{"report_id":"904c3e59-88c6-41c2-b803-3f9ab29f3a63","version":6,"status":"done","tags":[],"date":"2023-08-11T01:15:28Z","url":{"schema":"http","addr":"jbcams.top/","fqdn":"jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"103.224.182.253","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"http","addr":"ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"title":"Jbcams.top"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-30T09:31:53Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"jbcams.top","ip":{"addr":"103.224.182.253","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"domain_registered":"2022-08-12","domain_rank":0,"first_seen":"2020-11-22 18:38:56","last_seen":"2023-05-10 05:52:03","alert_count":0,"request_count":1,"received_data":326,"sent_data":467,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww25.jbcams.top","ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-08-12","domain_rank":0,"first_seen":"2022-10-17 09:13:17","last_seen":"2023-07-27 21:38:08","alert_count":1,"request_count":6,"received_data":74224,"sent_data":2888,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-08-10 18:12:01","alert_count":0,"request_count":4,"received_data":2800,"sent_data":1332,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-08-08 17:43:10","alert_count":0,"request_count":4,"received_data":62431,"sent_data":3133,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2023-08-10 20:01:27","alert_count":0,"request_count":2,"received_data":2094,"sent_data":981,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-08-11T01:15:07Z","timestamp":1691716507,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":42770,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET DNS Query to a *.top domain - Likely Hostile","source":"{\"timestamp\":\"2023-08-11T01:15:07.200021+0000\",\"flow_id\":1006029711805781,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.215\",\"src_port\":42770,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023883,\"rev\":4,\"signature\":\"ET DNS Query to a *.top domain - Likely Hostile\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2020_09_15\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":47558,\"rrname\":\"jbcams.top\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":81,\"bytes_toclient\":0,\"start\":\"2023-08-11T01:15:07.200021+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-11T01:15:08Z","timestamp":1691716508,"ip_dst":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":51424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"high","alert":"ThreatFox RedLine Stealer botnet C2 traffic (ip:port - confidence level: 100%)","source":"{\"timestamp\":\"2023-08-11T01:15:08.278969+0000\",\"flow_id\":211151524479417,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.215\",\"src_port\":51424,\"dest_ip\":\"199.59.243.224\",\"dest_port\":80,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":91143527,\"rev\":1,\"signature\":\"ThreatFox RedLine Stealer botnet C2 traffic (ip:port - confidence level: 100%)\",\"category\":\"A Network Trojan was detected\",\"severity\":1,\"source\":{\"ip\":\"199.59.243.224\",\"port\":80},\"target\":{\"ip\":\"10.70.215.215\",\"port\":51424},\"metadata\":{\"confidence_level\":[\"100\"],\"first_seen\":[\"2023_07_30\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":74,\"bytes_toclient\":0,\"start\":\"2023-08-11T01:15:08.278969+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-08-11T01:15:08Z","timestamp":1691716508,"ip_dst":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":51424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2023-08-11T01:15:08.483140+0000\",\"flow_id\":211151524479417,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.215\",\"src_port\":51424,\"dest_ip\":\"199.59.243.224\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_08_20\"]}},\"http\":{\"hostname\":\"ww25.jbcams.top\",\"url\":\"/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":790},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":670,\"bytes_toclient\":2064,\"start\":\"2023-08-11T01:15:08.278969+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7bbd3d37e2c7efd7e13dc0af00e8c45","sha1":"f7b5bc081cb315478c403a67ec9770476a14e4e2","sha256":"225640b2380e1a558a5ddfd295000b1b0a3c97c0d50d7e091071e9b44869c0f0","sha512":"bcdf7e55e0ad5af530292590362c835efa8b97ec26ce5d247ebd77a931cdf724f2a0e640d81b8e1cca477af370d31e60b4cd10eccb952755b6447bd33a79b853","ssdeep":"1536:s+9OMDwsRfCPyXTjX5ZXqHyfrToF4u/ThOq5hq6AbG84Z4zCBgIGQtH6gCA2SJBs:bHfpyrR5hq6AbG846C8UVmHdEDc","tlshash":"8be36d9a77613422636350b4603f158fb23af959e84889f4b198d8e47cb8dac1237f7c","size":151566,"data":"","first_seen":"2023-08-09T22:08:48Z","last_seen":"2024-08-21T09:39:35.156936Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fbb249865f50bebc98d63d16c735e431","sha1":"12a6ad72e19e67f941194fbf66f2ab49a83f360f","sha256":"e7909a5ed75db4f0f46a1f6276f9e64a8f92a765f30865dd3a8e732ce855c0e8","sha512":"eee7950de30d0fb1ed9f33d9ff588200ee7e31c11506e09eccad8e3ff3a65e3420ee28bf4901e8620334953a882bd391c3fb3798c9382d403cfbc52c62d316eb","ssdeep":"","tlshash":"eff0a3353874faedd03705854fad09edc3e928400c649c9aebcd0765250009f5079ed7","size":439,"data":"","first_seen":"2024-08-21T09:31:53.864355Z","last_seen":"2024-08-21T09:31:53.864355Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2023-08-11T01:15:08Z","timestamp":1691716508,"ip_dst":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"10.70.215.215","port":51424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2023-08-11T01:15:08.483140+0000\",\"flow_id\":211151524479417,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.215\",\"src_port\":51424,\"dest_ip\":\"199.59.243.224\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_08_20\"]}},\"http\":{\"hostname\":\"ww25.jbcams.top\",\"url\":\"/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":790},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":670,\"bytes_toclient\":2064,\"start\":\"2023-08-11T01:15:08.278969+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/js/parking.2.106.5.js","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ef0d214cbad58830beddd8bffd52c13","sha1":"b6afe664ac6da2b0afccae8fb8782acaa9b7c6c9","sha256":"7128591ce2852ff92fd3ca220b9fdd6e99a901dd2e4164ba264e5a0b9a19965b","sha512":"00f90af848bb7654632fa701f3d9e9fd9a56117173b29ae780833ab64785b736f5a7eb713985e75412610c8051c4715911db44883856709633b20e9759f95413","ssdeep":"1536:6PLRDAfVjJPBnxG0xIEcsIoaGoeWSjAtpUH1nF:ztwMQeSaRF","tlshash":"b063e89c76d2f0b613e3b570903f620bf23969266859c460f226d9d17db494e93a3f2c","size":68406,"data":"","first_seen":"2023-08-11T01:02:25Z","last_seen":"2023-09-26T15:04:48Z","times_seen":7775,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0107855e78092a34127faac931e84d2b","sha1":"bc131b99f7feb1d3df2ea665662fa3d4d907fc98","sha256":"786d934e77b20989edbc9aa64f8835b3285a3df790e0a35c1fc09ee4eeb6c946","sha512":"e316eab0eb15d9ceb3711f2c323ef32a8fd009cf16ac1b0b685451af46d543bdc8fbf666bd518b5705dbfdfe3a4a6889735fcc9e5980690a10d3e6355734df6c","ssdeep":"1536:q+9OMDwsRfCPyXTjX5ZXqHyfrToF4u/ThOq5hq6AbG84Z4zCBgIGQtH6gCA2SJBs:NHfpyrR5hq6AbG846C8UVmHdEDc","tlshash":"f1e36d9a77613422636350b4603f158fb23af959e84885f4b198d8e47cb8dac1277f7c","size":151600,"data":"","first_seen":"2023-08-09T21:08:48Z","last_seen":"2023-08-17T20:31:59Z","times_seen":569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/afs/ads?adtest=off\u0026psid=1014318612\u0026pcsa=false\u0026channel=pid-bodis-gcontrol165%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol405\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.jbcams.top%3Fcaf%26subid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2168508906786538\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301293%2C17301318%2C17301320\u0026format=r3\u0026nocache=9591691716509202\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.jbcams.top\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1691716509203\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1264\u0026psh=79\u0026frm=0\u0026cl=554809168\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=554809168\u0026rurl=http%3A%2F%2Fww25.jbcams.top%2F%3Fsubid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026adbw=master-1%3A1264","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1bb1b53add71406aa7c434fb3581bcd4","sha1":"7773a9110d14ef3d03225b39720b38ab46895781","sha256":"69d0db10bb4f01f5869addab48140dd87ddac63662c4356123884032076a8215","sha512":"bc1d4ca214a47917afa9d50576b88472678b90c429ac0974c3fbf49ac49e3ba3d11d8323f5fd8799d9bd115d91d5bd991365f53382e279a5c04af9f9db3e924e","ssdeep":"","tlshash":"393195e95d220d7380830371aebdff9c2014a071a8427909a4083c4c10bca9b7a2d266","size":1561,"data":"","first_seen":"2024-08-21T09:31:53.866241Z","last_seen":"2024-08-21T09:31:53.866241Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"jbcams.top/","fqdn":"jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"103.224.182.253","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-11T01:15:07.240Z","timestamp":1691716507240,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"winkofaneye.me","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Aug 2023 17:45:23 GMT","end":"Sun, 05 Nov 2023 17:45:22 GMT"},"fingerprint":{"sha1":"CE:80:3A:C8:23:48:D4:07:45:B2:01:25:CF:BF:D7:BA:7F:86:83:2D","sha256":"A6:CF:9C:DE:1A:4D:55:6A:D3:48:E5:C1:17:C3:AE:17:6D:17:33:F1:51:BB:41:54:8D:2D:59:20:B8:BD:86:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: jbcams.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Fri, 11 Aug 2023 01:15:11 GMT\r\nserver: Apache\r\nset-cookie: __tad=1691716511.1470775; expires=Mon, 08-Aug-2033 01:15:11 GMT; Max-Age=315360000\r\nlocation: http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T04:14:25.764975Z","times_seen":17153454,"resource_available":true,"data":null}},"time_used":1249,"timings":{"blocked":529,"dns":0,"connect":165,"send":0,"wait":191,"receive":0,"ssl":362},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-08-11T01:15:07.965Z","timestamp":1691716507965,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /?subid1=20230811-1115-11f0-8c5c-29fc2eef6631 HTTP/1.1\r\nHost: ww25.jbcams.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 11 Aug 2023 01:15:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1166\r\nx-request-id: 66c3af6f-df34-4ae4-a65d-f42357ac4ede\r\ncache-control: no-store, max-age=0\r\naccept-ch: sec-ch-prefers-color-scheme\r\ncritical-ch: sec-ch-prefers-color-scheme\r\nvary: sec-ch-prefers-color-scheme\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_pYs6k9qsKgzaqmqPo2Be8sJGpz/F50SxSe8K8APRz6rrlePgtrB3Jp6N+tsesnW4iyosgjMU5Cy07Cl2s1H3QQ==\r\nset-cookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede; expires=Fri, 11 Aug 2023 01:30:11 GMT; path=/\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1166,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (454)","md5":"3b85def9fbdef9c6a89869abb59e6881","sha1":"f3fb91b976a970b2385dc2912adcca300c9dc151","sha256":"1fcd909770b961aa81b65b1e6d11a5419d32435dd6b9c9277d8243acd5bf8eb8","sha512":"89b5d03acc5cd4b3071fbb45b59241e895f0db0e693d39c10927a196d892a910a84d7dcbc129faa5ed475ce44fccf478c515f8b9087550d9576bc25273364ca9","ssdeep":"","tlshash":"f321ca323861a99a507201854df8511ccd5a26888164acc67fcdd23d55c01d3f06efea","first_seen":"2023-08-11T03:15:32Z","last_seen":"2023-08-11T03:15:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":316,"dns":314,"connect":2,"send":0,"wait":202,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2023-08-11T01:15:08Z","timestamp":1691716508,"ip_dst":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"10.70.215.215","port":51424,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to a *.top domain","source":"{\"timestamp\":\"2023-08-11T01:15:08.483140+0000\",\"flow_id\":211151524479417,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.215\",\"src_port\":51424,\"dest_ip\":\"199.59.243.224\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2023882,\"rev\":5,\"signature\":\"ET INFO HTTP Request to a *.top domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2017_02_07\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_08_20\"]}},\"http\":{\"hostname\":\"ww25.jbcams.top\",\"url\":\"/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":790},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":670,\"bytes_toclient\":2064,\"start\":\"2023-08-11T01:15:08.278969+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/js/parking.2.106.5.js","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:08.720Z","timestamp":1691716508720,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /js/parking.2.106.5.js HTTP/1.1\r\nHost: ww25.jbcams.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\r\nCookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 11 Aug 2023 01:15:11 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 68406\r\nx-request-id: 855934c9-6579-4687-b305-ba1c8507ced1\r\nset-cookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede; expires=Fri, 11 Aug 2023 01:30:12 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":68406,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"3ef0d214cbad58830beddd8bffd52c13","sha1":"b6afe664ac6da2b0afccae8fb8782acaa9b7c6c9","sha256":"7128591ce2852ff92fd3ca220b9fdd6e99a901dd2e4164ba264e5a0b9a19965b","sha512":"00f90af848bb7654632fa701f3d9e9fd9a56117173b29ae780833ab64785b736f5a7eb713985e75412610c8051c4715911db44883856709633b20e9759f95413","ssdeep":"1536:6PLRDAfVjJPBnxG0xIEcsIoaGoeWSjAtpUH1nF:ztwMQeSaRF","tlshash":"b063e89c76d2f0b613e3b570903f620bf23969266859c460f226d9d17db494e93a3f2c","first_seen":"2023-08-11T01:02:25Z","last_seen":"2023-09-26T15:04:48Z","times_seen":7775,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/_fd?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:08.845Z","timestamp":1691716508845,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_fd?subid1=20230811-1115-11f0-8c5c-29fc2eef6631 HTTP/1.1\r\nHost: ww25.jbcams.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\r\nContent-Type: application/json\r\nOrigin: http://ww25.jbcams.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Fri, 11 Aug 2023 01:15:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 2043\r\nx-version: 2.106.5\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede; expires=Fri, 11 Aug 2023 01:30:12 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2043,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (3945), with no line terminators","md5":"7f312b1632c62c71c88dd8a6bd3aa529","sha1":"1109702308884b0861a677cfb2806a47c3ffa452","sha256":"f6c0244b5738e06add92d84d20c66017543a91e3473f466c5cca20f39eec1d32","sha512":"263de4c4df474a2058bc3afb06201f003c996dbb41737be833e6c712c946222cd6659deb1d2cb8202c3c4b606e8eb3990dd64ad18892bd2069bb5896c682f9ef","ssdeep":"","tlshash":"6a81a5fb4d197e9d9722420324ee98ca432d578b28a25487895db2d6ca4a90e37d027e","first_seen":"2023-08-11T03:15:32Z","last_seen":"2023-08-11T03:15:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/px.gif?ch=1\u0026rn=9.534389357358839","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:08.849Z","timestamp":1691716508849,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /px.gif?ch=1\u0026rn=9.534389357358839 HTTP/1.1\r\nHost: ww25.jbcams.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\r\nCookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Fri, 11 Aug 2023 01:15:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nlast-modified: Tue, 18 Jul 2023 15:33:43 GMT\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-11T04:13:21.054903Z","times_seen":981549,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":1,"connect":1,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/px.gif?ch=2\u0026rn=9.534389357358839","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:08.851Z","timestamp":1691716508851,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /px.gif?ch=2\u0026rn=9.534389357358839 HTTP/1.1\r\nHost: ww25.jbcams.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\r\nCookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Fri, 11 Aug 2023 01:15:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 42\r\nlast-modified: Tue, 18 Jul 2023 15:33:43 GMT\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\naccept-ranges: bytes\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1\\012- data","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-07-11T04:13:21.054903Z","times_seen":981549,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-11T01:15:09.120191045Z","timestamp":1691716509120,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 11 Aug 2023 01:15:12 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"a8e2b204999c919e6b6f08df443378b7","sha1":"52ce256321cbc2757aa9ef63f4071bbc07e7f3c0","sha256":"839b077ab969a86ff02579d882e76ed49a205ff434c7f12d89cec89d39352613","sha512":"c46afbb7d142a437e6dc618f74f51a2bfbe0e64ebbe0db873080d71601ff4e3c94e6187f4349321d88098dfb60b0b70b194774f4d6bd1b33a5dfa9fe28cffdd2","ssdeep":"","tlshash":"9df00e4a0c3405298947922d5769a1031300b02806e8140cb8cad2848afb285a60cf3c","first_seen":"2023-08-10T16:34:50Z","last_seen":"2023-08-11T10:47:40Z","times_seen":755,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/afs/ads?adtest=off\u0026psid=1014318612\u0026pcsa=false\u0026channel=pid-bodis-gcontrol165%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol405\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.jbcams.top%3Fcaf%26subid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2168508906786538\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301293%2C17301318%2C17301320\u0026format=r3\u0026nocache=9591691716509202\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.jbcams.top\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1691716509203\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1264\u0026psh=79\u0026frm=0\u0026cl=554809168\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=554809168\u0026rurl=http%3A%2F%2Fww25.jbcams.top%2F%3Fsubid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026adbw=master-1%3A1264","date":"2023-08-11T01:15:09.465Z","timestamp":1691716509465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 10 Jul 2023 08:16:18 GMT","end":"Mon, 02 Oct 2023 08:16:17 GMT"},"fingerprint":{"sha1":"7A:D9:CE:59:01:29:9A:BD:8B:2F:38:C6:15:94:76:52:A8:FB:56:03","sha256":"D9:40:0A:52:95:22:E1:9C:31:EE:57:67:09:E3:51:B1:77:32:54:F9:BF:AC:91:A6:68:C8:93:A6:19:99:D5:FA"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.jbcams.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 11 Aug 2023 01:15:12 GMT\r\nexpires: Fri, 11 Aug 2023 01:15:12 GMT\r\ncache-control: private, max-age=3600\r\netag: \"2182198368958659269\"\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55509,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression\\012- data","md5":"176535a0a39e66f0c882a4454dac4fec","sha1":"4d57ebd6115f2911398ee6205b8c601e02d37ae7","sha256":"e13aff1d350bcf21b0ccf1780f1a3958f1cbfeba9073517ba707fe02e21b07e2","sha512":"c3a18ec6be3bd9b1ab17d54f0685ea957fc75867a428d3de065ba45b4289aba2d81abd20e33a78fb422731530c74be9494060e6be655f65c79778c66d2926681","ssdeep":"1536:aSZk/g+H1D4l2sYWE1GeRbxScEDvlCr6mRYXJ49et/qf:aSZnI1D4l2/eeR2orzgGet/qf","tlshash":"684301502c9e39de4f43f86867b8f6b7b4750c382090b5806adc946b6f237746806f3a","first_seen":"2023-08-10T18:27:03Z","last_seen":"2023-08-11T10:14:47Z","times_seen":29,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/afs/ads?adtest=off\u0026psid=1014318612\u0026pcsa=false\u0026channel=pid-bodis-gcontrol165%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol405\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.jbcams.top%3Fcaf%26subid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2168508906786538\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301293%2C17301318%2C17301320\u0026format=r3\u0026nocache=9591691716509202\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.jbcams.top\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1691716509203\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1264\u0026psh=79\u0026frm=0\u0026cl=554809168\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=554809168\u0026rurl=http%3A%2F%2Fww25.jbcams.top%2F%3Fsubid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026adbw=master-1%3A1264","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:09.219Z","timestamp":1691716509219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 10 Jul 2023 08:16:18 GMT","end":"Mon, 02 Oct 2023 08:16:17 GMT"},"fingerprint":{"sha1":"7A:D9:CE:59:01:29:9A:BD:8B:2F:38:C6:15:94:76:52:A8:FB:56:03","sha256":"D9:40:0A:52:95:22:E1:9C:31:EE:57:67:09:E3:51:B1:77:32:54:F9:BF:AC:91:A6:68:C8:93:A6:19:99:D5:FA"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=1014318612\u0026pcsa=false\u0026channel=pid-bodis-gcontrol165%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol405\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.jbcams.top%3Fcaf%26subid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2168508906786538\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301293%2C17301318%2C17301320\u0026format=r3\u0026nocache=9591691716509202\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.jbcams.top\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1691716509203\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1264\u0026psh=79\u0026frm=0\u0026cl=554809168\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=554809168\u0026rurl=http%3A%2F%2Fww25.jbcams.top%2F%3Fsubid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026adbw=master-1%3A1264 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.jbcams.top/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Fri, 11 Aug 2023 01:15:12 GMT\r\nexpires: Fri, 11 Aug 2023 01:15:12 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-CcS4qovuYn4DKg9NwhXFfA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2969\r\nx-xss-protection: 0\r\nset-cookie: CONSENT=PENDING+923; expires=Sun, 10-Aug-2025 01:15:12 GMT; path=/; domain=.google.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2969,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (13110)","md5":"86d69dfd5b1da5da3539c624672b1694","sha1":"1b1372e47731e126f84c1f50a9cdffbaa420800a","sha256":"b5b618fd1b44acd3431c0612846eb674827c4656c0f85d340e0c5dbbdd4f988e","sha512":"301dfdec13bdcd41bd779b18aabd2ecabc0b84317f774976a06f3f1d08a3261e00458925911379991b15d8eab786b0e2e5b48750b2f0b2f01a9d608fba02d362","ssdeep":"96:GE/yk2iwlb5qHphMzTronSc90IMvm0yEM6vfNCrWfq1MzSw9BEqbSzIMzgw9BvqY:GE12iTHpBn9+m0yEMcf8r1FDkcynZk9","tlshash":"316253377462272a0503dc541b696f6dd181d43ac46f35e848a32f25c7ebf838be628e","first_seen":"2023-08-11T03:15:32Z","last_seen":"2023-08-11T03:15:32Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-11T01:15:09.616730488Z","timestamp":1691716509616,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 11 Aug 2023 01:15:12 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d585e98051d6c3f40b5c78d575cb7d18","sha1":"9ed0a0f11de4a737a8c3455ff27f426ce8e2a39f","sha256":"f4d9eae29cda2d8c8c5c7656a456564861f8e75ba4c9bfc7c0482d6e96246446","sha512":"160d6832fdd2fa9ecb3fad8f71b88dc9cda102cfd443f1009aa01afb20fc5affc4770f30de0c50add451276e9d8f3a6fec5d352652dd6c690748f6ca0ccdd9bc","ssdeep":"","tlshash":"f4f0d4455e6c7126b84904a41df89c732766b5690a3822aca939c7c48b2ece9f1c9d39","first_seen":"2023-08-10T16:37:31Z","last_seen":"2023-08-11T09:15:05Z","times_seen":490,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-11T01:15:09.625831828Z","timestamp":1691716509625,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 11 Aug 2023 01:15:12 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d585e98051d6c3f40b5c78d575cb7d18","sha1":"9ed0a0f11de4a737a8c3455ff27f426ce8e2a39f","sha256":"f4d9eae29cda2d8c8c5c7656a456564861f8e75ba4c9bfc7c0482d6e96246446","sha512":"160d6832fdd2fa9ecb3fad8f71b88dc9cda102cfd443f1009aa01afb20fc5affc4770f30de0c50add451276e9d8f3a6fec5d352652dd6c690748f6ca0ccdd9bc","ssdeep":"","tlshash":"f4f0d4455e6c7126b84904a41df89c732766b5690a3822aca939c7c48b2ece9f1c9d39","first_seen":"2023-08-10T16:37:31Z","last_seen":"2023-08-11T09:15:05Z","times_seen":490,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/afs/ads?adtest=off\u0026psid=1014318612\u0026pcsa=false\u0026channel=pid-bodis-gcontrol165%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol405\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.jbcams.top%3Fcaf%26subid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2168508906786538\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301293%2C17301318%2C17301320\u0026format=r3\u0026nocache=9591691716509202\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.jbcams.top\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1691716509203\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1264\u0026psh=79\u0026frm=0\u0026cl=554809168\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=554809168\u0026rurl=http%3A%2F%2Fww25.jbcams.top%2F%3Fsubid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026adbw=master-1%3A1264","date":"2023-08-11T01:15:09.565Z","timestamp":1691716509565,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 10 Jul 2023 08:20:48 GMT","end":"Mon, 02 Oct 2023 08:20:47 GMT"},"fingerprint":{"sha1":"CA:EC:20:3A:FD:8A:76:1E:0C:99:7C:DB:33:65:0A:87:1A:3D:3E:EB","sha256":"1E:39:C0:8D:03:79:02:A7:39:6D:66:4F:3E:91:37:5D:FF:03:A4:8B:55:47:89:F5:D9:98:5B:54:B1:48:6D:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Aug 2023 07:12:41 GMT\r\nexpires: Fri, 11 Aug 2023 06:12:41 GMT\r\ncache-control: public, max-age=82800\r\nage: 64952\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with no line terminators","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":59,"dns":43,"connect":8,"send":0,"wait":9,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/afs/ads?adtest=off\u0026psid=1014318612\u0026pcsa=false\u0026channel=pid-bodis-gcontrol165%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol405\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.jbcams.top%3Fcaf%26subid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2168508906786538\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301293%2C17301318%2C17301320\u0026format=r3\u0026nocache=9591691716509202\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.jbcams.top\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1691716509203\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1264\u0026psh=79\u0026frm=0\u0026cl=554809168\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=554809168\u0026rurl=http%3A%2F%2Fww25.jbcams.top%2F%3Fsubid1%3D20230811-1115-11f0-8c5c-29fc2eef6631\u0026adbw=master-1%3A1264","date":"2023-08-11T01:15:09.570Z","timestamp":1691716509570,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 10 Jul 2023 08:20:48 GMT","end":"Mon, 02 Oct 2023 08:20:47 GMT"},"fingerprint":{"sha1":"CA:EC:20:3A:FD:8A:76:1E:0C:99:7C:DB:33:65:0A:87:1A:3D:3E:EB","sha256":"1E:39:C0:8D:03:79:02:A7:39:6D:66:4F:3E:91:37:5D:FF:03:A4:8B:55:47:89:F5:D9:98:5B:54:B1:48:6D:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Aug 2023 02:40:29 GMT\r\nexpires: Fri, 11 Aug 2023 01:40:29 GMT\r\ncache-control: public, max-age=82800\r\nage: 81284\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (306)","md5":"fe7dd8c3c629cc6e9cd6d3e4d3cbe905","sha1":"59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18","sha256":"5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e","sha512":"1c663e07978d95c838aed54421a9c725d7311b8c002f436b30555affb26c25f6ebecff6af5c54ef112370a36a5f5aadf611304bffe76a59fb3d206e943cf153f","ssdeep":"","tlshash":"eff055bcd2ad4914a608c7017ef8a5174066f0c563cc01ceee81ac69f0614e43a63ade","first_seen":"2023-04-07T08:14:08Z","last_seen":"2026-06-08T18:18:07.17184Z","times_seen":69566,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":57,"dns":42,"connect":11,"send":0,"wait":9,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.3","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-08-11T01:15:09.831543864Z","timestamp":1691716509831,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Fri, 11 Aug 2023 01:15:13 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"d585e98051d6c3f40b5c78d575cb7d18","sha1":"9ed0a0f11de4a737a8c3455ff27f426ce8e2a39f","sha256":"f4d9eae29cda2d8c8c5c7656a456564861f8e75ba4c9bfc7c0482d6e96246446","sha512":"160d6832fdd2fa9ecb3fad8f71b88dc9cda102cfd443f1009aa01afb20fc5affc4770f30de0c50add451276e9d8f3a6fec5d352652dd6c690748f6ca0ccdd9bc","ssdeep":"","tlshash":"f4f0d4455e6c7126b84904a41df89c732766b5690a3822aca939c7c48b2ece9f1c9d39","first_seen":"2023-08-10T16:37:31Z","last_seen":"2023-08-11T09:15:05Z","times_seen":490,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.jbcams.top/_tr","fqdn":"ww25.jbcams.top","domain":"jbcams.top","tld":"top"},"ip":{"addr":"199.59.243.224","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:09.846Z","timestamp":1691716509846,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww25.jbcams.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631\r\nContent-Type: application/json\r\nContent-Length: 1701\r\nOrigin: http://ww25.jbcams.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Fri, 11 Aug 2023 01:15:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 22\r\nx-version: 2.106.5\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=66c3af6f-df34-4ae4-a65d-f42357ac4ede; expires=Fri, 11 Aug 2023 01:30:13 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-07-11T04:12:56.612043Z","times_seen":435157,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=wa0gqhtvpph7\u0026aqid=oIvVZPPuJqGViM0P4t69yAs\u0026psid=1014318612\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=554809168\u0026csala=7%7C0%7C290%7C55%7C271\u0026lle=0\u0026ifv=1\u0026usr=0\u0026hpt=0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:11.327Z","timestamp":1691716511327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 10 Jul 2023 08:16:18 GMT","end":"Mon, 02 Oct 2023 08:16:17 GMT"},"fingerprint":{"sha1":"7A:D9:CE:59:01:29:9A:BD:8B:2F:38:C6:15:94:76:52:A8:FB:56:03","sha256":"D9:40:0A:52:95:22:E1:9C:31:EE:57:67:09:E3:51:B1:77:32:54:F9:BF:AC:91:A6:68:C8:93:A6:19:99:D5:FA"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=wa0gqhtvpph7\u0026aqid=oIvVZPPuJqGViM0P4t69yAs\u0026psid=1014318612\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=554809168\u0026csala=7%7C0%7C290%7C55%7C271\u0026lle=0\u0026ifv=1\u0026usr=0\u0026hpt=0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.jbcams.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-lSmfOa8FMhnI40koDaHy3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ndate: Fri, 11 Aug 2023 01:15:14 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: NID=511=nai1GU2NDQ0L_28Rn25UyTyXqB9_NpZh5h1Up3gaLuwTA6qqBpmaza_2nPTMr4nqtuKzJtNcRjFu_Qw-ZbfaFWGGgEEdlk0YJR0qTG1mA3XHXCuDT7pLVc1sy-Sttnzbw2iQ7RE3xNyiA4Xpt6RJ7qx1Vy7Xf8NlBFqUbBATflg; expires=Sat, 10-Feb-2024 01:15:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none\nCONSENT=PENDING+680; expires=Sun, 10-Aug-2025 01:15:14 GMT; path=/; domain=.google.com; Secure\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T04:14:25.764975Z","times_seen":17153454,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=lwy2k5h9fdb4\u0026aqid=oIvVZPPuJqGViM0P4t69yAs\u0026psid=1014318612\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=554809168\u0026csala=7%7C0%7C290%7C55%7C271\u0026lle=0\u0026ifv=1\u0026usr=0\u0026hpt=0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.228","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.jbcams.top/?subid1=20230811-1115-11f0-8c5c-29fc2eef6631","date":"2023-08-11T01:15:11.830Z","timestamp":1691716511830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 10 Jul 2023 08:16:18 GMT","end":"Mon, 02 Oct 2023 08:16:17 GMT"},"fingerprint":{"sha1":"7A:D9:CE:59:01:29:9A:BD:8B:2F:38:C6:15:94:76:52:A8:FB:56:03","sha256":"D9:40:0A:52:95:22:E1:9C:31:EE:57:67:09:E3:51:B1:77:32:54:F9:BF:AC:91:A6:68:C8:93:A6:19:99:D5:FA"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=lwy2k5h9fdb4\u0026aqid=oIvVZPPuJqGViM0P4t69yAs\u0026psid=1014318612\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=554809168\u0026csala=7%7C0%7C290%7C55%7C271\u0026lle=0\u0026ifv=1\u0026usr=0\u0026hpt=0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.jbcams.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-a7OUMu-Yo9KspVVd42jJxg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ndate: Fri, 11 Aug 2023 01:15:15 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: NID=511=pkwoIFjxpVsRdOe7y6HK_f20Y-xRRAdRTm4gjJr2Q8_B16LbrT68lvXPkJH754gIF0FNedVYBlB7Ohuulvuwe3hAPPSEqXi4xIs1ntNspbzu4TDS77iJNNgPtw-AKQUKMsK_LHoAT54xkI_n6iXhzDHpZoG1oZsCzBHCkPHNUsQ; expires=Sat, 10-Feb-2024 01:15:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none\nCONSENT=PENDING+384; expires=Sun, 10-Aug-2025 01:15:15 GMT; path=/; domain=.google.com; Secure\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-11T04:14:25.764975Z","times_seen":17153454,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}