{"report_id":"90f42d61-304a-47de-b587-b7cda7552c59","version":6,"status":"done","tags":[],"date":"2023-12-01T20:03:08Z","url":{"schema":"http","addr":"root.teensforcash-pics.biz","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"root.teensforcash-pics.biz/","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"title":"Teensforcash-pics.biz"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:39:49Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":56220,"sent_data":434,"comment":"","tags":null,"fingerprints":null},{"fqdn":"parking3.parklogic.com","ip":{"addr":"45.79.244.209","port":443,"asn":63949,"as":"Linode, LLC","country":"United States","country_code":"US"},"domain_registered":"2007-02-28","domain_rank":0,"first_seen":"2023-05-10 12:50:24","last_seen":"2023-12-01 05:12:23","alert_count":0,"request_count":2,"received_data":49629,"sent_data":952,"comment":"","tags":null,"fingerprints":null},{"fqdn":"root.teensforcash-pics.biz","ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":37432,"sent_data":2185,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2023-12-01 05:10:33","alert_count":0,"request_count":4,"received_data":155709,"sent_data":3153,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2023-12-01 05:10:35","alert_count":0,"request_count":2,"received_data":2094,"sent_data":1033,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-01T20:02:54Z","timestamp":1701460974,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":56272,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .biz TLD","source":"{\"timestamp\":\"2023-12-01T20:02:54.459221+0000\",\"flow_id\":875577333383637,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.125\",\"src_port\":56272,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027863,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .biz TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":46423,\"rrname\":\"root.teensforcash-pics.biz\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":97,\"bytes_toclient\":0,\"start\":\"2023-12-01T20:02:54.459221+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-01T20:02:54Z","timestamp":1701460974,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":41004,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .biz TLD","source":"{\"timestamp\":\"2023-12-01T20:02:54.459426+0000\",\"flow_id\":598036546716322,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.125\",\"src_port\":41004,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027863,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .biz TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":44031,\"rrname\":\"root.teensforcash-pics.biz\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":97,\"bytes_toclient\":0,\"start\":\"2023-12-01T20:02:54.459426+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"295c98d1ef062dc83574af065c768d68","sha1":"8db1bf9d4d203fda081389f9099fae82fce9995a","sha256":"0dcbe293f090c78fd766dca3b924bd45bb58ede279aab98705b8e57b6b189c8f","sha512":"8a632735d19cf81d3c07c8902f6e9f0a5693a229ce2b0777ec7b94201f18a067dc24bb469cd2b74699aa7015cbeeff33bd860926a9baf8ec0fc167b0ccc6b3b1","ssdeep":"1536:HrPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:K2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"afe35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149649,"data":"","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T17:54:00Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parking3.parklogic.com/page/enhance.js?pcId=7\u0026pId=1129\u0026domain=Teensforcash-pics.biz","fqdn":"parking3.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"45.79.244.209","port":443,"asn":63949,"as":"Linode, LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a88f759b845c8e80a65071aed44f83d","sha1":"a5fee7e30a44ae2c6ab9446b69a9622c2c82223c","sha256":"8e9237a6f2b3d655207de3a242580aa399493395763c93dc4789bb42a1295b4c","sha512":"ef8a8cd0ba739262c30a544352e47428d776cd30e5f7187c1e54f3e44af5b85764621e7fccb36f8aa37d2f857d7124825de51b2b5677d80f92e62ce8c17c5fa5","ssdeep":"","tlshash":"bc1102a98a9148339e9758fd30117bcd3a13b62acb4787a5cd2d4531689007237b23ed","size":1013,"data":"","first_seen":"2024-08-20T17:08:44.369346Z","last_seen":"2024-08-20T17:08:44.369346Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"root.teensforcash-pics.biz/","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"87456a9c132d9a1c93e9d9f2f637ab14","sha1":"476821d5478924af5a563e4b10c11c8bb60d143e","sha256":"b178c6821eddaab1d4f2f6a2a168c52682ebfb8ee608ba07bbf29e63f3e38f45","sha512":"d1d40aa88e2166208055d1e4ffb10c5413011625902220b1697f5a601971945b4e95f702644dfbb332f99e1887d32e9afdbfbb11184127a0b2dcb227f30fe5ff","ssdeep":"","tlshash":"93e0265c2209f9cdf11240002e7b9f58eb98548925e5be8bdd990499b0661e655688c7","size":331,"data":"","first_seen":"2024-08-20T17:08:44.369961Z","last_seen":"2024-08-20T17:08:44.369961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"root.teensforcash-pics.biz/blLqjcewI.js","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","size":32054,"data":"","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0808101bcc6e1191c5b6073e31bcb441","sha1":"325317ef7ae2592656dcabfb8462b40f3e3ebc08","sha256":"39359651a0d752d1e777094fd9deed5e4c5993ff6b2aebfd855761f41369b13e","sha512":"754751a2623e4528e0f4d33ca3ccef2262e4a72fd7d329eace58707fc6321adfafed64d8a25dd7af5b4c8f3afb391c5dc1e125ac1bd021fddb551604525508bc","ssdeep":"1536:grPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:b2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"97e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149633,"data":"","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T16:25:25Z","times_seen":2531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Froot.teensforcash-pics.biz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2442788251544177\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=3361701460976036\u0026num=0\u0026output=afd_ads\u0026domain_name=root.teensforcash-pics.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460976039\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Froot.teensforcash-pics.biz%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"34d4a655e033ed08792ee54d3b82d448","sha1":"7ef4b4a73863052540f6f2cc614ccfa658f80053","sha256":"4cbeff6011b6106f4cb3081d780d1aa0f9272386f64ecd1cefc3e96dcdfb69ad","sha512":"7f82c12fd46450a34b8b722e517d440390fb36d4dc763d80d1624ee12cca14d9644822aca766f4edcb181888a3e6a675dce7882107f2dc57698ec62e52762ef3","ssdeep":"","tlshash":"ef019e9919644171d4a701115e4e3fd158dc147121872545b04ebcd920fdfdfa2290bf","size":659,"data":"","first_seen":"2024-08-20T17:08:44.37125Z","last_seen":"2024-08-20T17:08:44.37125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"340dfa29ee1bbfb063a9f14778432402","sha1":"653a15a286fd1d4c1ba7f97b3aaf347b84f89d28","sha256":"9769bb66909b580b9ae5f6b8f5a89e9644d5154ccaab7856dfb9847849ab76c3","sha512":"87308c1943c6795d5fd047966d2f547003966b8b951c90497b28b08b12383f5dae560a8ac5f0bddc0351aae1d13117c12712566b6a1609fd33d5cb906e6ac326","ssdeep":"","tlshash":"4de0202b281485305dfa0ccdf4a7fb8d7852f258c213c856854d800558b1fd6acbe7ed","size":362,"data":"","first_seen":"2023-05-13T03:23:16Z","last_seen":"2024-08-21T09:44:36.61449Z","times_seen":935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":[{"md5":"273e78c62740974d513c48a5e3dfa0ca","sha1":"4b018dffc168b31fc46f30ba58f3e1681294c9de","sha256":"6690814e79a4864d13b09e5b6944f8e9f7186c3cf26d189b0ba49f0c8d746499","sha512":"aaf58b2b69b56220eb6428bc1089c0ea57510c839e7146d2b07aed57a677368943bddfd8cd79bc73cb7445a597585911f3eaf29c52b23481e6fcadf9c492bd36","ssdeep":"","tlshash":"51c022134d2d90b009c60cccb0b5de0e801a9705c620c96a859c804229806d9dd352fa","size":191,"data":"","first_seen":"2024-08-20T17:08:44.372663Z","last_seen":"2024-08-20T17:08:44.372663Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"root.teensforcash-pics.biz/","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-01T20:02:54.485Z","timestamp":1701460974485,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root.teensforcash-pics.biz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Dec 2023 18:34:01 GMT","end":"Thu, 29 Feb 2024 18:34:00 GMT"},"fingerprint":{"sha1":"24:1F:8B:B5:C1:FC:EF:AB:49:61:B0:33:37:94:64:93:F5:C2:B1:9D","sha256":"0F:C8:B4:F4:78:51:5E:DE:3F:51:A8:EF:4D:0F:67:97:B5:94:76:89:46:28:F8:1A:99:BF:40:92:8C:40:B0:FC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: root.teensforcash-pics.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 01 Dec 2023 20:02:49 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 1049\r\nX-Request-Id: 9f934c65-1722-48c4-acb5-e621dc5a6c6b\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: sec-ch-prefers-color-scheme\r\nCritical-Ch: sec-ch-prefers-color-scheme\r\nVary: sec-ch-prefers-color-scheme\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_gnPRM0gBBPC/n38rpaGxpy/euIMovF0BZ12ZHJU32zkEZOHKHQLA9UfNEcabl6sWr1Hwjd24ombRimsJ9xOifg==\r\nSet-Cookie: parking_session=9f934c65-1722-48c4-acb5-e621dc5a6c6b; expires=Fri, 01 Dec 2023 20:17:50 GMT; path=/\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1049,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (346)","md5":"6c90c6fa7ef11cc52f0e97e7178cfd6d","sha1":"94df38ddf073cb83665e13426b7bcaec39dc9f72","sha256":"bf601b0f35b2ff2294ebab5f59f3da039527b0d994489125bbe2218395c4cebe","sha512":"9475b2c7853ae59d590b799bdde81a1381144a905676c72ca84c866e6d634176e750bcfa630be3ba829d06ff3a2c303ef3bd0ac183076f51f1536c1082018682","ssdeep":"","tlshash":"c311a8651501e84b70e140501db5db0ccf0e1b4ea296bdc6ffddc02aa4c53d1d46e9c9","first_seen":"2023-12-01T21:03:15Z","last_seen":"2023-12-01T21:03:15Z","times_seen":1,"resource_available":false,"data":null}},"time_used":882,"timings":{"blocked":385,"dns":2,"connect":1,"send":0,"wait":102,"receive":1,"ssl":388},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"root.teensforcash-pics.biz/blLqjcewI.js","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:55.189Z","timestamp":1701460975189,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root.teensforcash-pics.biz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Dec 2023 18:34:01 GMT","end":"Thu, 29 Feb 2024 18:34:00 GMT"},"fingerprint":{"sha1":"24:1F:8B:B5:C1:FC:EF:AB:49:61:B0:33:37:94:64:93:F5:C2:B1:9D","sha256":"0F:C8:B4:F4:78:51:5E:DE:3F:51:A8:EF:4D:0F:67:97:B5:94:76:89:46:28:F8:1A:99:BF:40:92:8C:40:B0:FC"}}},"request":{"raw":"GET /blLqjcewI.js HTTP/1.1\r\nHost: root.teensforcash-pics.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://root.teensforcash-pics.biz/\r\nCookie: parking_session=9f934c65-1722-48c4-acb5-e621dc5a6c6b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 01 Dec 2023 20:02:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32054\r\nX-Request-Id: 8258a162-b29c-4197-bde7-370213d8cb5e\r\nSet-Cookie: parking_session=9f934c65-1722-48c4-acb5-e621dc5a6c6b; expires=Fri, 01 Dec 2023 20:17:50 GMT\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32054,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32051)","md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":208,"dns":1,"connect":2,"send":0,"wait":101,"receive":1,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"root.teensforcash-pics.biz/_fd","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:55.513Z","timestamp":1701460975513,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root.teensforcash-pics.biz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Dec 2023 18:34:01 GMT","end":"Thu, 29 Feb 2024 18:34:00 GMT"},"fingerprint":{"sha1":"24:1F:8B:B5:C1:FC:EF:AB:49:61:B0:33:37:94:64:93:F5:C2:B1:9D","sha256":"0F:C8:B4:F4:78:51:5E:DE:3F:51:A8:EF:4D:0F:67:97:B5:94:76:89:46:28:F8:1A:99:BF:40:92:8C:40:B0:FC"}}},"request":{"raw":"POST /_fd HTTP/1.1\r\nHost: root.teensforcash-pics.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root.teensforcash-pics.biz/\r\nContent-Type: application/json\r\nOrigin: https://root.teensforcash-pics.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=9f934c65-1722-48c4-acb5-e621dc5a6c6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 01 Dec 2023 20:02:50 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nContent-Length: 2374\r\nX-Version: 2.110.4\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: parking_session=9f934c65-1722-48c4-acb5-e621dc5a6c6b; expires=Fri, 01 Dec 2023 20:17:50 GMT; Max-Age=900; path=/; httponly\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2374,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4721), with no line terminators","md5":"72bac95cb9da41d30cfd32b1f69edc02","sha1":"c9c90d0520c3ffa1522b2f38573422e590f683f7","sha256":"a7e2a316cdc9132d0f64c656bb28b2847fd810b8c36753d6565eda319e65f12b","sha512":"e358c81507c74dda4c303074373fb0c8f7e62e1c05f051649125ec36d2a54493166d96185a8ea4d153b10175c4b1eeb593f5320d0a7a48ace82921663e9ed3dc","ssdeep":"96:6+IiUPv8l9PULGQwC7O3OpEiS4ubY23CDxCJ1iWnwa0iXT8Msm:6hiCwS/7O+pEiS4ubn3ClG13nwa0iD7f","tlshash":"12a1c9eb0e4d79adc752c20226ef45c6522e47cb3dd2948a481de3c78a55a0d36e03bd","first_seen":"2023-12-01T21:03:15Z","last_seen":"2023-12-01T21:03:15Z","times_seen":1,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":209,"dns":1,"connect":2,"send":0,"wait":134,"receive":0,"ssl":204},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Froot.teensforcash-pics.biz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2442788251544177\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=3361701460976036\u0026num=0\u0026output=afd_ads\u0026domain_name=root.teensforcash-pics.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460976039\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Froot.teensforcash-pics.biz%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:56.053Z","timestamp":1701460976053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Froot.teensforcash-pics.biz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2442788251544177\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=3361701460976036\u0026num=0\u0026output=afd_ads\u0026domain_name=root.teensforcash-pics.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460976039\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Froot.teensforcash-pics.biz%2F HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://root.teensforcash-pics.biz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Fri, 01 Dec 2023 20:02:51 GMT\r\nexpires: Fri, 01 Dec 2023 20:02:51 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-9gbqc_DrH_-_q_fYY-Wmtg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2550\r\nx-xss-protection: 0\r\nset-cookie: CONSENT=PENDING+275; expires=Sun, 30-Nov-2025 20:02:51 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2550,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (13050)","md5":"3f3fc0a9bcd4e2228bf39f49326f609b","sha1":"e933f44d6ebb5b3b7301dce8b9448b2cf14e6060","sha256":"35401a200eb7f6ddf8f26bf3a331ed294ef52727bd1cb0bd4a28b8dcf47524c0","sha512":"0fec30069e92ce4f1994537e346117d2ea230d8cb052e7f8702576d9d06a8cd182093df91d7c1f18b460a0cfa5e436dd5e294f51a700acffd2beecd8e1be18d1","ssdeep":"96:GE/yk2iwlb5lphMzTronSc90IMvm0yEM6vfNYrWN7M8DRw9eDndv0M8Dhw9eD0lm:GE12ikpBn9+m0yEMcfWrkPdNWwzkVn","tlshash":"4b524337706227290503ec541b296f6dd181d53ec46b36e948a35f25c7ebf828be62ce","first_seen":"2023-12-01T21:03:15Z","last_seen":"2023-12-01T21:03:15Z","times_seen":1,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":54,"dns":1,"connect":9,"send":0,"wait":85,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Froot.teensforcash-pics.biz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2442788251544177\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=3361701460976036\u0026num=0\u0026output=afd_ads\u0026domain_name=root.teensforcash-pics.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460976039\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Froot.teensforcash-pics.biz%2F","date":"2023-12-01T20:02:56.647Z","timestamp":1701460976647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 01 Dec 2023 05:30:23 GMT\r\nexpires: Sat, 02 Dec 2023 04:30:23 GMT\r\ncache-control: public, max-age=82800\r\nage: 52348\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (306)","md5":"fe7dd8c3c629cc6e9cd6d3e4d3cbe905","sha1":"59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18","sha256":"5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e","sha512":"1c663e07978d95c838aed54421a9c725d7311b8c002f436b30555affb26c25f6ebecff6af5c54ef112370a36a5f5aadf611304bffe76a59fb3d206e943cf153f","ssdeep":"","tlshash":"eff055bcd2ad4914a608c7017ef8a5174066f0c563cc01ceee81ac69f0614e43a63ade","first_seen":"2023-04-07T08:14:08Z","last_seen":"2026-05-03T16:41:57.827597Z","times_seen":69546,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":55,"dns":0,"connect":8,"send":0,"wait":9,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Froot.teensforcash-pics.biz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2442788251544177\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=3361701460976036\u0026num=0\u0026output=afd_ads\u0026domain_name=root.teensforcash-pics.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460976039\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Froot.teensforcash-pics.biz%2F","date":"2023-12-01T20:02:56.649Z","timestamp":1701460976649,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 01 Dec 2023 10:40:51 GMT\r\nexpires: Sat, 02 Dec 2023 09:40:51 GMT\r\ncache-control: public, max-age=82800\r\nage: 33720\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with no line terminators","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":184,"dns":1,"connect":9,"send":0,"wait":10,"receive":1,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"root.teensforcash-pics.biz/_tr","fqdn":"root.teensforcash-pics.biz","domain":"teensforcash-pics.biz","tld":"biz"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:56.621Z","timestamp":1701460976621,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"root.teensforcash-pics.biz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 Dec 2023 18:34:01 GMT","end":"Thu, 29 Feb 2024 18:34:00 GMT"},"fingerprint":{"sha1":"24:1F:8B:B5:C1:FC:EF:AB:49:61:B0:33:37:94:64:93:F5:C2:B1:9D","sha256":"0F:C8:B4:F4:78:51:5E:DE:3F:51:A8:EF:4D:0F:67:97:B5:94:76:89:46:28:F8:1A:99:BF:40:92:8C:40:B0:FC"}}},"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: root.teensforcash-pics.biz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://root.teensforcash-pics.biz/\r\nContent-Type: application/json\r\nContent-Length: 1633\r\nOrigin: https://root.teensforcash-pics.biz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=9f934c65-1722-48c4-acb5-e621dc5a6c6b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 01 Dec 2023 20:02:51 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nContent-Length: 22\r\nX-Version: 2.110.4\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: parking_session=9f934c65-1722-48c4-acb5-e621dc5a6c6b; expires=Fri, 01 Dec 2023 20:17:52 GMT; Max-Age=900; path=/; httponly\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-06T15:45:58.798006Z","times_seen":406736,"resource_available":true,"data":null}},"time_used":550,"timings":{"blocked":216,"dns":3,"connect":1,"send":0,"wait":120,"receive":0,"ssl":207},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:55.873Z","timestamp":1701460975873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://root.teensforcash-pics.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 01 Dec 2023 20:02:51 GMT\r\nexpires: Fri, 01 Dec 2023 20:02:51 GMT\r\ncache-control: private, max-age=3600\r\netag: \"12169742205723775177\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55369,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression\\012- data","md5":"a0452aab1fe910f7b4f90042d337fd55","sha1":"736ca2dbeb7cae61ad0efb121829c75b27e30ade","sha256":"e1032f804e75abc9be86a41a22173ebeaa26328e601a06e8130e8551b4091a7a","sha512":"e9286ca3ea19fbb3dee3af2b943fc52bac4a1ac92968162eb228d00e2caaa9f1a951fae15cb8e325e451417344d0e59e7fc49269e517a1f659e9396d2575a525","ssdeep":"1536:ytm6Le+OqSH5jg1WlK0PFmlnxHLSZj2e9e:Em6L3sj6Ws04Lwj2","tlshash":"1e430200d9593d8ec52e122b5db766ed54063f0abf31f96e9855600ac33f1d033e6b6a","first_seen":"2023-12-01T21:03:15Z","last_seen":"2023-12-01T21:03:15Z","times_seen":1,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":63,"dns":1,"connect":8,"send":0,"wait":20,"receive":11,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parking3.parklogic.com/page/images/pe262/hero_nc.svg","fqdn":"parking3.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"45.79.244.209","port":443,"asn":63949,"as":"Linode, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:57.047Z","timestamp":1701460977047,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.parklogic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 19 Dec 2022 00:00:00 GMT","end":"Fri, 19 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:96:70:5E:83:A7:30:EF:05:87:20:AD:05:88:37:B5:E5:2E:0B:2F","sha256":"E0:55:8E:B9:97:75:DB:BF:31:FE:38:B9:DE:2F:F1:D7:A3:80:5A:21:E3:BE:45:9E:7E:D5:FB:5C:7C:5A:FC:FF"}}},"request":{"raw":"GET /page/images/pe262/hero_nc.svg HTTP/1.1\r\nHost: parking3.parklogic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://root.teensforcash-pics.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 01 Dec 2023 20:02:52 GMT\r\nserver: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.5.38\r\nlast-modified: Mon, 08 Mar 2021 23:04:00 GMT\r\netag: \"bbe1-5bd0e72fe1800\"\r\naccept-ranges: bytes\r\ncontent-length: 48097\r\ncontent-type: image/svg+xml\r\nconnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48097,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- SVG XML document\\012- XML 1.0 document text\\012- SVG XML document\\012- XML document text\\012- exported SGML document text\\012- exported SGML document, ASCII text, with very long lines (1738)","md5":"5a2c392e7acdf6e9de6e00129500503c","sha1":"c8d0f80381e4ce180b5eb3c4c98539907292a7bb","sha256":"878da09a057ec8f1775cdc522e5f7ec44966df547a87a9c29826ba114833c24b","sha512":"52223b04eb9121f05442dbc48519a95fdabb81c414772ee43dc837b58f797b97314796ef6d77ea6b7a1f3fee5937ec039e617fcdf8b146822792accd2534e141","ssdeep":"768:cfppX5/9YbZIqEGYbGqnq77SdMOsZff7pUbGA+dHeSZKFwj:CKYw3A9+","tlshash":"4123d7e8c3e802f4b6d90ba8deb4294c3a7564fa76106cc8c35dbc58dcb6f553109ad9","first_seen":"2023-05-10T12:50:45Z","last_seen":"2026-05-06T15:36:18.660249Z","times_seen":102026,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":234,"dns":0,"connect":112,"send":0,"wait":223,"receive":113,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=oucdndqyu0ti\u0026aqid=6ztqZcbNEayBxdwPpcGc0As\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=313\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C445%7C84%7C14\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:58.087Z","timestamp":1701460978087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=oucdndqyu0ti\u0026aqid=6ztqZcbNEayBxdwPpcGc0As\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=313\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C445%7C84%7C14\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://root.teensforcash-pics.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-37Q1HOHw-hpQoJIMqiUz4w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 01 Dec 2023 20:02:53 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+874; expires=Sun, 30-Nov-2025 20:02:53 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T15:45:53.712693Z","times_seen":14742555,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=i6kbnaq2sh9b\u0026aqid=6ztqZcbNEayBxdwPpcGc0As\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=313\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C445%7C84%7C14\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:58.589Z","timestamp":1701460978589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=i6kbnaq2sh9b\u0026aqid=6ztqZcbNEayBxdwPpcGc0As\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=313\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C445%7C84%7C14\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://root.teensforcash-pics.biz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-a6nFI2KFX5K_dpBFn2oiug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 01 Dec 2023 20:02:53 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+485; expires=Sun, 30-Nov-2025 20:02:53 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T15:45:53.712693Z","times_seen":14742555,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"parking3.parklogic.com/page/enhance.js?pcId=7\u0026pId=1129\u0026domain=Teensforcash-pics.biz","fqdn":"parking3.parklogic.com","domain":"parklogic.com","tld":"com"},"ip":{"addr":"45.79.244.209","port":443,"asn":63949,"as":"Linode, LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://root.teensforcash-pics.biz/","date":"2023-12-01T20:02:56.594Z","timestamp":1701460976594,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.parklogic.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Mon, 19 Dec 2022 00:00:00 GMT","end":"Fri, 19 Jan 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D2:96:70:5E:83:A7:30:EF:05:87:20:AD:05:88:37:B5:E5:2E:0B:2F","sha256":"E0:55:8E:B9:97:75:DB:BF:31:FE:38:B9:DE:2F:F1:D7:A3:80:5A:21:E3:BE:45:9E:7E:D5:FB:5C:7C:5A:FC:FF"}}},"request":{"raw":"GET /page/enhance.js?pcId=7\u0026pId=1129\u0026domain=Teensforcash-pics.biz HTTP/1.1\r\nHost: parking3.parklogic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://root.teensforcash-pics.biz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Fri, 01 Dec 2023 20:02:52 GMT\r\nserver: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.5.38\r\nx-powered-by: PHP/5.5.38\r\ntransfer-encoding: chunked\r\ncontent-type: text/javascript;charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1013,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1044), with no line terminators","md5":"a1e277b3ddaf91877933d7863c9bb8fa","sha1":"0260a89dc96731e85b6fe1c07944c9be9dcdce10","sha256":"6827bae4d7d4adedf75e7414fc143920484eb431d2ac8d34cc80e15720c52231","sha512":"1fe6fca399f535325ced80955c8441de82e39432489d2c558f7a673f9930f009a7bd2a41c69479cedbfb0d18b1ea23447ec11e11607568e20e57e795728161a7","ssdeep":"","tlshash":"f71112554a95c4366d474cfd30117add3a17fa29cf4783a5ce2c9431889007513b33a9","first_seen":"2023-12-01T21:03:15Z","last_seen":"2023-12-01T21:03:15Z","times_seen":1,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":282,"dns":1,"connect":112,"send":0,"wait":115,"receive":2,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol480\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Froot.teensforcash-pics.biz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2442788251544177\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=3361701460976036\u0026num=0\u0026output=afd_ads\u0026domain_name=root.teensforcash-pics.biz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701460976039\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Froot.teensforcash-pics.biz%2F","date":"2023-12-01T20:02:56.468Z","timestamp":1701460976468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Fri, 01 Dec 2023 20:02:51 GMT\r\nexpires: Fri, 01 Dec 2023 20:02:51 GMT\r\ncache-control: private, max-age=3600\r\netag: \"17662540289770248759\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149649,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1888)","md5":"295c98d1ef062dc83574af065c768d68","sha1":"8db1bf9d4d203fda081389f9099fae82fce9995a","sha256":"0dcbe293f090c78fd766dca3b924bd45bb58ede279aab98705b8e57b6b189c8f","sha512":"8a632735d19cf81d3c07c8902f6e9f0a5693a229ce2b0777ec7b94201f18a067dc24bb469cd2b74699aa7015cbeeff33bd860926a9baf8ec0fc167b0ccc6b3b1","ssdeep":"1536:HrPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:K2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"afe35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T17:54:00Z","times_seen":1154,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
