMT\r\ncache-control: max-age=43200\r\nexpires: Sat, 12 Jul 2025 01:51:37 GMT\r\netag: \"1bee7-7MHt+uPVvfbWTisdAMV2JRlf3SY\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ea02abebb2a440d706b520c89c509e4e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: u2C9fOAckavwrRCjSbrhfTvad-_kZe5R_bA8TkKRTDelyP4c17JRSQ==\r\nage: 38163\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":114407,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"c7560464fed0f368df7711bc25bcda3e","sha1":"ecc1edfae3d5bdf6d64e2b1d00c57625195fdd26","sha256":"3ced6780a42f95a184f8436fdcaaa0622e661e063e052d99720229b8d23a4bd8","sha512":"03031156a886b64a28ef6801086d2b63208b030ee94686ef078b748f156db6d2f9bf39b1c11ab56d61ff0c4ca22f1bc14535175b817f535c0bff47831ecc4e2f","ssdeep":"1536:SeEWyNialgKaklqf/ut9MjmecxwjciYtMwlzirsxtjC3UHHLondoHuLJpb5NNw7P:peNHjaetKmeHju5tjTuFUI+o0","tlshash":"92b3d7adf2e6702503933465047f410ae27b5e513c4b8284d6bae5d4ac7ce8e517bfac","first_seen":"2025-07-10T05:05:22.06377Z","last_seen":"2025-07-13T13:19:23.031658Z","times_seen":107,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":75,"dns":43,"connect":9,"send":0,"wait":9,"receive":11,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"anbuifoenbi.com/favicon.ico","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://anbuifoenbi.com/","date":"2025-07-12T00:27:40.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anbuifoenbi.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 17:49:21 GMT","end":"Wed, 17 Sep 2025 17:49:20 GMT"},"fingerprint":{"sha1":"60:8E:8C:47:6B:AF:48:07:F2:6C:D6:3D:02:E0:A4:88:03:74:26:60","sha256":"06:95:C0:C2:FA:75:D2:D4:70:D7:92:B9:38:79:B4:B7:F1:B0:00:73:42:5D:29:79:B5:C2:95:98:C3:D3:E6:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://anbuifoenbi.com/\r\nCookie: __tad=1752280059.7319336\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.0 403 Forbidden\r\ncache-control: no-cache\r\ncontent-type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":null,"data":{"size":94,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e96ddceb1c305b9ad21eaae42522c26f","sha1":"ad08ae39a71ed5ba992b8b5dabc450d046354696","sha256":"9221cfedfc5e03790f46c7890bca21fcc47c5788d89dab0aa0799c492b6ae78a","sha512":"1cc850f76467645447e9935f4de13ede698727b4fb598c7bd36de2779596d8b5a85cb94b0cf1fb2259ad1d988f1f199e3f4c310dfdc22fcdd378b8e773f0dbd5","ssdeep":"","tlshash":"bdb012cf360e0d0cbb9307d24dc71bb01c2e836c2c46001027859a333400075cda71cd","first_seen":"2023-04-09T07:10:46Z","last_seen":"2026-04-04T03:35:22.353689Z","times_seen":4578,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":1,"connect":147,"send":0,"wait":149,"receive":8,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"anbuifoenbi.com/?tr_uuid=20250712-1027-39bd-bf23-8bf7df01a984\u0026fp=-7","fqdn":"anbuifoenbi.com","domain":"anbuifoenbi.com","tld":"com"},"ip":{"addr":"103.224.182.242","port":80,"asn":133618,"as":"Trellian Pty. Limited","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-12T00:27:41.644Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?tr_uuid=20250712-1027-39bd-bf23-8bf7df01a984\u0026fp=-7 HTTP/1.1\r\nHost: anbuifoenbi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __tad=1752280059.7319336\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Sat, 12 Jul 2025 00:27:41 GMT\r\nserver: Apache\r\nlocation: http://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984\r\ncontent-length: 2\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1182,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":451,"timings":{"blocked":136,"dns":1,"connect":147,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol100%2Cpid-bodis-gcontrol401%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250712-1027-39bd-bf23-8bf7df01a984\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2670805077781048\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=5271752280062865\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.anbuifoenbi.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1752280062867\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=780142884\u0026rurl=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fsubid1%3D20250712-1027-39bd-bf23-8bf7df01a984","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:42.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:32 GMT","end":"Mon, 15 Sep 2025 08:43:31 GMT"},"fingerprint":{"sha1":"8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89","sha256":"77:59:98:EB:7D:F5:E2:EF:F7:F9:75:2E:52:E6:76:CC:90:6B:83:A7:F3:27:FF:64:E7:68:62:26:0B:FD:36:B4"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol100%2Cpid-bodis-gcontrol401%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250712-1027-39bd-bf23-8bf7df01a984\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2670805077781048\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=5271752280062865\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.anbuifoenbi.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1752280062867\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=780142884\u0026rurl=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fsubid1%3D20250712-1027-39bd-bf23-8bf7df01a984 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.anbuifoenbi.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Sat, 12 Jul 2025 00:27:43 GMT\r\nexpires: Sat, 12 Jul 2025 00:27:43 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-yGWoCb98h2QetAI_Oy0zZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2682\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13647,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13184)","md5":"9ef8bea921fbcb07093bf2c1c13943e8","sha1":"62563850ac9c8aa7e02a81d2e9da31d8ee32188a","sha256":"0d16a54cd01aa9fc3bfd1b17de184d99ecf93b721dd949d774bb297abd80b326","sha512":"7636a1ff099cdc8bbc5d04e6f5935e90f7684e923241057a7de89344814a6ab98e6bebf1245af9b911c16cc3a7d59da8a2867397cd753b92fd539ad53657f86d","ssdeep":"96:GE/yk2iIlb5lphMzwronbo4tm0yEM6vfNYrWX1+3MwDbw96DIooNzMwDiw96DHVO:GE12iMpgbogm0yEMcfWrGMifUVx/5kF","tlshash":"2e5232377062272d0507dc541b296f6dd181d53ac46b36e848a35b26c7ebf838fe628e","first_seen":"2025-07-12T00:28:21.823889Z","last_seen":"2025-07-12T00:28:21.823889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":79,"dns":0,"connect":15,"send":0,"wait":134,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol100%2Cpid-bodis-gcontrol401%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20250712-1027-39bd-bf23-8bf7df01a984\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2670805077781048\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108\u0026format=r3\u0026nocache=5271752280062865\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.anbuifoenbi.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1752280062867\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=780142884\u0026rurl=https%3A%2F%2Fww25.anbuifoenbi.com%2F%3Fsubid1%3D20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:43.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:41:22 GMT","end":"Mon, 15 Sep 2025 08:41:21 GMT"},"fingerprint":{"sha1":"F0:21:D6:7C:DA:9E:5F:BA:DB:3F:DB:BA:4D:51:57:AA:5C:C9:CB:14","sha256":"34:4D:C1:2D:82:88:21:BA:22:AB:93:60:7B:9D:85:79:EB:78:7D:AE:2A:67:49:2E:D8:64:B8:17:6F:A5:42:55"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 11 Jul 2025 02:27:02 GMT\r\nexpires: Sat, 12 Jul 2025 01:27:02 GMT\r\ncache-control: public, max-age=82800\r\nage: 79241\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":240,"dns":4,"connect":10,"send":0,"wait":8,"receive":0,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=anekfd4y8m71\u0026cd_fexp=72717108\u0026aqid=_6txaODBA6WmjuwPq96WiQU\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=780142884\u0026csala=7%7C0%7C361%7C148%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.anbuifoenbi.com/?subid1=20250712-1027-39bd-bf23-8bf7df01a984","date":"2025-07-12T00:27:44.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:32 GMT","end":"Mon, 15 Sep 2025 08:43:31 GMT"},"fingerprint":{"sha1":"8B:6E:97:0F:56:7E:CB:4C:3C:C4:2B:E1:53:0F:8A:D7:5E:51:67:89","sha256":"77:59:98:EB:7D:F5:E2:EF:F7:F9:75:2E:52:E6:76:CC:90:6B:83:A7:F3:27:FF:64:E7:68:62:26:0B:FD:36:B4"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=anekfd4y8m71\u0026cd_fexp=72717108\u0026aqid=_6txaODBA6WmjuwPq96WiQU\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=780142884\u0026csala=7%7C0%7C361%7C148%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.anbuifoenbi.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-6rpNztcZAqBEfHquvYNNiw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sat, 12 Jul 2025 00:27:44 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T03:45:59.439381Z","times_seen":13315505,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}