{"report_id":"64d94cf1-21bd-4117-8c99-6e8b7a720111","version":6,"status":"done","tags":[],"date":"2025-08-24T12:49:55Z","url":{"schema":"http","addr":"starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"starprize.za.com/bonus/com-pl-7778/lp2.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"title":"starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2"},"submit":{"url":{"schema":"http","addr":"starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-28T12:49:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"starprize.za.com","ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-14","domain_rank":0,"first_seen":"2025-08-22T15:15:21.089129Z","last_seen":"2025-08-22T15:15:21.089129Z","alert_count":7,"request_count":7,"received_data":32918,"sent_data":5811,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":65181,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-08-20T21:41:00.072698Z","alert_count":0,"request_count":2,"received_data":2236,"sent_data":1005,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.sedoparking.com","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2001-09-18","domain_rank":591238,"first_seen":"2013-04-22T22:23:29Z","last_seen":"2025-08-20T22:50:08.582703Z","alert_count":0,"request_count":1,"received_data":82765,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-08-20T15:13:39.8381Z","alert_count":0,"request_count":1,"received_data":159091,"sent_data":468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":5365,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-08-20T16:49:50.879248Z","alert_count":0,"request_count":6,"received_data":187170,"sent_data":4691,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"smsafelink.com","ip":{"addr":"91.195.240.94","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-08-20","domain_rank":2966365,"first_seen":"2024-08-22T04:04:31Z","last_seen":"2025-08-20T09:40:30.035603Z","alert_count":0,"request_count":2,"received_data":24181,"sent_data":1407,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca35954df338b154ad32341a60c42d12","sha1":"51ef9b2abdac8b013df0f992cbd6b6d7fdf1a8a0","sha256":"376ea7028bdf10bea842ccb2a1591db0b1cb5a423e0ac62801232bade0722961","sha512":"905746b2cb4bf649896583b7d97aef8c8812feccb9217e05ff655918d051a0500decfdd29c3e3de8c3b813b1558882c5fea8380995e2b474b682571871cf3132","ssdeep":"1536:nkTprYsegHeVTuzhmBNyrw9t4NG1Fg998DkfGSNxTOViBEgIFVuJ+KTrxQLpcFdW:FFhrM2C8DkOUm6qsBfdYCbmr","tlshash":"27f33acd77a1702253a394f4603f018fb139b866a84c88a4f199d8e47db4da94277fbd","size":158374,"data":"","first_seen":"2025-08-20T17:31:24.926118Z","last_seen":"2025-08-26T17:17:24.081321Z","times_seen":1300,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","fqdn":"smsafelink.com","domain":"smsafelink.com","tld":"com"},"ip":{"addr":"91.195.240.94","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a2f95ce17bfe942ee26c62dc69a41e0","sha1":"b79a54053bf87db7d8f580b221a5837b5cc9f570","sha256":"ca485749b0404cf1b097edfb0920b4b98fdf8d80c893112388a5cb37eb575f81","sha512":"6d7b9f06b4fd97f73e5575bb2c2c609fa6d6974ac9157e78c3fbb8d10ea009125d21a97afd56427d0666253fcff5516d97b90c7056479d602a4ebaee03aa14c8","ssdeep":"","tlshash":"f3812b3c17651e7fc7705498a443be05427e6a73fb08a4a5e0547d480bdf6cc1ba535b","size":3965,"data":"","first_seen":"2025-08-24T12:49:57.195165Z","last_seen":"2025-08-24T12:49:57.195165Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","fqdn":"smsafelink.com","domain":"smsafelink.com","tld":"com"},"ip":{"addr":"91.195.240.94","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"adca48a1fa1e680504faf6eb3a8969d7","sha1":"4b2f89d928b61e1869500cb4f35a2744e032ae55","sha256":"f7bc6876b682216c5a86bdcc99a90505bf86f4b20b77345fb0408e3bf5c1b402","sha512":"dc796e07ca5298195187aa653d62e05f06220e6f243126ecfc387f2deecc60020b00a503a3359a89bc2c5d369d51d496cbe7ce53076127ec780530835564b454","ssdeep":"","tlshash":"2ff00cb136700b1ac632e767e1db01a57f69c013c041f8b3b0be90200bc892606a0b9a","size":622,"data":"","first_seen":"2023-03-13T07:03:24Z","last_seen":"2026-01-18T22:30:58.859022Z","times_seen":3607,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"53a557946308585635eb80aec5326b9e","sha1":"544b125203bfbb516566a63c9ef3dc57e9c06df9","sha256":"eff95f5e15f8aa8c8b8c0f3aaeedba0091c1ec9732d78b6594c9ceb26c8eff28","sha512":"31c607e84c67799c8bce08e64fdd2c0164b164752ef3d7b1aaa9b2dda5b749e5064b44a66ae53109ccfdbdf7c6760bfc074502f65de4f4ed1fd6c50963885872","ssdeep":"","tlshash":"2621bb6e4c50822f2eb23edd285bb604fa235420e089e1d0c48cf9643979fd3882d9f4","size":1293,"data":"","first_seen":"2025-03-02T07:28:43.564096Z","last_seen":"2026-04-11T11:35:00.858115Z","times_seen":123082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96f051272a5aafb046a93370a090684c","sha1":"fe2019b84f73e852771b6b59b29df635208309d3","sha256":"ab31a90963a46fed0cf5a8c62815714a6e5936367284dd1384020d6079ba1bad","sha512":"2c623b9947e883373e03fb09fa8a2e7039fe6bf2b204b64897f0d6320e59486393e172dc01402cd46a0304a0c9de398d4265025b29305f4b4d096c09f2a26815","ssdeep":"1536:EkTprYsegHeVTuzhmBNyrw9t4NG1Fg998DkfGSNxTOViBEgIFVuJ+KTrxQLpcFdW:MFhrM2C8DkOUm6qsBfdYCbmr","tlshash":"69f33acd77a1702253a394f4603f018fb139b866a84c88a4f199d8e47db4da94277fbd","size":158381,"data":"","first_seen":"2025-08-20T17:21:06.098144Z","last_seen":"2025-08-26T17:17:46.580777Z","times_seen":1186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","fqdn":"smsafelink.com","domain":"smsafelink.com","tld":"com"},"ip":{"addr":"91.195.240.94","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"978e89b89f929ebbd0a746295eafbcbe","sha1":"6b92ab60432c1e5a8aebc60ebc94f1f24c28cea6","sha256":"848eaac812a5c6ef9f75fc33f2bfbb7169bfea60bc4d4a28a7e77d1737ca42ac","sha512":"c7b6c342a6cc4121c889e38dc07ec85f7b3b1ff7811c0babb5f5abaf39a984424751eb1a7ff400e9bd45f0d49e96be85ff30023dfe9de0b3c0463e1d136e42d1","ssdeep":"96:zQIHrUsXy9Cp1OuKfIqT1M6BXXjgXnB9qPsBJaqJ4uSnx73CUnKVGSrbH:jrUs2nDxQqPJTuIRIESrbH","tlshash":"26c194723145347a4aff0751206f1f14b67ae8533a08b419b028b7e82bebd5744dbb6a","size":5888,"data":"","first_seen":"2024-05-23T11:11:38Z","last_seen":"2026-03-23T00:52:59.161451Z","times_seen":188504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=4171038922\u0026channel=exp-0051%2Cauxa-control-1%2C3632559\u0026client=dp-sedo89_3ph\u0026r=m\u0026sc_status=0\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsmsafelink.com%2Fcaf%2F%3Fses%3DY3JlPTE3NTYwMzk3NzQmdGNpZD1zbXNhZmVsaW5rLmNvbTY4YWIwYTVlMWFhYmQ4LjU4NTQ2NDkxJnRhc2s9c2VhcmNoJmRvbWFpbj1zbXNhZmVsaW5rLmNvbSZhX2lkPTMmc2Vzc2lvbj02WTRzTGZDZlVUdmVudzdCTUhmRQ%3D%3D\u0026type=3\u0026swp=as-drid-2362604596027056\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r6%7Cs\u0026nocache=1061756039774462\u0026num=0\u0026output=afd_ads\u0026domain_name=smsafelink.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=4\u0026u_tz=0\u0026dt=1756039774470\u0026u_w=1280\u0026u_h=1024\u0026biw=-12245933\u0026bih=-12245933\u0026isw=1280\u0026ish=1024\u0026psw=1280\u0026psh=1071\u0026frm=2\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=796426389\u0026rurl=https%3A%2F%2Fsmsafelink.com%2Fs%3Fa%3D16507%26sm%3D1163%26co%3D10603%26mt%3D21%26s2%3D8zr7vt8\u0026referer=https%3A%2F%2Fstarprize.za.com%2F","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"793b53a5127163297cc1c6c1c75a2f99","sha1":"49ab3d8ceb9f8588b7860683175f63145cae418b","sha256":"4815d81cfcf9d4ae7b3444cb5bb6d2d009d11a94710df05f2df281f2a98493d5","sha512":"72f0dabcefcecfbde7abbb8c7401ac5085848c50f21a6a0e446264a5c9c154be124b6e3eb07e6209f61a37fde854674ceaed9b2572c7b08a802f341b9066aa2d","ssdeep":"","tlshash":"5d1156e98cb54331d55756117c4b3b96f01c1430628a2647e08cbc9d147de4ff50d37a","size":871,"data":"","first_seen":"2025-08-24T12:49:57.198286Z","last_seen":"2025-08-24T12:49:57.198286Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/bonus/com-pl-7778/carrier/main.js","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6749081dc8d2e65a8b31a4495747e537","sha1":"784b69c2160032e2603b09e53b32055b5ec320cd","sha256":"9d8aff015322729c4149911f4353e18184b97149b39cc77fcf3ceccecc2dc1e4","sha512":"34f1df1164f865a4a4a96e4147cfc0f3d05a6e7739b6bb82436ab7fb011dc3c05ff08448b76a11af21bc761432523f2cf338911904e710ca0ac078cf2d3474da","ssdeep":"","tlshash":"5151131ea564121215f7f228466f4304f0176737193b6902ba2e52d9ff3270e86b5efa","size":2582,"data":"","first_seen":"2024-06-30T09:51:57Z","last_seen":"2026-04-15T09:27:00.771537Z","times_seen":58,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"04b75cabfc9a089f659ac94550219c85","sha1":"45defb10d2b7852aba17e141e53677a36dc4ab18","sha256":"7c3e4e61fc18cbf1ea3c7c31fde7a9afe60fc251cae77bc0531a33ce902fe675","sha512":"90050ff1e8a2eb336d123a38f269702a3f4cef698581ff448d428b09b99fa1a9236578aaf68e485f3dc4566992e9e68cc6a580959fc6e1df1855b40a70156f1e","ssdeep":"","tlshash":"cc0186ef192313045999180e7ed19584312210de3a45c07178fd95272ff4d4b77b9bbc","size":729,"data":"","first_seen":"2025-03-04T09:42:27.22405Z","last_seen":"2026-04-15T09:27:00.799527Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"653ec0e3b5a1101622600915e9d5f810","sha1":"d6388f4dbb31f317321c1ae6a1b3c1877091a0bb","sha256":"5a7b3ff5227d61952d32617546657a6360f45df1e2acb91c6519847bd82dc67b","sha512":"e222ce26af9742d5a1ea505b1da49db5c8b54b4d4bbef2b7a5edc20d2fa61c2eeefadcc254aabad812219ca728865d311537076cfed519a081edd0f3de05bd9e","ssdeep":"","tlshash":"49b002505947b4573b5d08081ab943a1a8d2002a5051c300fd0da0124f65284603e4f5","size":95,"data":"","first_seen":"2024-08-20T22:15:05.576857Z","last_seen":"2026-04-15T09:27:00.800176Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"782f99fdea5699ed9c1690746c560c40","sha1":"fe2cd17d2a20c9bc6a4d99d379f2da56e880c8cd","sha256":"749e1b6fd849f9dd46fd408d158d9c710345c10e1585f4f8f014c41d7b15dd7e","sha512":"94055d8131f746536d04235f2e7c05071b16b84e28994036d65c6b8550f6c2e8d72d47ec3f6e5601453f021e6c134dcbf238bccd56aa8b55ba221a1199286ac6","ssdeep":"","tlshash":"cbb092ad011a003bcbb370c00a7a57a9240155272002a588b7be5a143f7de03834a3e0","size":119,"data":"","first_seen":"2023-03-29T23:59:07Z","last_seen":"2026-04-15T09:27:00.804147Z","times_seen":85,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:34.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 24 Aug 2025 12:49:34 GMT\r\nexpires: Sun, 24 Aug 2025 12:49:34 GMT\r\ncache-control: private, max-age=3600\r\netag: \"12806294203670441446\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158374,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2943)","md5":"ca35954df338b154ad32341a60c42d12","sha1":"51ef9b2abdac8b013df0f992cbd6b6d7fdf1a8a0","sha256":"376ea7028bdf10bea842ccb2a1591db0b1cb5a423e0ac62801232bade0722961","sha512":"905746b2cb4bf649896583b7d97aef8c8812feccb9217e05ff655918d051a0500decfdd29c3e3de8c3b813b1558882c5fea8380995e2b474b682571871cf3132","ssdeep":"1536:nkTprYsegHeVTuzhmBNyrw9t4NG1Fg998DkfGSNxTOViBEgIFVuJ+KTrxQLpcFdW:FFhrM2C8DkOUm6qsBfdYCbmr","tlshash":"27f33acd77a1702253a394f4603f018fb139b866a84c88a4f199d8e47db4da94277fbd","first_seen":"2025-08-20T17:31:24.926118Z","last_seen":"2025-08-26T17:17:24.081321Z","times_seen":1300,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":85,"dns":21,"connect":7,"send":0,"wait":20,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=4171038922\u0026channel=exp-0051%2Cauxa-control-1%2C3632559\u0026client=dp-sedo89_3ph\u0026r=m\u0026sc_status=0\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsmsafelink.com%2Fcaf%2F%3Fses%3DY3JlPTE3NTYwMzk3NzQmdGNpZD1zbXNhZmVsaW5rLmNvbTY4YWIwYTVlMWFhYmQ4LjU4NTQ2NDkxJnRhc2s9c2VhcmNoJmRvbWFpbj1zbXNhZmVsaW5rLmNvbSZhX2lkPTMmc2Vzc2lvbj02WTRzTGZDZlVUdmVudzdCTUhmRQ%3D%3D\u0026type=3\u0026swp=as-drid-2362604596027056\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r6%7Cs\u0026nocache=1061756039774462\u0026num=0\u0026output=afd_ads\u0026domain_name=smsafelink.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=4\u0026u_tz=0\u0026dt=1756039774470\u0026u_w=1280\u0026u_h=1024\u0026biw=-12245933\u0026bih=-12245933\u0026isw=1280\u0026ish=1024\u0026psw=1280\u0026psh=1071\u0026frm=2\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=796426389\u0026rurl=https%3A%2F%2Fsmsafelink.com%2Fs%3Fa%3D16507%26sm%3D1163%26co%3D10603%26mt%3D21%26s2%3D8zr7vt8\u0026referer=https%3A%2F%2Fstarprize.za.com%2F","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:34.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/ads?adsafe=low\u0026adtest=off\u0026psid=4171038922\u0026channel=exp-0051%2Cauxa-control-1%2C3632559\u0026client=dp-sedo89_3ph\u0026r=m\u0026sc_status=0\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsmsafelink.com%2Fcaf%2F%3Fses%3DY3JlPTE3NTYwMzk3NzQmdGNpZD1zbXNhZmVsaW5rLmNvbTY4YWIwYTVlMWFhYmQ4LjU4NTQ2NDkxJnRhc2s9c2VhcmNoJmRvbWFpbj1zbXNhZmVsaW5rLmNvbSZhX2lkPTMmc2Vzc2lvbj02WTRzTGZDZlVUdmVudzdCTUhmRQ%3D%3D\u0026type=3\u0026swp=as-drid-2362604596027056\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r6%7Cs\u0026nocache=1061756039774462\u0026num=0\u0026output=afd_ads\u0026domain_name=smsafelink.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=4\u0026u_tz=0\u0026dt=1756039774470\u0026u_w=1280\u0026u_h=1024\u0026biw=-12245933\u0026bih=-12245933\u0026isw=1280\u0026ish=1024\u0026psw=1280\u0026psh=1071\u0026frm=2\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=796426389\u0026rurl=https%3A%2F%2Fsmsafelink.com%2Fs%3Fa%3D16507%26sm%3D1163%26co%3D10603%26mt%3D21%26s2%3D8zr7vt8\u0026referer=https%3A%2F%2Fstarprize.za.com%2F HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Sun, 24 Aug 2025 12:49:34 GMT\r\nexpires: Sun, 24 Aug 2025 12:49:34 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-waPQxzq6TzXOFCJlDcSL1Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3838\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":22833,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22016)","md5":"b757846d83feb0dd16913ca4d7a1dd62","sha1":"fc913306d7cc6638870b439cd39e9793c5a1b15a","sha256":"b1c9f12ffc3943af1cabf5b22d95bfbc3019d70231e0b983dd694fd38e3bf167","sha512":"a45cb122fec324213274d0c9b7cef685f16a8c7f3a008f0e2442b649eae48d050a907bb96677be79479f52023e511181e82abb5f53c1ecfaf925721874e2c6ab","ssdeep":"192:GE12iMpgbetbAmhXaV4J7hrEFwC2AerwLrecik8UzEkj:Gni0nKKMvD8eEkj","tlshash":"d6a2323774a2272e0507ac54172a6f2ed191c42ac86f35e948b35f25cbf7f428bd618e","first_seen":"2025-08-24T12:49:57.1862Z","last_seen":"2025-08-24T12:49:57.1862Z","times_seen":1,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":169,"dns":1,"connect":20,"send":0,"wait":127,"receive":1,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=4171038922\u0026channel=exp-0051%2Cauxa-control-1%2C3632559\u0026client=dp-sedo89_3ph\u0026r=m\u0026sc_status=0\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsmsafelink.com%2Fcaf%2F%3Fses%3DY3JlPTE3NTYwMzk3NzQmdGNpZD1zbXNhZmVsaW5rLmNvbTY4YWIwYTVlMWFhYmQ4LjU4NTQ2NDkxJnRhc2s9c2VhcmNoJmRvbWFpbj1zbXNhZmVsaW5rLmNvbSZhX2lkPTMmc2Vzc2lvbj02WTRzTGZDZlVUdmVudzdCTUhmRQ%3D%3D\u0026type=3\u0026swp=as-drid-2362604596027056\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r6%7Cs\u0026nocache=1061756039774462\u0026num=0\u0026output=afd_ads\u0026domain_name=smsafelink.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=4\u0026u_tz=0\u0026dt=1756039774470\u0026u_w=1280\u0026u_h=1024\u0026biw=-12245933\u0026bih=-12245933\u0026isw=1280\u0026ish=1024\u0026psw=1280\u0026psh=1071\u0026frm=2\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=796426389\u0026rurl=https%3A%2F%2Fsmsafelink.com%2Fs%3Fa%3D16507%26sm%3D1163%26co%3D10603%26mt%3D21%26s2%3D8zr7vt8\u0026referer=https%3A%2F%2Fstarprize.za.com%2F","date":"2025-08-24T12:49:34.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 24 Aug 2025 12:49:34 GMT\r\nexpires: Sun, 24 Aug 2025 12:49:34 GMT\r\ncache-control: private, max-age=3600\r\netag: \"10714760354150280795\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158381,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2943)","md5":"96f051272a5aafb046a93370a090684c","sha1":"fe2019b84f73e852771b6b59b29df635208309d3","sha256":"ab31a90963a46fed0cf5a8c62815714a6e5936367284dd1384020d6079ba1bad","sha512":"2c623b9947e883373e03fb09fa8a2e7039fe6bf2b204b64897f0d6320e59486393e172dc01402cd46a0304a0c9de398d4265025b29305f4b4d096c09f2a26815","ssdeep":"1536:EkTprYsegHeVTuzhmBNyrw9t4NG1Fg998DkfGSNxTOViBEgIFVuJ+KTrxQLpcFdW:MFhrM2C8DkOUm6qsBfdYCbmr","tlshash":"69f33acd77a1702253a394f4603f018fb139b866a84c88a4f199d8e47db4da94277fbd","first_seen":"2025-08-20T17:21:06.098144Z","last_seen":"2025-08-26T17:17:46.580777Z","times_seen":1186,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo89_3ph\u0026output=uds_ads_only\u0026zx=1sewqi31oe3u\u0026cd_fexp=72717108\u0026aqid=XgqraLzrK-bPxdwPrZatqAs\u0026psid=4171038922\u0026pbt=bs\u0026adbx=490\u0026adby=1519.433349609375\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo89_3ph\u0026errv=796426389\u0026csala=7%7C0%7C356%7C63%7C47\u0026lle=0\u0026ifv=0\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:36.437Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo89_3ph\u0026output=uds_ads_only\u0026zx=1sewqi31oe3u\u0026cd_fexp=72717108\u0026aqid=XgqraLzrK-bPxdwPrZatqAs\u0026psid=4171038922\u0026pbt=bs\u0026adbx=490\u0026adby=1519.433349609375\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo89_3ph\u0026errv=796426389\u0026csala=7%7C0%7C356%7C63%7C47\u0026lle=0\u0026ifv=0\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-d9hI3u-KULsIAgfaRztAlQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 24 Aug 2025 12:49:36 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","fqdn":"smsafelink.com","domain":"smsafelink.com","tld":"com"},"ip":{"addr":"91.195.240.94","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","date":"2025-08-24T12:49:33.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smsafelink.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Thu, 20 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:B0:7C:1E:2C:E1:3C:11:3F:08:38:65:FD:D4:87:66:95:17:22:F6","sha256":"95:48:E1:91:4A:48:4D:2C:E8:43:FF:76:8D:5A:E2:CD:54:08:1D:99:7B:4D:C0:79:1F:B3:34:75:20:0C:9B:EC"}}},"request":{"raw":"GET /s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8 HTTP/1.1\r\nHost: smsafelink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://starprize.za.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 24 Aug 2025 12:49:34 GMT\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Sun, 24 Aug 2025 12:49:34 GMT\r\npragma: no-cache\r\nserver: Parking/1.0\r\nvary: Accept-Encoding\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_A7FIVI2BruLb/OBB66lWENz7Hh3xF8HsbSy+fCCoDr4eSFk/m60i43p/5z+rscpIQ6tGavnRATv+SFREQRRD/A==\r\nx-cache-miss-from: parking-7fbf5fd67f-z8dm9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23338,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9717)","md5":"8e3a02fadc33f29b1e2209c58926d55f","sha1":"c8b26503570fa3b85d2b8492a1893758417599a6","sha256":"bb984082aa09bee7e6930bb34b576c38a4221da9d4b993f0e550e5676a8c40e6","sha512":"4ca27b57e146ace5dfd8269957de72e03436ba667a512906e2f2ce2995b5b1dab55a26a0d8aa8316b5e92c991f727c2b51f4481f6ba3cebe5963e26c86793be3","ssdeep":"384:5iSw/a3kL6V42jw01itbiaLv+yuAIgul4xBXEGraFBTuIRIESrbO:5ida0L6CjRiaqyu6ul8BXEKGBTuIOESm","tlshash":"81a2d8322b442539b2b7861db192bb05b720cd13d90569a9f06cf3a4cfcad9716d2f0a","first_seen":"2025-08-24T12:49:57.188292Z","last_seen":"2025-08-24T12:49:57.188292Z","times_seen":1,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":165,"dns":47,"connect":25,"send":0,"wait":58,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/favicon.ico","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","date":"2025-08-24T12:49:33.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"starprize.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:13:27 GMT","end":"Wed, 12 Nov 2025 12:12:09 GMT"},"fingerprint":{"sha1":"B1:68:38:A2:FB:11:C0:F7:53:2C:F8:75:12:5D:DF:40:46:F9:D5:23","sha256":"F2:5B:37:57:C5:BD:60:95:8D:9D:89:CD:A5:54:AA:D6:06:CF:27:A4:1F:F3:7E:B8:2C:9B:E5:AE:AE:6A:15:F3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: starprize.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://starprize.za.com/bonus/com-pl-7778/lp2.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 Aug 2025 12:49:33 GMT\r\ncontent-type: image/x-icon\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 23 Apr 2024 05:28:37 GMT\r\nvary: accept-encoding\r\nexpires: Fri, 22 Aug 2025 12:53:22 GMT\r\ncache-control: max-age=2592000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOi5dGzJRhyGjcl0EzrSH%2BsVkxHBPvQYATShr0LPox5w8YUiYW4rGBtlRwLsl4pwvCqa9NS1VexdX5jlXKz9UiPYFwMNld9NAfkdikUEY84%3D\"}]}\r\nage: 473435\r\ncf-cache-status: HIT\r\netag: W/\"66274705-32e\"\r\ncontent-encoding: br\r\ncf-ray: 9742f86add0e80fa-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":814,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 41 x 41, 8-bit/color RGBA, non-interlaced","md5":"973e8dc3b11662098fc4ea0027feb1d7","sha1":"a458bc5e7fb5a9b4a61f8447026fc9b0d37af740","sha256":"4319df6394c456785fa2541669c7b83db2f658d43ab6610871d4487adf7b6c1c","sha512":"f20d7bbe2b38af33227913c809f2f058ca04c5764c011436183ebeca6270152cec36ddd2cdbf2881b501d3eb9d036537bc85683ada035bf54028368b5e5dacc1","ssdeep":"","tlshash":"a201caeb4ec91c06dd55b8bc551dd1c110f9900f5b3369477734d810323cf178c9a159","first_seen":"2023-11-18T20:21:53Z","last_seen":"2026-04-15T16:39:35.465959Z","times_seen":499,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=4171038922\u0026channel=exp-0051%2Cauxa-control-1%2C3632559\u0026client=dp-sedo89_3ph\u0026r=m\u0026sc_status=0\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsmsafelink.com%2Fcaf%2F%3Fses%3DY3JlPTE3NTYwMzk3NzQmdGNpZD1zbXNhZmVsaW5rLmNvbTY4YWIwYTVlMWFhYmQ4LjU4NTQ2NDkxJnRhc2s9c2VhcmNoJmRvbWFpbj1zbXNhZmVsaW5rLmNvbSZhX2lkPTMmc2Vzc2lvbj02WTRzTGZDZlVUdmVudzdCTUhmRQ%3D%3D\u0026type=3\u0026swp=as-drid-2362604596027056\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r6%7Cs\u0026nocache=1061756039774462\u0026num=0\u0026output=afd_ads\u0026domain_name=smsafelink.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=4\u0026u_tz=0\u0026dt=1756039774470\u0026u_w=1280\u0026u_h=1024\u0026biw=-12245933\u0026bih=-12245933\u0026isw=1280\u0026ish=1024\u0026psw=1280\u0026psh=1071\u0026frm=2\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=796426389\u0026rurl=https%3A%2F%2Fsmsafelink.com%2Fs%3Fa%3D16507%26sm%3D1163%26co%3D10603%26mt%3D21%26s2%3D8zr7vt8\u0026referer=https%3A%2F%2Fstarprize.za.com%2F","date":"2025-08-24T12:49:34.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:06 GMT","end":"Mon, 29 Sep 2025 08:35:05 GMT"},"fingerprint":{"sha1":"63:78:72:6F:FA:74:62:BB:8E:62:97:12:1D:27:37:96:37:81:92:E4","sha256":"F3:9B:D5:68:46:33:18:76:62:06:0D:55:5C:13:48:C7:C0:46:24:43:7E:C5:8D:9A:8B:DA:47:44:DA:33:B0:A2"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 24 Aug 2025 02:53:55 GMT\r\nexpires: Mon, 25 Aug 2025 01:53:55 GMT\r\ncache-control: public, max-age=82800\r\nage: 35740\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"11b3089d616633ca6b73b57aa877eeb4","sha1":"07632f63e06b30d9b63c97177d3a8122629bda9b","sha256":"809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1","sha512":"079b0e35b479dfdbe64a987661000f4a034b10688e26f2a5fe6aaa807e81ccc5593d40609b731ab3340e687d83dd08de4b8b1e01cdac9d4523a9f6bb3acfcba0","ssdeep":"","tlshash":"d9d02291c2182d28441e82e0c37c312600fab0a2634c00dcfa80e300b20c9abb861669","first_seen":"2023-04-06T23:53:06Z","last_seen":"2026-04-01T02:57:50.32115Z","times_seen":412182,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":69,"dns":1,"connect":15,"send":0,"wait":16,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo89_3ph\u0026output=uds_ads_only\u0026zx=w97au634w3p1\u0026cd_fexp=72717108\u0026aqid=XgqraLzrK-bPxdwPrZatqAs\u0026psid=4171038922\u0026pbt=bv\u0026adbx=467.20001220703125\u0026adby=216.73333740234375\u0026adbh=1280\u0026adbw=346\u0026adbah=202%2C243%2C243%2C161%2C202%2C202\u0026adbn=master-1\u0026eawp=partner-dp-sedo89_3ph\u0026errv=796426389\u0026csala=17%7C0%7C346%7C63%7C46\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:36.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo89_3ph\u0026output=uds_ads_only\u0026zx=w97au634w3p1\u0026cd_fexp=72717108\u0026aqid=XgqraLzrK-bPxdwPrZatqAs\u0026psid=4171038922\u0026pbt=bv\u0026adbx=467.20001220703125\u0026adby=216.73333740234375\u0026adbh=1280\u0026adbw=346\u0026adbah=202%2C243%2C243%2C161%2C202%2C202\u0026adbn=master-1\u0026eawp=partner-dp-sedo89_3ph\u0026errv=796426389\u0026csala=17%7C0%7C346%7C63%7C46\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-7Fpa9IkV2C_Wgot7NmrZaQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 24 Aug 2025 12:49:36 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/bonus/com-pl-7778/carrier/main.js","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","date":"2025-08-24T12:49:33.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"starprize.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:13:27 GMT","end":"Wed, 12 Nov 2025 12:12:09 GMT"},"fingerprint":{"sha1":"B1:68:38:A2:FB:11:C0:F7:53:2C:F8:75:12:5D:DF:40:46:F9:D5:23","sha256":"F2:5B:37:57:C5:BD:60:95:8D:9D:89:CD:A5:54:AA:D6:06:CF:27:A4:1F:F3:7E:B8:2C:9B:E5:AE:AE:6A:15:F3"}}},"request":{"raw":"GET /bonus/com-pl-7778/carrier/main.js HTTP/1.1\r\nHost: starprize.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 Aug 2025 12:49:33 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nlast-modified: Wed, 15 May 2024 11:02:47 GMT\r\netag: W/\"66449657-a16\"\r\nexpires: Fri, 12 Sep 2025 12:50:00 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 10075\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqlxvFbOmFGCtBXTXKK%2BofVBwYwNBYCWaBG5ocJqmJUbu5Z3lNVHD2tW1HldLj%2BnhUsXWih3Ah2uN62dZu2mMxyq%2Bc8cnb%2F7KtNUKx0H%2FSk%3D\"}]}\r\ncf-ray: 9742f868986380fa-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2582,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6749081dc8d2e65a8b31a4495747e537","sha1":"784b69c2160032e2603b09e53b32055b5ec320cd","sha256":"9d8aff015322729c4149911f4353e18184b97149b39cc77fcf3ceccecc2dc1e4","sha512":"34f1df1164f865a4a4a96e4147cfc0f3d05a6e7739b6bb82436ab7fb011dc3c05ff08448b76a11af21bc761432523f2cf338911904e710ca0ac078cf2d3474da","ssdeep":"","tlshash":"5151131ea564121215f7f228466f4304f0176737193b6902ba2e52d9ff3270e86b5efa","first_seen":"2024-06-30T09:51:57Z","last_seen":"2026-04-15T09:27:00.771537Z","times_seen":58,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:34.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/ads/i/iframe.html HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ncontent-security-policy: script-src 'nonce-PrAgzYVSPRs1cgkImLVGTg' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ncontent-length: 726\r\ndate: Sun, 24 Aug 2025 12:49:34 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlast-modified: Tue, 17 Sep 2024 06:00:00 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1560,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1559)","md5":"ce0f99cab3ce510bcc8505c0cd8599c2","sha1":"6baf682eb7906ef35a350daf6bb2d973b339c116","sha256":"c6b3452eebf95e3c75c4c431a37ee5fe1f96b1c2d7a1d41963a2f272939f9957","sha512":"531a7600be8d28983d40cc5d666c026694b76b88c47dcd79bdd6089381c65c93153d8148c499f1fec6554925e3080a09d56c68860566652676af0f71c614e973","ssdeep":"","tlshash":"9d31bfaf4c50812e2eb23ddd2d9bb608fa139424e445d5d0c58cf86939b9fc7882a9f4","first_seen":"2025-08-24T12:49:57.191471Z","last_seen":"2025-08-24T12:49:57.191471Z","times_seen":1,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":90,"dns":1,"connect":20,"send":0,"wait":30,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"smsafelink.com/search/tsc.php?ses=ogc6fTUeA1mpx_ydXRTmNWCuM6FtHaPiz3_yC51iob8etzuAMnjOFu9IBsAXNNhvKGo1isBVcV_LrWgsx6SIhlDhlkH4O00VWeZMgBxErq0bJgjq3s10KTXGYfRdy6axbihM9Ig7-gNduKseYmPz-UOWzCf5tp3ux604aZ3JZSMa58wPoujvVEdVU77ElSmm96jsi2wuM1nhOPn2NbwzT7qEQ0I7tEOa7ndu3etR60XHjqeugccGaEY3MdbEZ41mmjxnGOJqdlPSlPRTbpu7lKR59beWTAMTD4Le135wM4iqzNNlMXsbUuyrKGjQGyVluFtnW3siF7BkJ09voh9cjHbpsupmSbRvFvY8IfLQBECnU8XklZnDHMpadLg-A\u0026cv=2","fqdn":"smsafelink.com","domain":"smsafelink.com","tld":"com"},"ip":{"addr":"91.195.240.94","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:34.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"smsafelink.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Thu, 21 Aug 2025 00:00:00 GMT","end":"Thu, 20 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:B0:7C:1E:2C:E1:3C:11:3F:08:38:65:FD:D4:87:66:95:17:22:F6","sha256":"95:48:E1:91:4A:48:4D:2C:E8:43:FF:76:8D:5A:E2:CD:54:08:1D:99:7B:4D:C0:79:1F:B3:34:75:20:0C:9B:EC"}}},"request":{"raw":"GET /search/tsc.php?ses=ogc6fTUeA1mpx_ydXRTmNWCuM6FtHaPiz3_yC51iob8etzuAMnjOFu9IBsAXNNhvKGo1isBVcV_LrWgsx6SIhlDhlkH4O00VWeZMgBxErq0bJgjq3s10KTXGYfRdy6axbihM9Ig7-gNduKseYmPz-UOWzCf5tp3ux604aZ3JZSMa58wPoujvVEdVU77ElSmm96jsi2wuM1nhOPn2NbwzT7qEQ0I7tEOa7ndu3etR60XHjqeugccGaEY3MdbEZ41mmjxnGOJqdlPSlPRTbpu7lKR59beWTAMTD4Le135wM4iqzNNlMXsbUuyrKGjQGyVluFtnW3siF7BkJ09voh9cjHbpsupmSbRvFvY8IfLQBECnU8XklZnDHMpadLg-A\u0026cv=2 HTTP/1.1\r\nHost: smsafelink.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 24 Aug 2025 12:49:34 GMT\r\nserver: Parking/1.0\r\nx-cache-miss-from: parking-7fbf5fd67f-jsf64\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/lib/ajax/lp_timing.php?c=43zaut53z42z0\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026d=1361_8\u0026t=0.6079235378185561","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","date":"2025-08-24T12:49:34.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"starprize.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:13:27 GMT","end":"Wed, 12 Nov 2025 12:12:09 GMT"},"fingerprint":{"sha1":"B1:68:38:A2:FB:11:C0:F7:53:2C:F8:75:12:5D:DF:40:46:F9:D5:23","sha256":"F2:5B:37:57:C5:BD:60:95:8D:9D:89:CD:A5:54:AA:D6:06:CF:27:A4:1F:F3:7E:B8:2C:9B:E5:AE:AE:6A:15:F3"}}},"request":{"raw":"GET /lib/ajax/lp_timing.php?c=43zaut53z42z0\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026d=1361_8\u0026t=0.6079235378185561 HTTP/1.1\r\nHost: starprize.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://starprize.za.com/bonus/com-pl-7778/lp2.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2\r\nCookie: fc_t_8=1756039773_1756039773_1756039773_1756039773_1756039773; fc_n_8=1_1_1_1_1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 Aug 2025 12:49:35 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yhVPTjkafH1RkzZaKEbMr39IZvzIasvM9xrM6nP%2Bn5%2FRvEAJ6sj%2B0muALxRdmX20gDwaxMSjFDKLDYYsGg%2BLQ%2F1olWnGR%2BomLSZrlk9WfsU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9742f8716c9c5546-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ffce86e7c036f733c99e4aac1951d1f0","sha1":"9d27322a607424247d05b3aa22ed8a9bbf3977ca","sha256":"adc1673711c18a8770805224a7c110405cb60a6e933d56f47a7b36585fe37fcc","sha512":"9cec634b2248459ca2380cdea45af272eb6662a7703fc5586ef66ce482125f1bda5793aadf758999b85e52fea285187be6304cab4548fe00f1e4ee9ff22f8426","ssdeep":"","tlshash":"0a900403d540c104c141c0300c04d340574070704544470f70dc375ddc151d70c11000","first_seen":"2023-05-01T17:01:48Z","last_seen":"2026-04-15T09:27:00.761783Z","times_seen":138,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo89_3ph\u0026output=uds_ads_only\u0026zx=ds6v5wghdlwh\u0026cd_fexp=72717108\u0026aqid=XgqraLzrK-bPxdwPrZatqAs\u0026psid=4171038922\u0026pbt=bs\u0026adbx=467.20001220703125\u0026adby=216.73333740234375\u0026adbh=1280\u0026adbw=346\u0026adbah=202%2C243%2C243%2C161%2C202%2C202\u0026adbn=master-1\u0026eawp=partner-dp-sedo89_3ph\u0026errv=796426389\u0026csala=17%7C0%7C346%7C63%7C46\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:36.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:37:07 GMT","end":"Mon, 29 Sep 2025 08:37:06 GMT"},"fingerprint":{"sha1":"22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D","sha256":"0C:34:D1:90:DF:C1:33:F8:55:BD:CD:34:37:8F:85:5C:BD:71:22:28:0C:CA:4E:E2:99:7D:EA:95:3C:98:EA:04"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo89_3ph\u0026output=uds_ads_only\u0026zx=ds6v5wghdlwh\u0026cd_fexp=72717108\u0026aqid=XgqraLzrK-bPxdwPrZatqAs\u0026psid=4171038922\u0026pbt=bs\u0026adbx=467.20001220703125\u0026adby=216.73333740234375\u0026adbh=1280\u0026adbw=346\u0026adbah=202%2C243%2C243%2C161%2C202%2C202\u0026adbn=master-1\u0026eawp=partner-dp-sedo89_3ph\u0026errv=796426389\u0026csala=17%7C0%7C346%7C63%7C46\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-OhF1Jjw23Ikz2b078FKFUA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 24 Aug 2025 12:49:36 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.sedoparking.com/templates/bg/arrows-1-colors-3.png","fqdn":"img.sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8","date":"2025-08-24T12:49:34.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cachefly.net","organization":"Cachenetworks, LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Nov 2024 20:01:06 GMT","end":"Sun, 14 Dec 2025 20:01:05 GMT"},"fingerprint":{"sha1":"E3:21:BF:A0:AC:70:6E:19:F1:83:A3:CB:83:F9:6F:0F:E0:46:F1:3C","sha256":"0D:FF:60:D6:18:60:C6:38:90:5D:DD:55:2E:87:EE:3A:E5:96:78:0B:5F:68:E8:88:AD:AE:1A:BF:51:59:94:83"}}},"request":{"raw":"GET /templates/bg/arrows-1-colors-3.png HTTP/1.1\r\nHost: img.sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://smsafelink.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 Aug 2025 12:49:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 82231\r\naccess-control-allow-origin: *\r\ncache-control: max-age=604800\r\nexpires: Sun, 31 Aug 2025 12:49:34 GMT\r\nx-cfhash: \"b68c0210cadb1e12efc4557d7e49e48e\"\r\nx-cff: B\r\nlast-modified: Wed, 22 Apr 2020 09:38:21 GMT\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1755265534\r\ncf4ttl: 31536000.000\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf-reqid: f4712b5608844b4936f5954688590d1c\r\nx-cf1: 11696:fC.arn1:cf:nom:cacheN.arn1-01:H\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":82231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3024 x 2000, 8-bit/color RGBA, non-interlaced","md5":"b68c0210cadb1e12efc4557d7e49e48e","sha1":"ad24ed2b2d5d166d07fbf0680693c88fb56fcb4b","sha256":"e7ff091c85669b175de49d629d7d77bd20cd08d2c16ae74deef2ab06aec5854d","sha512":"08f54e954e1e3bfa566cbb5783f54a500490f41c60005b1a0145fa51571833d954cb4d692a6da78bd4e59e10c03f4780f68619618e2056a34af1d0529427da94","ssdeep":"1536:lNNF5dc3RlXaayiiOxIAjNaFS3k2bYwtaThZE6EbWDi:ZF58RlKoi8RF/bYwtaTQjam","tlshash":"9883e002e9cb0dd3e9dcc9b9dc29af48777541b514528fc7c7b98223dcb52e1a2258a3","first_seen":"2023-04-07T10:24:35Z","last_seen":"2026-03-02T09:29:51.546644Z","times_seen":18808,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":83,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/ctrack.php?c=43zaut53z42z0\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026t=0.385643136519759","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","date":"2025-08-24T12:49:33.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"starprize.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:13:27 GMT","end":"Wed, 12 Nov 2025 12:12:09 GMT"},"fingerprint":{"sha1":"B1:68:38:A2:FB:11:C0:F7:53:2C:F8:75:12:5D:DF:40:46:F9:D5:23","sha256":"F2:5B:37:57:C5:BD:60:95:8D:9D:89:CD:A5:54:AA:D6:06:CF:27:A4:1F:F3:7E:B8:2C:9B:E5:AE:AE:6A:15:F3"}}},"request":{"raw":"GET /ctrack.php?c=43zaut53z42z0\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026t=0.385643136519759 HTTP/1.1\r\nHost: starprize.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 Aug 2025 12:49:33 GMT\r\ncontent-type: image/gif\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncache-control: private, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZqrPn9UUO4MH28PV7sPGZ%2FTOOLXKT%2FLAtSnMkZkKpwhBShF0mSylJPq3XB7d5hKgaWYtzhyxPLqGJ5tcwjXp3gBmZMieX%2BtuxMpFe%2F5mzq4%3D\"}]}\r\ncf-ray: 9742f868d8d880fa-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ffce86e7c036f733c99e4aac1951d1f0","sha1":"9d27322a607424247d05b3aa22ed8a9bbf3977ca","sha256":"adc1673711c18a8770805224a7c110405cb60a6e933d56f47a7b36585fe37fcc","sha512":"9cec634b2248459ca2380cdea45af272eb6662a7703fc5586ef66ce482125f1bda5793aadf758999b85e52fea285187be6304cab4548fe00f1e4ee9ff22f8426","ssdeep":"","tlshash":"0a900403d540c104c141c0300c04d340574070704544470f70dc375ddc151d70c11000","first_seen":"2023-05-01T17:01:48Z","last_seen":"2026-04-15T09:27:00.761783Z","times_seen":138,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/visit.php?c=8\u0026k=fd4a675cae2dd708a17bebf9b8690282","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","date":"2025-08-24T12:49:33.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"starprize.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:13:27 GMT","end":"Wed, 12 Nov 2025 12:12:09 GMT"},"fingerprint":{"sha1":"B1:68:38:A2:FB:11:C0:F7:53:2C:F8:75:12:5D:DF:40:46:F9:D5:23","sha256":"F2:5B:37:57:C5:BD:60:95:8D:9D:89:CD:A5:54:AA:D6:06:CF:27:A4:1F:F3:7E:B8:2C:9B:E5:AE:AE:6A:15:F3"}}},"request":{"raw":"GET /visit.php?c=8\u0026k=fd4a675cae2dd708a17bebf9b8690282 HTTP/1.1\r\nHost: starprize.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 24 Aug 2025 12:49:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://smsafelink.com/s?a=16507\u0026sm=1163\u0026co=10603\u0026mt=21\u0026s2=8zr7vt8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, no-cache\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZFFP2kIvmsEyswXhSdNU%2FT7rr26%2FAkTjsRc%2B6fO2nk%2BmNgps7MCAPNMtC7dE01q6ANhCWPKHrYne%2BvX0Zpwz4lUk6QziHVQSA3HViY1UPA%3D\"}]}\r\nset-cookie: fc_t_8=1756039773_1756039773_1756039773_1756039773_1756039773; Path=/; Max-Age=2678400; Expires=Wed, 24 Sep 2025 12:49:33 GMT\nfc_n_8=1_1_1_1_1; Path=/; Max-Age=2678400; Expires=Wed, 24 Sep 2025 12:49:33 GMT\r\ncf-ray: 9742f868e8f980fa-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23338,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-15T20:38:47.575438Z","times_seen":13797803,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/lib/ajax/lp_engage.php?c=43zaut53z42z0\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026t=0.33232742498444146","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","date":"2025-08-24T12:49:34.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"starprize.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:13:27 GMT","end":"Wed, 12 Nov 2025 12:12:09 GMT"},"fingerprint":{"sha1":"B1:68:38:A2:FB:11:C0:F7:53:2C:F8:75:12:5D:DF:40:46:F9:D5:23","sha256":"F2:5B:37:57:C5:BD:60:95:8D:9D:89:CD:A5:54:AA:D6:06:CF:27:A4:1F:F3:7E:B8:2C:9B:E5:AE:AE:6A:15:F3"}}},"request":{"raw":"GET /lib/ajax/lp_engage.php?c=43zaut53z42z0\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026t=0.33232742498444146 HTTP/1.1\r\nHost: starprize.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://starprize.za.com/bonus/com-pl-7778/lp2.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2\r\nCookie: fc_t_8=1756039773_1756039773_1756039773_1756039773_1756039773; fc_n_8=1_1_1_1_1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 Aug 2025 12:49:35 GMT\r\ncontent-type: image/gif\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OFmRanKJ6Z7Mzma2pCqqUjnisO0fcmXcA81m5Rp3aYKOmkQg3VFz1OoiLG8IiDw5LgNIWJ3lRJkXBDxAUJTPOMo3Tv0IRDY5mpd5Fr9hHms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9742f8716ca35546-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"ffce86e7c036f733c99e4aac1951d1f0","sha1":"9d27322a607424247d05b3aa22ed8a9bbf3977ca","sha256":"adc1673711c18a8770805224a7c110405cb60a6e933d56f47a7b36585fe37fcc","sha512":"9cec634b2248459ca2380cdea45af272eb6662a7703fc5586ef66ce482125f1bda5793aadf758999b85e52fea285187be6304cab4548fe00f1e4ee9ff22f8426","ssdeep":"","tlshash":"0a900403d540c104c141c0300c04d340574070704544470f70dc375ddc151d70c11000","first_seen":"2023-05-01T17:01:48Z","last_seen":"2026-04-15T09:27:00.761783Z","times_seen":138,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=4171038922\u0026channel=exp-0051%2Cauxa-control-1%2C3632559\u0026client=dp-sedo89_3ph\u0026r=m\u0026sc_status=0\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fsmsafelink.com%2Fcaf%2F%3Fses%3DY3JlPTE3NTYwMzk3NzQmdGNpZD1zbXNhZmVsaW5rLmNvbTY4YWIwYTVlMWFhYmQ4LjU4NTQ2NDkxJnRhc2s9c2VhcmNoJmRvbWFpbj1zbXNhZmVsaW5rLmNvbSZhX2lkPTMmc2Vzc2lvbj02WTRzTGZDZlVUdmVudzdCTUhmRQ%3D%3D\u0026type=3\u0026swp=as-drid-2362604596027056\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108\u0026format=r6%7Cs\u0026nocache=1061756039774462\u0026num=0\u0026output=afd_ads\u0026domain_name=smsafelink.com\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=4\u0026u_tz=0\u0026dt=1756039774470\u0026u_w=1280\u0026u_h=1024\u0026biw=-12245933\u0026bih=-12245933\u0026isw=1280\u0026ish=1024\u0026psw=1280\u0026psh=1071\u0026frm=2\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=796426389\u0026rurl=https%3A%2F%2Fsmsafelink.com%2Fs%3Fa%3D16507%26sm%3D1163%26co%3D10603%26mt%3D21%26s2%3D8zr7vt8\u0026referer=https%3A%2F%2Fstarprize.za.com%2F","date":"2025-08-24T12:49:34.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:06 GMT","end":"Mon, 29 Sep 2025 08:35:05 GMT"},"fingerprint":{"sha1":"63:78:72:6F:FA:74:62:BB:8E:62:97:12:1D:27:37:96:37:81:92:E4","sha256":"F3:9B:D5:68:46:33:18:76:62:06:0D:55:5C:13:48:C7:C0:46:24:43:7E:C5:8D:9A:8B:DA:47:44:DA:33:B0:A2"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 24 Aug 2025 12:11:13 GMT\r\nexpires: Mon, 25 Aug 2025 11:11:13 GMT\r\ncache-control: public, max-age=82800\r\nage: 2302\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-01-21T15:14:27.461955Z","times_seen":243741,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":71,"dns":3,"connect":27,"send":0,"wait":15,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"starprize.za.com/bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2","fqdn":"starprize.za.com","domain":"starprize.za.com","tld":"za.com"},"ip":{"addr":"172.67.159.138","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-24T12:49:33.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"starprize.za.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 14 Aug 2025 11:13:27 GMT","end":"Wed, 12 Nov 2025 12:12:09 GMT"},"fingerprint":{"sha1":"B1:68:38:A2:FB:11:C0:F7:53:2C:F8:75:12:5D:DF:40:46:F9:D5:23","sha256":"F2:5B:37:57:C5:BD:60:95:8D:9D:89:CD:A5:54:AA:D6:06:CF:27:A4:1F:F3:7E:B8:2C:9B:E5:AE:AE:6A:15:F3"}}},"request":{"raw":"GET /bonus/com-pl-7778/global-bb.php?brand=unknown\u0026browser=Chrome\u0026browserv=139\u0026c=43zaut53z42z0\u0026carrier=Netia\u0026city=Warsaw\u0026country_code=PL\u0026country_name=Poland\u0026e=5\u0026isp=Netia+SA\u0026k=9a4f94f6039ab5071cd2e65113b44907\u0026lang=pl\u0026marketing_name=K\u0026model=unknown\u0026os=Android\u0026osv=10.\u0026region=Mazowieckie\u0026rheight=0\u0026rwidth=0\u0026tablet=2 HTTP/1.1\r\nHost: starprize.za.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 Aug 2025 12:49:33 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WdH%2FJBZa%2F5pJqTJXR5r2GxiWZ0fDrGbZFVbAvDHgCQSLBsN5frlcWUX9%2BLMEo7ieWFRFDgZsB7mAZFL%2BY2gstgpeKAMPAFqBZdsvrRxzqYs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9742f865ba2a80fa-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1529,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"f3a80d30315660e4fdd071dc0e91ea97","sha1":"b96b65303a71fc28aa239ea6325cfab54b83f3f4","sha256":"84f8c268d7938f254c095f8a89557501848aa298b9170adafa72f6d591668814","sha512":"73ae4b6e3148b3856c6f03535eed8685821d6418de6cee75a592c1142646e2cfa31e21e7fe411199fad0150203d07f7d5537c09fca537f00cafa895600991740","ssdeep":"","tlshash":"423148df1d41c6108671240aaef1e598f46660ab23408164b9fc95233ff4f895b6bbbc","first_seen":"2024-06-21T04:49:37Z","last_seen":"2026-04-15T09:27:00.763684Z","times_seen":23,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":55,"dns":8,"connect":8,"send":0,"wait":306,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-24","alert":"Sinkholed","trigger":"starprize.za.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}