{"report_id":"3bcf6206-70b8-40f3-b97f-2d34b324595b","version":0,"status":"done","tags":[],"date":"2026-09-15T17:59:42Z","url":{"schema":"https","addr":"spax35p.icu/","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":0,"asn":200019,"as":"Alexhost Srl","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"title":"Google","dom":{"size":316344,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27240)","md5":"29ad28ec3c283580f30dfdfd96f2dc93","sha1":"1d6b81a34598e78711eff496071e0653d49a59bf","sha256":"1c40854578ad2fd700e1b63c6813021e64f07326e020423075a1890c05922121","sha512":"6758829d53b55d91821c3657eb703e10cf3d9f233fecb17528ed15d2356cbbe1ca063a0147e81d996842417187560dea772cc0f1920629de1ef5277d883df26b","ssdeep":"3072:aTaLmwGzHzdnvKAsWRw5gFg3AoeIieXvJ8NUQ7iAX:0aLmwGzHhnCAsWRw5gFboeI/jQL","tlshash":"38647d716300b83bb917daa0e6bf7f4e3c35e12bdd0a46b8a995e5709ee19f2041531c","dom_hash":"domhash40e770a0e2c74ce03e752f1cb4e21b3d","first_seen":"2026-09-15T17:59:48.110967Z","last_seen":"2026-09-15T17:59:48.110967Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"spax35p.icu/","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":0,"asn":200019,"as":"Alexhost Srl","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T17:59:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"spax35p.icu","ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"domain_registered":"2026-05-13","domain_rank":0,"first_seen":"2026-09-15T17:35:38.625292Z","last_seen":"2026-09-15T17:35:38.625292Z","alert_count":12,"request_count":12,"received_data":278846,"sent_data":5922,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"ogads-pa.clients6.google.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":508,"first_seen":"2025-03-25T10:27:20.769449Z","last_seen":"2026-09-14T11:52:42.40592Z","alert_count":0,"request_count":2,"received_data":1300,"sent_data":1807,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":3,"received_data":259764,"sent_data":1737,"comment":"","tags":null,"fingerprints":null},{"fqdn":"csp.withgoogle.com","ip":{"addr":"142.250.178.49","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4614,"first_seen":"2015-10-29T09:31:36Z","last_seen":"2026-09-14T11:17:02.057396Z","alert_count":0,"request_count":1,"received_data":1669,"sent_data":537,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":1,"received_data":23809,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":26,"received_data":2285333,"sent_data":41613,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":2,"received_data":41908,"sent_data":1106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"play.google.com","ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":48,"first_seen":"2013-05-30T23:24:35Z","last_seen":"2026-09-14T09:09:55.872982Z","alert_count":0,"request_count":2,"received_data":1101,"sent_data":1611,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=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0/dg=0/br=1/rs=ACT90oHatcyD7eCmIYJ6wW06Z51qgrFkEg/m=lOO0Vd,sya3,P6sQOc?cb=121509378\u0026xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4368db2b97057f6a3ee4deba715ca51d","sha1":"361125bc02cb84e5566ab9b7e3986f4fc43a1d2b","sha256":"23fed0ca15e0ff3c30b5f2cc8586bba0b7e87a815d57bfa57ed3269b9df11169","sha512":"f63aa5ab65ca268f9b2d821e1ab54233204608ae37cd6942b463dcd2a12a257cd20d51e6a93375958792bf1aa6c18000e852c41f8f4950829ea765391d040cd4","ssdeep":"","tlshash":"8041733cb1ebb0530256f0e4112e108696eebc26a0891c7d7ef4bdca69c50c985a637c","size":2038,"data":"","first_seen":"2026-09-15T17:36:20.819191Z","last_seen":"2026-09-15T17:59:48.115977Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=qTnoBf,syal,sOXFj,oGtAuc,NJ1rfe,syau,q0xTif,y05UD,PPhKqf,vECdaf,sy1j1,syqr,sysw,sy2c4,sy21f,sy2c5,sy2a6,sy2a7,sy1d8,sy1ha,sy1hc,sy1he,sy1hf,epYOx?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7df48a9f178ee6d00f94b7641fa95e9","sha1":"7f64acb4b1e5e9fc580876319e8d37ab57a066bc","sha256":"4eaf4f8dbf40a5b185e8d7d5f3a80fc880440053f4ec5d13b42744fd1e5c1c64","sha512":"acad41e887cad36d75801dd15ec1d104b2c0493adfaa7f7e4c9d550f446e0c032eced5f316a7c591c9e23402e2e9352005900371ad00c5f1f87eb152fbba19c5","ssdeep":"384:RUMS1NgsZJMQVdh9VAkzynZFXpL65hQpjts5KnNPZaDRy0QnB83ucq70vzB:G1HcZ9pLPBts5KaDRy0QnB83ucLrB","tlshash":"ecc24ab092a120135217a5d8b99b77dde05f26dbef2744b8a934f784c5e1a8403f2f39","size":26749,"data":"","first_seen":"2026-09-15T17:36:20.829082Z","last_seen":"2026-09-15T17:59:48.125722Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=sy2gn,sy2gg,sy2gf,sy2ge,sy2gc,sy25h,sy2gd,sy16t,sy2gm,sy2gh,sy2gl,sy1u4,sy2gb,syug,sy10b,r8E4Ze,sy2fa,sysj,sy2f9,nNxkYd,sy11m,sy11n,sy11l,sy2fz,sy2fy,sy2fv,sy20c,sy1y1,sy1y2,sy1wk,sy1we,sy1wb,sy2fx,sy2fw,sy2ez,sy217,sy1wa,sy1vx,sy1vu,sy1vw,sy1w7,sy122,sy121,nTNfhe,sy2en,P10Owf,sy1a9,gSZvdb,sy19k,sy19i,syp4,sys5,CnSW2d,sy19f,sy19c,sy196,sy19e,sy197,nRwWne,sy19h,fXO0xe?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00eee7a7180252593a5fd55a21e5d993","sha1":"669795e540e6e702a65267509637b50d9d7d5867","sha256":"72854f0dbe0e7b9a3b8491e527108453ae511786c2fa73053574aeb32a3d4aad","sha512":"f2d543dc98127627d76a3bfd87cafbe3c9e2fbda25436659fbd6ee24aa7bb4eb460543e18811503d6a0171398a8c5363ad143c9c1ce5e7cb24ea9f84b4a21a90","ssdeep":"6144:1i/63qaaVDxVrAsIJFTS/0o5Sfwnkc+8MHmnv2:1tssQ/0o5isHdMHkv2","tlshash":"f4245cdd72a371226502f4a5887f124ab13dd7a5f08a407cbed4d6f5e8a588801b3f7b","size":213458,"data":"","first_seen":"2026-09-15T17:36:20.831746Z","last_seen":"2026-09-15T17:59:48.129254Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAggAAAAQAAAAAAAAAAAAAAAAAYAAAAAAAAAAAAAAAAAAAAAAAAFBAAAkAAAAAAAAAABAAAAAAAgAAAgAAMAAAAEgAAoAAIABAAAAAAAAAAAAAAAAAAAAEBABAABACAAAAPAPBlgBAAAAAAAAAAASAGAAAAAAAACABQAAAEEAAAAAAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAgAAAFAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAEAKAAAAABAEAAAAAAAAAAAAAAAAAAAAwAAAAAYAAAAAAAAAAAAgAAAAAAABAAAAAABCAAAAAAAAAAAAQACAAAAEAHQOABhhQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAARbALqSAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg5AQAAAAAAAAsB/d=1/ed=1/dg=4/br=1/rs=ACT90oFcMZGFZVbBlitDdadUxwEw_38v3w/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;BuJtU:v6yjN;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F54IAe:ZgsFh;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fkukfc:i8H2c;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GleZL:J1A7Od;HMDDWe:G8QUdb;HtPxrd:Gx8jAb;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K08hxe:zmbGlf;K5nYTd:ZDZcre;KA3P2:C3JnCe;KDb6nb:fE9n2;KOxcK:OZqGte;KQzWid:ZMKkN;KdIHef:BWtNj;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LBn8Cf:bJ9L0c;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;MNkAde:KMCd1d;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;NjIwef:YVgi7d;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OIfWUb:qfOYcd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q7iJ9c:bVLZ3d;QE20Be:gIltO;QFOGlf:PQ2Aoe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;Raf5me:mgvFMc;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,xD8Kp;SNk4Je:wWMhg;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;Snahre:mGCtob;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:lWTJwd;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:N0F29d,W50NVd,eps46d,wciyUe;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UYRIEb:HzTAQc;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VMuEm:pL7sBc;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;W9QSQe:ynCWwc;WDGyFe:jcVOxd;WXtNeb:QU9BMd;Wfmdue:g3MJlb;Wl55ib:vgbiKb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;YnHUBf:sNsSob;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;aci7y:Z5Tr6c;bUIkwb:WMwEHe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dXdZV:a7QTqd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gbfHR:qZtzib;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;jJj2G:kF2o2b;k1O0rf:pnOULd;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mMVOGb:qDM7K;mWzs9c:fz5ukf;mtKMCc:ZG5Tfe;nBZnZe:CvErjb;nE6OJf:Fi4rsc;nEBWNb:MxKX9d;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;oiBhre:OuMkRd;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qQEoOc:KUM7Z,d7YSfd;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:I0C9u;qddgKe:d7YSfd,x4FYXe;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:UT1DG;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tH4IIe:Ymry6;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uJfyCe:WJ5gBc;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w9w86d:XwhUEb,dt4g2b,gKD90c,lWVZVe;wFpbG:JbGbBc;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;wxAT5b:tHKmqf;x9N9ie:KH4Qof;xBbsrc:NEW1Qc;xpaRob:AVqZ9b;yiL5Ab:MT0ZBd;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi?cb=121509378","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18228149d068f935e234b35bd698d0bd","sha1":"4e692b520fd19801ba978ff67f911890daafcd70","sha256":"b3a2ddf4e4ffc83a4133597c6185cf19428cee43d487665cd91429c4cbb001b2","sha512":"9d5d20b6c471393ea5adc239da0224f36e7ca58d3b01b51dbc2818eb111e9533756ea87704e820984d697d79c1faf6bbd6eaebf2a7c91aedf61099a6d202b85c","ssdeep":"24576:jiH5UCzgiSFplncrh9fBTe0EUxuvY3PjSa:jiH5NgiAncr7fBTe0EUxuvY3PjSa","tlshash":"2535f89873a3b453a276f594412f0287f2beb891f4898c6cb5a8d8d17eb084541f7f78","size":1111043,"data":"","first_seen":"2026-09-15T17:36:20.840041Z","last_seen":"2026-09-15T17:59:48.133257Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=sy10l,HGv0mf,UEShwc,sy19d,YHnUBc,sy2ey,sy2eu,VtMfj,sy2bu,sysk,sy2bt,sy2bs,n8YO7e,sy2bx,sy1iy,sy1iz,sy1j3,sy1hv,sy1hu,sy1is,sy1i6,sy1i7,sy1i4,sy1i2,sy1i1,sy1fi,sy1i5,sy1g5,sy11o,sy1it,sy1im,sy1ig,sy1ih,sy1ie,sy1dd,sy1hz,sy1fo,sy1dg,sy1df,sy9f,sy1de,sy1dc,sy1da,sych,syh6,sy1id,sy1ib,sy1ic,sy1hy,sy1ia,sy1i0,sy1if,sy1hx,sy1i9,syo0,syl6,syl9,syl7,sy2bw,sy1kk,sy1kl,sy1kn,jywEkf,ZgGg9b,dIoSBb,sy2qa,b6knsb,sy2q7,sy2q6,sy2k0,sy2k8,sy117,sy2h2,syu9,syst,syqn,sy19b,sy2k7,sy2dy,sy199,sy13l,sygi,syel,syej,syb3,syen,JKoKVe,pXdRYb,sy357,syb4,syb1,sy9r,O1Gjze,TtcOte,wR5FRb,sygg,sygd,syg9,syg8,sycn,sydc,sycb,syg7,syee,syg6,syg5,syg4,syg3,syg2,syg1,syg0,syfz,syfy,syci,syfw,syfv,sybz,syc1,sybx,sybw,sybu,syby,sybk,sybn,sybl,sybv,sybs,sybb,syb9,syfx,syfu,syfs,sye9,sye5,syc7,syc4,syc6,sycd,syd4,sydq,syca,syct,sycs,sycl,sycr,sycq,sycf,syco,sycp,sydn,syfr,syfq,syfe,syfo,syf1,syec,syds,sydt,sydm,sydk,sydf,sycx,sycy,syde,syd9,syd8,syd5,sydd,sycw,syda,sycj,sycg,sycz,syck,sydx,syc5,syce,syeq,syer,syfn,sye7,sye2,sye1,sydh,sye4,sydz,sye0,sye8,syd3,syfc,syfl,syeu,sydb,syev,syfb,syfj,syet,syfa,syfi,syea?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fd17f0906b2ad23130d190fc6ff0c63","sha1":"723529659d00bde12ea1e1a5e65326074886190c","sha256":"849ad3380a9beaa8c95efd1958c4195be1bd558c451bb431b0166e7cece0baa9","sha512":"99d8df43030f03cf5db9c4585f7dbbe36d95bea5c8ed6b7e0780b9434c3d944b433d9cb3a7fe0a24eaf1bb13aebf74f4492c8dedad3ed8be29c87b1b925f24ba","ssdeep":"1536:aTULqGcloKWbtVF1oXcTl+K4ugzlOxZJNrOB+UBFZHff00GATU21F+cMZPM2EwDb:qGclEF6sTkHugzlqZJd2zrmHEwD8c","tlshash":"9ff373e47253e2633762b98050bb0147f3beb5d1f688856d69f8c4b1aaf045502f37ba","size":159380,"data":"","first_seen":"2026-09-15T17:36:20.824683Z","last_seen":"2026-09-15T17:59:48.122386Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=syew,syeb,syey,syeo,syf9,syfg,syf8,syff,syf7,syf6,syes,syf5,syf3,syf2,syf0,syez,syfd,syep,syei,syed,syb8,sy8z,zbML3c,gskBEc,sy2bn,s980lf,U9EYge,sy135,loL8vb,sy14b,sy14a,sy13f,sy13m,sy146,sy149,sy13j,sy13h,sy13g,syhi,sy13e,sy145,sy143,sy142,sy141,syir,syhj,syhh,sy144,sy147,sy13k,sy13q,sy137,sy148,sy13z,sy13y,sy13s,sy13x,sy13t,sy13p,sy13o,sy13n,sy139,sy12v,sy11q,sy11p,sy13a,ms4mZb,sy10c,B2qlPe,sy194,NzU6V,sy19m,sy9p,WlNQGd,sy12u,sy12s,sy12r,DPreE,sy19o,sy19n,nabPbb,abd,sy4ek,TDFkye?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"663981b9a48edc1c8f768dc4e51177e9","sha1":"5e10508ea738dcbf6531742df4e4f6d13742259b","sha256":"20f7583c687be5a6eaf5c03a40d22d28fa9d3a5cc58579268df4af4e28a7b3ea","sha512":"b976380890432ecd17f07804482b15655ada2d0345fcdc3aad854adee7f3abcc6827272154889e01f78e28869822ba2116dd8bbd0e7d76749400659b4ac5770d","ssdeep":"1536:I05dpschl3rYReC2HIV7DjMJbewlnSSkBQ2BPwF6BxEFZEQ7sga:ImdthFrYYWgbe+EDEFZEQ7Ra","tlshash":"bfe31ab9f3927063967ab154c16f424232eea442f04dc859b5a4d9d2aefc84e41f7f38","size":149468,"data":"","first_seen":"2026-09-15T17:36:20.800117Z","last_seen":"2026-09-15T17:59:48.122842Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=aG3wVc,syhg,aLUfP,wQlYve,sy2fn,sy2fr,sy2fs,sy2fm,sy2ft,sy2fi,sy2fh,sy2ay,sy2fj,sy2ff,sy2fe,sy2fc,sygx,s0j7C,sy1a8,sy1a4,sy1a5,sy1a1,syjq,syjp,syiu,sy1a3,sy19w,sy19r,syj0,syhn,sy19s,SMquOb,sy94,sy93,syjh,syjg,syjd,syje,syjc,syks,sykq,sykn,sykm,sykl,syke,syjz,sykg,sykh,syjx,syjt,syju,syk7,sykc,syk1,syja,syk8,syjv,syjw,syjk,syjs,syjb,syj4,syj5,syj3,syho,syif,syid,syic,syib,sy9l,sy9o,syi0,syie,syia,syi8,syi2,syis,syi9,syij,syik,syi7,syi1,syi5,syhw,syht,syj2,syj1,syiz,syiw,syiv,syhm,syhk,sy9t,uxMpU,syhb,syac,sya9,sya8,sya7,sya6,sya5,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sya2,sy9x,A1yn5d,YIZmRd,sy9j,sy9e,sy9c,sy9b,sy98,sy97,byfTOb,lsjVmc,LEikZe,sy95,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy2ci,sy1ad,d5EhJe,sy2d9,fCxEDd,sy2cv,sy2cw,sy2d3,sy2cx,sy2cz,sy2ct,sy2d2,sy2d1,sy1uo,sy2cr,sy1dj,sy1tg,sy1ag,sy1ab,sy1ah,sy19z,sy19y,sy1ai,T1HOxc,LFk59d,sy2co,sy2cn,sy2cl,sy2cm,sy2ck,sysa,zx30Y,sy2db,sy2da,sy19u,sy11d,Wo3n8,sy1ap,sy1an,zGLm3b,sy4dc,sy4da,sy4d9,sy3uv,sy1tk,sy1tl,DhPYme,sy4dl,sy3ue,sy3uc,syku,sy3uj,sy3ud,sy3ul,sy3u9,sy4dk,KHourd,sy4eu,sy180,sy11v,oQfbDd?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e781af5e547f06f5e469472534dbc68f","sha1":"1e30ed602165acaa717f42b10246b2739799dfc3","sha256":"6d10c25b516479d6fbcdf4b2dba98ae6b2e1983d9550a5c07c5d7aa3c9b35b59","sha512":"b8b10b1af2e743706ff2b995f2bd1feaf4e2fcca35d3efceb5d0398164cac833856211b363cc5bee76fb457d0f79d73da7eb2264a94cf382b541acb85bc74c31","ssdeep":"3072:JMsmYJZNUcYJdkS0jbDyZZZU+dKXso1k9O9fUzQ93D9UYoLTsr:fNUXJdkSKbDt+UxuOLUYoHsr","tlshash":"5c64c6947363b2a36361f5d5806b028bf36a7491f489882cb9fcd5e17df048242f6bb5","size":308426,"data":"","first_seen":"2026-09-15T17:36:20.83669Z","last_seen":"2026-09-15T17:59:48.128192Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/js/k=og.asy.en_US.6hUUSNC_ZiA.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTuyzoZA5CtZ8CsUNvOCBk8Z32acFg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93589d5d80e21f33bab90d353c37c4ee","sha1":"34ced40790d3544a9d6df25d61a6bb7ce0ac9286","sha256":"7ff1755e78efb2caa301ce282632abd90dccfa4b2936ede433faad996bb9adf6","sha512":"1365a59e3d2d78aed4346b72d2c69cbf5727ea3d168afa665de8cdc3ad56a3459fec47f3bbd12b2893cb866dcd50274b424c379b3df6cb57146bdab058e3dffd","ssdeep":"3072:BYrbVRRH4gt4IkBz2X9a8uPKsktR9t46tdfW9yKm4YabzCzymfNtk9C1Tbw9BQcq:ut4rwa9KsktR3jbKPrm0UfwTQc7SLZUU","tlshash":"1434f79873a2706792a2f4d6402f0047b26ab866f04c4c6cb79ddde26ef495541fbf38","size":248960,"data":"","first_seen":"2026-09-15T12:07:17.989783Z","last_seen":"2026-09-15T20:10:23.424731Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026s=promo\u0026rt=hpbas.581\u0026zx=1789495146150\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.154Z","timestamp":1789495146154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026s=promo\u0026rt=hpbas.581\u0026zx=1789495146150\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-xuCDPYu1j3THHJg9bs6T8w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026dt19=2\u0026prm23=0\u0026zx=1789495146232\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.233Z","timestamp":1789495146233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?atyp=i\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026dt19=2\u0026prm23=0\u0026zx=1789495146232\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-U20CJhzddfE-w0ysKul1Yg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/log?format=json\u0026hasfast=true","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.824Z","timestamp":1789495146824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:42 GMT","end":"Mon, 02 Nov 2026 08:37:41 GMT"},"fingerprint":{"sha1":"CB:38:34:2F:7D:9E:35:93:25:09:7C:BC:CF:D5:8B:CD:34:CD:70:E7","sha256":"50:17:03:01:AA:C0:DB:75:43:0B:A6:DC:1F:27:C3:AA:1E:93:2F:67:A7:8C:54:7D:FE:7B:6A:E6:F1:9F:C7:FF"}}},"request":{"raw":"POST /log?format=json\u0026hasfast=true HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nContent-Encoding: gzip\r\nContent-Type: application/binary\r\nContent-Length: 290\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=Cp8CCAIS0QEBAQxeRQ7zFYYXPFMqjlzeyYSJflvxQntqfxirBGIp1PuhSyhOPArbiobMojG5Ql3M5qec47ifnipU7RfCNSQl0AzY9IJt5KcvxGeAAckj3HQ8bZ5P6J1VpIAfZHkpMkxGWm2OVmIu3Bxy4Ma9s2jM0KXiG1egHwx3vYj16KGchnGNOXJKafqRIKm9Hj912gVwcp8Pfziq2ozfZn_IBLRm1DiGBi6TQ2F81NHlxW3RCFkRUwZlIB9K_WPCNbZ_iqAPsyc11iGFTmnxvvAruzBDCigCMkUBfWzEqqv7zzXv0R-WB4APO9wQMDoce-TguRN6T6uK92RX6iFKilSgADwQMPHSmX2_KOKXeq5CfcA0IM9CDOmvvx3CGAo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":418,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003ÕT±NÄ0\fý—Ì\trì$¶G\u0026`\u0001ĆÒ\f\u0005]o º\"¤ãû‰(Ü!ZÔC\u001c\u0012,ŽãØñsüœœ½Ýlûþ`‘çŒf3˜yoo¡”b‰ÉæìY4hô!\nÂB\u001eSC\u0003\u0004\u0000\u001bIFScT@\"qˆ'ИºooWís۟?¹\u0007ß]\\\u000f|†p:4\u00130MEø\u001aqyuSW°^-\t‡`áÝkX;j5\u0006ҕc¡;\u0017V]çT\u0014\u001d¢ïðžR›ˆ§\tŽ(¾ÙObò®o†Œ6Ö\u0002ûmÅÎZæ3—¥º`ÒóÁ‰\u0001j‡­÷*\u00119¤\u0026Ö# xѸӤ\u0014ó\u0015\u0010»'Kòœ–ÉBðËtá@’.xô\u001bÿ#c°~2{Æ\bþlˆFl#ÎÙ\u000fïàYFŒ\u0010“Æ\nOKy\u0001\n\u0007àn\u0005\u0000\u0000"}},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: https://www.google.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":575,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-09-15T19:44:19.924745Z","times_seen":602774,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":41,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/3.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.069Z","timestamp":1789495145069,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /3.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 51152\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-c7d0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":51152,"size_decoded":51403,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ed66d899203784adfe6c2c8dd1939343","sha1":"14b8169d424fcb4290f155981ff1d69ce094dce0","sha256":"fabd28e5a26acf947fbf7af38df17c5bb62f93d252903e86fdf47c6db9f9d9ef","sha512":"929c0f67bc57aa84f41a1d80e6271d6b7bc1e297aa0067dfa736eee56e641a58e15b7a4ba8b0048998147cfb9c38742f8ef232262d8bced3161564e92f6a8c4c","ssdeep":"768:DnDRMPhTcJDJGGS7dih7CpEILJcpxUWuaAE7Knw0eZOG3CuX0haabAnKnY:LDRMPhTsDJodjiBuaA9et7XIRJY","tlshash":"9933d06c75a8a5ecbdec22af1116d74ec802914f13f84d6eda48a60316c79aedb3f441","first_seen":"2025-09-30T17:15:07.08107Z","last_seen":"2026-09-15T17:59:48.113426Z","times_seen":433,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":62,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/5.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.071Z","timestamp":1789495145071,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /5.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2984\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-ba8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2984,"size_decoded":3233,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2d1617bdc152c6bbfe3cc95409655a35","sha1":"7c222b20182227583dd82c0bc31e3fbb5eeb4ddb","sha256":"d54d30af672b70a35c3ee6a34f0407abec8adc3dae40836109f2a309b2bfe594","sha512":"ac01a6d5576725ebc39e5ad40be604e168d91b8795f0cd03585b080ff88005599feb73804bae2bddaa406350f8180767f1824808ddd64e8a83267595d6fbd260","ssdeep":"","tlshash":"59512df9db30d56d478fe91ea83567b868df2843c05c95058da5d1ebd54c320d193b60","first_seen":"2025-09-30T17:15:07.055952Z","last_seen":"2026-09-15T17:59:48.114076Z","times_seen":433,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":37,"dns":0,"connect":55,"send":0,"wait":56,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T17:59:05.435Z","timestamp":1789495145435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=UTF-8\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-NBpDv_CfUr4TMOB9oc9UzA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 84364\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; expires=Sun, 14-Mar-2027 17:59:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN; expires=Sat, 16-Oct-2027 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"AEC","value":"AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k","quoted":false,"path":"/","domain":".google.com","expires":"2027-03-14T17:59:05Z","raw_expires":"Sun, 14-Mar-2027 17:59:05 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; expires=Sun, 14-Mar-2027 17:59:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"},{"name":"__Secure-ENID","value":"CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-16T10:17:23Z","raw_expires":"Sat, 16-Oct-2027 10:17:23 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN; expires=Sat, 16-Oct-2027 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":277631,"size_decoded":85926,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (27225)","md5":"c1b999dd1ebe27e79fa4237f8fbc76f7","sha1":"ff61363b95dd9eb63bf92d9c931f6d5db805095c","sha256":"7c377462c70a53dcf819c32f0b52198c9d562df904d5fe2817ef013d5098d8db","sha512":"be70d6ad8ea274d2cb4ea352335e9dd71caf171d3b870d2b09458aee4bbe28d677592078f99e7dc967c21880ceeda3b296d25a453b0a0f241f30f6b3a28ff922","ssdeep":"3072:OTaLmwGzHzyMnIdA95gFg3MybIieXvJ8NUu7q:4aLmwGzHOeIdA95gFzybI/ju2","tlshash":"13446c727300b43bb917daa0a67f7f4e3c35f12bdc0a46b8a8a5e5759ee19b2041531c","first_seen":"2026-09-15T17:59:48.114554Z","last_seen":"2026-09-15T17:59:48.114554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":105,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogads-pa.clients6.google.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData","fqdn":"ogads-pa.clients6.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.831Z","timestamp":1789495145831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:00 GMT","end":"Mon, 02 Nov 2026 08:38:59 GMT"},"fingerprint":{"sha1":"61:61:C3:15:25:DD:E5:FF:A9:23:2C:FB:5F:15:5A:B7:30:B3:3C:7C","sha256":"DC:81:16:85:3D:33:30:CC:1E:37:0B:01:3B:C0:1A:E6:97:EA:07:76:C4:71:05:06:39:08:C8:67:6A:FC:21:58"}}},"request":{"raw":"POST /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/1.1\r\nHost: ogads-pa.clients6.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nX-Goog-Api-Key: AIzaSyCbsbvGCe7C9mCtdaTycZB2eUFuzsYKG_E\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 2604\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2604,"data":"[538,\"https://www.google.com/\",538,\"no\",\"no\",0,null,0,0,\"\",\"\",1,0,null,89978449,null,[1],null,1,1,\"CAMSxw4Vwwmqs2yr0a8OqKu7BdysSd2SBadY40PSCjKWE7kR6h6kEtUG-gKcAaEU9gLJAAGNDsIEL9gEKsoCn46CAvgXjgECqQj455QGsgTEBJgG3wPg7gWVlwzdBSupjAS3A_8EjvJ8pPsgkg33A7XvW7WIpQat8T3b__QN0bMO3ZQOoE7sMORZ5Db2Hi7hPqQe-zr0CISKOvoalNLpA9uI6QPelgyJhxmRLuxciGuXsgT68McGpNwqg4EEiugthtIC3iqZF4-0BscT1jesRrQ9sgUA_hrFH5RPrhmQDpUd0Ab0P6MDyBbCF_MCyQH6F_MfmQOPFdYAvQaXBHSJBZoFkghyoC3ZBagB3Aj-FoEPoB65A_4l44w6jwZpAo8EkgCJBf0FkgVegQU19gMFK04cVSowdJ-KBkCVD6UAgQYM0Av7BuYMf7cAiAaoAm3elgHvBRqIBgABVn0qAe-EBa8LqAKBBNoM69ERfhM1wgylDs8wgwaBBCGkBXoSG5EGgQA61gUzNUNaO6wFFuoEE5cA-gbIBsIDdE8Oogb9BmSzBloWX2geqQX9BuEGGwQIYe6_BsksBbwCpgWvIt8CBaAXvQyzHc8PyiTACp3SLqfpBNdTtKIN7DGpvzauzwWsyQH-iwTnBP_BJQfFqDmQAZIFzAWfBrAC9wOfBRWvAeAM6AGgC78EuQJ0AL0GrALsE8URFAuSBe8FZ9AAKZMGtA2gDrkGjgmZDpUGqQKoAP8EpQtD-AL7CLgc1wkFD-gP1QmRAZYG1A2vA9cOyQaCA-UCrAaUBtIA2AbiFp0GIY0PSOMIpAPBD5sDzwTXBpgEiAywE-cAwA_HDwmuBm-DBuwNuQSQBtABcaMD1Q-dA4IDzAThApoD5AabBcsJS40GoAHNBjisBRyXBPoOjwT3BtkDqA6NBc4F3AOCArsEsQ3YBqADdnsF-g_kDMsG3QLhAwX_BmeXI7oAxQvIBuwETOgGpw22BpYDiQYO3AXJAqcBBeqkBuuJBduzEvjvBYOfBfOSA5JtloYGoG6fyA203QXYlAWInQGlVZTDC-KtAt-pAcDKBNgFs5wF8AChswO0tQbC7AWJ5QS1NfWUBqGtBIzZAcobxPoBpdUFndMGw0PYzgWfzgXc96QDT0arGL3sAquCBgWk_AX6lAaG4QwCmYIF0qAC6IAF3F3HcP2FBN84mgS5DgX3Mvu8BPHwBaaYBM8v1_QGuv0Gmp8F1c4FBPlu3l-BLpq0AvDtBu3iBpnGBgSshAPk3QSF3gGoCaPGBc_HAvOKBO-vBMgQ8psF77AEpgjve9dct5QGnJsFC_51gKsB7OIGvLgG9IACvZ8GpwSKqgbYngOfjQaoQuEM8JYFBZP_BvSnA7iEBZGLBaqEBoNc1OMDz6wG8BHspwSgNcA12qoEBdqpBu0Y_6sFw64F_dMGvkXC2AaQZs3TBOSQBr9SA6SmBtErjTe44wbUV9D2BeVTkMEGlAbJlQX5DNKhBSG6hAO2vAbMQN2aANoB8ZIEBOmcA88xyP4CkfcGkw3YgAXXwAY8qcQEjHrkBMIJjULab4TQBLztBPUahPEEsxOaowbIW5c99sQDwoMExHu56AaTI-IS_0PElwQFhl_3ugb8BtI0TuqCBoD9Bt5Nr78G90GqW8OdBrL2A6uOBqNsBaAN-CPmvgWH4AWmpgOtJcLaAR-cAZY4ixDQBgzAFPZ8qtsGtIAD2XPzNcbTBtBE0CymbppGmRyKLvgF708Dph27CezjBqEW0nC4CZxKiyG-NO8ak5MG-5IG8E7xNqETnz3aRvgLwZQG8mCqOc4CoocGqZEG3gqWP4896jOjyAalGsQAkLYGxD2-N6kWtgrUINY0ijGzBagI33TCAKCmBYsT9yHEgwaEAMCfBo4Sqmfp2ATUpRHv9Ab8zQXJPrQWliGWgQYD9RrRH4Ymp9wFmuAGiHqDggbWLN0LrEbnFt1J5kO0Bs4E6mC4VKwOsQOUH8Y5owT5DjSQmQbBEtQ3qgWEDP47pEmEAYsjyQK-MP8Q5mCXEwqMBJMt-CTJGIAN7hTmBfFVrgbaBMUbkQHmGiXIBbkGyAiBC_875QPbBQfUMq4I5C3Ab_ABZIwEvwK1H7AKvgvUFKQbohK8DboD6gCoAoghqwXdHpAZyS_oI98CkQK6GdEFpCWZA4M5qwXgDcojngPXH4MLgAGNC-QxujvWXYrKHcYB8AChAy0F7w1WVP8FgQ_PBqsFyAQBFuwGBeoOBWp0uwabDowGlwbKDMwLLqsO4wGtAKIK8A-sC_IJxQyVBowE4gTHAASQAuQC2AG7AtQA9gSxBosDLP8G_QZZQhG-BvkBygXpAYsGDncpsASNANAE6AT0EtwEjgbDBSSEA-4F9g29A3icBjeFBpEFjQXAC6gE0gjuA22KAcoEgQbUBWleCqABygEKWS8hBXmoA54F9g84wgABxxT-BjsMtQahAOkBd8wDnwZahQToA8oAzAaH4AU=\",{\"1001\":1}]"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nstrict-transport-security: max-age=10886400; includeSubdomains\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nserver: ESF\r\ncontent-length: 30\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.google.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-google-eom,x-google-consent,vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=28\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":678,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"cc21f616ac48633008e6768c2cd65f2c","sha1":"2dc662e723a9ccfe2b40469396d10074472064ae","sha256":"2b4b20e1fa834bf64509e94dd18eca0865abc217fcb62e769d6b6002084236a7","sha512":"4ab5a1da0f7c483d05c086e7e6fe0516bf872627e5865e913a9cc78019b604f3c3e14847ebfe616af56d2efee69393674341786277944c56af8d88e4b3f33652","ssdeep":"","tlshash":"3190000000000cf0cc0033c000000003300c00330000003000cc0ccc000c000000000c","first_seen":"2024-06-18T16:50:07Z","last_seen":"2026-09-15T19:44:19.930116Z","times_seen":240968,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":44,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQuqMJCJgB..s\u0026bl=dZk1\u0026s=webhp\u0026lpl=CAUQARgAMBM4A2IGEIDExZAD\u0026zx=1789495146284\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.289Z","timestamp":1789495146289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?atyp=i\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQuqMJCJgB..s\u0026bl=dZk1\u0026s=webhp\u0026lpl=CAUQARgAMBM4A2IGEIDExZAD\u0026zx=1789495146284\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=Cp8CCAIS0QEBAQxeRQ7zFYYXPFMqjlzeyYSJflvxQntqfxirBGIp1PuhSyhOPArbiobMojG5Ql3M5qec47ifnipU7RfCNSQl0AzY9IJt5KcvxGeAAckj3HQ8bZ5P6J1VpIAfZHkpMkxGWm2OVmIu3Bxy4Ma9s2jM0KXiG1egHwx3vYj16KGchnGNOXJKafqRIKm9Hj912gVwcp8Pfziq2ozfZn_IBLRm1DiGBi6TQ2F81NHlxW3RCFkRUwZlIB9K_WPCNbZ_iqAPsyc11iGFTmnxvvAruzBDCigCMkUBfWzEqqv7zzXv0R-WB4APO9wQMDoce-TguRN6T6uK92RX6iFKilSgADwQMPHSmX2_KOKXeq5CfcA0IM9CDOmvvx3CGAo\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-cNowxc8345PJSUqwUoJ2QQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=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0/dg=0/br=1/rs=ACT90oHatcyD7eCmIYJ6wW06Z51qgrFkEg/m=lOO0Vd,sya3,P6sQOc?cb=121509378\u0026xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.337Z","timestamp":1789495146337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=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0/dg=0/br=1/rs=ACT90oHatcyD7eCmIYJ6wW06Z51qgrFkEg/m=lOO0Vd,sya3,P6sQOc?cb=121509378\u0026xjs=s4 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=Cp8CCAIS0QEBAQxeRQ7zFYYXPFMqjlzeyYSJflvxQntqfxirBGIp1PuhSyhOPArbiobMojG5Ql3M5qec47ifnipU7RfCNSQl0AzY9IJt5KcvxGeAAckj3HQ8bZ5P6J1VpIAfZHkpMkxGWm2OVmIu3Bxy4Ma9s2jM0KXiG1egHwx3vYj16KGchnGNOXJKafqRIKm9Hj912gVwcp8Pfziq2ozfZn_IBLRm1DiGBi6TQ2F81NHlxW3RCFkRUwZlIB9K_WPCNbZ_iqAPsyc11iGFTmnxvvAruzBDCigCMkUBfWzEqqv7zzXv0R-WB4APO9wQMDoce-TguRN6T6uK92RX6iFKilSgADwQMPHSmX2_KOKXeq5CfcA0IM9CDOmvvx3CGAo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 1064\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:00:37 GMT\r\nexpires: Wed, 15 Sep 2027 17:00:37 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 3509\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2038,"size_decoded":1890,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (503)","md5":"4368db2b97057f6a3ee4deba715ca51d","sha1":"361125bc02cb84e5566ab9b7e3986f4fc43a1d2b","sha256":"23fed0ca15e0ff3c30b5f2cc8586bba0b7e87a815d57bfa57ed3269b9df11169","sha512":"f63aa5ab65ca268f9b2d821e1ab54233204608ae37cd6942b463dcd2a12a257cd20d51e6a93375958792bf1aa6c18000e852c41f8f4950829ea765391d040cd4","ssdeep":"","tlshash":"8041733cb1ebb0530256f0e4112e108696eebc26a0891c7d7ef4bdca69c50c985a637c","first_seen":"2026-09-15T17:36:20.819191Z","last_seen":"2026-09-15T17:59:48.115977Z","times_seen":6,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/4.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.070Z","timestamp":1789495145070,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /4.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2640\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-a50\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2640,"size_decoded":2889,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"068cfaccde163ad6416ccbd3e64cf73a","sha1":"c3ef4658642c3f268fa6567351324dc5ae202755","sha256":"b1ccadcb9c57c9a2990d487b6ad8eb7323993348d6020a28793643f56c5b9f95","sha512":"dc6f2deacc9405d5b31cac5efde90853ca958a3bbbb7da4586bb932db7fe9846b5c20502a282f2cf1535a3ab19acefcc9d89d9fc74fa3d3bbf3772937868dfdd","ssdeep":"","tlshash":"8d515c4372632a042710b1ae7a0f0a80b916e363a3d0d0f4de94af3527562cfdc720cd","first_seen":"2025-09-30T17:15:07.069315Z","last_seen":"2026-09-15T17:59:48.116563Z","times_seen":422,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/favicon.ico","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.365Z","timestamp":1789495145365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 54684\r\nLast-Modified: Thu, 03 Sep 2026 06:26:46 GMT\r\nConnection: keep-alive\r\nETag: \"6a991326-d59c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54684,"size_decoded":54937,"mime_type":"image/x-icon","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"a314da9f659a273c951c5a8b0ab4a46a","sha1":"efdf35fe9a86ade33e237b0df23ff6ff14b7cf7a","sha256":"951ed286ca1946f9c99768ef1736f052f93966d115889afa491ce309caf35f55","sha512":"e649b71989aa0df5b242946c0c385cb557ce4347a80577d55f93c6822a194d020353a900a6ba816858714828051e4f37972b0c0372762379250da2447dc69d65","ssdeep":"1536:Ulxox5vAnVJ09eeoZ2sYuJBTE/lPbxRPJxAgvcDCZuNs:Ulxox5v8eeJXBQ/lPbvxxjv2CZui","tlshash":"3633022c99d188ef73fb38995017eaa745a1688466dbef8cd7e305f07e72624035e843","first_seen":"2025-09-30T17:15:07.073613Z","last_seen":"2026-09-15T17:59:48.117035Z","times_seen":388,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/js/k=og.asy.en_US.6hUUSNC_ZiA.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTuyzoZA5CtZ8CsUNvOCBk8Z32acFg","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.658Z","timestamp":1789495145658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /og/_/js/k=og.asy.en_US.6hUUSNC_ZiA.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTuyzoZA5CtZ8CsUNvOCBk8Z32acFg HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"one-google-eng\"\r\nreport-to: {\"group\":\"one-google-eng\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/one-google-eng\"}]}\r\ncontent-length: 90719\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 10:30:45 GMT\r\nexpires: Wed, 15 Sep 2027 10:30:45 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 11 Sep 2026 01:31:29 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 26900\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248960,"size_decoded":91582,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2038)","md5":"93589d5d80e21f33bab90d353c37c4ee","sha1":"34ced40790d3544a9d6df25d61a6bb7ce0ac9286","sha256":"7ff1755e78efb2caa301ce282632abd90dccfa4b2936ede433faad996bb9adf6","sha512":"1365a59e3d2d78aed4346b72d2c69cbf5727ea3d168afa665de8cdc3ad56a3459fec47f3bbd12b2893cb866dcd50274b424c379b3df6cb57146bdab058e3dffd","ssdeep":"3072:BYrbVRRH4gt4IkBz2X9a8uPKsktR9t46tdfW9yKm4YabzCzymfNtk9C1Tbw9BQcq:ut4rwa9KsktR3jbKPrm0UfwTQc7SLZUU","tlshash":"1434f79873a2706792a2f4d6402f0047b26ab866f04c4c6cb79ddde26ef495541fbf38","first_seen":"2026-09-15T12:07:17.989783Z","last_seen":"2026-09-15T20:10:23.424731Z","times_seen":36,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":16,"receive":31,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?s=webhp\u0026t=aft\u0026atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026rt=wsrt.137,hst.87,prt.160,afti.181,aft.181\u0026folr=_aYepaoPyHI6GwPAPgv_OyQY_16\u0026imn=9\u0026dtc=199\u0026stc=41\u0026ima=1\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=84664\u0026nhp=h3\u0026ant=replace\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.790Z","timestamp":1789495145790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?s=webhp\u0026t=aft\u0026atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026rt=wsrt.137,hst.87,prt.160,afti.181,aft.181\u0026folr=_aYepaoPyHI6GwPAPgv_OyQY_16\u0026imn=9\u0026dtc=199\u0026stc=41\u0026ima=1\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=84664\u0026nhp=h3\u0026ant=replace\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Q0pjXsc0NzHIpzNP00dlDg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026s=webhp\u0026t=all\u0026folr=_aYepaoPyHI6GwPAPgv_OyQY_16\u0026imn=9\u0026dtc=199\u0026stc=41\u0026ima=1\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=84664\u0026nhp=h3\u0026ant=replace\u0026thdba=0\u0026thdaa=0\u0026ime=1\u0026imeh=1\u0026imeha=0\u0026imehb=0\u0026imea=0\u0026imeb=0\u0026imel=0\u0026imed=0\u0026imeeb=0\u0026imexb=0\u0026scp=0\u0026cb=84364\u0026ucb=277631\u0026lts=84664\u0026adh=\u0026nv=ne.1,feid.2fc5dcf4-fac6-484e-99bf-b0043c8a59df\u0026hp=\u0026p=bs.true\u0026rt=hst.87,prt.160,afti.181,aft.181,xjses.373,xjsee.450,xjs.450,fcp.194,lcp.194,wsrt.137,cst.24,dnst.3,rqst.119,rspt.14,sslt.24,rqstt.32,unt.0,cstt.7,dit.303\u0026zx=1789495146024\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.026Z","timestamp":1789495146026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026s=webhp\u0026t=all\u0026folr=_aYepaoPyHI6GwPAPgv_OyQY_16\u0026imn=9\u0026dtc=199\u0026stc=41\u0026ima=1\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=84664\u0026nhp=h3\u0026ant=replace\u0026thdba=0\u0026thdaa=0\u0026ime=1\u0026imeh=1\u0026imeha=0\u0026imehb=0\u0026imea=0\u0026imeb=0\u0026imel=0\u0026imed=0\u0026imeeb=0\u0026imexb=0\u0026scp=0\u0026cb=84364\u0026ucb=277631\u0026lts=84664\u0026adh=\u0026nv=ne.1,feid.2fc5dcf4-fac6-484e-99bf-b0043c8a59df\u0026hp=\u0026p=bs.true\u0026rt=hst.87,prt.160,afti.181,aft.181,xjses.373,xjsee.450,xjs.450,fcp.194,lcp.194,wsrt.137,cst.24,dnst.3,rqst.119,rspt.14,sslt.24,rqstt.32,unt.0,cstt.7,dit.303\u0026zx=1789495146024\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-FyniMD1ilN7v4fXOnzwWYg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/searchlogo/ico/favicon.ico","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.061Z","timestamp":1789495146061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /images/branding/searchlogo/ico/favicon.ico HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1345\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 20:16:58 GMT\r\nexpires: Thu, 09 Sep 2027 20:16:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 510128\r\nlast-modified: Fri, 16 May 2025 22:08:00 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1322,"size_decoded":2055,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"e8972ce34a4545b33c3926a20c306b71","sha1":"5fb07e9235adcdcbfa643528ddd1b77caa57f2a0","sha256":"8720df457a93b97d3cdd7c05714c8e255a1969085844eb247756b869dbea636a","sha512":"00d533122e0a5ca816fffbb48ab59ddf8409f2b973e5619f6e9e25033231e32c040d289dc66948fa70c9e55cbe532c2be4923d55e72fa63eee5cbdc880457e28","ssdeep":"","tlshash":"3421fb03933c80a7be3d61a43815cd1474e57ec85138e108f895d6b3af6e743755679e","first_seen":"2025-09-03T14:52:51.714292Z","last_seen":"2026-09-15T20:10:23.40752Z","times_seen":11064,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/6.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.072Z","timestamp":1789495145072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /6.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 9428\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-24d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9428,"size_decoded":9678,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d19d5b8b0d337eecb20c486d19023741","sha1":"8d4c401716031406eeb2f541f1df07ce0df0cf0a","sha256":"aa28c4ce43bbd971e3febb155bd3d1fbb09ee0863bda48cd192a4c28877e0359","sha512":"0193b4b9a48db64b8a8f9bf67a6d1b15cbb804fed9561ed8020b373794f479cdbc426f3ed0fdff881ac1df39bf9009e2e7c76b5bc5ff030603bdd1e47470815c","ssdeep":"192:t5CyRlviNpkm3jaxZws9jj1WstykSOZIY4qRmwzO6HFq5Ch86hzQdRL667Fy4J:t5CYvi3kFxZfjjsoykSOSYfMluFqw8+0","tlshash":"a312ae980e3aee7b74108bb4ee29325ef63a1360f3fc9b597a4295901359d0727c9c49","first_seen":"2025-09-30T17:15:07.071237Z","last_seen":"2026-09-15T17:59:48.118459Z","times_seen":409,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?s=async\u0026astyp=hpba\u0026t=all\u0026atyp=csi\u0026ei=aYepaoOpLJqvi-gPgZW24Ag\u0026rt=ipf.6,ipfr.92,ttfb.92,st.92,ipfrl.93,acrt.93,aaft.93,art.93,ns.-264\u0026imn=0\u0026ima=0\u0026sv=\u0026cb=112\u0026ucb=102\u0026folid=_aYepaoPyHI6GwPAPgv_OyQY_16","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.794Z","timestamp":1789495145794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?s=async\u0026astyp=hpba\u0026t=all\u0026atyp=csi\u0026ei=aYepaoOpLJqvi-gPgZW24Ag\u0026rt=ipf.6,ipfr.92,ttfb.92,st.92,ipfrl.93,acrt.93,aaft.93,art.93,ns.-264\u0026imn=0\u0026ima=0\u0026sv=\u0026cb=112\u0026ucb=102\u0026folid=_aYepaoPyHI6GwPAPgv_OyQY_16 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TElWEEkP8lj0no-O0AuLhw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/async/hpba?vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQj-0KCCM..i\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026opi=89978449\u0026yv=3\u0026sp_imghp=false\u0026sp_hpte=1\u0026sp_hrh=https://spax35p.icu/\u0026sp_hpep=1\u0026stick=\u0026cs=0\u0026async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.0jtLsupCuZA.2023.O%2Fam%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%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHatcyD7eCmIYJ6wW06Z51qgrFkEg%3Fcb%3D121509378,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.o131JhEtebY.L.F4.O%2Fam%3DAAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAAAABACACAAAAEAAAAAAAADCAQAAAAMAAAAAAAAAAAAAAAAAAABAAAAkAAAAAAAAAABAAAAAAAACAIgAAAAAAAEgAAoAACAAAAAAAAAAAIAAAAAAAAAAEAIBAAAAAAAAAAAAAEACAAAAAAAAAAAAgWGAAAAAAIIBAAAAAAAAAAAAAAAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAAAAGABAAAAAABAo8CACAAAAAAAgAAAAAAIAIJACCAAAAAEAAAAAQABAAEAAAAAjKAAABIdIAAAEAgAAAAAaAAAAAAAAQAAAAAAAAAAABABAAAAAAAAAAAgCQAYIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIA%2Fbr%3D1%2Frs%3DACT90oFJZHL3LZHSmc_4EZSe8L9cOnQ14A%3Fcb%3D121509378,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.0jtLsupCuZA.2023.O%2Fck%3Dxjs.hd.o131JhEtebY.L.F4.O%2Fam%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%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A%3Fcb%3D121509378,_fmt:prog,_id:_aYepaoPyHI6GwPAPgv_OyQY_17","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.170Z","timestamp":1789495146170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /async/hpba?vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQj-0KCCM..i\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026opi=89978449\u0026yv=3\u0026sp_imghp=false\u0026sp_hpte=1\u0026sp_hrh=https://spax35p.icu/\u0026sp_hpep=1\u0026stick=\u0026cs=0\u0026async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.0jtLsupCuZA.2023.O%2Fam%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%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHatcyD7eCmIYJ6wW06Z51qgrFkEg%3Fcb%3D121509378,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.o131JhEtebY.L.F4.O%2Fam%3DAAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAAAABACACAAAAEAAAAAAAADCAQAAAAMAAAAAAAAAAAAAAAAAAABAAAAkAAAAAAAAAABAAAAAAAACAIgAAAAAAAEgAAoAACAAAAAAAAAAAIAAAAAAAAAAEAIBAAAAAAAAAAAAAEACAAAAAAAAAAAAgWGAAAAAAIIBAAAAAAAAAAAAAAAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAAAAGABAAAAAABAo8CACAAAAAAAgAAAAAAIAIJACCAAAAAEAAAAAQABAAEAAAAAjKAAABIdIAAAEAgAAAAAaAAAAAAAAQAAAAAAAAAAABABAAAAAAAAAAAgCQAYIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIA%2Fbr%3D1%2Frs%3DACT90oFJZHL3LZHSmc_4EZSe8L9cOnQ14A%3Fcb%3D121509378,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.0jtLsupCuZA.2023.O%2Fck%3Dxjs.hd.o131JhEtebY.L.F4.O%2Fam%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%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A%3Fcb%3D121509378,_fmt:prog,_id:_aYepaoPyHI6GwPAPgv_OyQY_17 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nx-sg-e: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nversion: 980974090\r\nx-content-type-options: nosniff\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/none\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\ncontent-encoding: br\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 15 Sep 2026 17:59:06 GMT\r\ncache-control: private\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":102,"size_decoded":791,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text","md5":"e804d3aec25310b0e4820a38d99e3629","sha1":"eba4227973cb7fa7357df9c25f26b50bead02616","sha256":"912ba856e49054647af6b19bd61562ace4a8adddc530e9359ee145a814ac1695","sha512":"1ac43550617790bf3a2be94824eb816101d9ed9d80a28713ca900645e2135f3534ea64859b6970eb885ff7738b5ca019fd9303bd010703f4bb831f3ae08d0017","ssdeep":"","tlshash":"89b01202028c2c8c0589204017d9be5d503e620f8025975737e0ba0b22fc6026cf2075","first_seen":"2026-09-15T17:59:48.11907Z","last_seen":"2026-09-15T17:59:48.11907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026zx=1789495146271\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.282Z","timestamp":1789495146282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026zx=1789495146271\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Anr_kLbVsOXCNpo-rPc4Kw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T17:59:04.624Z","timestamp":1789495144624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:04 GMT\r\nContent-Type: text/html\r\nLast-Modified: Thu, 03 Sep 2026 06:26:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a991326-e4bc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":58556,"size_decoded":40881,"mime_type":"text/html","magic":"data","md5":"67ebe46176a4296e52ee60332ed9d494","sha1":"6e95e2c27f1d917dda4eb9c9ce27f6af1ef8fffd","sha256":"89229a52e7a53558cfa04cf7b2b79ffaa303b073dc3cc8d2334d3dad5e61502c","sha512":"3f4b010f87f0c474dca2bb671c213dde045f2a2af1eb62d8c02e9fe31713017782180f58ce659c5077c0cc635febc325ad6ad429176e52d3a6de8a2c99e84e2f","ssdeep":"1536:apIay0178hd9ow6TCuhw/Ey+81yK1YPWPubvb/:a+WcvEa/Eb8wwYP8ab","tlshash":"c743dff26a41b687687f1f02bc473d8e036923e3cd7c70b45a779f8601bab454a63654","first_seen":"2026-07-30T15:15:16.204754Z","last_seen":"2026-09-15T17:59:48.120069Z","times_seen":34,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":4,"connect":55,"send":0,"wait":112,"receive":62,"ssl":72},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/1.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.066Z","timestamp":1789495145066,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /1.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3444\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-d74\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3444,"size_decoded":3693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 225x225, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c4229ccfa2f7bd9aedbd7564a62271b3","sha1":"bc5ef0055ef56e8eb04c0b8ac041a61a94f6234b","sha256":"cde1dc1e302419749339a4070dd32b5f7009da9eef2810fe7f91887186893d0c","sha512":"08c14e435f89caf9cfe06d4a150f24e3f6a354c86e916415de3d75b29d19e246f34c7a1ed0e7d1f7db58213621b52e24101e11975c6fad7d55f3acaed580a75a","ssdeep":"","tlshash":"dd618e793682d8f9f4502be371e9b258c168b9a2ed654160e4c6d850bc8a76493ab940","first_seen":"2025-09-30T17:15:07.050786Z","last_seen":"2026-09-15T17:59:48.120522Z","times_seen":422,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":40,"dns":0,"connect":55,"send":0,"wait":55,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/googleg/v6/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.659Z","timestamp":1789495145659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/i/productlogos/googleg/v6/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 438\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 02:43:44 GMT\r\nexpires: Fri, 10 Sep 2027 02:43:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 486921\r\nlast-modified: Wed, 20 Apr 2022 17:17:30 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":742,"size_decoded":1275,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"edd0e34f60d7ca4a2f4ece79cff21ae3","sha1":"2cc789a02534557380d92124e2f8b9483d198fb3","sha256":"ed9087d76cdc6d1c53698f6068f79872e77e87c8d012c0cfdad13b05b6ccb37c","sha512":"ce9d50913cad41d11c7b3963c90788301b63ee1fffff73108e9f8709ca0a9fcc6170853a65a820fbf020628b403813c9e3cd262389feb7d17a6c73c2f724394f","ssdeep":"","tlshash":"ea0110d75c2e60049a564390eebd1830403f60ea2e0e92ec64148732f348ff9d864e69","first_seen":"2023-04-06T15:34:19Z","last_seen":"2026-09-15T20:10:23.42304Z","times_seen":14651,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":5,"connect":36,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/async/hpba?yv=3\u0026cs=0\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026async=_basejs:/xjs/_/js/k%3Dxjs.hd.no.0jtLsupCuZA.2023.O/am%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%3D0/br%3D1/rs%3DACT90oHatcyD7eCmIYJ6wW06Z51qgrFkEg?cb%3D121509378,_basecss:/xjs/_/ss/k%3Dxjs.hd.o131JhEtebY.L.F4.O/am%3DAAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAAAABACACAAAAEAAAAAAAADCAQAAAAMAAAAAAAAAAAAAAAAAAABAAAAkAAAAAAAAAABAAAAAAAACAIgAAAAAAAEgAAoAACAAAAAAAAAAAIAAAAAAAAAAEAIBAAAAAAAAAAAAAEACAAAAAAAAAAAAgWGAAAAAAIIBAAAAAAAAAAAAAAAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAAAAGABAAAAAABAo8CACAAAAAAAgAAAAAAIAIJACCAAAAAEAAAAAQABAAEAAAAAjKAAABIdIAAAEAgAAAAAaAAAAAAAAQAAAAAAAAAAABABAAAAAAAAAAAgCQAYIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIA/br%3D1/rs%3DACT90oFJZHL3LZHSmc_4EZSe8L9cOnQ14A?cb%3D121509378,_basecomb:/xjs/_/js/k%3Dxjs.hd.no.0jtLsupCuZA.2023.O/ck%3Dxjs.hd.o131JhEtebY.L.F4.O/am%3DAAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAggABACQCAAAAEAAAAAAAADCAYAAAAMAAAAAAAAAAAAAAAAAAAFBAAAkAAAAAAAAAABAAAAAAAgCAIgAAMAAAAEgAAoAAKABAAAAAAAAAIAAAAAAAAAAEBIBAABACAAAAPAPBlgDAAAAAAAAAAASgWGAAAAAAIKBBQAAAEEAAAAAAkAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAIAAGABAAAAAABAo8CACAAAAAAAoAAAAAAIAIJACCAAAAAEAKAAAQABAEEAAAAAjKAAABIdIAAAEAwAAAAAaAAAAAAAAQAAAgAAAAAAABABAAAABCAAAAAgCQAYIAQACAAAAEAHQOABhhQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAARbALqSAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg5AQAAAAAAAAsB/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A?cb%3D121509378,_fmt:prog,_id:_aYepaoPyHI6GwPAPgv_OyQY_16\u0026sp_imghp=false\u0026sp_hpep=2\u0026sp_hpte=0\u0026vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQj-0KCCI..i","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.704Z","timestamp":1789495145704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /async/hpba?yv=3\u0026cs=0\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026async=_basejs:/xjs/_/js/k%3Dxjs.hd.no.0jtLsupCuZA.2023.O/am%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%3D0/br%3D1/rs%3DACT90oHatcyD7eCmIYJ6wW06Z51qgrFkEg?cb%3D121509378,_basecss:/xjs/_/ss/k%3Dxjs.hd.o131JhEtebY.L.F4.O/am%3DAAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAAAABACACAAAAEAAAAAAAADCAQAAAAMAAAAAAAAAAAAAAAAAAABAAAAkAAAAAAAAAABAAAAAAAACAIgAAAAAAAEgAAoAACAAAAAAAAAAAIAAAAAAAAAAEAIBAAAAAAAAAAAAAEACAAAAAAAAAAAAgWGAAAAAAIIBAAAAAAAAAAAAAAAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAAAAGABAAAAAABAo8CACAAAAAAAgAAAAAAIAIJACCAAAAAEAAAAAQABAAEAAAAAjKAAABIdIAAAEAgAAAAAaAAAAAAAAQAAAAAAAAAAABABAAAAAAAAAAAgCQAYIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIA/br%3D1/rs%3DACT90oFJZHL3LZHSmc_4EZSe8L9cOnQ14A?cb%3D121509378,_basecomb:/xjs/_/js/k%3Dxjs.hd.no.0jtLsupCuZA.2023.O/ck%3Dxjs.hd.o131JhEtebY.L.F4.O/am%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%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A?cb%3D121509378,_fmt:prog,_id:_aYepaoPyHI6GwPAPgv_OyQY_16\u0026sp_imghp=false\u0026sp_hpep=2\u0026sp_hpte=0\u0026vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQj-0KCCI..i HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nversion: 980974090\r\nx-content-type-options: nosniff\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/none\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 15 Sep 2026 17:59:05 GMT\r\ncache-control: private\r\nset-cookie: __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP; expires=Sat, 16-Oct-2027 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-16T10:17:23Z","raw_expires":"Sat, 16-Oct-2027 10:17:23 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP; expires=Sat, 16-Oct-2027 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":1363,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text","md5":"b76b9c8578fccdf4f80ad99d8d75e6ec","sha1":"04a2c51e75ecfcc9a8afbc05df38413dbcececc5","sha256":"9cd4a8d876368348976bb46436c950403e74f36911d5247aff0560035c11cba0","sha512":"0a54de6154fe69950f96f2597ea1ce9d90677a051692a2d6f0d5df3a40962fbb6adc6c5f2c369188e32646681414464fbaa2256a84b6a4b91e603f04ec5cf3f4","ssdeep":"","tlshash":"d7b0122012dd1c4c0404b04013f8ff6d652e669f8077d75b3bd1265b21fc9036cb1131","first_seen":"2026-09-15T17:59:48.121537Z","last_seen":"2026-09-15T17:59:48.121537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":62,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?ei=aYepaoPyHI6GwPAPgv_OyQY\u0026vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQhJAHCDc..s\u0026bl=dZk1\u0026s=webhp\u0026gl=no\u0026pc=SEARCH_HOMEPAGE\u0026isMobile=false","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.716Z","timestamp":1789495145716,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?ei=aYepaoPyHI6GwPAPgv_OyQY\u0026vet=10ahUKEwjDyuTzlPGWAxUOAxAIHYK_M2kQhJAHCDc..s\u0026bl=dZk1\u0026s=webhp\u0026gl=no\u0026pc=SEARCH_HOMEPAGE\u0026isMobile=false HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Izip-IpZo7IKySG8aVqXGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=sy10l,HGv0mf,UEShwc,sy19d,YHnUBc,sy2ey,sy2eu,VtMfj,sy2bu,sysk,sy2bt,sy2bs,n8YO7e,sy2bx,sy1iy,sy1iz,sy1j3,sy1hv,sy1hu,sy1is,sy1i6,sy1i7,sy1i4,sy1i2,sy1i1,sy1fi,sy1i5,sy1g5,sy11o,sy1it,sy1im,sy1ig,sy1ih,sy1ie,sy1dd,sy1hz,sy1fo,sy1dg,sy1df,sy9f,sy1de,sy1dc,sy1da,sych,syh6,sy1id,sy1ib,sy1ic,sy1hy,sy1ia,sy1i0,sy1if,sy1hx,sy1i9,syo0,syl6,syl9,syl7,sy2bw,sy1kk,sy1kl,sy1kn,jywEkf,ZgGg9b,dIoSBb,sy2qa,b6knsb,sy2q7,sy2q6,sy2k0,sy2k8,sy117,sy2h2,syu9,syst,syqn,sy19b,sy2k7,sy2dy,sy199,sy13l,sygi,syel,syej,syb3,syen,JKoKVe,pXdRYb,sy357,syb4,syb1,sy9r,O1Gjze,TtcOte,wR5FRb,sygg,sygd,syg9,syg8,sycn,sydc,sycb,syg7,syee,syg6,syg5,syg4,syg3,syg2,syg1,syg0,syfz,syfy,syci,syfw,syfv,sybz,syc1,sybx,sybw,sybu,syby,sybk,sybn,sybl,sybv,sybs,sybb,syb9,syfx,syfu,syfs,sye9,sye5,syc7,syc4,syc6,sycd,syd4,sydq,syca,syct,sycs,sycl,sycr,sycq,sycf,syco,sycp,sydn,syfr,syfq,syfe,syfo,syf1,syec,syds,sydt,sydm,sydk,sydf,sycx,sycy,syde,syd9,syd8,syd5,sydd,sycw,syda,sycj,sycg,sycz,syck,sydx,syc5,syce,syeq,syer,syfn,sye7,sye2,sye1,sydh,sye4,sydz,sye0,sye8,syd3,syfc,syfl,syeu,sydb,syev,syfb,syfj,syet,syfa,syfi,syea?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.038Z","timestamp":1789495146038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=sy10l,HGv0mf,UEShwc,sy19d,YHnUBc,sy2ey,sy2eu,VtMfj,sy2bu,sysk,sy2bt,sy2bs,n8YO7e,sy2bx,sy1iy,sy1iz,sy1j3,sy1hv,sy1hu,sy1is,sy1i6,sy1i7,sy1i4,sy1i2,sy1i1,sy1fi,sy1i5,sy1g5,sy11o,sy1it,sy1im,sy1ig,sy1ih,sy1ie,sy1dd,sy1hz,sy1fo,sy1dg,sy1df,sy9f,sy1de,sy1dc,sy1da,sych,syh6,sy1id,sy1ib,sy1ic,sy1hy,sy1ia,sy1i0,sy1if,sy1hx,sy1i9,syo0,syl6,syl9,syl7,sy2bw,sy1kk,sy1kl,sy1kn,jywEkf,ZgGg9b,dIoSBb,sy2qa,b6knsb,sy2q7,sy2q6,sy2k0,sy2k8,sy117,sy2h2,syu9,syst,syqn,sy19b,sy2k7,sy2dy,sy199,sy13l,sygi,syel,syej,syb3,syen,JKoKVe,pXdRYb,sy357,syb4,syb1,sy9r,O1Gjze,TtcOte,wR5FRb,sygg,sygd,syg9,syg8,sycn,sydc,sycb,syg7,syee,syg6,syg5,syg4,syg3,syg2,syg1,syg0,syfz,syfy,syci,syfw,syfv,sybz,syc1,sybx,sybw,sybu,syby,sybk,sybn,sybl,sybv,sybs,sybb,syb9,syfx,syfu,syfs,sye9,sye5,syc7,syc4,syc6,sycd,syd4,sydq,syca,syct,sycs,sycl,sycr,sycq,sycf,syco,sycp,sydn,syfr,syfq,syfe,syfo,syf1,syec,syds,sydt,sydm,sydk,sydf,sycx,sycy,syde,syd9,syd8,syd5,sydd,sycw,syda,sycj,sycg,sycz,syck,sydx,syc5,syce,syeq,syer,syfn,sye7,sye2,sye1,sydh,sye4,sydz,sye0,sye8,syd3,syfc,syfl,syeu,sydb,syev,syfb,syfj,syet,syfa,syfi,syea?cb=121509378\u0026xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 45029\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:20:55 GMT\r\nexpires: Wed, 15 Sep 2027 17:20:55 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 2291\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159380,"size_decoded":45856,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3951)","md5":"9fd17f0906b2ad23130d190fc6ff0c63","sha1":"723529659d00bde12ea1e1a5e65326074886190c","sha256":"849ad3380a9beaa8c95efd1958c4195be1bd558c451bb431b0166e7cece0baa9","sha512":"99d8df43030f03cf5db9c4585f7dbbe36d95bea5c8ed6b7e0780b9434c3d944b433d9cb3a7fe0a24eaf1bb13aebf74f4492c8dedad3ed8be29c87b1b925f24ba","ssdeep":"1536:aTULqGcloKWbtVF1oXcTl+K4ugzlOxZJNrOB+UBFZHff00GATU21F+cMZPM2EwDb:qGclEF6sTkHugzlqZJd2zrmHEwD8c","tlshash":"9ff373e47253e2633762b98050bb0147f3beb5d1f688856d69f8c4b1aaf045502f37ba","first_seen":"2026-09-15T17:36:20.824683Z","last_seen":"2026-09-15T17:59:48.122386Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=syew,syeb,syey,syeo,syf9,syfg,syf8,syff,syf7,syf6,syes,syf5,syf3,syf2,syf0,syez,syfd,syep,syei,syed,syb8,sy8z,zbML3c,gskBEc,sy2bn,s980lf,U9EYge,sy135,loL8vb,sy14b,sy14a,sy13f,sy13m,sy146,sy149,sy13j,sy13h,sy13g,syhi,sy13e,sy145,sy143,sy142,sy141,syir,syhj,syhh,sy144,sy147,sy13k,sy13q,sy137,sy148,sy13z,sy13y,sy13s,sy13x,sy13t,sy13p,sy13o,sy13n,sy139,sy12v,sy11q,sy11p,sy13a,ms4mZb,sy10c,B2qlPe,sy194,NzU6V,sy19m,sy9p,WlNQGd,sy12u,sy12s,sy12r,DPreE,sy19o,sy19n,nabPbb,abd,sy4ek,TDFkye?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.041Z","timestamp":1789495146041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=syew,syeb,syey,syeo,syf9,syfg,syf8,syff,syf7,syf6,syes,syf5,syf3,syf2,syf0,syez,syfd,syep,syei,syed,syb8,sy8z,zbML3c,gskBEc,sy2bn,s980lf,U9EYge,sy135,loL8vb,sy14b,sy14a,sy13f,sy13m,sy146,sy149,sy13j,sy13h,sy13g,syhi,sy13e,sy145,sy143,sy142,sy141,syir,syhj,syhh,sy144,sy147,sy13k,sy13q,sy137,sy148,sy13z,sy13y,sy13s,sy13x,sy13t,sy13p,sy13o,sy13n,sy139,sy12v,sy11q,sy11p,sy13a,ms4mZb,sy10c,B2qlPe,sy194,NzU6V,sy19m,sy9p,WlNQGd,sy12u,sy12s,sy12r,DPreE,sy19o,sy19n,nabPbb,abd,sy4ek,TDFkye?cb=121509378\u0026xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 45837\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:20:55 GMT\r\nexpires: Wed, 15 Sep 2027 17:20:55 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 2291\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149468,"size_decoded":46664,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2521)","md5":"663981b9a48edc1c8f768dc4e51177e9","sha1":"5e10508ea738dcbf6531742df4e4f6d13742259b","sha256":"20f7583c687be5a6eaf5c03a40d22d28fa9d3a5cc58579268df4af4e28a7b3ea","sha512":"b976380890432ecd17f07804482b15655ada2d0345fcdc3aad854adee7f3abcc6827272154889e01f78e28869822ba2116dd8bbd0e7d76749400659b4ac5770d","ssdeep":"1536:I05dpschl3rYReC2HIV7DjMJbewlnSSkBQ2BPwF6BxEFZEQ7sga:ImdthFrYYWgbe+EDEFZEQ7Ra","tlshash":"bfe31ab9f3927063967ab154c16f424232eea442f04dc859b5a4d9d2aefc84e41f7f38","first_seen":"2026-09-15T17:36:20.800117Z","last_seen":"2026-09-15T17:59:48.122842Z","times_seen":5,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/client_204?atyp=i\u0026biw=1280\u0026bih=1024\u0026dpr=1\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.044Z","timestamp":1789495146044,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /client_204?atyp=i\u0026biw=1280\u0026bih=1024\u0026dpr=1\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-4H1xSoTQUwIolr_h64FMgA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":694,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/8.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.060Z","timestamp":1789495145060,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /8.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 57032\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-dec8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57032,"size_decoded":57283,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45a0973fd473f6545bf1268fe29f4dfc","sha1":"efe037eb2e30a3e350a8bad79f9d652928b10967","sha256":"9683ca52210bb0f7c37d8dd34495197d45c00579266a940489076754b375264d","sha512":"8b8f095fc485658dfe07a5c4124286d0537866434ec29e9842c1539799af1d1bd8173a6d554bdf5f045df9ec81e56bcc689974aef658d0865452284af4a355b3","ssdeep":"1536:GlzO4/HjqUYXe1SMUDc1nDHnZNBhlE5Xw4ff1v6ViMWO:azJHjqvAtecFnnf65gxi1O","tlshash":"934302b493f8bd725a0b4cad69fa4526008adc20629f3e75923b39d6086335f0157e3b","first_seen":"2025-09-30T17:15:07.063954Z","last_seen":"2026-09-15T17:59:48.123302Z","times_seen":416,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":51,"dns":0,"connect":56,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/ss/k=og.asy.Gq-b-cCzpGo.L.F4.O/m=ll_tdm,adcgm3,ll_fw,abld/excm=/d=1/ed=1/ct=zgms/rs=AA2YrTt998CdWnSLmb9zS1V16Pmj71mO1w","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.784Z","timestamp":1789495145784,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /og/_/ss/k=og.asy.Gq-b-cCzpGo.L.F4.O/m=ll_tdm,adcgm3,ll_fw,abld/excm=/d=1/ed=1/ct=zgms/rs=AA2YrTt998CdWnSLmb9zS1V16Pmj71mO1w HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"one-google-eng\"\r\nreport-to: {\"group\":\"one-google-eng\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/one-google-eng\"}]}\r\ncontent-length: 2000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 05:31:49 GMT\r\nexpires: Wed, 15 Sep 2027 05:31:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 44836\r\nlast-modified: Wed, 02 Sep 2026 01:31:38 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7074,"size_decoded":2835,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7074), with no line terminators","md5":"6c80d629ac90848af06ce6655d0da9ff","sha1":"28aecc383bc80d9abdb72ef8d865807a7dae60fa","sha256":"3f480ab4ad12542dd69e7929c12d6324d8e336d1a0f9cff0512ff904af7860bc","sha512":"94cb9094d5429a8833bb8699ad5dcedc3028651acf76b41065d5222e3c3d3cbfca82fe7049b4bb8a43dfad5b69baed7cb33fed0593047f5617319a767281ea9e","ssdeep":"96:H5YWqcoNmrbmlLMROKm/dBbymLdgB0K7kPVI7Fpu9akFVAqCoC2:ZYWZ6RMR6/dBbrE0KkPV4p3kFmtX2","tlshash":"96e144a1d254317ffc2bd47d7784f5c8a262529bd8ae0f78fc29223196ca1b72b11306","first_seen":"2026-08-25T13:29:30.607048Z","last_seen":"2026-09-15T20:10:23.414216Z","times_seen":1253,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogads-pa.clients6.google.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData","fqdn":"ogads-pa.clients6.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.833Z","timestamp":1789495145833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:00 GMT","end":"Mon, 02 Nov 2026 08:38:59 GMT"},"fingerprint":{"sha1":"61:61:C3:15:25:DD:E5:FF:A9:23:2C:FB:5F:15:5A:B7:30:B3:3C:7C","sha256":"DC:81:16:85:3D:33:30:CC:1E:37:0B:01:3B:C0:1A:E6:97:EA:07:76:C4:71:05:06:39:08:C8:67:6A:FC:21:58"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/1.1\r\nHost: ogads-pa.clients6.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://www.google.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\naccess-control-max-age: 3600\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=17\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":599,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":33,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/md=2/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAggAAAAQAAAAAAAAAAAAAAAAAYAAAAAAAAAAAAAAAAAAAAAAAAFBAAAkAAAAAAAAAABAAAAAAAgAAAgAAMAAAAEgAAoAAIABAAAAAAAAAAAAAAAAAAAAEBABAABACAAAAPAPBlgBAAAAAAAAAAASAGAAAAAAAACABQAAAEEAAAAAAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAgAAAFAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAEAKAAAAABAEAAAAAAAAAAAAAAAAAAAAwAAAAAYAAAAAAAAAAAAgAAAAAAABAAAAAABCAAAAAAAAAAAAQACAAAAEAHQOABhhQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAARbALqSAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg5AQAAAAAAAAsB/rs=ACT90oFcMZGFZVbBlitDdadUxwEw_38v3w?cb=121509378","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.042Z","timestamp":1789495146042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/md=2/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=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ACT90oFcMZGFZVbBlitDdadUxwEw_38v3w?cb=121509378 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 1066\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:00:32 GMT\r\nexpires: Wed, 15 Sep 2027 17:00:32 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 3514\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12750,"size_decoded":1894,"mime_type":"text/javascript; charset=UTF-8","magic":"JSON text data","md5":"68d77896bccedcf7c3ba02391c392297","sha1":"86f53dc965e9208e309d40f9a9dd1c4427053c12","sha256":"252e9e51761baa23f3af3aa597e8775a6125b7ce141316ef5a519185c32edbf6","sha512":"6e6d42ed4ea4805ed932bfddc033be01d0f145957d87a4596fb64603f53bc108f24750d7646526623b9e88932cd6fd7139ff916c7b6796bfb45e357706c5124e","ssdeep":"3:YGNRxkTUuThWaSWYUfU/UhWaaaaYRyaaaaaaaayWaaaaaaaayaqiKUTTFaaV1iWy:YGzxkl","tlshash":"63420020ebc0202003c038b2803a2c0eb3e0088030a0cccb2c0800038ee30888382b0f","first_seen":"2026-09-15T17:12:55.681311Z","last_seen":"2026-09-15T17:59:48.124241Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/complete/s?q\u0026cp=0\u0026client=gws-wiz\u0026xssi=t\u0026gs_pcrt=2\u0026hl=no\u0026authuser=0\u0026psi=aYepaoPyHI6GwPAPgv_OyQY.1789495146083\u0026dpr=1\u0026nolsbt=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.122Z","timestamp":1789495146122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /complete/s?q\u0026cp=0\u0026client=gws-wiz\u0026xssi=t\u0026gs_pcrt=2\u0026hl=no\u0026authuser=0\u0026psi=aYepaoPyHI6GwPAPgv_OyQY.1789495146083\u0026dpr=1\u0026nolsbt=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nexpires: Tue, 15 Sep 2026 17:59:06 GMT\r\ncache-control: private, max-age=3600\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\ncontent-encoding: br\r\nserver: Proxima\r\ncontent-length: 43\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39,"size_decoded":667,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text","md5":"90d04e9454455b7906f169e47cbd7387","sha1":"3b04c94d9be1065e002cb64ba1e0d9975a06e16b","sha256":"da086e0d090856c39fe55513daca941277c114fbce3cee77a4fd8033867d9179","sha512":"3badde7f37aad9f7f061cb9cb278d33bd16361701714de775bd6fb6217ef598a5dfee722e79a7f3de3c7fe58daa9557423862f35bf5a46874ef6de46d6e634ce","ssdeep":"","tlshash":"5b9004c454113d540513d3110077304445403d4dfc4404c5c040740444c010104450f5","first_seen":"2026-09-15T17:59:48.124765Z","last_seen":"2026-09-15T17:59:48.124765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=AAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAggABACQCAAAAEAAAAAAAADCAYAAAAMAAAAAAAAAAAAAAAAAAAFBAAAkAAAAAAAAAABAAAAAAAgCAIgAAMAAAAEgAAoAAKABAAAAAAAAAIAAAAAAAAAAEBIBAABACAAAAPAPBlgDAAAAAAAAAAASgWGAAAAAAIKBBQAAAEEAAAAAAkAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAIAAGABAAAAAABAo8CACAAAAAAAoAAAAAAIAIJACCAAAAAEAKAAAQABAEEAAAAAjKAAABIdIAAAEAwAAAAAaAAAAAAAAQAAAgAAAAAAABABAAAABCAAAAAgCQAYIAQACAAAAEAHQOABhhQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAARbALqSAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg5AQAAAAAAAAsB/d=0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=qTnoBf,syal,sOXFj,oGtAuc,NJ1rfe,syau,q0xTif,y05UD,PPhKqf,vECdaf,sy1j1,syqr,sysw,sy2c4,sy21f,sy2c5,sy2a6,sy2a7,sy1d8,sy1ha,sy1hc,sy1he,sy1hf,epYOx?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.229Z","timestamp":1789495146229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=qTnoBf,syal,sOXFj,oGtAuc,NJ1rfe,syau,q0xTif,y05UD,PPhKqf,vECdaf,sy1j1,syqr,sysw,sy2c4,sy21f,sy2c5,sy2a6,sy2a7,sy1d8,sy1ha,sy1hc,sy1he,sy1hf,epYOx?cb=121509378\u0026xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 7957\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:27:04 GMT\r\nexpires: Wed, 15 Sep 2027 17:27:04 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 1922\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26749,"size_decoded":8783,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (8253)","md5":"e7df48a9f178ee6d00f94b7641fa95e9","sha1":"7f64acb4b1e5e9fc580876319e8d37ab57a066bc","sha256":"4eaf4f8dbf40a5b185e8d7d5f3a80fc880440053f4ec5d13b42744fd1e5c1c64","sha512":"acad41e887cad36d75801dd15ec1d104b2c0493adfaa7f7e4c9d550f446e0c032eced5f316a7c591c9e23402e2e9352005900371ad00c5f1f87eb152fbba19c5","ssdeep":"384:RUMS1NgsZJMQVdh9VAkzynZFXpL65hQpjts5KnNPZaDRy0QnB83ucq70vzB:G1HcZ9pLPBts5KaDRy0QnB83ucLrB","tlshash":"ecc24ab092a120135217a5d8b99b77dde05f26dbef2744b8a934f784c5e1a8403f2f39","first_seen":"2026-09-15T17:36:20.829082Z","last_seen":"2026-09-15T17:59:48.125722Z","times_seen":5,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/css2?family=Inter:wght@400;700\u0026display=swap","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.055Z","timestamp":1789495145055,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 409\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-199\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":409,"size_decoded":671,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"60b4e28606439c00e6d0e7364b2b091a","sha1":"23b47d11e7d32c39aea5b286e25a794a1f38b5be","sha256":"bd6b86f3bb8f3b4b9bd1cd2400be3689ce338224003060d3d02dba51a50f65b8","sha512":"cf068877c3058d3a4202777e5c763a814fc6cb0e7b6fefbb97a16ef61413563bafbca74071081ea342f9a3a9fed09c7b03920ff0e6401f7fdd46ad02098f56c1","ssdeep":"","tlshash":"46e02240002f1611c91a1e6d33cf3f2d2ecc29881042c1ac4b350c959dea06a8345fde","first_seen":"2026-02-12T22:26:06.450132Z","last_seen":"2026-09-15T17:59:48.126366Z","times_seen":123,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/11.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.065Z","timestamp":1789495145065,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /11.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16580\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-40c4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16580,"size_decoded":16831,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"219accc7f77ce773b0a35c85aa007167","sha1":"2c24508f752f992c2bab45ee58ff1259a341552f","sha256":"13dfe760e11e584feca95e882c723ef5af5789f90910a57c1595cd26c6f96a56","sha512":"d2b71f61314026636194ca89dddff558870c50658f136fce1c32332f5b112d6d376e6c744ad572c172cbec63817723a75f880f497a02a6caf149d2439f59151a","ssdeep":"384:ov4fsUAqn2wMMKYYCrB4kfnhc5u0nbgdzM5B9ZB/L4LAc:64fsUAqyMKYYC17nh0u0bgdMn7RcN","tlshash":"fe72e1fda47173308c87823939c68c1d14b19acf9caa27565cdf27f1b19e27c6a74452","first_seen":"2025-09-30T17:15:07.077773Z","last_seen":"2026-09-15T17:59:48.126844Z","times_seen":395,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":40,"dns":0,"connect":54,"send":0,"wait":110,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/ss/k=xjs.hd.o131JhEtebY.L.F4.O/am=AAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAAAABACACAAAAEAAAAAAAADCAQAAAAMAAAAAAAAAAAAAAAAAAABAAAAkAAAAAAAAAABAAAAAAAACAIgAAAAAAAEgAAoAACAAAAAAAAAAAIAAAAAAAAAAEAIBAAAAAAAAAAAAAEACAAAAAAAAAAAAgWGAAAAAAIIBAAAAAAAAAAAAAAAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAAAAGABAAAAAABAo8CACAAAAAAAgAAAAAAIAIJACCAAAAAEAAAAAQABAAEAAAAAjKAAABIdIAAAEAgAAAAAaAAAAAAAAQAAAAAAAAAAABABAAAAAAAAAAAgCQAYIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIA/d=1/ed=1/br=1/rs=ACT90oFJZHL3LZHSmc_4EZSe8L9cOnQ14A/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi?cb=121509378","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.649Z","timestamp":1789495145649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/ss/k=xjs.hd.o131JhEtebY.L.F4.O/am=AAAEAAAgAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAACAAAABAICgAAAAAAAAABACACAAAAEAAAAAAAADCAQAAAAMAAAAAAAAAAAAAAAAAAABAAAAkAAAAAAAAAABAAAAAAAACAIgAAAAAAAEgAAoAACAAAAAAAAAAAIAAAAAAAAAAEAIBAAAAAAAAAAAAAEACAAAAAAAAAAAAgWGAAAAAAIIBAAAAAAAAAAAAAAAAAAAAAAAAAAAiARIAAAIAAAAAgAAAAAAAABEQQhAACFBAwIIAAAAAAGABAAAAAABAo8CACAAAAAAAgAAAAAAIAIJACCAAAAAEAAAAAQABAAEAAAAAjKAAABIdIAAAEAgAAAAAaAAAAAAAAQAAAAAAAAAAABABAAAAAAAAAAAgCQAYIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIA/d=1/ed=1/br=1/rs=ACT90oFJZHL3LZHSmc_4EZSe8L9cOnQ14A/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi?cb=121509378 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 1423\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:00:26 GMT\r\nexpires: Wed, 15 Sep 2027 17:00:26 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:18 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 3519\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3178,"size_decoded":2242,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3178), with no line terminators","md5":"105e5adc2d585d01064e234304227ee2","sha1":"d36d326cb65011ca41a64078c1309cd4c469b468","sha256":"6e1a7b8003f8190dd1e3084ff3647c54584784616c9a128c6ddb6dfecbe8ac18","sha512":"f06114192920486580220f8921f0502559a3b675cb882411dbc0c53d69f3e76b092e621fdfb7f5ed76a811f47b79f11e0c58613400897562c87f111c9464ae0c","ssdeep":"","tlshash":"756123148b79e1a7bb4e4272e5e67a547496d913d9fa13bc2813009cf2c63da13cd31e","first_seen":"2026-08-06T07:33:30.198638Z","last_seen":"2026-09-15T20:10:23.416468Z","times_seen":422,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=aG3wVc,syhg,aLUfP,wQlYve,sy2fn,sy2fr,sy2fs,sy2fm,sy2ft,sy2fi,sy2fh,sy2ay,sy2fj,sy2ff,sy2fe,sy2fc,sygx,s0j7C,sy1a8,sy1a4,sy1a5,sy1a1,syjq,syjp,syiu,sy1a3,sy19w,sy19r,syj0,syhn,sy19s,SMquOb,sy94,sy93,syjh,syjg,syjd,syje,syjc,syks,sykq,sykn,sykm,sykl,syke,syjz,sykg,sykh,syjx,syjt,syju,syk7,sykc,syk1,syja,syk8,syjv,syjw,syjk,syjs,syjb,syj4,syj5,syj3,syho,syif,syid,syic,syib,sy9l,sy9o,syi0,syie,syia,syi8,syi2,syis,syi9,syij,syik,syi7,syi1,syi5,syhw,syht,syj2,syj1,syiz,syiw,syiv,syhm,syhk,sy9t,uxMpU,syhb,syac,sya9,sya8,sya7,sya6,sya5,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sya2,sy9x,A1yn5d,YIZmRd,sy9j,sy9e,sy9c,sy9b,sy98,sy97,byfTOb,lsjVmc,LEikZe,sy95,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy2ci,sy1ad,d5EhJe,sy2d9,fCxEDd,sy2cv,sy2cw,sy2d3,sy2cx,sy2cz,sy2ct,sy2d2,sy2d1,sy1uo,sy2cr,sy1dj,sy1tg,sy1ag,sy1ab,sy1ah,sy19z,sy19y,sy1ai,T1HOxc,LFk59d,sy2co,sy2cn,sy2cl,sy2cm,sy2ck,sysa,zx30Y,sy2db,sy2da,sy19u,sy11d,Wo3n8,sy1ap,sy1an,zGLm3b,sy4dc,sy4da,sy4d9,sy3uv,sy1tk,sy1tl,DhPYme,sy4dl,sy3ue,sy3uc,syku,sy3uj,sy3ud,sy3ul,sy3u9,sy4dk,KHourd,sy4eu,sy180,sy11v,oQfbDd?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.146Z","timestamp":1789495146146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=aG3wVc,syhg,aLUfP,wQlYve,sy2fn,sy2fr,sy2fs,sy2fm,sy2ft,sy2fi,sy2fh,sy2ay,sy2fj,sy2ff,sy2fe,sy2fc,sygx,s0j7C,sy1a8,sy1a4,sy1a5,sy1a1,syjq,syjp,syiu,sy1a3,sy19w,sy19r,syj0,syhn,sy19s,SMquOb,sy94,sy93,syjh,syjg,syjd,syje,syjc,syks,sykq,sykn,sykm,sykl,syke,syjz,sykg,sykh,syjx,syjt,syju,syk7,sykc,syk1,syja,syk8,syjv,syjw,syjk,syjs,syjb,syj4,syj5,syj3,syho,syif,syid,syic,syib,sy9l,sy9o,syi0,syie,syia,syi8,syi2,syis,syi9,syij,syik,syi7,syi1,syi5,syhw,syht,syj2,syj1,syiz,syiw,syiv,syhm,syhk,sy9t,uxMpU,syhb,syac,sya9,sya8,sya7,sya6,sya5,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sya2,sy9x,A1yn5d,YIZmRd,sy9j,sy9e,sy9c,sy9b,sy98,sy97,byfTOb,lsjVmc,LEikZe,sy95,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy2ci,sy1ad,d5EhJe,sy2d9,fCxEDd,sy2cv,sy2cw,sy2d3,sy2cx,sy2cz,sy2ct,sy2d2,sy2d1,sy1uo,sy2cr,sy1dj,sy1tg,sy1ag,sy1ab,sy1ah,sy19z,sy19y,sy1ai,T1HOxc,LFk59d,sy2co,sy2cn,sy2cl,sy2cm,sy2ck,sysa,zx30Y,sy2db,sy2da,sy19u,sy11d,Wo3n8,sy1ap,sy1an,zGLm3b,sy4dc,sy4da,sy4d9,sy3uv,sy1tk,sy1tl,DhPYme,sy4dl,sy3ue,sy3uc,syku,sy3uj,sy3ud,sy3ul,sy3u9,sy4dk,KHourd,sy4eu,sy180,sy11v,oQfbDd?cb=121509378\u0026xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 96227\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:20:55 GMT\r\nexpires: Wed, 15 Sep 2027 17:20:55 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 2291\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":308426,"size_decoded":97054,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3058)","md5":"e781af5e547f06f5e469472534dbc68f","sha1":"1e30ed602165acaa717f42b10246b2739799dfc3","sha256":"6d10c25b516479d6fbcdf4b2dba98ae6b2e1983d9550a5c07c5d7aa3c9b35b59","sha512":"b8b10b1af2e743706ff2b995f2bd1feaf4e2fcca35d3efceb5d0398164cac833856211b363cc5bee76fb457d0f79d73da7eb2264a94cf382b541acb85bc74c31","ssdeep":"3072:JMsmYJZNUcYJdkS0jbDyZZZU+dKXso1k9O9fUzQ93D9UYoLTsr:fNUXJdkSKbDt+UxuOLUYoHsr","tlshash":"5c64c6947363b2a36361f5d5806b028bf36a7491f489882cb9fcd5e17df048242f6bb5","first_seen":"2026-09-15T17:36:20.83669Z","last_seen":"2026-09-15T17:59:48.128192Z","times_seen":5,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/client_204?cs=1\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.236Z","timestamp":1789495146236,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /client_204?cs=1\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ZphgC_AOjE1MrOKLUypt1Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: __Secure-ENID=Cp8CCAIS0QEBAQxeRQ7zFYYXPFMqjlzeyYSJflvxQntqfxirBGIp1PuhSyhOPArbiobMojG5Ql3M5qec47ifnipU7RfCNSQl0AzY9IJt5KcvxGeAAckj3HQ8bZ5P6J1VpIAfZHkpMkxGWm2OVmIu3Bxy4Ma9s2jM0KXiG1egHwx3vYj16KGchnGNOXJKafqRIKm9Hj912gVwcp8Pfziq2ozfZn_IBLRm1DiGBi6TQ2F81NHlxW3RCFkRUwZlIB9K_WPCNbZ_iqAPsyc11iGFTmnxvvAruzBDCigCMkUBfWzEqqv7zzXv0R-WB4APO9wQMDoce-TguRN6T6uK92RX6iFKilSgADwQMPHSmX2_KOKXeq5CfcA0IM9CDOmvvx3CGAo; expires=Sat, 16-Oct-2027 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":[{"name":"__Secure-ENID","value":"Cp8CCAIS0QEBAQxeRQ7zFYYXPFMqjlzeyYSJflvxQntqfxirBGIp1PuhSyhOPArbiobMojG5Ql3M5qec47ifnipU7RfCNSQl0AzY9IJt5KcvxGeAAckj3HQ8bZ5P6J1VpIAfZHkpMkxGWm2OVmIu3Bxy4Ma9s2jM0KXiG1egHwx3vYj16KGchnGNOXJKafqRIKm9Hj912gVwcp8Pfziq2ozfZn_IBLRm1DiGBi6TQ2F81NHlxW3RCFkRUwZlIB9K_WPCNbZ_iqAPsyc11iGFTmnxvvAruzBDCigCMkUBfWzEqqv7zzXv0R-WB4APO9wQMDoce-TguRN6T6uK92RX6iFKilSgADwQMPHSmX2_KOKXeq5CfcA0IM9CDOmvvx3CGAo","quoted":false,"path":"/","domain":".google.com","expires":"2027-10-16T10:17:23Z","raw_expires":"Sat, 16-Oct-2027 10:17:23 GMT","secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Secure-ENID=Cp8CCAIS0QEBAQxeRQ7zFYYXPFMqjlzeyYSJflvxQntqfxirBGIp1PuhSyhOPArbiobMojG5Ql3M5qec47ifnipU7RfCNSQl0AzY9IJt5KcvxGeAAckj3HQ8bZ5P6J1VpIAfZHkpMkxGWm2OVmIu3Bxy4Ma9s2jM0KXiG1egHwx3vYj16KGchnGNOXJKafqRIKm9Hj912gVwcp8Pfziq2ozfZn_IBLRm1DiGBi6TQ2F81NHlxW3RCFkRUwZlIB9K_WPCNbZ_iqAPsyc11iGFTmnxvvAruzBDCigCMkUBfWzEqqv7zzXv0R-WB4APO9wQMDoce-TguRN6T6uK92RX6iFKilSgADwQMPHSmX2_KOKXeq5CfcA0IM9CDOmvvx3CGAo; expires=Sat, 16-Oct-2027 10:17:23 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax"}],"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":1277,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=sy2gn,sy2gg,sy2gf,sy2ge,sy2gc,sy25h,sy2gd,sy16t,sy2gm,sy2gh,sy2gl,sy1u4,sy2gb,syug,sy10b,r8E4Ze,sy2fa,sysj,sy2f9,nNxkYd,sy11m,sy11n,sy11l,sy2fz,sy2fy,sy2fv,sy20c,sy1y1,sy1y2,sy1wk,sy1we,sy1wb,sy2fx,sy2fw,sy2ez,sy217,sy1wa,sy1vx,sy1vu,sy1vw,sy1w7,sy122,sy121,nTNfhe,sy2en,P10Owf,sy1a9,gSZvdb,sy19k,sy19i,syp4,sys5,CnSW2d,sy19f,sy19c,sy196,sy19e,sy197,nRwWne,sy19h,fXO0xe?cb=121509378\u0026xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.288Z","timestamp":1789495146288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/ck=xjs.hd.o131JhEtebY.L.F4.O/am=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0/dg=0/br=1/ujg=1/rs=ACT90oEtQbKM1A9U7UI7UdsUcsHkwksV3A/m=sy2gn,sy2gg,sy2gf,sy2ge,sy2gc,sy25h,sy2gd,sy16t,sy2gm,sy2gh,sy2gl,sy1u4,sy2gb,syug,sy10b,r8E4Ze,sy2fa,sysj,sy2f9,nNxkYd,sy11m,sy11n,sy11l,sy2fz,sy2fy,sy2fv,sy20c,sy1y1,sy1y2,sy1wk,sy1we,sy1wb,sy2fx,sy2fw,sy2ez,sy217,sy1wa,sy1vx,sy1vu,sy1vw,sy1w7,sy122,sy121,nTNfhe,sy2en,P10Owf,sy1a9,gSZvdb,sy19k,sy19i,syp4,sys5,CnSW2d,sy19f,sy19c,sy196,sy19e,sy197,nRwWne,sy19h,fXO0xe?cb=121509378\u0026xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=Cp8CCAIS0QEBAQxeRQ7zFYYXPFMqjlzeyYSJflvxQntqfxirBGIp1PuhSyhOPArbiobMojG5Ql3M5qec47ifnipU7RfCNSQl0AzY9IJt5KcvxGeAAckj3HQ8bZ5P6J1VpIAfZHkpMkxGWm2OVmIu3Bxy4Ma9s2jM0KXiG1egHwx3vYj16KGchnGNOXJKafqRIKm9Hj912gVwcp8Pfziq2ozfZn_IBLRm1DiGBi6TQ2F81NHlxW3RCFkRUwZlIB9K_WPCNbZ_iqAPsyc11iGFTmnxvvAruzBDCigCMkUBfWzEqqv7zzXv0R-WB4APO9wQMDoce-TguRN6T6uK92RX6iFKilSgADwQMPHSmX2_KOKXeq5CfcA0IM9CDOmvvx3CGAo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 78241\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:34:45 GMT\r\nexpires: Wed, 15 Sep 2027 17:34:45 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 1461\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":213458,"size_decoded":79068,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (8259)","md5":"00eee7a7180252593a5fd55a21e5d993","sha1":"669795e540e6e702a65267509637b50d9d7d5867","sha256":"72854f0dbe0e7b9a3b8491e527108453ae511786c2fa73053574aeb32a3d4aad","sha512":"f2d543dc98127627d76a3bfd87cafbe3c9e2fbda25436659fbd6ee24aa7bb4eb460543e18811503d6a0171398a8c5363ad143c9c1ce5e7cb24ea9f84b4a21a90","ssdeep":"6144:1i/63qaaVDxVrAsIJFTS/0o5Sfwnkc+8MHmnv2:1tssQ/0o5isHdMHkv2","tlshash":"f4245cdd72a371226502f4a5887f124ab13dd7a5f08a407cbed4d6f5e8a588801b3f7b","first_seen":"2026-09-15T17:36:20.831746Z","last_seen":"2026-09-15T17:59:48.129254Z","times_seen":4,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/2.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.068Z","timestamp":1789495145068,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /2.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11646\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-2d7e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11646,"size_decoded":11897,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c77454b0b212e4078cac85b3f1616f1","sha1":"924455b3b0dca72d5888cb0b7da65ab5a5352a99","sha256":"4839cefb1ead1139d03382d2cd43dfc0b43625eb99d81f3adbf63d37680a6d14","sha512":"d52cf67b6a3b68c70f2c1d8ee423b8c145f12347411e74677bd07c512397b18920cd7a1e12e1b3bf028a35d98426f92678f197300b2434ccbcc285b1e6ec87f1","ssdeep":"192:MtuEcsbpDqD5WwFZW8jON8Jp+VC9xaDUAJzkPUaAvHa22W+1rSBT6RFBCHNl:wujstqJFQUONIpwC9xCUAK3Ca2n+3BCf","tlshash":"5d329fcba38f79b085640231316f8513b56a7484f1f8d99758cf177b3ca5a39c8e14b2","first_seen":"2025-09-30T17:15:07.076567Z","last_seen":"2026-09-15T17:59:48.129811Z","times_seen":433,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":213,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=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1/ed=1/dg=4/br=1/rs=ACT90oFcMZGFZVbBlitDdadUxwEw_38v3w/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;BuJtU:v6yjN;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F54IAe:ZgsFh;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fkukfc:i8H2c;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GleZL:J1A7Od;HMDDWe:G8QUdb;HtPxrd:Gx8jAb;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K08hxe:zmbGlf;K5nYTd:ZDZcre;KA3P2:C3JnCe;KDb6nb:fE9n2;KOxcK:OZqGte;KQzWid:ZMKkN;KdIHef:BWtNj;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LBn8Cf:bJ9L0c;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;MNkAde:KMCd1d;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;NjIwef:YVgi7d;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OIfWUb:qfOYcd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q7iJ9c:bVLZ3d;QE20Be:gIltO;QFOGlf:PQ2Aoe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;Raf5me:mgvFMc;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,xD8Kp;SNk4Je:wWMhg;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;Snahre:mGCtob;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:lWTJwd;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:N0F29d,W50NVd,eps46d,wciyUe;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UYRIEb:HzTAQc;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VMuEm:pL7sBc;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;W9QSQe:ynCWwc;WDGyFe:jcVOxd;WXtNeb:QU9BMd;Wfmdue:g3MJlb;Wl55ib:vgbiKb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;YnHUBf:sNsSob;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;aci7y:Z5Tr6c;bUIkwb:WMwEHe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dXdZV:a7QTqd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gbfHR:qZtzib;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;jJj2G:kF2o2b;k1O0rf:pnOULd;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mMVOGb:qDM7K;mWzs9c:fz5ukf;mtKMCc:ZG5Tfe;nBZnZe:CvErjb;nE6OJf:Fi4rsc;nEBWNb:MxKX9d;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;oiBhre:OuMkRd;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qQEoOc:KUM7Z,d7YSfd;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:I0C9u;qddgKe:d7YSfd,x4FYXe;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:UT1DG;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tH4IIe:Ymry6;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uJfyCe:WJ5gBc;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w9w86d:XwhUEb,dt4g2b,gKD90c,lWVZVe;wFpbG:JbGbBc;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;wxAT5b:tHKmqf;x9N9ie:KH4Qof;xBbsrc:NEW1Qc;xpaRob:AVqZ9b;yiL5Ab:MT0ZBd;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi?cb=121509378","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.651Z","timestamp":1789495145651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.0jtLsupCuZA.2023.O/am=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1/ed=1/dg=4/br=1/rs=ACT90oFcMZGFZVbBlitDdadUxwEw_38v3w/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;BuJtU:v6yjN;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F54IAe:ZgsFh;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fkukfc:i8H2c;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GleZL:J1A7Od;HMDDWe:G8QUdb;HtPxrd:Gx8jAb;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K08hxe:zmbGlf;K5nYTd:ZDZcre;KA3P2:C3JnCe;KDb6nb:fE9n2;KOxcK:OZqGte;KQzWid:ZMKkN;KdIHef:BWtNj;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LBn8Cf:bJ9L0c;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;MNkAde:KMCd1d;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;NjIwef:YVgi7d;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OIfWUb:qfOYcd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q7iJ9c:bVLZ3d;QE20Be:gIltO;QFOGlf:PQ2Aoe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;Raf5me:mgvFMc;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,xD8Kp;SNk4Je:wWMhg;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;Snahre:mGCtob;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:lWTJwd;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:N0F29d,W50NVd,eps46d,wciyUe;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UYRIEb:HzTAQc;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VMuEm:pL7sBc;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;W9QSQe:ynCWwc;WDGyFe:jcVOxd;WXtNeb:QU9BMd;Wfmdue:g3MJlb;Wl55ib:vgbiKb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;YnHUBf:sNsSob;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;aci7y:Z5Tr6c;bUIkwb:WMwEHe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dXdZV:a7QTqd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gbfHR:qZtzib;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;jJj2G:kF2o2b;k1O0rf:pnOULd;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mMVOGb:qDM7K;mWzs9c:fz5ukf;mtKMCc:ZG5Tfe;nBZnZe:CvErjb;nE6OJf:Fi4rsc;nEBWNb:MxKX9d;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;oiBhre:OuMkRd;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qQEoOc:KUM7Z,d7YSfd;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:I0C9u;qddgKe:d7YSfd,x4FYXe;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:UT1DG;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tH4IIe:Ymry6;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uJfyCe:WJ5gBc;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w9w86d:XwhUEb,dt4g2b,gKD90c,lWVZVe;wFpbG:JbGbBc;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;wxAT5b:tHKmqf;x9N9ie:KH4Qof;xBbsrc:NEW1Qc;xpaRob:AVqZ9b;yiL5Ab:MT0ZBd;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi?cb=121509378 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 394343\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 15 Sep 2026 17:00:28 GMT\r\nexpires: Wed, 15 Sep 2027 17:00:28 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 15 Sep 2026 16:35:16 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 3517\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1111043,"size_decoded":395171,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (621)","md5":"4b0e26c02e4bbe4a8a470ecb813bf40f","sha1":"385872f3fadef2a6e533b10cfe30437137cfc892","sha256":"f8af7acba2673e2ee99e503e9c4052ba19617e2372f3f0bdc629e6e283e84027","sha512":"05ada74c978626829326a3a1239320e78ffeead3f4df76cdb20d379989bdb404b06413f1720aa205ae93925cce4a2a3b724a58ac10f6d6e4b642d03af956ebd2","ssdeep":"24576:jiH5UCzgiSFplncrh9fBTe0EUxuvY3PjSI:jiH5NgiAncr7fBTe0EUxuvY3PjSI","tlshash":"8e25f89873a3b453a276f594412f0287f2beb891f4898c6cb5a8d8d17eb084541f7f78","first_seen":"2026-09-15T17:36:20.795008Z","last_seen":"2026-09-15T17:59:48.130352Z","times_seen":6,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v29/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.663Z","timestamp":1789495145663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/googlesans/v29/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39516\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:05 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 545280\r\nlast-modified: Tue, 23 Feb 2021 01:47:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39516,"size_decoded":40329,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39516, version 1.0","md5":"9436affc97843765a966b3568fa7e5ec","sha1":"7bfda74bb30589c75d718fbc997f18c6d5cc4a0b","sha256":"7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916","sha512":"473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456","ssdeep":"768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB","tlshash":"1703f112148f7fa1c244f224a4efe416acc3f565aba15e6980b8b7c7010e3c657a46fa","first_seen":"2023-04-17T12:01:39Z","last_seen":"2026-09-15T18:45:58.22185Z","times_seen":85733,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":2,"connect":33,"send":0,"wait":17,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.withgoogle.com/csp/gws/other-hp","fqdn":"csp.withgoogle.com","domain":"csp.withgoogle.com","tld":"withgoogle.com"},"ip":{"addr":"142.250.178.49","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.682Z","timestamp":1789495145682,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /csp/gws/other-hp HTTP/1.1\r\nHost: csp.withgoogle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/csp-report\r\nContent-Length: 551\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":551,"data":"{\"csp-report\":{\"blocked-uri\":\"inline\",\"column-number\":1,\"disposition\":\"report\",\"document-uri\":\"https://www.google.com/\",\"effective-directive\":\"script-src-attr\",\"original-policy\":\"object-src 'none'; base-uri 'self'; script-src 'nonce-NBpDv_CfUr4TMOB9oc9UzA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:; report-uri https://csp.withgoogle.com/csp/gws/other-hp\",\"referrer\":\"https://spax35p.icu/\",\"script-sample\":\"_rtf(this)\",\"source-file\":\"https://www.google.com/\",\"status-code\":200,\"violated-directive\":\"script-src-attr\"}}"}},"response":{"raw":"HTTP/2 204 \r\ncontent-type: text/html; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /csp/_/CspCollectorHttp/cspreport, script-src 'nonce-M6dFp_5bAKzmfP0Yxr3xXQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /csp/_/CspCollectorHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /csp/_/CspCollectorHttp/cspreport/allowlist\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nreporting-endpoints: default=\"/csp/_/CspCollectorHttp/web-reports?context=eJzj4tDikmJw0JBiEOLheNm37CqbwI0XVx8zKekl5RfGF6cmlxZlllTqJhcX6Cbn5-SkJpfkF-lmlJQUxBsZGJkZWBoa6BkYxBcYAABRzRfI\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ct=bxjs\u0026cad=\u0026b=0\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026zx=1789495145712\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.714Z","timestamp":1789495145714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?atyp=i\u0026ct=bxjs\u0026cad=\u0026b=0\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026zx=1789495145712\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-zbxqD-37Tgw8-_17rrkc5g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026s=promo\u0026rt=hpbas.581,hpbarr.2\u0026zx=1789495146152\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.155Z","timestamp":1789495146155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=aYepaoPyHI6GwPAPgv_OyQY\u0026s=promo\u0026rt=hpbas.581,hpbarr.2\u0026zx=1789495146152\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRWHuT48DPHOJpk-gdeUfddqEkBpp3Hz1lnsZZOo-WTPp1bVnRl7Y-uIvIMuwoBvfSuxoIk9h-dxTZ2QXdTjcm59APLfupbMYZvGhNLs1T4fp2Pj8Bg50ARBnD8WgI4sFbdrg8fiOQXn1dawdkh_b10h7gK2yaOq0tb7WN_PK3g8kJ3OxwepuELLDDDPrk6ILBK3ijguDvYwBt571BnT-GHMbTYqUbPLyvOXAQYAE6Atk9b1ysYRkW4lKyZeLSy63b2mUxWcoAjJFAX1sxKq8oSPO29l7-84dHPJ50MRhNJ9KMrczIHNq4jQu1-ju_6ytMPAs1KwfXmy6aapAz_1WoDw_6AA7t2mS4vLukZIP\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 \r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-QhsyiYBT1IkKYv6ynQ_m1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":653,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/log?format=json\u0026hasfast=true","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:06.828Z","timestamp":1789495146828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:42 GMT","end":"Mon, 02 Nov 2026 08:37:41 GMT"},"fingerprint":{"sha1":"CB:38:34:2F:7D:9E:35:93:25:09:7C:BC:CF:D5:8B:CD:34:CD:70:E7","sha256":"50:17:03:01:AA:C0:DB:75:43:0B:A6:DC:1F:27:C3:AA:1E:93:2F:67:A7:8C:54:7D:FE:7B:6A:E6:F1:9F:C7:FF"}}},"request":{"raw":"OPTIONS /log?format=json\u0026hasfast=true HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: https://www.google.com\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Tue, 15 Sep 2026 17:59:06 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":526,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T19:51:44.464911Z","times_seen":18481408,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":0,"dns":0,"connect":17,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spax35p.icu/7.webp","fqdn":"spax35p.icu","domain":"spax35p.icu","tld":"icu"},"ip":{"addr":"85.120.217.89","port":443,"asn":41461,"as":"First Bank S.A.","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.073Z","timestamp":1789495145073,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spax35p.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 11 Sep 2026 07:04:28 GMT","end":"Thu, 10 Dec 2026 07:04:27 GMT"},"fingerprint":{"sha1":"10:8E:93:DD:E7:4A:7D:4D:E2:3A:1B:A2:91:B1:51:CF:60:CD:BC:26","sha256":"F6:70:F3:3E:69:91:E0:AD:EB:5B:85:07:C8:D4:25:1F:06:B1:D4:64:E0:85:C7:8F:07:B6:74:6C:9D:8C:9F:B4"}}},"request":{"raw":"GET /7.webp HTTP/1.1\r\nHost: spax35p.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Tue, 15 Sep 2026 17:59:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7266\r\nLast-Modified: Thu, 03 Sep 2026 06:26:45 GMT\r\nConnection: keep-alive\r\nETag: \"6a991325-1c62\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7266,"size_decoded":7516,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b193335cb4bb7c6c0b15cca932c55f2","sha1":"bc0124752cebe2e87a26cb9bad3872084dffa98d","sha256":"de5cd14e02a35aefca76af5dbc1205b8f8df7c0b0892baca18102dc16880e6a0","sha512":"c127957415e21fa8f705d0504a9d574d12428e722316ffaf0533bc2e290ff5314fe9986c0ad79575bd7efd44e78ca680948b43a3e98482b3ce0212460d436bd6","ssdeep":"192:X4cQiL7swHNgx+TBYHQXFE59PfxXMSYqTk:XD4wtK+Tqou9Hx8SYqTk","tlshash":"cee1ae5b97c72e60974dbceffeca33536470143d0d11a3938a2b12db107668a1b91ac0","first_seen":"2025-09-30T17:15:07.079612Z","last_seen":"2026-09-15T17:59:48.131422Z","times_seen":433,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":36,"dns":0,"connect":55,"send":0,"wait":64,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"spax35p.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/particles.js@2.0.0/particles.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://spax35p.icu/","date":"2026-09-15T17:59:05.303Z","timestamp":1789495145303,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/particles.js@2.0.0/particles.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://spax35p.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.0.0\r\nx-jsd-version-type: version\r\netag: W/\"59e8-SkqstQMww/D199p+JHVp0w+L48o\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2526767\r\ndate: Tue, 15 Sep 2026 17:59:05 GMT\r\nx-served-by: cache-fra-eddf8230020-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6168\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23016,"size_decoded":6961,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22686)","md5":"a8503a23e7cb759f4ce1aabe233291c0","sha1":"4a4aacb50330c3f0f5f7da7e247569d30f8be3ca","sha256":"09affa0437110080ad681658ee9575ac9210aeef4818cad705ea1903a4016691","sha512":"f14643b5c9c8f832d7471d4b6944153ff0ba88aa702b03747cc81501db8803002047c452745b6cb24d9dac20a0e1ff457d99263993b66b7a5b41ab013c4a13d5","ssdeep":"384:MfJ//vWKyCN3yHEPepmcBzAbix29ZzHNSA:qFf289ZzHNSA","tlshash":"f0a2b34d23f73e77339a72e04bece1128b74a4d2399b04b0f93c667da5255a601de7a0","first_seen":"2026-06-06T12:32:08.74634Z","last_seen":"2026-09-15T17:59:48.13195Z","times_seen":185,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":11,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/tia/tia.png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2026-09-15T17:59:05.652Z","timestamp":1789495145652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /tia/tia.png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.google.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: AEC=AdJVEasp6gBi17wCqiCKYbB2ogmgdJOgwn7pV5YZO1Ql1Gx8GgNw2KE314k; __Secure-ENID=CpcCCAISyQEBAQxeRQYxUfpkUgKM-fuNBcrrVDCUGXn3h12-jideEWKrxcg5oB8oDXWbU_OPKWEVfQyO2DgWUWELRwpFJsE2jSr9bWfibBtVxkDSBpL_sRYP46fKnF7btyK_91LRIpeO49bWddxOH35taxAp5J5Q307-NslbPl0GzKq0MfeQBtV_Alyn6sodHPmCIglYWn2ZMXRqNvw5WaenFxXo-BRWwpbMgi6a8TY4EwwDv-jYWeMGZcWJ1CSOo-NEH1gdiQdrYXrRbxoQf3UoAjJFAX1sxKqiXe8RE4p6_qulYZ-OMT0MysWARvdw9OCbKhicE5pWajUQXeScE1diyPFtdLxptxIK0rREe3xSjJ23GGwJ_JYN\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 258\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 09:17:09 GMT\r\nexpires: Fri, 10 Sep 2027 09:17:09 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Fri, 27 Sep 2019 01:00:00 GMT\r\ncontent-type: image/png\r\nage: 463316\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":258,"size_decoded":917,"mime_type":"image/png","magic":"PNG image data, 27 x 23, 8-bit/color RGB, non-interlaced","md5":"201e50d8dd7a30c0a918213686ca43b7","sha1":"6678592120e899f0d2245c8afeaf9d4a3043c41b","sha256":"c532312eea8020a0370685b222a02b11becd58cd394b509029dff5956127dd81","sha512":"50cc19dd554d51fe79eef2c8cd45941504ea2edddaf06d425ba3a1e41dc974d866b8dad9d91609efa39afb1f083f2f611d324e57f54ce84a984f6b5bdde0f383","ssdeep":"","tlshash":"09d095dd7dfd9c94fe6143d7c0435d94ad79547d1c7a5643417cc99d2c26807800314b","first_seen":"2023-04-07T11:58:26Z","last_seen":"2026-09-15T17:59:48.132532Z","times_seen":132169,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}