{"report_id":"8df528de-0314-4b74-8b4b-f1d084d03db0","version":6,"status":"done","tags":[],"date":"2025-07-29T14:40:17Z","url":{"schema":"https","addr":"deficentraldex.live/","fqdn":"deficentraldex.live","domain":"deficentraldex.live","tld":"live"},"ip":{"addr":"172.67.135.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.google.com/?b=t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"title":"Google"},"submit":{"url":{"schema":"https","addr":"deficentraldex.live/","fqdn":"deficentraldex.live","domain":"deficentraldex.live","tld":"live"},"ip":{"addr":"172.67.135.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-02T14:40:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-07-29","alert":"Sinkholed","trigger":"deficentraldex.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-23T15:13:02.646313Z","alert_count":0,"request_count":6,"received_data":574734,"sent_data":5391,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"ssl.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-07-24T00:16:08.50623Z","alert_count":0,"request_count":1,"received_data":20013,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"clients1.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":415,"first_seen":"2013-02-01T13:08:37Z","last_seen":"2025-07-28T23:31:26.221045Z","alert_count":0,"request_count":1,"received_data":202,"sent_data":875,"comment":"","tags":null,"fingerprints":null},{"fqdn":"deficentraldex.live","ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":32675,"sent_data":497,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-29","alert":"Sinkholed","trigger":"deficentraldex.live","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.mhp.en.1eoDbz6uO-k.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAACAAAAAAAAAAQAAAAEIAAAQgRAABAAAAAAAAAAIAAAYAcEAAgAAAAAAAAAcAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAACAAwAAAAADIAAMCAAAAAAA4CAUAAQAAAAAAIB4BA/d=1/ed=1/dg=3/br=1/rs=ACT90oH85HcmHNmBU2LCJr4YmfPKdtZoww/m=sb_mobh,hjsa,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fdca2222b41c5d09abc27ce904862a2","sha1":"9519b3a228786a4ba76f1280c11d588f06df377e","sha256":"6b0a6496ed1af2b330640ff9fc4dcadb6357336da79950b01a4d95a3bfc8e63f","sha512":"67e458473e922dedd5ca340ad150dfcfde20f40d2c80284ebf7d326d845b364329a70044b355d4e58fef5e9c4ae126f2fad8d6d6a4e2c7a11540c5a42ca8169a","ssdeep":"3072:+x/9R/+Il31DNscks8NiBKyLrPcxllpBOQZ1wPMf3iS9XfTMJS8rxf4kg8ZTLcsZ:m/9RbDNP9ex3fipnrxBZHHX7qUnn","tlshash":"f5b4b58d71a2717293b3f4b480ef524bf67be896b84c4c68b145d9d16e7088a407bf78","size":516292,"data":"","first_seen":"2025-07-29T08:24:45.423633Z","last_seen":"2025-07-31T07:16:38.118102Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/?b=t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"be3a8a68f6959e9820e771b4091fee23","sha1":"67d1af92e01fed9c486a077045c6bbd8a0e0787b","sha256":"7d1bd9451a65db34499ffe4288fdaca0577cf122b81aa6f4d8339e00eaea9f1e","sha512":"9716566677428582a82c0ba624d01643864e1226cd7e6bef3ceab5eb94549c587d2c86ef81a2014fb4655244260bb7335eac699085579d7f6fd2a54052a61ed6","ssdeep":"96:2EahOPr3Fu+XS5fH101c0UHQojupFYTHT3bq7Kn:Yhf1ockoSpSTHT3bGKn","tlshash":"e99183df3a65b0b356dae535427f7a09343250671c0c0641a46cc4b25d38fda40bbede","size":4577,"data":"","first_seen":"2025-07-29T14:40:22.177965Z","last_seen":"2025-07-29T14:40:22.177965Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/?b=t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cc29c71870b589f4b76f0ed5d8d033d","sha1":"13e83be224524a18f4e54c95d3fe572a40e95ffa","sha256":"957e29c341ce4b814807b770107d454a1ae7641928df085e752d712376294700","sha512":"0a70c1d9ac729f75da0a838da1b84250a06addcbb4d3c2be45feed1eb8e1a3468b939387624f3c29c5e8aadfb523f71ac6af0949639ff8c65e9fd41f7ccf5fdb","ssdeep":"384:hj/ptmCr0sZ7WQf+WiPtfIt40lMgXQygdyOBBRTt55rt0OwqY6qfZRXv0Ch8KOBI:jtmCr0sZ7Ffe15rt0GYZLhXOBI","tlshash":"1b9233391503edf4fe401e4a4239ae4e3ceda4eb61097ef166d7fc5d4a6883bd205289","size":19446,"data":"","first_seen":"2025-07-29T14:40:22.190696Z","last_seen":"2025-07-29T14:40:22.190696Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.google.com/images/nav_logo229.png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/?b=t","date":"2025-07-29T14:39:56.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /images/nav_logo229.png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/?b=t\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hm4ednBZXPB3m8wSfa9BPli2yz66OMUdgsDf91H98oHDBP076CPVM; __Secure-ENID=28.SE=GnAFk8_ZQhAGEc-eznRPfiJ1mw2FjEDxKnveEQpC64TmVsDEO7GG6yMLTy3nE_OygMv2b-S5DbYz2xqMtFdGuYFuD0sPNQsiTKd0GsmDbgBuJ3wzghdE-NdADEGsK4E1IOg6Kn0CjheacLaNhgzOBZgiiHvWXaC6gR_bebgTwvCWeyoo41PU3R9R_HcdJvyzaR9wPddCUyaVyxDD5S3RU6ocjLesrjg847it1M85TSbECc9AupBlPVZ3ky728B-8DsKnLmQmrFq_rKM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 12263\r\ndate: Tue, 29 Jul 2025 14:39:56 GMT\r\nexpires: Tue, 29 Jul 2025 14:39:56 GMT\r\ncache-control: private, max-age=31536000\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 305, 8-bit/color RGBA, non-interlaced","md5":"1b12cab0347f8728af450fe2457e79c3","sha1":"af13a78470385e8e483c58ddc1a9c21386ea8a03","sha256":"ca858453ce21cabdf9911c6fa3291aa630df344244bc183a4d5ae9972e59f675","sha512":"18edc4d21420a70c4aaa1e7c8c05a35516a95c932a92ef8e86663783f41d0fe661b211fe481fb5f27ea8e1c1e3c3235370d7ecc066886c11ab68d9ebe537538a","ssdeep":"192:2Pfzw1JUnBhEN41ddrLS7Z2HN0uiJm715qyWNDpnsvft8hgSdWjJ:eL1BOGdVLK2yuiJmXqpNNnGYWjJ","tlshash":"3e42d0c75ac6e131efaab619c688dc7b2a0237b752c6917b01021b6d1402e8fedd9353","first_seen":"2023-06-06T01:35:46Z","last_seen":"2026-08-04T06:01:59.55019Z","times_seen":1046,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ssl.gstatic.com/gb/images/m1_122c1d73.png","fqdn":"ssl.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/?b=t","date":"2025-07-29T14:39:56.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /gb/images/m1_122c1d73.png HTTP/1.1\r\nHost: ssl.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 19316\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 24 Jul 2025 20:43:40 GMT\r\nexpires: Fri, 24 Jul 2026 20:43:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 410177\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 242, 8-bit/color RGBA, non-interlaced","md5":"122c1d733aad37942ec924c9df11ffd7","sha1":"1cea3ac06e15ee30e016554e85bf11c01cc7886f","sha256":"347be8cb14509ddd404d9e996ca3740fef5ab048da929484d26f9d1710c27070","sha512":"10b5fe87692bf9ae89478c3fca6498c623ff6068994bb19ef0f9949440a701f67ac240a866d2b4d258da00a9567ef72e699e63a1043f820760351549b5cb6a94","ssdeep":"192:zH3yaWmycsowVgRWp3iSoEQfovwLYOPKVQ8ZJGlx1qRQINY7EEeB3ky+qAqMyIzA:bqm3soxROSgQo8PUXNpzxGwVHfvWkRbh","tlshash":"2482d1e7b845701e904a00fd039fafa89533203351f97de4d4657ed4b19f0eeea9224a","first_seen":"2025-07-15T09:53:17.468054Z","last_seen":"2026-08-04T06:01:59.549608Z","times_seen":1021,"resource_available":false,"data":null}},"time_used":680,"timings":{"blocked":327,"dns":2,"connect":15,"send":0,"wait":15,"receive":4,"ssl":313},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.mhp.en.1eoDbz6uO-k.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAACAAAAAAAAAAQAAAAEIAAAQgRAABAAAAAAAAAAIAAAYAcEAAgAAAAAAAAAcAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAACAAwAAAAADIAAMCAAAAAAA4CAUAAQAAAAAAIB4BA/d=1/ed=1/dg=3/br=1/rs=ACT90oH85HcmHNmBU2LCJr4YmfPKdtZoww/m=sb_mobh,hjsa,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/?b=t","date":"2025-07-29T14:39:57.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.mhp.en.1eoDbz6uO-k.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAACAAAAAAAAAAQAAAAEIAAAQgRAABAAAAAAAAAAIAAAYAcEAAgAAAAAAAAAcAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAAACAAwAAAAADIAAMCAAAAAAA4CAUAAQAAAAAAIB4BA/d=1/ed=1/dg=3/br=1/rs=ACT90oH85HcmHNmBU2LCJr4YmfPKdtZoww/m=sb_mobh,hjsa,d,csi HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/?b=t\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hm4ednBZXPB3m8wSfa9BPli2yz66OMUdgsDf91H98oHDBP076CPVM; __Secure-ENID=28.SE=GnAFk8_ZQhAGEc-eznRPfiJ1mw2FjEDxKnveEQpC64TmVsDEO7GG6yMLTy3nE_OygMv2b-S5DbYz2xqMtFdGuYFuD0sPNQsiTKd0GsmDbgBuJ3wzghdE-NdADEGsK4E1IOg6Kn0CjheacLaNhgzOBZgiiHvWXaC6gR_bebgTwvCWeyoo41PU3R9R_HcdJvyzaR9wPddCUyaVyxDD5S3RU6ocjLesrjg847it1M85TSbECc9AupBlPVZ3ky728B-8DsKnLmQmrFq_rKM\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 170007\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Jul 2025 14:04:31 GMT\r\nexpires: Wed, 29 Jul 2026 14:04:31 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Tue, 29 Jul 2025 06:46:03 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 2126\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":516292,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (565)","md5":"7fdca2222b41c5d09abc27ce904862a2","sha1":"9519b3a228786a4ba76f1280c11d588f06df377e","sha256":"6b0a6496ed1af2b330640ff9fc4dcadb6357336da79950b01a4d95a3bfc8e63f","sha512":"67e458473e922dedd5ca340ad150dfcfde20f40d2c80284ebf7d326d845b364329a70044b355d4e58fef5e9c4ae126f2fad8d6d6a4e2c7a11540c5a42ca8169a","ssdeep":"3072:+x/9R/+Il31DNscks8NiBKyLrPcxllpBOQZ1wPMf3iS9XfTMJS8rxf4kg8ZTLcsZ:m/9RbDNP9ex3fipnrxBZHHX7qUnn","tlshash":"f5b4b58d71a2717293b3f4b480ef524bf67be896b84c4c68b145d9d16e7088a407bf78","first_seen":"2025-07-29T08:24:45.423633Z","last_seen":"2025-07-31T07:16:38.118102Z","times_seen":36,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/favicon.ico","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/?b=t","date":"2025-07-29T14:39:57.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/?b=t\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hm4ednBZXPB3m8wSfa9BPli2yz66OMUdgsDf91H98oHDBP076CPVM; __Secure-ENID=28.SE=GnAFk8_ZQhAGEc-eznRPfiJ1mw2FjEDxKnveEQpC64TmVsDEO7GG6yMLTy3nE_OygMv2b-S5DbYz2xqMtFdGuYFuD0sPNQsiTKd0GsmDbgBuJ3wzghdE-NdADEGsK4E1IOg6Kn0CjheacLaNhgzOBZgiiHvWXaC6gR_bebgTwvCWeyoo41PU3R9R_HcdJvyzaR9wPddCUyaVyxDD5S3RU6ocjLesrjg847it1M85TSbECc9AupBlPVZ3ky728B-8DsKnLmQmrFq_rKM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1494\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 27 Jul 2025 17:54:04 GMT\r\nexpires: Mon, 04 Aug 2025 17:54:04 GMT\r\ncache-control: public, max-age=691200\r\nage: 161153\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"f3418a443e7d841097c714d69ec4bcb8","sha1":"49263695f6b0cdd72f45cf1b775e660fdc36c606","sha256":"6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770","sha512":"82d017c4b7ec8e0c46e8b75da0ca6a52fd8bce7fcf4e556cbdf16b49fc81be9953fe7e25a05f63ecd41c7272e8bb0a9fd9aedf0ac06cb6032330b096b3702563","ssdeep":"48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B","tlshash":"65b1b8b7e6c63030c85805bc49373a6d1e1b6ee31a9cf064fecc326a1a320d175256be","first_seen":"2023-04-05T04:39:39Z","last_seen":"2026-08-06T11:47:21.940621Z","times_seen":85526,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clients1.google.com/generate_204","fqdn":"clients1.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/?b=t","date":"2025-07-29T14:39:57.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /generate_204 HTTP/1.1\r\nHost: clients1.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hm4ednBZXPB3m8wSfa9BPli2yz66OMUdgsDf91H98oHDBP076CPVM; __Secure-ENID=28.SE=GnAFk8_ZQhAGEc-eznRPfiJ1mw2FjEDxKnveEQpC64TmVsDEO7GG6yMLTy3nE_OygMv2b-S5DbYz2xqMtFdGuYFuD0sPNQsiTKd0GsmDbgBuJ3wzghdE-NdADEGsK4E1IOg6Kn0CjheacLaNhgzOBZgiiHvWXaC6gR_bebgTwvCWeyoo41PU3R9R_HcdJvyzaR9wPddCUyaVyxDD5S3RU6ocjLesrjg847it1M85TSbECc9AupBlPVZ3ky728B-8DsKnLmQmrFq_rKM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ncontent-length: 0\r\ncross-origin-resource-policy: cross-origin\r\ndate: Tue, 29 Jul 2025 14:39:57 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T11:49:18.179709Z","times_seen":17741993,"resource_available":true,"data":null}},"time_used":310,"timings":{"blocked":147,"dns":12,"connect":17,"send":0,"wait":15,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deficentraldex.live/","fqdn":"deficentraldex.live","domain":"deficentraldex.live","tld":"live"},"ip":{"addr":"172.67.135.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-29T14:39:55.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deficentraldex.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 22 Jul 2025 18:44:35 GMT","end":"Mon, 20 Oct 2025 19:42:04 GMT"},"fingerprint":{"sha1":"89:F1:9F:83:3F:FF:32:E0:52:0D:AE:E7:B9:4E:25:01:22:AB:B0:25","sha256":"C8:01:F5:05:1F:A4:07:AD:D7:B0:D4:DE:04:70:C3:22:F1:C7:04:DF:E4:15:A2:B9:D8:4D:AA:32:BC:3E:45:D2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deficentraldex.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 29 Jul 2025 14:39:56 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlocation: https://www.google.com/?b=t\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nvary: Accept\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T30xs3rTSH6q%2FgxpZ2ixFWd9MXk3nzYuRrLbxyYy6toaxFV0AKmZNVDrG8DUWHMnotTc1JmxHApGfNPeGMpk3ZRcxK5W76kedcOCgqUnF023\"}]}\r\ncf-ray: 966d5e56eaac6dee-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":32007,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T11:49:18.179709Z","times_seen":17741993,"resource_available":true,"data":null}},"time_used":621,"timings":{"blocked":77,"dns":1,"connect":26,"send":0,"wait":466,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-29","alert":"Sinkholed","trigger":"deficentraldex.live","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/branding/searchlogo/1x/googlelogo_tablet_tier1_hp_color_183x64dp.png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/?b=t","date":"2025-07-29T14:39:56.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /images/branding/searchlogo/1x/googlelogo_tablet_tier1_hp_color_183x64dp.png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/?b=t\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hm4ednBZXPB3m8wSfa9BPli2yz66OMUdgsDf91H98oHDBP076CPVM; __Secure-ENID=28.SE=GnAFk8_ZQhAGEc-eznRPfiJ1mw2FjEDxKnveEQpC64TmVsDEO7GG6yMLTy3nE_OygMv2b-S5DbYz2xqMtFdGuYFuD0sPNQsiTKd0GsmDbgBuJ3wzghdE-NdADEGsK4E1IOg6Kn0CjheacLaNhgzOBZgiiHvWXaC6gR_bebgTwvCWeyoo41PU3R9R_HcdJvyzaR9wPddCUyaVyxDD5S3RU6ocjLesrjg847it1M85TSbECc9AupBlPVZ3ky728B-8DsKnLmQmrFq_rKM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/png\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 4204\r\ndate: Tue, 29 Jul 2025 14:39:56 GMT\r\nexpires: Tue, 29 Jul 2025 14:39:56 GMT\r\ncache-control: private, max-age=31536000\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4204,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 64, 8-bit/color RGBA, non-interlaced","md5":"1ba03736f07cda98c5f553e1cec29888","sha1":"186866b33fbc15a68a7967ddd4f7435653f00c63","sha256":"7ef811fa3a2a8c4ad70de52a6c42438bfa9e68a1f9e324a10dfa4f576c6ab72c","sha512":"abc3da1529781c08bc144ac5c44aeb27808f0406d2573aa3ca57be8783e0825787bf1c9894ac5cfe804099a0dff4ccd1567069f6572591525e43b1745a10b82b","ssdeep":"96:QSW6t2Wfgya2fBYObLOabRXMt94wsdLXRdvERnoYcv5x2/3z:QSW/W4yaT+m94pRdvE3iHmj","tlshash":"16817d80128db28cbf6682af7803e346c7476d33122ba495663e4dad5af93a91114705","first_seen":"2025-07-15T09:53:17.469975Z","last_seen":"2026-08-04T06:01:59.549016Z","times_seen":1021,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=PN2IaJWpJaWE7NYP0s-F4Qo\u0026zx=1753799997774\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/?b=t","date":"2025-07-29T14:39:57.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=PN2IaJWpJaWE7NYP0s-F4Qo\u0026zx=1753799997774\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/?b=t\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hm4ednBZXPB3m8wSfa9BPli2yz66OMUdgsDf91H98oHDBP076CPVM; __Secure-ENID=28.SE=GnAFk8_ZQhAGEc-eznRPfiJ1mw2FjEDxKnveEQpC64TmVsDEO7GG6yMLTy3nE_OygMv2b-S5DbYz2xqMtFdGuYFuD0sPNQsiTKd0GsmDbgBuJ3wzghdE-NdADEGsK4E1IOg6Kn0CjheacLaNhgzOBZgiiHvWXaC6gR_bebgTwvCWeyoo41PU3R9R_HcdJvyzaR9wPddCUyaVyxDD5S3RU6ocjLesrjg847it1M85TSbECc9AupBlPVZ3ky728B-8DsKnLmQmrFq_rKM\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-bdZBhhpCfnKywxVvKJqF6Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ndate: Tue, 29 Jul 2025 14:39:57 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T11:49:18.179709Z","times_seen":17741993,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/?b=t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-07-29T14:39:56.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"GET /?b=t HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-hthGw43B7Bz7j7fFtcaXgw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: gzip\r\ndate: Tue, 29 Jul 2025 14:39:56 GMT\r\nserver: gws\r\ncontent-length: 10449\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nexpires: Tue, 29 Jul 2025 14:39:56 GMT\r\ncache-control: private\r\nset-cookie: AEC=AVh_V2hm4ednBZXPB3m8wSfa9BPli2yz66OMUdgsDf91H98oHDBP076CPVM; expires=Sun, 25-Jan-2026 14:39:56 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=28.SE=GnAFk8_ZQhAGEc-eznRPfiJ1mw2FjEDxKnveEQpC64TmVsDEO7GG6yMLTy3nE_OygMv2b-S5DbYz2xqMtFdGuYFuD0sPNQsiTKd0GsmDbgBuJ3wzghdE-NdADEGsK4E1IOg6Kn0CjheacLaNhgzOBZgiiHvWXaC6gR_bebgTwvCWeyoo41PU3R9R_HcdJvyzaR9wPddCUyaVyxDD5S3RU6ocjLesrjg847it1M85TSbECc9AupBlPVZ3ky728B-8DsKnLmQmrFq_rKM; expires=Sat, 29-Aug-2026 06:58:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":32007,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16231)","md5":"3369ebf90722ec333533a2e55160baba","sha1":"f9622e291af9890ada1eb30aa437f639be401135","sha256":"88f645832a1a52890112d06f87dee5955b39859d9c2c5ba155abc7f7568cdc50","sha512":"8056d06bcd363b299a18ab48e23084e0a473c00649b80d5f872343ace7fa3bf40a22b70e4657301c4d72c8779aad2ba46f1794c655b562c90f761aa8223f0868","ssdeep":"768:EVU8f1ocUzCe7YbtmCr0sZ7Ffe15rt0GYZLhXOBK:IJof+ecURec5rt0bZFXOI","tlshash":"a2e2e7366142ecf4fe818d16423a7e4e3cbd90e751092fb1a2d7f89d4d68c7ad1162c9","first_seen":"2025-07-29T14:40:22.164131Z","last_seen":"2025-07-29T14:40:22.164131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":133,"dns":1,"connect":27,"send":0,"wait":92,"receive":9,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}