{"report_id":"5ba3f430-ecd5-435a-87f2-8dd26537f69e","version":6,"status":"done","tags":[],"date":"2025-06-14T14:03:12Z","url":{"schema":"http","addr":"ww25.loginmicrosoft.com/","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ww25.loginmicrosoft.com/","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"title":"loginmicrosoft.com"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-23T14:03:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ww25.loginmicrosoft.com","ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2015-05-21","domain_rank":0,"first_seen":"2025-06-14T14:03:12.884149Z","last_seen":"2025-06-14T14:03:12.884149Z","alert_count":4,"request_count":4,"received_data":44557,"sent_data":2166,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-06-11T15:12:15.106858Z","alert_count":0,"request_count":1,"received_data":144187,"sent_data":450,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-06-11T18:55:04.956617Z","alert_count":0,"request_count":2,"received_data":2046,"sent_data":1006,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":0,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-06-11T16:12:52.394354Z","alert_count":0,"request_count":4,"received_data":159994,"sent_data":3442,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40ea2b88e0d6d776f87e00842388671","sha1":"5922910f7bf6d09ed111945ea1f07e5246bd87bf","sha256":"d67e8fd05bd4bdc526d3ae988b419fa12b0e514c367ec00d751143de3439f155","sha512":"0cd6a53a2d0cefaef516c21db1645cbebd5f058fb48c0ff2ce467d386a18eeb7b5fdf25f95754d3f77459d60130fbe5e7f6a958be7c70f3c772984c5d662dc4b","ssdeep":"1536:esUBG+VeQDLPwX2Kw7OkZgYoKn4mabiPgEnoWjJt4gXfc4KiKIOmUxZEzxKmtnqc:+gt+0biPg90tolZEzLFv","tlshash":"f2e34cdd73a1702253b395b4603f018fb13ab969a84888e4f198c9e47cb4da94277f7d","size":143471,"data":"","first_seen":"2025-06-11T20:03:31.025667Z","last_seen":"2025-06-20T14:09:10.963859Z","times_seen":6514,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol114%2Cpid-bodis-gcontrol456%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.loginmicrosoft.com%2F%3Fcaf%3D1%26bpt%3D345\u0026terms=Microsoft%20Office%20365%2CMicrosoft%20Office%20Online%2COffice%20365%2CMicrosoft%20Office%2CMicrosoft%20Office%20Outlook%2CSoftware%20For%20Digital%20Signage%2CMicrosoft%20365%2COutlook%20Email%2CMicrosoft%20Office%20Portal%2CLogiciel%20Personnel\u0026kw=Microsoft%20Office%20365\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2705761601724058\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107\u0026format=r3\u0026nocache=2261749909771597\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.loginmicrosoft.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1749909771599\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=769154410\u0026rurl=https%3A%2F%2Fww25.loginmicrosoft.com%2F","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"caac64b397fdd90ac5725d83e9131143","sha1":"0c2c5a1d5b87c333a8c5d1172c1e03ade1a00fef","sha256":"f13652f28eb53cf5bdfc9e5b3f87004763ee88244bd9614514d56acb83932c5e","sha512":"b8e1ce75a8e179e8b2e5d58856c2b1398cd8246dfab56932f12d1e96bf16de974d8830c805ba695b25b5a744f0857369830898b10a52ec5d7b97cc649828960b","ssdeep":"","tlshash":"20f0e7e96c744132c51304310d0b3fe0685805b031871e849cada4cf20bd79e662c4f9","size":583,"data":"","first_seen":"2025-06-14T14:03:14.732046Z","last_seen":"2025-06-14T14:03:14.732046Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86f22c8e8d83901b826f0c1581c91912","sha1":"0a12b75aa460159d241a31b820e81b49f7acafe1","sha256":"94edeac03d3389fd4bc60dd85e20866e55f67012d3991b75955ce83c49af328c","sha512":"1d427f863edbc08e649cce7a16f78966281f39fcac7a088080207b740ccd7d8c74c248f0096e2efb4e2522e2e1adcea925d73f8d4c21626c240bf1b5d052d678","ssdeep":"1536:IsUBG+VeQDLPwX2Kw7OkZgYoKn4mabiPgEnoWjJt4gXfc4KiKIOmUxZEzxKmtnqc:sgt+0biPg90tolZEzLFv","tlshash":"09e34cdd73a1702253b395b4603f018fb13ab969a84888e4f198c9e47cb4da94277f7d","size":143487,"data":"","first_seen":"2025-06-11T20:04:01.136733Z","last_seen":"2025-06-20T14:08:42.092889Z","times_seen":3348,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.loginmicrosoft.com/","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0da38fdbfa288dd3d592abf51b1efcfd","sha1":"18e56598c98ff0705e12ce03fafc4e1f7aaea6c5","sha256":"968c3f6d160fd361f412e6470ea981ac807b767853e9153167b2662efba227b8","sha512":"97914738b40d2562d6852c798f8148c655775e8253bb12aec20f528fe110492e76838c4c626c298a2324e757ae05498cb0888136db98495ec8065ce8b53b6e7e","ssdeep":"","tlshash":"02e07d8ea13d248db0700790027fef9ddbfd26c401a4760af8dcc07728504d7a4a40b3","size":321,"data":"","first_seen":"2025-06-14T14:03:14.735107Z","last_seen":"2025-06-14T14:03:14.735107Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.loginmicrosoft.com/bnMiOHOAI.js","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d9fdf5d05b284744ac866df8127fbfa","sha1":"b3a32f41a14b32ca0f0ccd8f1c420c991e5080e5","sha256":"384bfcc19f10cee9ac5e8369301d19f5649dc997cbb9379351f5e1a3ea8f934d","sha512":"8e46109cc26ac75cae31a2af8c5ef0b82bada99e9d15442e45893a228dcd1e33dd68d15fd233282cb63f3b68eab4dd5122f457e5266f539e7ed6934e6137238e","ssdeep":"768:TP2y1WZVcJ7n85NdxBB5gPCGIP8rnaVGexrE00Ddem+euROgvMzLXWI+6Ch/ZXh4:hZrnSGexrEKR+5","tlshash":"9af23ba23ab7e06006e3c5dae8779215f238214a3405c06cf56c98ce365ee87d73eb75","size":36384,"data":"","first_seen":"2025-06-12T16:40:13.844419Z","last_seen":"2025-06-17T16:34:39.191927Z","times_seen":843,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol114%2Cpid-bodis-gcontrol456%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.loginmicrosoft.com%2F%3Fcaf%3D1%26bpt%3D345\u0026terms=Microsoft%20Office%20365%2CMicrosoft%20Office%20Online%2COffice%20365%2CMicrosoft%20Office%2CMicrosoft%20Office%20Outlook%2CSoftware%20For%20Digital%20Signage%2CMicrosoft%20365%2COutlook%20Email%2CMicrosoft%20Office%20Portal%2CLogiciel%20Personnel\u0026kw=Microsoft%20Office%20365\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2705761601724058\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107\u0026format=r3\u0026nocache=2261749909771597\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.loginmicrosoft.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1749909771599\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=769154410\u0026rurl=https%3A%2F%2Fww25.loginmicrosoft.com%2F","date":"2025-06-14T14:02:52.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 May 2025 08:42:46 GMT","end":"Mon, 11 Aug 2025 08:42:45 GMT"},"fingerprint":{"sha1":"E9:0E:20:FC:F1:A6:82:B1:76:B9:AF:FD:1E:CC:71:AE:B7:5E:8A:0D","sha256":"18:81:F6:86:4F:4B:27:30:95:81:ED:5B:C8:F7:CE:41:DD:11:B0:25:C7:C8:9A:F3:45:23:51:EC:35:78:6F:DF"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 14 Jun 2025 09:38:06 GMT\r\nexpires: Sun, 15 Jun 2025 08:38:06 GMT\r\ncache-control: public, max-age=82800\r\nage: 15886\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":458,"timings":{"blocked":220,"dns":1,"connect":20,"send":0,"wait":8,"receive":0,"ssl":206},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=8eaaaggfwx82\u0026cd_fexp=72717107\u0026aqid=C4FNaJmyMcilovsP5KupgAY\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=769154410\u0026csala=8%7C0%7C428%7C82%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.loginmicrosoft.com/","date":"2025-06-14T14:02:53.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 May 2025 08:44:55 GMT","end":"Mon, 11 Aug 2025 08:44:54 GMT"},"fingerprint":{"sha1":"5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC","sha256":"66:92:7B:E6:46:01:51:04:95:E9:05:12:A9:83:8E:E2:7E:2C:E2:32:ED:E3:AD:65:A1:A1:7F:5B:09:3C:16:72"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=8eaaaggfwx82\u0026cd_fexp=72717107\u0026aqid=C4FNaJmyMcilovsP5KupgAY\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=769154410\u0026csala=8%7C0%7C428%7C82%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.loginmicrosoft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":1712,"data":"e=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\u0026cri=DEhLOKtr2L\u0026sf=0\u0026dc=\u0026cp=15\u0026gtm=-\u0026gac=-\u0026tb=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=15071\u0026mo=0\u0026pn=16733\u0026spn=1661\u0026fp=950\u0026snt=1"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TXs3nnhtHmmc8bixMnkFNg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sat, 14 Jun 2025 14:02:53 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T08:24:30.782847Z","times_seen":17775817,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.loginmicrosoft.com/bnMiOHOAI.js","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.loginmicrosoft.com/","date":"2025-06-14T14:02:51.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.loginmicrosoft.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 May 2025 11:29:27 GMT","end":"Tue, 05 Aug 2025 11:29:26 GMT"},"fingerprint":{"sha1":"E2:88:56:CC:4D:E1:4E:1A:13:C5:7F:70:FA:1B:0D:A0:87:9B:49:2C","sha256":"60:A4:59:D5:6A:48:1F:24:E6:05:41:63:6F:CB:36:9C:22:0D:68:0A:C2:D1:5D:B0:C8:50:51:6D:2E:00:96:6C"}}},"request":{"raw":"GET /bnMiOHOAI.js HTTP/1.1\r\nHost: ww25.loginmicrosoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.loginmicrosoft.com/\r\nCookie: parking_session=5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":637,"data":"{\"customerId\":\"dmpsCGvb\",\"videoId\":\"rMBiaPGh9iRcB8u3\",\"timestamp\":1749909764,\"timeSinceNav\":5134,\"eventIndex\":1,\"sessionId\":\"wZAhfBCZ3b\",\"userId\":\"upAPbXVFL8jm544S\",\"player\":\"hls\",\"event\":\"Vidalytics.Player.EVENT_PAUSE\",\"videoTime\":0,\"referer\":\"\",\"site\":\"https://skinsalt.net/?r=a17677356553459cb0f68d4b01d9ff22\u0026a=193964\u0026o=208\u0026s1=25.06.14-Skin-Salt-AM\u0026s2=BEA\u0026s3=\u0026s4=\u0026vclick_id=\u0026gclid=\u0026utm_source=email-broadcast\u0026utm_id=01JXJXJ6SER4Y6QY1AXK2AEFDF\u0026utm_campaign=25.06.14%20-%208AM%20-%20(BEA)%20Skin%20Salt%20-%20Product%20Presentation%20(01JXJXJ6SER4Y6QY1AXK2AEFDF)\u0026utm_medium=email\u0026_kx=uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Jun 2025 14:02:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 36384\r\nX-Request-Id: 09ba18d1-7227-4770-b2a1-69cebeb0f7e0\r\nSet-Cookie: parking_session=5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0; expires=Sat, 14 Jun 2025 14:17:51 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36384,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36381)","md5":"0d9fdf5d05b284744ac866df8127fbfa","sha1":"b3a32f41a14b32ca0f0ccd8f1c420c991e5080e5","sha256":"384bfcc19f10cee9ac5e8369301d19f5649dc997cbb9379351f5e1a3ea8f934d","sha512":"8e46109cc26ac75cae31a2af8c5ef0b82bada99e9d15442e45893a228dcd1e33dd68d15fd233282cb63f3b68eab4dd5122f457e5266f539e7ed6934e6137238e","ssdeep":"768:TP2y1WZVcJ7n85NdxBB5gPCGIP8rnaVGexrE00Ddem+euROgvMzLXWI+6Ch/ZXh4:hZrnSGexrEKR+5","tlshash":"9af23ba23ab7e06006e3c5dae8779215f238214a3405c06cf56c98ce365ee87d73eb75","first_seen":"2025-06-12T16:40:13.844419Z","last_seen":"2025-06-17T16:34:39.191927Z","times_seen":843,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":76,"dns":1,"connect":1,"send":0,"wait":38,"receive":3,"ssl":74},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ww25.loginmicrosoft.com/_fd","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.loginmicrosoft.com/","date":"2025-06-14T14:02:51.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.loginmicrosoft.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 May 2025 11:29:27 GMT","end":"Tue, 05 Aug 2025 11:29:26 GMT"},"fingerprint":{"sha1":"E2:88:56:CC:4D:E1:4E:1A:13:C5:7F:70:FA:1B:0D:A0:87:9B:49:2C","sha256":"60:A4:59:D5:6A:48:1F:24:E6:05:41:63:6F:CB:36:9C:22:0D:68:0A:C2:D1:5D:B0:C8:50:51:6D:2E:00:96:6C"}}},"request":{"raw":"POST /_fd HTTP/1.1\r\nHost: ww25.loginmicrosoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww25.loginmicrosoft.com/\r\nContent-Type: application/json\r\nOrigin: https://ww25.loginmicrosoft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Jun 2025 14:02:50 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 5505\r\nX-Request-Id: a88840d2-5c9f-4fed-9582-789295a26b61\r\nSet-Cookie: parking_session=5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0; expires=Sat, 14 Jun 2025 14:17:51 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5505,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (5505), with no line terminators","md5":"76118f34a425f50650e8bdae26c2340e","sha1":"da9d62c1c1f2bbdce0a7a5ca36bb659a336e7b87","sha256":"f4f5d89b41e715a710a876f0c7d8a28d1e3d22a98c95937a5366da8610b3de37","sha512":"192c2ad9ed4de27f2fe261bcc17de11b43df767554e1aa5f75df35771a613273023e87f012b5d0e90a1f8d155ac6ea49afc718d2507bf1576d6488a00cc6f2c6","ssdeep":"96:N9SOSI7hpBJxxPY47UzPULGQQGJ2ITTAwSY705ooL:ClI7Ny4IzS/vNnqj5ooL","tlshash":"76b184e18e98398bdf025603b0de07d9125f96be32ba161d561fda4c4a0960fb4d026f","first_seen":"2025-06-14T14:03:14.716315Z","last_seen":"2025-06-14T14:03:14.716315Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":81,"dns":1,"connect":1,"send":0,"wait":45,"receive":1,"ssl":76},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol114%2Cpid-bodis-gcontrol456%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.loginmicrosoft.com%2F%3Fcaf%3D1%26bpt%3D345\u0026terms=Microsoft%20Office%20365%2CMicrosoft%20Office%20Online%2COffice%20365%2CMicrosoft%20Office%2CMicrosoft%20Office%20Outlook%2CSoftware%20For%20Digital%20Signage%2CMicrosoft%20365%2COutlook%20Email%2CMicrosoft%20Office%20Portal%2CLogiciel%20Personnel\u0026kw=Microsoft%20Office%20365\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2705761601724058\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107\u0026format=r3\u0026nocache=2261749909771597\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.loginmicrosoft.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1749909771599\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=769154410\u0026rurl=https%3A%2F%2Fww25.loginmicrosoft.com%2F","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.loginmicrosoft.com/","date":"2025-06-14T14:02:51.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 May 2025 08:44:55 GMT","end":"Mon, 11 Aug 2025 08:44:54 GMT"},"fingerprint":{"sha1":"5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC","sha256":"66:92:7B:E6:46:01:51:04:95:E9:05:12:A9:83:8E:E2:7E:2C:E2:32:ED:E3:AD:65:A1:A1:7F:5B:09:3C:16:72"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol114%2Cpid-bodis-gcontrol456%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.loginmicrosoft.com%2F%3Fcaf%3D1%26bpt%3D345\u0026terms=Microsoft%20Office%20365%2CMicrosoft%20Office%20Online%2COffice%20365%2CMicrosoft%20Office%2CMicrosoft%20Office%20Outlook%2CSoftware%20For%20Digital%20Signage%2CMicrosoft%20365%2COutlook%20Email%2CMicrosoft%20Office%20Portal%2CLogiciel%20Personnel\u0026kw=Microsoft%20Office%20365\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2705761601724058\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107\u0026format=r3\u0026nocache=2261749909771597\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.loginmicrosoft.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1749909771599\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=769154410\u0026rurl=https%3A%2F%2Fww25.loginmicrosoft.com%2F HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.loginmicrosoft.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Sat, 14 Jun 2025 14:02:51 GMT\r\nexpires: Sat, 14 Jun 2025 14:02:51 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-_3PiHAqK_VorMC1GFHwabQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2749\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13707,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13179)","md5":"88776f94173c413c1abd070723f87ed4","sha1":"c9dc1987643d9bc19481c38ad19ee72e1140eda0","sha256":"5ae074f218721e8d247eb962f9fbbfc92dac3f4076958122b3c2dd70ea035f81","sha512":"0c76707e0f708c1d8ef98c9654502bff7df4fffb4aa7d724941d76f92605c41c34541a33bc8e1ae9baf92a9485ee1ba6f86400074c67c29e882a831a44c44228","ssdeep":"96:GE/yk2iIlb5lphMzwronbo4tm0yEM6vfNYrWK336zMwDrw96DdCz/1/MwDTNw96o:GE12iMpgbogm0yEMcfWrz3daInhj+GTs","tlshash":"89524337706227291503dc541b296f6dd185d43ac46f36e848f35b26c7ebf828be628e","first_seen":"2025-06-14T14:03:14.719672Z","last_seen":"2025-06-14T14:03:14.719672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":106,"dns":0,"connect":16,"send":0,"wait":158,"receive":1,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol114%2Cpid-bodis-gcontrol456%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.loginmicrosoft.com%2F%3Fcaf%3D1%26bpt%3D345\u0026terms=Microsoft%20Office%20365%2CMicrosoft%20Office%20Online%2COffice%20365%2CMicrosoft%20Office%2CMicrosoft%20Office%20Outlook%2CSoftware%20For%20Digital%20Signage%2CMicrosoft%20365%2COutlook%20Email%2CMicrosoft%20Office%20Portal%2CLogiciel%20Personnel\u0026kw=Microsoft%20Office%20365\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2705761601724058\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107\u0026format=r3\u0026nocache=2261749909771597\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.loginmicrosoft.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1749909771599\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=769154410\u0026rurl=https%3A%2F%2Fww25.loginmicrosoft.com%2F","date":"2025-06-14T14:02:52.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 May 2025 08:44:55 GMT","end":"Mon, 11 Aug 2025 08:44:54 GMT"},"fingerprint":{"sha1":"5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC","sha256":"66:92:7B:E6:46:01:51:04:95:E9:05:12:A9:83:8E:E2:7E:2C:E2:32:ED:E3:AD:65:A1:A1:7F:5B:09:3C:16:72"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2070,"data":"{\"data\":{\"type\":\"event\",\"attributes\":{\"metric\":{\"data\":{\"type\":\"metric\",\"attributes\":{\"name\":\"__activity__\",\"service\":\"api\"}}},\"profile\":{\"data\":{\"type\":\"profile\",\"attributes\":{\"properties\":{\"$referrer\":{\"ts\":1749909764,\"value\":\"\",\"first_page\":\"https://skinsalt.net/?r=8b3c6da57d564022b2e1a5ef1f943173\u0026a=193964\u0026o=208\u0026s1=25.06.14-Skin-Salt-AM\u0026s2=BEA\u0026s3=\u0026s4=\u0026vclick_id=\u0026gclid=\u0026utm_source=email-broadcast\u0026utm_id=01JXJXJ6SER4Y6QY1AXK2AEFDF\u0026utm_campaign=25.06.14%20-%208AM%20-%20(BEA)%20Skin%20Salt%20-%20Product%20Presentation%20(01JXJXJ6SER4Y6QY1AXK2AEFDF)\u0026utm_medium=email\u0026_kx=uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"},\"$last_referrer\":{\"ts\":1749909765,\"value\":\"\",\"first_page\":\"https://skinsalt.net/?r=8b3c6da57d564022b2e1a5ef1f943173\u0026a=193964\u0026o=208\u0026s1=25.06.14-Skin-Salt-AM\u0026s2=BEA\u0026s3=\u0026s4=\u0026vclick_id=\u0026gclid=\u0026utm_source=email-broadcast\u0026utm_id=01JXJXJ6SER4Y6QY1AXK2AEFDF\u0026utm_campaign=25.06.14%20-%208AM%20-%20(BEA)%20Skin%20Salt%20-%20Product%20Presentation%20(01JXJXJ6SER4Y6QY1AXK2AEFDF)\u0026utm_medium=email\u0026_kx=uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"},\"$exchange_id\":\"uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"},\"_kx\":\"uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"}}},\"properties\":{\"r\":\"8b3c6da57d564022b2e1a5ef1f943173\",\"a\":\"193964\",\"o\":\"208\",\"s1\":\"25.06.14-Skin-Salt-AM\",\"s2\":\"BEA\",\"s3\":true,\"s4\":true,\"vclick_id\":true,\"gclid\":true,\"utm_source\":\"email-broadcast\",\"utm_id\":\"01JXJXJ6SER4Y6QY1AXK2AEFDF\",\"utm_campaign\":\"25.06.14 - 8AM - (BEA) Skin Salt - Product Presentation (01JXJXJ6SER4Y6QY1AXK2AEFDF)\",\"utm_medium\":\"email\",\"kx_present\":true,\"initial_page_path\":\"/\",\"page\":\"https://skinsalt.net/?r=8b3c6da57d564022b2e1a5ef1f943173\u0026a=193964\u0026o=208\u0026s1=25.06.14-Skin-Salt-AM\u0026s2=BEA\u0026s3=\u0026s4=\u0026vclick_id=\u0026gclid=\u0026utm_source=email-broadcast\u0026utm_id=01JXJXJ6SER4Y6QY1AXK2AEFDF\u0026utm_campaign=25.06.14%20-%208AM%20-%20(BEA)%20Skin%20Salt%20-%20Product%20Presentation%20(01JXJXJ6SER4Y6QY1AXK2AEFDF)\u0026utm_medium=email\u0026_kx=uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\",\"browser\":\"Firefox\",\"os\":\"Linux\",\"$use_ip\":true,\"$is_session_activity\":true}}}}"}},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sat, 14 Jun 2025 14:02:52 GMT\r\nexpires: Sat, 14 Jun 2025 14:02:52 GMT\r\ncache-control: private, max-age=3600\r\netag: \"6926854280510334073\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143487,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1839)","md5":"86f22c8e8d83901b826f0c1581c91912","sha1":"0a12b75aa460159d241a31b820e81b49f7acafe1","sha256":"94edeac03d3389fd4bc60dd85e20866e55f67012d3991b75955ce83c49af328c","sha512":"1d427f863edbc08e649cce7a16f78966281f39fcac7a088080207b740ccd7d8c74c248f0096e2efb4e2522e2e1adcea925d73f8d4c21626c240bf1b5d052d678","ssdeep":"1536:IsUBG+VeQDLPwX2Kw7OkZgYoKn4mabiPgEnoWjJt4gXfc4KiKIOmUxZEzxKmtnqc:sgt+0biPg90tolZEzLFv","tlshash":"09e34cdd73a1702253b395b4603f018fb13ab969a84888e4f198c9e47cb4da94277f7d","first_seen":"2025-06-11T20:04:01.136733Z","last_seen":"2025-06-20T14:08:42.092889Z","times_seen":3348,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://syndicatedsearch.goog/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol47%2Cpid-bodis-gcontrol114%2Cpid-bodis-gcontrol456%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww25.loginmicrosoft.com%2F%3Fcaf%3D1%26bpt%3D345\u0026terms=Microsoft%20Office%20365%2CMicrosoft%20Office%20Online%2COffice%20365%2CMicrosoft%20Office%2CMicrosoft%20Office%20Outlook%2CSoftware%20For%20Digital%20Signage%2CMicrosoft%20365%2COutlook%20Email%2CMicrosoft%20Office%20Portal%2CLogiciel%20Personnel\u0026kw=Microsoft%20Office%20365\u0026max_radlink_len=50\u0026type=3\u0026swp=as-drid-2705761601724058\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107\u0026format=r3\u0026nocache=2261749909771597\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.loginmicrosoft.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1749909771599\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=769154410\u0026rurl=https%3A%2F%2Fww25.loginmicrosoft.com%2F","date":"2025-06-14T14:02:52.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 May 2025 08:42:46 GMT","end":"Mon, 11 Aug 2025 08:42:45 GMT"},"fingerprint":{"sha1":"E9:0E:20:FC:F1:A6:82:B1:76:B9:AF:FD:1E:CC:71:AE:B7:5E:8A:0D","sha256":"18:81:F6:86:4F:4B:27:30:95:81:ED:5B:C8:F7:CE:41:DD:11:B0:25:C7:C8:9A:F3:45:23:51:EC:35:78:6F:DF"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":702,"data":"{\"resourceMetrics\":[{\"resource\":{\"attributes\":[{\"key\":\"service.name\",\"value\":{\"stringValue\":\"shop-server-js\"}}]},\"scopeMetrics\":[{\"scope\":{\"name\":\"open-telemetry-mini-client\",\"version\":\"1.1.0\",\"attributes\":[]},\"metrics\":[{\"name\":\"shop_server_js_shop_pay_authorize_default_event\",\"unit\":\"1\",\"sum\":{\"aggregationTemporality\":1,\"isMonotonic\":true,\"dataPoints\":[{\"startTimeUnixNano\":1749909764008000000,\"timeUnixNano\":1749909764008000000,\"asDouble\":1,\"attributes\":[{\"key\":\"analyticsContext\",\"value\":{\"stringValue\":\"loginWithShopSelfServe\"}},{\"key\":\"isCompactLayout\",\"value\":{\"stringValue\":\"true\"}},{\"key\":\"isMobile\",\"value\":{\"stringValue\":\"false\"}},{\"key\":\"type\",\"value\":{\"stringValue\":\"loaded\"}}]}]}}]}]}]}"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Jun 2025 21:27:56 GMT\r\nexpires: Sat, 14 Jun 2025 20:27:56 GMT\r\ncache-control: public, max-age=82800\r\nage: 59696\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-08-07T15:03:49.92926Z","times_seen":412213,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":68,"dns":0,"connect":7,"send":0,"wait":9,"receive":1,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.loginmicrosoft.com/_tr","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.loginmicrosoft.com/","date":"2025-06-14T14:02:52.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.loginmicrosoft.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 May 2025 11:29:27 GMT","end":"Tue, 05 Aug 2025 11:29:26 GMT"},"fingerprint":{"sha1":"E2:88:56:CC:4D:E1:4E:1A:13:C5:7F:70:FA:1B:0D:A0:87:9B:49:2C","sha256":"60:A4:59:D5:6A:48:1F:24:E6:05:41:63:6F:CB:36:9C:22:0D:68:0A:C2:D1:5D:B0:C8:50:51:6D:2E:00:96:6C"}}},"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww25.loginmicrosoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ww25.loginmicrosoft.com/\r\nContent-Type: application/json\r\nContent-Length: 2273\r\nOrigin: https://ww25.loginmicrosoft.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2273,"data":"{\"signature\":\"UxFdVMwNFNwN0wzODEybVeyJhZF9sb2FkZWRfY2FsbGJhY2siOnsiY29udGFpbmVyTmFtZSI6InJzIiwiYWRzTG9hZGVkIjp0cnVlLCJjYWxsYmFja09wdGlvbnMiOnsiY2FmUmVxdWVzdEFjY2VwdGVkIjp0cnVlLCJjYWZTdGF0dXMiOnsiY2xpZW50IjoicGFydG5lci1kcC1ib2RpczMwXzNwaCIsImFkdWx0IjpmYWxzZX0sInRlcm1Qb3NpdGlvbnMiOnsiU29mdHdhcmUgRm9yIERpZ2l0YWwgU2lnbmFnZSI6MCwiTWljcm9zb2Z0IE9mZmljZSAzNjUiOjF9fX0sImFwcF92ZXJzaW9uIjoiMC43LjYiLCJjYWZfY2xpZW50X2lkIjoicGFydG5lci1kcC1ib2RpczMwXzNwaCIsImNhZl90aW1lZF9vdXQiOmZhbHNlLCJjYWZfbG9hZGVkX21zIjo1OTEsImNoYW5uZWwiOiJwaWQtYm9kaXMtZ2NvbnRyb2w0NyxwaWQtYm9kaXMtZ2NvbnRyb2wxMTQscGlkLWJvZGlzLWdjb250cm9sNDU2LHBpZC1ib2Rpcy1nY29udHJvbDE1MSxwaWQtYm9kaXMtZ2NvbnRyb2wxNjIiLCJkZXNrdG9wIjp0cnVlLCJ0ZXJtcyI6Ik1pY3Jvc29mdCBPZmZpY2UgMzY1LE1pY3Jvc29mdCBPZmZpY2UgT25saW5lLE9mZmljZSAzNjUsTWljcm9zb2Z0IE9mZmljZSxNaWNyb3NvZnQgT2ZmaWNlIE91dGxvb2ssU29mdHdhcmUgRm9yIERpZ2l0YWwgU2lnbmFnZSxNaWNyb3NvZnQgMzY1LE91dGxvb2sgRW1haWwsTWljcm9zb2Z0IE9mZmljZSBQb3J0YWwsTG9naWNpZWwgUGVyc29ubmVsIiwiZmRfc2VydmVyX2RhdGV0aW1lIjoxNzQ5OTA5NzcxLCJmZF9zZXJ2ZXIiOiJpcC0xMC0yMDEtNDAtMTczLmV1LXdlc3QtMS5jb21wdXRlLmludGVybmFsIiwiZmxleF9ydWxlIjp7ImFjdGlvbiI6IiIsImN1c3RvbV9yZWFzb24iOiIiLCJmbGV4X2lkIjowLCJtaXNtYXRjaCI6ZmFsc2V9LCJob3N0Ijoid3cyNS5sb2dpbm1pY3Jvc29mdC5jb20iLCJpcCI6IjkxLjkwLjQyLjE1NCIsIml2dCI6ZmFsc2UsIm1vYmlsZSI6ZmFsc2UsInBhZ2VfaGVhZGVycyI6e30sInBhZ2VfbG9hZGVkX2NhbGxiYWNrIjp7InJlcXVlc3RBY2NlcHRlZCI6dHJ1ZSwic3RhdHVzIjp7ImNsaWVudCI6InBhcnRuZXItZHAtYm9kaXMzMF8zcGgiLCJhZHVsdCI6ZmFsc2V9fSwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX3RpbWUiOjE3NDk5MDk3NzAsInBhZ2VfdXJsIjoiaHR0cHM6Ly93dzI1LmxvZ2lubWljcm9zb2Z0LmNvbS8iLCJ0YWJsZXQiOmZhbHNlLCJ0ZW1wbGF0ZV9pZCI6MzQ1LCJ0eXBlIjoidmlzaXQiLCJ1c2VyX2hhc19hZF9ibG9ja2VyIjpudWxsLCJ1c2VyX2lkIjo1OTQ0LCJ1dWlkIjoiNWFkOGE5YjktNDA3MC00OWM1LTliMjQtODJmNmQwZmQ3MmIwIiwiemVyb2NsaWNrIjp7fSwicG9wdXAiOmZhbHNlLCJ0aW1lem9uZV9vZmZzZXQiOjAsInVzZXJfcHJlZmVyZW5jZSI6eyJsb2NhbGUiOiJlbi1VUyIsImNhbGVuZGFyIjoiZ3JlZ29yeSIsIm51bWJlcmluZ1N5c3RlbSI6ImxhdG4iLCJ0aW1lWm9uZSI6IlVUQyIsInllYXIiOiJudW1lcmljIiwibW9udGgiOiJudW1lcmljIiwiZGF5IjoibnVtZXJpYyJ9LCJ1c2VyX3VzaW5nX2Rhcmttb2RlIjpmYWxzZSwidXNlcl9zdXBwb3J0c19kYXJrbW9kZSI6dHJ1ZSwid2luZG93X3Jlc29sdXRpb24iOnsid2lkdGgiOjEyODAsImhlaWdodCI6MTAyNH0sInNjcmVlbl9yZXNvbHV0aW9uIjp7IndpZHRoIjoxMjgwLCJoZWlnaHQiOjEwMjR9LCJmcmFtZSI6bnVsbH0=\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Jun 2025 14:02:51 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 2\r\nX-Request-Id: c29c8b52-3511-4535-8523-b86cc8ba9e74\r\nSet-Cookie: parking_session=5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0; expires=Sat, 14 Jun 2025 14:17:52 GMT\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-08T08:05:17.972072Z","times_seen":446495,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":83,"dns":3,"connect":1,"send":0,"wait":36,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=s85m669dc6uz\u0026cd_fexp=72717107\u0026aqid=C4FNaJmyMcilovsP5KupgAY\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=769154410\u0026csala=8%7C0%7C428%7C82%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.loginmicrosoft.com/","date":"2025-06-14T14:02:53.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 May 2025 08:44:55 GMT","end":"Mon, 11 Aug 2025 08:44:54 GMT"},"fingerprint":{"sha1":"5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC","sha256":"66:92:7B:E6:46:01:51:04:95:E9:05:12:A9:83:8E:E2:7E:2C:E2:32:ED:E3:AD:65:A1:A1:7F:5B:09:3C:16:72"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=s85m669dc6uz\u0026cd_fexp=72717107\u0026aqid=C4FNaJmyMcilovsP5KupgAY\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=364\u0026adbw=700\u0026adbah=114%2C114%2C114\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=769154410\u0026csala=8%7C0%7C428%7C82%7C29\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.loginmicrosoft.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2141,"data":"{\"signature\":\"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\"}"}},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-FPXplDwD9irfUEAFyDzAeQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sat, 14 Jun 2025 14:02:53 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T08:24:30.782847Z","times_seen":17775817,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww25.loginmicrosoft.com/","fqdn":"ww25.loginmicrosoft.com","domain":"loginmicrosoft.com","tld":"com"},"ip":{"addr":"199.59.243.228","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-06-14T14:02:50.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww25.loginmicrosoft.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 May 2025 11:29:27 GMT","end":"Tue, 05 Aug 2025 11:29:26 GMT"},"fingerprint":{"sha1":"E2:88:56:CC:4D:E1:4E:1A:13:C5:7F:70:FA:1B:0D:A0:87:9B:49:2C","sha256":"60:A4:59:D5:6A:48:1F:24:E6:05:41:63:6F:CB:36:9C:22:0D:68:0A:C2:D1:5D:B0:C8:50:51:6D:2E:00:96:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ww25.loginmicrosoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2117,"data":"{\"signature\":\"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\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Jun 2025 14:02:50 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 1070\r\nX-Request-Id: 5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: sec-ch-prefers-color-scheme\r\nCritical-Ch: sec-ch-prefers-color-scheme\r\nVary: sec-ch-prefers-color-scheme\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_AnaV3yaLmUTDQdpj64TzvewphGtVoLbiWZWsDNs/mqndO/BBAqR0uGQnzfVCkBwPJlWza4cuQg6yZ7K9/dvJZw==\r\nSet-Cookie: parking_session=5ad8a9b9-4070-49c5-9b24-82f6d0fd72b0; expires=Sat, 14 Jun 2025 14:17:50 GMT; path=/\r\nConnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1070,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (338)","md5":"057326d561df03b74b0aa98cf4a9c3bc","sha1":"52942ee20b7965c131806d7324aadf60506110f4","sha256":"1d7746b4439011204d62dcc3fc0b036d22cc5691769cada3ceed449253f472d0","sha512":"7d969b0e3d560ca41d0b1705b39798f35372d309a9291b019a8c1ed64a283e913e2bab49eabc4f47f46ea105014219bf4a0201eb5c8bdb8d59e33efb577a432e","ssdeep":"","tlshash":"f01175672425684a70f006a059b1e71ccc1e378d52547c86fdedd03b6cc05e1f43a6ba","first_seen":"2025-06-14T14:03:14.727481Z","last_seen":"2025-06-14T14:03:14.727481Z","times_seen":1,"resource_available":false,"data":null}},"time_used":887,"timings":{"blocked":425,"dns":188,"connect":1,"send":0,"wait":36,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-06-14","alert":"Sinkholed","trigger":"loginmicrosoft.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://ww25.loginmicrosoft.com/","date":"2025-06-14T14:02:51.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 May 2025 08:43:37 GMT","end":"Mon, 11 Aug 2025 08:43:36 GMT"},"fingerprint":{"sha1":"5F:D0:77:0B:35:28:63:FA:F1:E5:B7:91:23:84:B9:89:D3:5B:66:F3","sha256":"74:E6:FB:A2:FF:CE:1F:C9:27:68:2B:19:AE:59:75:44:1D:90:6E:FB:5D:89:8B:FA:44:0C:99:42:24:A1:F9:22"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026bodis=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww25.loginmicrosoft.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET","post_data":{"size":2070,"data":"{\"data\":{\"type\":\"event\",\"attributes\":{\"metric\":{\"data\":{\"type\":\"metric\",\"attributes\":{\"name\":\"__activity__\",\"service\":\"api\"}}},\"profile\":{\"data\":{\"type\":\"profile\",\"attributes\":{\"properties\":{\"$referrer\":{\"ts\":1749909763,\"value\":\"\",\"first_page\":\"https://skinsalt.net/?r=a17677356553459cb0f68d4b01d9ff22\u0026a=193964\u0026o=208\u0026s1=25.06.14-Skin-Salt-AM\u0026s2=BEA\u0026s3=\u0026s4=\u0026vclick_id=\u0026gclid=\u0026utm_source=email-broadcast\u0026utm_id=01JXJXJ6SER4Y6QY1AXK2AEFDF\u0026utm_campaign=25.06.14%20-%208AM%20-%20(BEA)%20Skin%20Salt%20-%20Product%20Presentation%20(01JXJXJ6SER4Y6QY1AXK2AEFDF)\u0026utm_medium=email\u0026_kx=uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"},\"$last_referrer\":{\"ts\":1749909764,\"value\":\"\",\"first_page\":\"https://skinsalt.net/?r=a17677356553459cb0f68d4b01d9ff22\u0026a=193964\u0026o=208\u0026s1=25.06.14-Skin-Salt-AM\u0026s2=BEA\u0026s3=\u0026s4=\u0026vclick_id=\u0026gclid=\u0026utm_source=email-broadcast\u0026utm_id=01JXJXJ6SER4Y6QY1AXK2AEFDF\u0026utm_campaign=25.06.14%20-%208AM%20-%20(BEA)%20Skin%20Salt%20-%20Product%20Presentation%20(01JXJXJ6SER4Y6QY1AXK2AEFDF)\u0026utm_medium=email\u0026_kx=uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"},\"$exchange_id\":\"uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"},\"_kx\":\"uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\"}}},\"properties\":{\"r\":\"a17677356553459cb0f68d4b01d9ff22\",\"a\":\"193964\",\"o\":\"208\",\"s1\":\"25.06.14-Skin-Salt-AM\",\"s2\":\"BEA\",\"s3\":true,\"s4\":true,\"vclick_id\":true,\"gclid\":true,\"utm_source\":\"email-broadcast\",\"utm_id\":\"01JXJXJ6SER4Y6QY1AXK2AEFDF\",\"utm_campaign\":\"25.06.14 - 8AM - (BEA) Skin Salt - Product Presentation (01JXJXJ6SER4Y6QY1AXK2AEFDF)\",\"utm_medium\":\"email\",\"kx_present\":true,\"initial_page_path\":\"/\",\"page\":\"https://skinsalt.net/?r=a17677356553459cb0f68d4b01d9ff22\u0026a=193964\u0026o=208\u0026s1=25.06.14-Skin-Salt-AM\u0026s2=BEA\u0026s3=\u0026s4=\u0026vclick_id=\u0026gclid=\u0026utm_source=email-broadcast\u0026utm_id=01JXJXJ6SER4Y6QY1AXK2AEFDF\u0026utm_campaign=25.06.14%20-%208AM%20-%20(BEA)%20Skin%20Salt%20-%20Product%20Presentation%20(01JXJXJ6SER4Y6QY1AXK2AEFDF)\u0026utm_medium=email\u0026_kx=uO_uFDRp5sCsmJ1Wpk8KtWcWRPXb7NqE_f71JZQMrok.TUBmNj\",\"browser\":\"Firefox\",\"os\":\"Linux\",\"$use_ip\":true,\"$is_session_activity\":true}}}}"}},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sat, 14 Jun 2025 14:02:51 GMT\r\nexpires: Sat, 14 Jun 2025 14:02:51 GMT\r\ncache-control: private, max-age=3600\r\netag: \"6003504307051110257\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":143471,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1839)","md5":"e40ea2b88e0d6d776f87e00842388671","sha1":"5922910f7bf6d09ed111945ea1f07e5246bd87bf","sha256":"d67e8fd05bd4bdc526d3ae988b419fa12b0e514c367ec00d751143de3439f155","sha512":"0cd6a53a2d0cefaef516c21db1645cbebd5f058fb48c0ff2ce467d386a18eeb7b5fdf25f95754d3f77459d60130fbe5e7f6a958be7c70f3c772984c5d662dc4b","ssdeep":"1536:esUBG+VeQDLPwX2Kw7OkZgYoKn4mabiPgEnoWjJt4gXfc4KiKIOmUxZEzxKmtnqc:+gt+0biPg90tolZEzLFv","tlshash":"f2e34cdd73a1702253b395b4603f018fb13ab969a84888e4f198c9e47cb4da94277f7d","first_seen":"2025-06-11T20:03:31.025667Z","last_seen":"2025-06-20T14:09:10.963859Z","times_seen":6514,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":107,"dns":1,"connect":15,"send":0,"wait":37,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}