{"report_id":"81d8b680-1f1b-4721-a980-41be06125e96","version":6,"status":"done","tags":[],"date":"2025-02-10T01:12:32Z","url":{"schema":"http","addr":"ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","fqdn":"ww16.vofycot.com","domain":"vofycot.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":0,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","fqdn":"ww16.vofycot.com","domain":"vofycot.com","tld":"com"},"title":"vofycot.com - Dette nettstedet er til salgs! - vofycot Ressurser og informasjon"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-21T01:12:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ww16.vofycot.com","ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2011-09-20","domain_rank":0,"first_seen":"2023-11-01T21:38:13Z","last_seen":"2025-02-05T06:19:44.438624Z","alert_count":2,"request_count":2,"received_data":26153,"sent_data":1407,"comment":"","tags":null,"fingerprints":null},{"fqdn":"syndicatedsearch.goog","ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":0,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-02-05T02:39:37.080125Z","alert_count":0,"request_count":7,"received_data":156472,"sent_data":5230,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.sedoparking.com","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2001-09-18","domain_rank":54200,"first_seen":"2013-04-22T22:23:29Z","last_seen":"2025-02-05T04:51:17.55176Z","alert_count":0,"request_count":1,"received_data":15618,"sent_data":457,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-02-05T02:39:36.993892Z","alert_count":0,"request_count":2,"received_data":2085,"sent_data":1001,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-02-05T01:42:46.983669Z","alert_count":0,"request_count":1,"received_data":148384,"sent_data":470,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-09","alert":"Sinkholed","trigger":"vofycot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-09","alert":"Sinkholed","trigger":"vofycot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=exp-0051%2Cauxa-control-1%2C10450790\u0026client=dp-sedo85_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww16.vofycot.com%2Fcaf%2F%3Fses%3DY3JlPTE3MzkxNDk5MjImdGNpZD13dzE2LnZvZnljb3QuY29tNjdhOTUyNjI2MjAzNTQuMjYyNjc4ODcmdGFzaz1zZWFyY2gmZG9tYWluPXZvZnljb3QuY29tJmFfaWQ9MyZzZXNzaW9uPXpZRnNlOEk1a3lpUEw4dDVXWlVi\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2106557024922479\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301551%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=1181739149922867\u0026num=0\u0026output=afd_ads\u0026domain_name=ww16.vofycot.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1739149922881\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=723063605\u0026rurl=https%3A%2F%2Fww16.vofycot.com%2Flogin.php%3Fsub1%3D20250210-1159-352a-9c45-a5b69ed36237","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e7a3ebc9bc0139ab19968acbcf99154","sha1":"f6f00075814019f4f385db08918192a40af510c3","sha256":"00e95e581675831d5c5a461f93b42434cd787fb8360069db80b77dc678e5ef03","sha512":"920e0e3124a9c394606059ef513d8cbe130ee7390be7da17872c32d51ad32d9a61e5af993227ccaead62ef168285e1d25bd05b1fdb130b17869a93c7035049c1","ssdeep":"","tlshash":"ee012f4a6c281232c8676a22086b7ba15cc9247112873280e10ee8cd24fcfaf12290bb","size":837,"data":"","first_seen":"2025-02-10T01:12:33.458092Z","last_seen":"2025-02-10T01:12:33.458092Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d597509b789819046e671c21618a708d","sha1":"755e2a50b0cfb447b9b993b7a15e88d7e9939507","sha256":"4157d0b49edcde477ca9db61347efed9ae3c77afde7da4d69e921f7d8925c661","sha512":"25c9804dd9b499d9b73aeb4baf3f0ff371d1710d1242ded0fdd9fb5263cba20b3d89e2a9c948b8ff00494feecaf1c7ff6329db8c157a43260ba3c46fe2b9cce8","ssdeep":"1536:g0zTORbeZ58GKnTi/xJ7UENcG98gUKoJfUUUulZAJcNmgm7JG4GPo38C13nGDUzx:LhjUKoFZMcNEJhR3nltvjcuecL","tlshash":"4ee35c9d73a1742253a394b4607f118fb13af955e80888b4f198c8e47cb8da94277fbd","size":147662,"data":"","first_seen":"2025-02-05T20:58:35.276826Z","last_seen":"2025-02-10T14:37:57.379563Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","fqdn":"ww16.vofycot.com","domain":"vofycot.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"09070d7a8d03e5830ea83e8dd9fcb2ce","sha1":"5a85968e580cad0ec364349a54d683718401d115","sha256":"0aa75a765b824b714d20d05b62899f4474a65fce7bc8c010a8c97b5062b87ec8","sha512":"99f717b36d80b52a1079ef59335b1c630300f5761fc0319cf6882b636c110c34c2f40869a9c206dab757c3249377481e81123300682eb1e403ef6bdcbe660af2","ssdeep":"","tlshash":"31811a210d8549fa984065c8d0413e45217fb263d981f2eef8ead9c477beecd2172783","size":4081,"data":"","first_seen":"2025-02-10T01:12:33.459511Z","last_seen":"2025-02-10T01:12:33.459511Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e305aa2e514306ea4582e558f3bd8f5f","sha1":"3c678c75218cefa8ca1fe6e9c8046a81a8e20fb9","sha256":"b8a498b4f45cb6c24cb9d143b60314b9494faa2f0ed185a61905e8b2fd959efd","sha512":"34f9d6ae763746c7890400864c7ed75e3a066c6d1a75595b891447ff0a4050beda6a93dbc3d75c931ae50bebdc9bdac23147636ea9182224feebcf969c33e3da","ssdeep":"1536:T0zTORbeZ58GKnTi/xJ7UENcG98gUKoJfUUUulZAJcNmgm7JG4GPo38C13nGDUzx:KhjUKoFZMcNEJhR3nltvjcuecL","tlshash":"7be35c9d73a1742253a394b4607f118fb13af955e80888b4f198c8e47cb8da94277fbd","size":147667,"data":"","first_seen":"2025-02-05T19:13:22.751246Z","last_seen":"2025-02-10T14:42:13.789833Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","fqdn":"ww16.vofycot.com","domain":"vofycot.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f580ea0afd6182fa3b02c249d8a3771","sha1":"e939caf069f09b6c73940c0c354ddfff817be7c8","sha256":"3c641384ad68d3b7ae4bf1887185c4a400830c9eeccb1e8d2f99075404bc7820","sha512":"bdeafd6aa5afa46247ea4163d82d2113563f28296f047fad686a8e0c267b545b055fbcbbce13719a8371e8d32e3daa14a576f85aa42a6f7f6069e1891a8c5556","ssdeep":"","tlshash":"24f00cb13a70034ac632f71be2d601917e69c023c041f9a271be90200fc8a274aa0ba7","size":622,"data":"","first_seen":"2023-07-20T08:11:13Z","last_seen":"2026-03-23T00:52:59.160883Z","times_seen":62252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","fqdn":"ww16.vofycot.com","domain":"vofycot.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"978e89b89f929ebbd0a746295eafbcbe","sha1":"6b92ab60432c1e5a8aebc60ebc94f1f24c28cea6","sha256":"848eaac812a5c6ef9f75fc33f2bfbb7169bfea60bc4d4a28a7e77d1737ca42ac","sha512":"c7b6c342a6cc4121c889e38dc07ec85f7b3b1ff7811c0babb5f5abaf39a984424751eb1a7ff400e9bd45f0d49e96be85ff30023dfe9de0b3c0463e1d136e42d1","ssdeep":"96:zQIHrUsXy9Cp1OuKfIqT1M6BXXjgXnB9qPsBJaqJ4uSnx73CUnKVGSrbH:jrUs2nDxQqPJTuIRIESrbH","tlshash":"26c194723145347a4aff0751206f1f14b67ae8533a08b419b028b7e82bebd5744dbb6a","size":5888,"data":"","first_seen":"2024-05-23T11:11:38Z","last_seen":"2026-03-23T00:52:59.161451Z","times_seen":188504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"33839cb72649c81ab58b763c95b4a163","sha1":"0c9b62881e660fded013cee58439ae287690065a","sha256":"cdded269406c9b2b49a3066d12e75913abf338cdd7fa00e31fff299efef1cb76","sha512":"c72011d6bc068615b6a9e4f659c5aeb6c04a889bd4163e4a351d7659c48e715a94002e35637c3e1cb6a9b269271fb43d6b77495000ab1143ee401e2bb68b7357","ssdeep":"","tlshash":"2e218b6e4c50822f6eb63e9e296fba04fb235421e049e1d0c54cf865397df93892d9f4","size":1302,"data":"","first_seen":"2023-04-05T04:36:39Z","last_seen":"2025-03-02T05:25:03.460086Z","times_seen":67768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"ww16.vofycot.com/search/tsc.php?ses=ogcgXOvOaEpzahxDpA484BdS8ocO0WE7OsptnB9VGZi4P4t3p4pSpXnqUM7dvAWm_tEFhB1MsXWW7htmjANthiiUN90jqF2G683R1uvvrpRYvG9-bnIzp9N7F8UeCbMkUbL3njlO6G2rJcUy7wuhvUnyN8yCYBNEsMdbZkjpawnrMPpn6Zgj-q7VhDm-01iEIF1Yn1boMAemompNS5kOivVH7-jV_ynkT9sBuBR6QIhNf9kJFjXZvPZTGyDWmNaVzhMgQvdKyi9OrAhz4Cx7SEuxgXIyy3bBx_ECyeWJbjEHlijxsLCGjvnAXs5pJTM8Y9sQB9FY_eLb9Ss6P7GcAMKJKzAbHUxRMZtcGf9LcnSesLcHsuE3xxyk7x2uQ\u0026cv=2","fqdn":"ww16.vofycot.com","domain":"vofycot.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:02.897Z","timestamp":1739149922897,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww16.vofycot.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sun, 20 Oct 2024 00:00:00 GMT","end":"Mon, 20 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4A:56:20:B6:C0:05:90:6E:51:3D:8C:55:B8:57:05:B8:23:96:EC:19","sha256":"21:6D:15:D1:DA:AB:1D:3F:72:D4:52:E2:39:58:E4:C3:1E:E8:7C:14:ED:69:41:5B:4F:4D:1E:4C:51:0A:F7:4C"}}},"request":{"raw":"GET /search/tsc.php?ses=ogcgXOvOaEpzahxDpA484BdS8ocO0WE7OsptnB9VGZi4P4t3p4pSpXnqUM7dvAWm_tEFhB1MsXWW7htmjANthiiUN90jqF2G683R1uvvrpRYvG9-bnIzp9N7F8UeCbMkUbL3njlO6G2rJcUy7wuhvUnyN8yCYBNEsMdbZkjpawnrMPpn6Zgj-q7VhDm-01iEIF1Yn1boMAemompNS5kOivVH7-jV_ynkT9sBuBR6QIhNf9kJFjXZvPZTGyDWmNaVzhMgQvdKyi9OrAhz4Cx7SEuxgXIyy3bBx_ECyeWJbjEHlijxsLCGjvnAXs5pJTM8Y9sQB9FY_eLb9Ss6P7GcAMKJKzAbHUxRMZtcGf9LcnSesLcHsuE3xxyk7x2uQ\u0026cv=2 HTTP/1.1\r\nHost: ww16.vofycot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 10 Feb 2025 01:12:02 GMT\r\nserver: Parking/1.0\r\nx-cache-miss-from: parking-759f8f6b6-4jp88\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-09","alert":"Sinkholed","trigger":"vofycot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:02.882Z","timestamp":1739149922882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:39:11 GMT","end":"Mon, 14 Apr 2025 08:39:10 GMT"},"fingerprint":{"sha1":"6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78","sha256":"8D:DB:28:E6:A9:A7:95:8D:E4:4E:8D:22:1E:E2:61:9B:A8:68:5D:8D:88:9D:8C:78:5C:CC:EC:0C:34:25:27:27"}}},"request":{"raw":"GET /afs/ads/i/iframe.html HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ncontent-security-policy: script-src 'nonce-Sp8Gu7ogcFClBKoLUG2j5g' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ncontent-length: 728\r\ndate: Mon, 10 Feb 2025 01:12:02 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlast-modified: Tue, 17 Sep 2024 06:00:00 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":728,"size_decoded":1560,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1559)","md5":"86eb9bb837c84d2c9fa6e05ff4106700","sha1":"a6339f9967d96c3341f2b67d8b30e31ee005e0f5","sha256":"1f9244f24e0858ae105d9155db8791145cd49b06fd732fd571d04ffd3e6f5bf7","sha512":"8d8009a017936fc1ccebbd1c5e17d1783d9ba78ff82bdf2f3069c8f8e088243cda4296f55d7f771e28cf70295a56c2539a4c6279b1c5af127ca8e4aa2754ce11","ssdeep":"","tlshash":"a331b1ae4c50812f6e723d9d2d9bb604fa135414e445d5c0c58cf8693979fc7882a9f4","first_seen":"2025-02-10T01:12:33.441713Z","last_seen":"2025-02-10T01:12:33.441713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":90,"dns":1,"connect":20,"send":0,"wait":32,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"img.sedoparking.com/templates/logos/sedo_logo.png","fqdn":"img.sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:02.942Z","timestamp":1739149922942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cachefly.net","organization":"Cachenetworks, LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Nov 2024 20:01:06 GMT","end":"Sun, 14 Dec 2025 20:01:05 GMT"},"fingerprint":{"sha1":"E3:21:BF:A0:AC:70:6E:19:F1:83:A3:CB:83:F9:6F:0F:E0:46:F1:3C","sha256":"0D:FF:60:D6:18:60:C6:38:90:5D:DD:55:2E:87:EE:3A:E5:96:78:0B:5F:68:E8:88:AD:AE:1A:BF:51:59:94:83"}}},"request":{"raw":"GET /templates/logos/sedo_logo.png HTTP/1.1\r\nHost: img.sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 10 Feb 2025 01:12:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 15086\r\naccess-control-allow-origin: *\r\ncache-control: max-age=604800\r\nexpires: Mon, 17 Feb 2025 01:12:03 GMT\r\nx-cfhash: \"def00c11b1596db4efee6a9fbe64fc27\"\r\nx-cff: B\r\nlast-modified: Mon, 11 Jan 2021 07:44:34 GMT\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1729867994\r\ncf4ttl: 31536000.000\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf-reqid: 8326a56a99ea9ede09d6c60c012c1f3f\r\nx-cf1: 11696:fD.arn1:cf:nom:cacheN.arn1-01:H\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15086,"size_decoded":15086,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"def00c11b1596db4efee6a9fbe64fc27","sha1":"bd298981e6d8d7e4ffa18abcf687041f4246672d","sha256":"95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4","sha512":"c056e95dbfa1aab3a50dff18c6d577dbffea72c93316ffc53b6b7aa41dcc7707a810d563894589a7305de0b76610f88150b2034670de368773b2b356f14ad30f","ssdeep":"192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j","tlshash":"31623e0bfd4bc358ce50b23ae67c4bfb6361d8c1b090a7e257d9d51aafa7b014c9a011","first_seen":"2023-04-14T07:11:21Z","last_seen":"2026-04-03T23:31:33.381881Z","times_seen":219736,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":20,"send":0,"wait":22,"receive":1,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=exp-0051%2Cauxa-control-1%2C10450790\u0026client=dp-sedo85_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww16.vofycot.com%2Fcaf%2F%3Fses%3DY3JlPTE3MzkxNDk5MjImdGNpZD13dzE2LnZvZnljb3QuY29tNjdhOTUyNjI2MjAzNTQuMjYyNjc4ODcmdGFzaz1zZWFyY2gmZG9tYWluPXZvZnljb3QuY29tJmFfaWQ9MyZzZXNzaW9uPXpZRnNlOEk1a3lpUEw4dDVXWlVi\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2106557024922479\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301551%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=1181739149922867\u0026num=0\u0026output=afd_ads\u0026domain_name=ww16.vofycot.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1739149922881\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=723063605\u0026rurl=https%3A%2F%2Fww16.vofycot.com%2Flogin.php%3Fsub1%3D20250210-1159-352a-9c45-a5b69ed36237","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:02.894Z","timestamp":1739149922894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:39:11 GMT","end":"Mon, 14 Apr 2025 08:39:10 GMT"},"fingerprint":{"sha1":"6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78","sha256":"8D:DB:28:E6:A9:A7:95:8D:E4:4E:8D:22:1E:E2:61:9B:A8:68:5D:8D:88:9D:8C:78:5C:CC:EC:0C:34:25:27:27"}}},"request":{"raw":"GET /afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=exp-0051%2Cauxa-control-1%2C10450790\u0026client=dp-sedo85_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww16.vofycot.com%2Fcaf%2F%3Fses%3DY3JlPTE3MzkxNDk5MjImdGNpZD13dzE2LnZvZnljb3QuY29tNjdhOTUyNjI2MjAzNTQuMjYyNjc4ODcmdGFzaz1zZWFyY2gmZG9tYWluPXZvZnljb3QuY29tJmFfaWQ9MyZzZXNzaW9uPXpZRnNlOEk1a3lpUEw4dDVXWlVi\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2106557024922479\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301551%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=1181739149922867\u0026num=0\u0026output=afd_ads\u0026domain_name=ww16.vofycot.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1739149922881\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=723063605\u0026rurl=https%3A%2F%2Fww16.vofycot.com%2Flogin.php%3Fsub1%3D20250210-1159-352a-9c45-a5b69ed36237 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Mon, 10 Feb 2025 01:12:03 GMT\r\nexpires: Mon, 10 Feb 2025 01:12:03 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-LYwnodiBRxaFEkH7fpHc7Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3036\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3036,"size_decoded":14460,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13676)","md5":"eaf98a774b5d2c4ff755dec11d31faee","sha1":"9d2d2c8f18a86019a0d406ecefb10cd299cfe0c9","sha256":"f1bf8418fe66ee90930c7a0517ba9b9b48903655d66492a9774499572779a72a","sha512":"eb34066228c56b94972839cad7782c51884b7d91e5c7929666bd3b2855191721fff3d37c1b4bee5a19f6974ef5eb0e8196f1126ed8b1cd55abe984a4266d8fc5","ssdeep":"192:GE12iMpgbamHMDnBh7VJWrLrr/rr57sCrrX6fH3nkM:Gni0kMz7jgnnf+HXkM","tlshash":"695255376462271d5903dc54172a6f6dd185d43ac86b32f848a35f25c7ebf828be228e","first_seen":"2025-02-10T01:12:33.446583Z","last_seen":"2025-02-10T01:12:33.446583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":84,"dns":0,"connect":20,"send":0,"wait":84,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=exp-0051%2Cauxa-control-1%2C10450790\u0026client=dp-sedo85_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww16.vofycot.com%2Fcaf%2F%3Fses%3DY3JlPTE3MzkxNDk5MjImdGNpZD13dzE2LnZvZnljb3QuY29tNjdhOTUyNjI2MjAzNTQuMjYyNjc4ODcmdGFzaz1zZWFyY2gmZG9tYWluPXZvZnljb3QuY29tJmFfaWQ9MyZzZXNzaW9uPXpZRnNlOEk1a3lpUEw4dDVXWlVi\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2106557024922479\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301551%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=1181739149922867\u0026num=0\u0026output=afd_ads\u0026domain_name=ww16.vofycot.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1739149922881\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=723063605\u0026rurl=https%3A%2F%2Fww16.vofycot.com%2Flogin.php%3Fsub1%3D20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:03.313Z","timestamp":1739149923313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:37:02 GMT","end":"Mon, 14 Apr 2025 08:37:01 GMT"},"fingerprint":{"sha1":"C8:CC:73:3C:09:B6:EA:83:B3:FA:9E:8C:00:A3:C5:10:94:1A:0A:E7","sha256":"22:C7:41:B4:B4:B3:92:CB:F4:E8:99:DB:2B:4F:23:83:C0:D4:75:10:B6:CE:A1:2A:56:07:31:B6:84:3C:EE:79"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Feb 2025 14:57:41 GMT\r\nexpires: Mon, 10 Feb 2025 13:57:41 GMT\r\ncache-control: public, max-age=82800\r\nage: 36862\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-01-21T15:14:27.461955Z","times_seen":243741,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":51,"dns":1,"connect":9,"send":0,"wait":8,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=exp-0051%2Cauxa-control-1%2C10450790\u0026client=dp-sedo85_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww16.vofycot.com%2Fcaf%2F%3Fses%3DY3JlPTE3MzkxNDk5MjImdGNpZD13dzE2LnZvZnljb3QuY29tNjdhOTUyNjI2MjAzNTQuMjYyNjc4ODcmdGFzaz1zZWFyY2gmZG9tYWluPXZvZnljb3QuY29tJmFfaWQ9MyZzZXNzaW9uPXpZRnNlOEk1a3lpUEw4dDVXWlVi\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2106557024922479\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301551%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=1181739149922867\u0026num=0\u0026output=afd_ads\u0026domain_name=ww16.vofycot.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1739149922881\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=723063605\u0026rurl=https%3A%2F%2Fww16.vofycot.com%2Flogin.php%3Fsub1%3D20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:03.311Z","timestamp":1739149923311,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:37:02 GMT","end":"Mon, 14 Apr 2025 08:37:01 GMT"},"fingerprint":{"sha1":"C8:CC:73:3C:09:B6:EA:83:B3:FA:9E:8C:00:A3:C5:10:94:1A:0A:E7","sha256":"22:C7:41:B4:B4:B3:92:CB:F4:E8:99:DB:2B:4F:23:83:C0:D4:75:10:B6:CE:A1:2A:56:07:31:B6:84:3C:EE:79"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000 HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 173\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Feb 2025 16:16:16 GMT\r\nexpires: Mon, 10 Feb 2025 15:16:16 GMT\r\ncache-control: public, max-age=82800\r\nage: 32147\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":173,"size_decoded":200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12df2436667e359ab4623080d0a6fed","sha1":"e62f87b1d55545c0836af1cd8d849b41d9ed5f4f","sha256":"245be54e1421d7f071cc82866858258d5be20e08b1ffaeb4d7f59106d1805fd6","sha512":"e73926bbc4f11c6245517744c42e80635951f4ec2352eeebdb07a3a1e808f1cd08db838c54596728f4c1346fb4b6cde76851662bbe16cb6f409f7b274268e152","ssdeep":"","tlshash":"d8d02292c2186d28c51e82f0c37c712a00ea70a2238c00ccfa81a300720c8abb861668","first_seen":"2023-05-09T10:40:20Z","last_seen":"2026-03-01T19:00:52.571164Z","times_seen":68919,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":157,"dns":1,"connect":7,"send":0,"wait":17,"receive":1,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=mu2y92z7i5mv\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026psid=7446205343\u0026pbt=bs\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=27%7C0%7C254%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:04.795Z","timestamp":1739149924795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:39:11 GMT","end":"Mon, 14 Apr 2025 08:39:10 GMT"},"fingerprint":{"sha1":"6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78","sha256":"8D:DB:28:E6:A9:A7:95:8D:E4:4E:8D:22:1E:E2:61:9B:A8:68:5D:8D:88:9D:8C:78:5C:CC:EC:0C:34:25:27:27"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=mu2y92z7i5mv\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026psid=7446205343\u0026pbt=bs\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=27%7C0%7C254%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-X_-FmlUfZVs_RmHC-vxqTQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 10 Feb 2025 01:12:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=jib9jbdir9qp\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026pbt=bs\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=9%7C0%7C272%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:04.798Z","timestamp":1739149924798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:39:11 GMT","end":"Mon, 14 Apr 2025 08:39:10 GMT"},"fingerprint":{"sha1":"6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78","sha256":"8D:DB:28:E6:A9:A7:95:8D:E4:4E:8D:22:1E:E2:61:9B:A8:68:5D:8D:88:9D:8C:78:5C:CC:EC:0C:34:25:27:27"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=jib9jbdir9qp\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026pbt=bs\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=9%7C0%7C272%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-d04DhYnFgNN60Nz8IN3ljQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 10 Feb 2025 01:12:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=o4q6u5vno342\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026psid=7446205343\u0026pbt=bv\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=27%7C0%7C254%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:04.801Z","timestamp":1739149924801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:39:11 GMT","end":"Mon, 14 Apr 2025 08:39:10 GMT"},"fingerprint":{"sha1":"6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78","sha256":"8D:DB:28:E6:A9:A7:95:8D:E4:4E:8D:22:1E:E2:61:9B:A8:68:5D:8D:88:9D:8C:78:5C:CC:EC:0C:34:25:27:27"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=o4q6u5vno342\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026psid=7446205343\u0026pbt=bv\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=27%7C0%7C254%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-rzi6NyFWc9zoiNGLhhMmvQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 10 Feb 2025 01:12:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=y8zdepl6u9vt\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026pbt=bv\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=9%7C0%7C272%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:04.804Z","timestamp":1739149924804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:39:11 GMT","end":"Mon, 14 Apr 2025 08:39:10 GMT"},"fingerprint":{"sha1":"6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78","sha256":"8D:DB:28:E6:A9:A7:95:8D:E4:4E:8D:22:1E:E2:61:9B:A8:68:5D:8D:88:9D:8C:78:5C:CC:EC:0C:34:25:27:27"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo85_3ph\u0026output=uds_ads_only\u0026zx=y8zdepl6u9vt\u0026aqid=Y1KpZ4SLAZuWiM0Pz8zX-Qg\u0026pbt=bv\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo85_3ph\u0026errv=723063605\u0026csala=9%7C0%7C272%7C94%7C54\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-z3jVIrn1r8m9qhZ6t0l8xg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 10 Feb 2025 01:12:04 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:02.655Z","timestamp":1739149922655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:37:54 GMT","end":"Mon, 14 Apr 2025 08:37:53 GMT"},"fingerprint":{"sha1":"A5:8A:8C:6D:C5:D6:86:EA:BD:43:96:00:02:99:B8:C6:97:0C:AF:E5","sha256":"C6:8A:2E:CC:80:45:01:A2:D1:2F:8C:BE:B9:FD:6B:74:AA:00:82:4D:E7:C1:5A:E3:C8:91:BE:1E:8E:60:70:77"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww16.vofycot.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 10 Feb 2025 01:12:02 GMT\r\nexpires: Mon, 10 Feb 2025 01:12:02 GMT\r\ncache-control: private, max-age=3600\r\netag: \"12302214602992962063\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147667,"size_decoded":147667,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1869)","md5":"e305aa2e514306ea4582e558f3bd8f5f","sha1":"3c678c75218cefa8ca1fe6e9c8046a81a8e20fb9","sha256":"b8a498b4f45cb6c24cb9d143b60314b9494faa2f0ed185a61905e8b2fd959efd","sha512":"34f9d6ae763746c7890400864c7ed75e3a066c6d1a75595b891447ff0a4050beda6a93dbc3d75c931ae50bebdc9bdac23147636ea9182224feebcf969c33e3da","ssdeep":"1536:T0zTORbeZ58GKnTi/xJ7UENcG98gUKoJfUUUulZAJcNmgm7JG4GPo38C13nGDUzx:KhjUKoFZMcNEJhR3nltvjcuecL","tlshash":"7be35c9d73a1742253a394b4607f118fb13af955e80888b4f198c8e47cb8da94277fbd","first_seen":"2025-02-05T19:13:22.751246Z","last_seen":"2025-02-10T14:42:13.789833Z","times_seen":148,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":97,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=exp-0051%2Cauxa-control-1%2C10450790\u0026client=dp-sedo85_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww16.vofycot.com%2Fcaf%2F%3Fses%3DY3JlPTE3MzkxNDk5MjImdGNpZD13dzE2LnZvZnljb3QuY29tNjdhOTUyNjI2MjAzNTQuMjYyNjc4ODcmdGFzaz1zZWFyY2gmZG9tYWluPXZvZnljb3QuY29tJmFfaWQ9MyZzZXNzaW9uPXpZRnNlOEk1a3lpUEw4dDVXWlVi\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2106557024922479\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301551%2C17301266%2C72717108\u0026format=r3%7Cs\u0026nocache=1181739149922867\u0026num=0\u0026output=afd_ads\u0026domain_name=ww16.vofycot.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1739149922881\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=723063605\u0026rurl=https%3A%2F%2Fww16.vofycot.com%2Flogin.php%3Fsub1%3D20250210-1159-352a-9c45-a5b69ed36237","date":"2025-02-10T01:12:03.133Z","timestamp":1739149923133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:39:11 GMT","end":"Mon, 14 Apr 2025 08:39:10 GMT"},"fingerprint":{"sha1":"6D:8B:07:25:0C:73:EC:EB:BF:91:8D:F7:B8:4A:42:DB:1B:58:03:78","sha256":"8D:DB:28:E6:A9:A7:95:8D:E4:4E:8D:22:1E:E2:61:9B:A8:68:5D:8D:88:9D:8C:78:5C:CC:EC:0C:34:25:27:27"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 10 Feb 2025 01:12:03 GMT\r\nexpires: Mon, 10 Feb 2025 01:12:03 GMT\r\ncache-control: private, max-age=3600\r\netag: \"8454831521319196121\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147662,"size_decoded":147662,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1869)","md5":"d597509b789819046e671c21618a708d","sha1":"755e2a50b0cfb447b9b993b7a15e88d7e9939507","sha256":"4157d0b49edcde477ca9db61347efed9ae3c77afde7da4d69e921f7d8925c661","sha512":"25c9804dd9b499d9b73aeb4baf3f0ff371d1710d1242ded0fdd9fb5263cba20b3d89e2a9c948b8ff00494feecaf1c7ff6329db8c157a43260ba3c46fe2b9cce8","ssdeep":"1536:g0zTORbeZ58GKnTi/xJ7UENcG98gUKoJfUUUulZAJcNmgm7JG4GPo38C13nGDUzx:LhjUKoFZMcNEJhR3nltvjcuecL","tlshash":"4ee35c9d73a1742253a394b4607f118fb13af955e80888b4f198c8e47cb8da94277fbd","first_seen":"2025-02-05T20:58:35.276826Z","last_seen":"2025-02-10T14:37:57.379563Z","times_seen":113,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww16.vofycot.com/login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237","fqdn":"ww16.vofycot.com","domain":"vofycot.com","tld":"com"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-10T01:12:02.022Z","timestamp":1739149922022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww16.vofycot.com","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Sun, 20 Oct 2024 00:00:00 GMT","end":"Mon, 20 Oct 2025 23:59:59 GMT"},"fingerprint":{"sha1":"4A:56:20:B6:C0:05:90:6E:51:3D:8C:55:B8:57:05:B8:23:96:EC:19","sha256":"21:6D:15:D1:DA:AB:1D:3F:72:D4:52:E2:39:58:E4:C3:1E:E8:7C:14:ED:69:41:5B:4F:4D:1E:4C:51:0A:F7:4C"}}},"request":{"raw":"GET /login.php?sub1=20250210-1159-352a-9c45-a5b69ed36237 HTTP/1.1\r\nHost: ww16.vofycot.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Mon, 10 Feb 2025 01:12:02 GMT\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Mon, 10 Feb 2025 01:12:02 GMT\r\npragma: no-cache\r\nserver: Parking/1.0\r\nvary: Accept-Encoding\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_vpGp+3v3Fm7mDOb7yCw4znczk60NoZSw68UxQAJHEo0U9xKeD20Ruvhp6Qhq6Xt9xMpEAMLaMFNEMmcYoQfq5g==\r\nx-cache-miss-from: parking-759f8f6b6-ml6gx\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25314,"size_decoded":25314,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T23:31:02.874036Z","times_seen":13307549,"resource_available":true,"data":null}},"time_used":620,"timings":{"blocked":202,"dns":0,"connect":25,"send":0,"wait":214,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-09","alert":"Sinkholed","trigger":"vofycot.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}