{"report_id":"987fb84d-bed7-4b38-95a5-53da23534f40","version":6,"status":"done","tags":[],"date":"2023-12-04T16:10:57Z","url":{"schema":"http","addr":"trackier.exnessaffiliates.com/click","fqdn":"trackier.exnessaffiliates.com","domain":"exnessaffiliates.com","tld":"com"},"ip":{"addr":"35.201.98.21","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"ww1.localdatingladies.life/","fqdn":"ww1.localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"title":"Localdatingladies.life"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:10:22Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"trackier.exnessaffiliates.com","ip":{"addr":"35.241.7.124","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2018-01-22","domain_rank":0,"first_seen":"2022-04-25 09:28:46","last_seen":"2023-11-18 20:14:41","alert_count":0,"request_count":2,"received_data":668,"sent_data":1055,"comment":"","tags":null,"fingerprints":null},{"fqdn":"localdatingladies.life","ip":{"addr":"162.210.199.65","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"domain_registered":"2022-06-16","domain_rank":0,"first_seen":"2022-06-16 15:27:18","last_seen":"2023-11-07 15:12:24","alert_count":0,"request_count":1,"received_data":390,"sent_data":518,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww1.localdatingladies.life","ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2022-06-16","domain_rank":0,"first_seen":"2023-08-24 22:44:26","last_seen":"2023-11-07 15:12:09","alert_count":3,"request_count":4,"received_data":37038,"sent_data":1858,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2023-12-04 05:09:58","alert_count":0,"request_count":4,"received_data":155704,"sent_data":3159,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2023-12-04 05:11:59","alert_count":0,"request_count":2,"received_data":2094,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trkredirect.com","ip":{"addr":"88.198.18.145","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2020-01-28","domain_rank":536349,"first_seen":"2017-07-14 02:55:16","last_seen":"2023-11-06 19:33:19","alert_count":0,"request_count":1,"received_data":1632,"sent_data":533,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":150495,"sent_data":435,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:45Z","timestamp":1701706245,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":55710,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .life TLD","source":"{\"timestamp\":\"2023-12-04T16:10:45.880244+0000\",\"flow_id\":2021061185334900,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":55710,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027867,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .life TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":56070,\"rrname\":\"localdatingladies.life\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":93,\"bytes_toclient\":0,\"start\":\"2023-12-04T16:10:45.880244+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:45Z","timestamp":1701706245,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60957,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .life TLD","source":"{\"timestamp\":\"2023-12-04T16:10:45.880379+0000\",\"flow_id\":1442580630171387,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":60957,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027867,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .life TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":58356,\"rrname\":\"localdatingladies.life\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":93,\"bytes_toclient\":0,\"start\":\"2023-12-04T16:10:45.880379+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:46Z","timestamp":1701706246,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":43686,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .life TLD","source":"{\"timestamp\":\"2023-12-04T16:10:46.982678+0000\",\"flow_id\":687396530618006,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":43686,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027867,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .life TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":57789,\"rrname\":\"ww1.localdatingladies.life\",\"rrtype\":\"A\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":97,\"bytes_toclient\":0,\"start\":\"2023-12-04T16:10:46.982678+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:46Z","timestamp":1701706246,"ip_dst":{"addr":"Internal IP","port":53,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":46484,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Observed DNS Query to .life TLD","source":"{\"timestamp\":\"2023-12-04T16:10:46.982933+0000\",\"flow_id\":2216666880999317,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":46484,\"dest_ip\":\"10.70.215.1\",\"dest_port\":53,\"proto\":\"UDP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027867,\"rev\":5,\"signature\":\"ET INFO Observed DNS Query to .life TLD\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"dns\":{\"query\":[{\"type\":\"query\",\"id\":21616,\"rrname\":\"ww1.localdatingladies.life\",\"rrtype\":\"AAAA\",\"tx_id\":0}]},\"app_proto\":\"dns\",\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":0,\"bytes_toserver\":97,\"bytes_toclient\":0,\"start\":\"2023-12-04T16:10:46.982933+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.322451+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":790},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":647,\"bytes_toclient\":1943,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.820882+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/bGsAZBljH.js\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://ww1.localdatingladies.life/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1171},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":10,\"bytes_toserver\":1227,\"bytes_toclient\":9567,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.964993+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/_fd\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://ww1.localdatingladies.life/\",\"http_method\":\"POST\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2060},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":27,\"pkts_toclient\":31,\"bytes_toserver\":2836,\"bytes_toclient\":38288,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ww1.localdatingladies.life/","fqdn":"ww1.localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"205b876df2d78e6da9fd79a8420e6fc9","sha1":"b0465964a6e2e4b57ea775cf64396f53b4d4974f","sha256":"da704d55746449395eff176df9f40a03306dd205e30a0b64eb88ebdbe5e93399","sha512":"0df511d84b913614fa11e429f7434f83cef2826534f875b8a4d837e2a405f8e4da52ac1016d9f67cce7955da5ac9546c90fbeba0bbc5fde3f37d7547e155c820","ssdeep":"","tlshash":"efe026ef891f191cc169b4021bb6ef4b1aa10c92026076e8e6e36ce37fd008a1ca4644","size":327,"data":"","first_seen":"2024-08-20T16:48:14.55658Z","last_seen":"2024-08-20T16:48:14.55658Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"10.70.215.216","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.322451+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":790},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":647,\"bytes_toclient\":1943,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.localdatingladies.life/bGsAZBljH.js","fqdn":"ww1.localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","size":32054,"data":"","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"10.70.215.216","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.820882+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/bGsAZBljH.js\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://ww1.localdatingladies.life/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1171},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":10,\"bytes_toserver\":1227,\"bytes_toclient\":9567,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"874a9639750ae434c10140eb1a983849","sha1":"075e222560bb798ac08f476e157afa2782d3c85b","sha256":"a49690ce6db822bd1ae860ad7687076d3259019e7353ecdd86cd02066fd6bee8","sha512":"94386e4fbf366ed6f6e27d5f2ae3b6b0b40d1c42df303ed013648c15910a64ea24a9bb2fbfbad60aef361ed2ad89cdf56e50c3a2d71109e78d816e15e656e461","ssdeep":"1536:crPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:32sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"d8e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149642,"data":"","first_seen":"2023-11-09T14:10:10Z","last_seen":"2023-12-13T17:50:06Z","times_seen":1323,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol316%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol464\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.localdatingladies.life%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=8891701706248131\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.localdatingladies.life\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701706248133\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww1.localdatingladies.life%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b75f508e731176e846203c5e84eb8c87","sha1":"7759b0fc044ccd6a0d96f74f5ba9160087b426da","sha256":"6c78e04e8911e47337e1c60d27967aef7713eef0464eddbcd028cbcb4012162c","sha512":"cecf066f457c175bd48522b5caf6996ef5f884e2e3d9e77c102ea3213cd238adc55108ed0db757c8be0ca6dc989b116872b62554e9c9305f536c2c5ceff61c6b","ssdeep":"","tlshash":"b101f9962e240172e8a701362d5e3f9058dc24b122872949a04eacde207dfdfa2294bb","size":659,"data":"","first_seen":"2024-08-20T16:48:14.560011Z","last_seen":"2024-08-20T16:48:14.560011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"295c98d1ef062dc83574af065c768d68","sha1":"8db1bf9d4d203fda081389f9099fae82fce9995a","sha256":"0dcbe293f090c78fd766dca3b924bd45bb58ede279aab98705b8e57b6b189c8f","sha512":"8a632735d19cf81d3c07c8902f6e9f0a5693a229ce2b0777ec7b94201f18a067dc24bb469cd2b74699aa7015cbeeff33bd860926a9baf8ec0fc167b0ccc6b3b1","ssdeep":"1536:HrPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:K2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"afe35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149649,"data":"","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T17:54:00Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trackier.exnessaffiliates.com/click","fqdn":"trackier.exnessaffiliates.com","domain":"exnessaffiliates.com","tld":"com"},"ip":{"addr":"35.241.7.124","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T16:10:45.461Z","timestamp":1701706245461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clk.trackier.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Nov 2023 09:48:24 GMT","end":"Thu, 22 Feb 2024 09:48:23 GMT"},"fingerprint":{"sha1":"A3:F9:3D:73:E8:FD:67:D8:CC:0E:24:6C:62:6B:08:1B:19:FB:B0:A0","sha256":"B5:D1:E2:93:72:46:3D:FA:6E:45:45:E2:3B:DB:5C:FD:5F:F2:A3:62:FC:D0:C0:23:63:32:CE:FE:D5:82:17:0C"}}},"request":{"raw":"GET /click HTTP/1.1\r\nHost: trackier.exnessaffiliates.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 04 Dec 2023 16:10:38 GMT\r\ncontent-type: text/html\r\ncontent-length: 20\r\nx-err: INVALID_PUBLISHER_ID\r\nlocation: https://trackier.exnessaffiliates.com/click?campaign_id=51\u0026pub_id=80\u0026source=trback\r\nx-rt: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":20,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"dbe3142befe3c4d6338d3d9527f8b044","sha1":"b6c700e514b87155aad19c96904068fe9680338d","sha256":"f4eba0d8490a843594813fa8853c32a47e180ee2132cda755d5f49d07370b6bd","sha512":"1898e155cdd693e302b3edc1b53d8ca725930405751ef1a46b4f9cee66e1bf998c87866ed993634a76a8468ac60eba28b64dba31f0f327f2e0cc69828df076fc","ssdeep":"","tlshash":"dd7000e0a20008b000008b8e00208008ac0c008200280a00822022c0a20822202a0030","first_seen":"2023-05-03T15:12:27Z","last_seen":"2024-09-28T07:35:41.50929Z","times_seen":11,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":1,"dns":2,"connect":7,"send":0,"wait":35,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackier.exnessaffiliates.com/click?campaign_id=51\u0026pub_id=80\u0026source=trback","fqdn":"trackier.exnessaffiliates.com","domain":"exnessaffiliates.com","tld":"com"},"ip":{"addr":"35.241.7.124","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T16:10:45.538Z","timestamp":1701706245538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"clk.trackier.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Nov 2023 09:48:24 GMT","end":"Thu, 22 Feb 2024 09:48:23 GMT"},"fingerprint":{"sha1":"A3:F9:3D:73:E8:FD:67:D8:CC:0E:24:6C:62:6B:08:1B:19:FB:B0:A0","sha256":"B5:D1:E2:93:72:46:3D:FA:6E:45:45:E2:3B:DB:5C:FD:5F:F2:A3:62:FC:D0:C0:23:63:32:CE:FE:D5:82:17:0C"}}},"request":{"raw":"GET /click?campaign_id=51\u0026pub_id=80\u0026source=trback HTTP/1.1\r\nHost: trackier.exnessaffiliates.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nserver: nginx\r\ndate: Mon, 04 Dec 2023 16:10:39 GMT\r\ncontent-type: text/html\r\ncontent-length: 0\r\nx-err: TARGETING_FAILED\r\nlocation: https://trkredirect.com/click.php?key=yrht9zy0mw0ge6nn6sq9\u0026site_id=trback\r\nx-rt: 0\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T01:13:53.40593Z","times_seen":14764996,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"localdatingladies.life/?u=6t4ktee\u0026o=u7whw3c\u0026t=trback","fqdn":"localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"ip":{"addr":"162.210.199.65","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T16:10:45.880Z","timestamp":1701706245880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"localdatingladies.life","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 Sep 2023 09:34:26 GMT","end":"Wed, 27 Dec 2023 09:34:25 GMT"},"fingerprint":{"sha1":"8C:5F:2C:FF:D0:12:DE:4D:1F:61:7E:07:92:DD:81:84:25:F3:D6:6B","sha256":"2E:F9:80:43:2D:07:F6:8D:3F:BA:29:9D:3E:2B:45:3A:63:1F:AB:33:45:31:3E:F7:94:41:50:48:D0:2B:7F:C4"}}},"request":{"raw":"GET /?u=6t4ktee\u0026o=u7whw3c\u0026t=trback HTTP/1.1\r\nHost: localdatingladies.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Mon, 04 Dec 2023 16:10:40 GMT\r\nlocation: http://ww1.localdatingladies.life\r\nserver: Cowboy\r\nset-cookie: sid=ab72da28-92bf-11ee-b928-4b18b9a8fb86; path=/; domain=.localdatingladies.life; expires=Sat, 22 Dec 2091 19:24:48 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":11,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"32682312d17c7cbf18e73594f5570319","sha1":"60e22121bdd0bc71cdb2bae2a3aa577006b2eae9","sha256":"e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47","sha512":"68337debb9cd659cece621af582ae2bc4b56b9cf06b26c45f4d9eb8beb91d3f36bead287218b5aa2bb4853a1cf1a12017ca57318d7e12f489884fdc6b261dfc1","ssdeep":"","tlshash":"3550000030c0300c0000000c0000030003000000000c033f0c3003c00c000000000003","first_seen":"2023-04-05T04:09:22Z","last_seen":"2025-03-02T06:14:56.641448Z","times_seen":15034,"resource_available":false,"data":null}},"time_used":1586,"timings":{"blocked":491,"dns":173,"connect":98,"send":0,"wait":604,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.localdatingladies.life/","fqdn":"ww1.localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T16:10:46.983Z","timestamp":1701706246983,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww1.localdatingladies.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 04 Dec 2023 16:10:40 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1045\r\nx-request-id: 235bd613-70ec-466f-bbfa-d8fff5e685f5\r\ncache-control: no-store, max-age=0\r\naccept-ch: sec-ch-prefers-color-scheme\r\ncritical-ch: sec-ch-prefers-color-scheme\r\nvary: sec-ch-prefers-color-scheme\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_YiLkIQIV2avrDq07JtGQ8kN9yvo4szUuaEtqaUvYzOJ+DA9EKERy3g8dq8scaafe6y16V0W4czGWPCB6xJBMqg==\r\nset-cookie: parking_session=235bd613-70ec-466f-bbfa-d8fff5e685f5; expires=Mon, 04 Dec 2023 16:25:41 GMT; path=/\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1045,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (342)","md5":"891ffac48536a990653d80e5d8a3ff87","sha1":"e6e457e523fcba40c0f99564b36af1fb26596960","sha256":"d7413e9d8f6da96a2b7da05e45d1a7fc8d72cf0795b67e98933d6852bbbc0e7b","sha512":"ee4e21658d7eaa0aede18ba1acc2a690fb1130d1632d74804586190724d1a84ed48b4377ebaaaa0531325e677fbef5816e249f6d55261b08b06662729ca3ce1e","ssdeep":"","tlshash":"ec1172a70827480840f152402fb1ea0d4c5a1e4e43607dd0eadae4bb7ec05c2e8a569c","first_seen":"2023-12-04T17:10:58Z","last_seen":"2023-12-04T17:10:58Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":138,"dns":137,"connect":1,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"10.70.215.216","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.322451+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":790},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":647,\"bytes_toclient\":1943,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.localdatingladies.life/bGsAZBljH.js","fqdn":"ww1.localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww1.localdatingladies.life/","date":"2023-12-04T16:10:47.728Z","timestamp":1701706247728,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bGsAZBljH.js HTTP/1.1\r\nHost: ww1.localdatingladies.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.localdatingladies.life/\r\nCookie: parking_session=235bd613-70ec-466f-bbfa-d8fff5e685f5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 04 Dec 2023 16:10:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 32054\r\nx-request-id: 767abad6-be04-459f-a900-c446c703a672\r\nset-cookie: parking_session=235bd613-70ec-466f-bbfa-d8fff5e685f5; expires=Mon, 04 Dec 2023 16:25:42 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32054,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32051)","md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"10.70.215.216","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.820882+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/bGsAZBljH.js\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://ww1.localdatingladies.life/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":1171},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":10,\"bytes_toserver\":1227,\"bytes_toclient\":9567,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.localdatingladies.life/_fd","fqdn":"ww1.localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww1.localdatingladies.life/","date":"2023-12-04T16:10:47.834Z","timestamp":1701706247834,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_fd HTTP/1.1\r\nHost: ww1.localdatingladies.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww1.localdatingladies.life/\r\nContent-Type: application/json\r\nOrigin: http://ww1.localdatingladies.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=235bd613-70ec-466f-bbfa-d8fff5e685f5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Mon, 04 Dec 2023 16:10:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 2060\r\nx-version: 2.110.4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=235bd613-70ec-466f-bbfa-d8fff5e685f5; expires=Mon, 04 Dec 2023 16:25:42 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2060,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4041), with no line terminators","md5":"5d9b09d683690bc8cab3f36a41e2693e","sha1":"95232ca39ea4ccff4add0499ae6732836d8f9fa7","sha256":"aca58d7e565708bd332813b6789e5efab8493eb6c96f20e89ede2ef38c288ab8","sha512":"4d094b8d7e38cef0ef10e738a71386d12200b3830b932c28d6ad0399fb074f313f4dff910122b8ab6b065de0abda53cb694e4fb57faffb742c5e3fbec7b71be5","ssdeep":"","tlshash":"ec81fac7cf1e7aa8cb1e81023acd46d70b1d87cf08a2d04c856d99e98e5864f78d023e","first_seen":"2023-12-04T17:10:58Z","last_seen":"2023-12-04T17:10:58Z","times_seen":1,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-04T16:10:47Z","timestamp":1701706247,"ip_dst":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"ip_src":{"addr":"10.70.215.216","port":54812,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO HTTP Request to Suspicious *.life Domain","source":"{\"timestamp\":\"2023-12-04T16:10:47.964993+0000\",\"flow_id\":1860652746921514,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"10.70.215.216\",\"src_port\":54812,\"dest_ip\":\"199.59.243.225\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2027876,\"rev\":5,\"signature\":\"ET INFO HTTP Request to Suspicious *.life Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"created_at\":[\"2019_08_13\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_09_17\"]}},\"http\":{\"hostname\":\"ww1.localdatingladies.life\",\"url\":\"/_fd\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://ww1.localdatingladies.life/\",\"http_method\":\"POST\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2060},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":27,\"pkts_toclient\":31,\"bytes_toserver\":2836,\"bytes_toclient\":38288,\"start\":\"2023-12-04T16:10:47.120362+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol316%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol464\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.localdatingladies.life%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=8891701706248131\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.localdatingladies.life\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701706248133\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww1.localdatingladies.life%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww1.localdatingladies.life/","date":"2023-12-04T16:10:48.144Z","timestamp":1701706248144,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol316%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol464\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.localdatingladies.life%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=8891701706248131\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.localdatingladies.life\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701706248133\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww1.localdatingladies.life%2F HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.localdatingladies.life/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Mon, 04 Dec 2023 16:10:42 GMT\r\nexpires: Mon, 04 Dec 2023 16:10:42 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-dPIBeeuqwp2TDVS2crdAnA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2545\r\nx-xss-protection: 0\r\nset-cookie: CONSENT=PENDING+571; expires=Wed, 03-Dec-2025 16:10:42 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2545,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (13042)","md5":"b1ca671a5bb31c2dcab71c2da9af411b","sha1":"dc3648b90c6a5af9f2d1eb354082d59618244352","sha256":"cfb25cf5c7188abecb4adf7ed2797a4f6661940c7bd3f433250e8732947ba09a","sha512":"90f4f56d140bfcbb822ed7f90e9204e01694d49baba117f71942353d7d70254f0aaf534196aa003d3e04e425370733c1785a52a2371b0bb3309d3475741bb7c4","ssdeep":"96:GE/yk2iwlb5lphMzTronSc90IMvm0yEM6vfNYrjFQvSM8DTw9eDYYM8Daw9eDAb1:GE12ikpBn9+m0yEMcfWrGvEijk9","tlshash":"ba5244377062272d0507dc541b296f6ed181d53ac46b36e948e31f25c7ebf828be628e","first_seen":"2023-12-04T17:10:58Z","last_seen":"2023-12-04T17:10:58Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":34,"dns":2,"connect":8,"send":0,"wait":89,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol316%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol464\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.localdatingladies.life%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=8891701706248131\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.localdatingladies.life\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701706248133\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww1.localdatingladies.life%2F","date":"2023-12-04T16:10:48.690Z","timestamp":1701706248690,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 02:30:27 GMT\r\nexpires: Tue, 05 Dec 2023 01:30:27 GMT\r\ncache-control: public, max-age=82800\r\nage: 49216\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (306)","md5":"fe7dd8c3c629cc6e9cd6d3e4d3cbe905","sha1":"59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18","sha256":"5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e","sha512":"1c663e07978d95c838aed54421a9c725d7311b8c002f436b30555affb26c25f6ebecff6af5c54ef112370a36a5f5aadf611304bffe76a59fb3d206e943cf153f","ssdeep":"","tlshash":"eff055bcd2ad4914a608c7017ef8a5174066f0c563cc01ceee81ac69f0614e43a63ade","first_seen":"2023-04-07T08:14:08Z","last_seen":"2026-05-03T16:41:57.827597Z","times_seen":69546,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":57,"dns":2,"connect":8,"send":0,"wait":9,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww1.localdatingladies.life/_tr","fqdn":"ww1.localdatingladies.life","domain":"localdatingladies.life","tld":"life"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww1.localdatingladies.life/","date":"2023-12-04T16:10:48.727Z","timestamp":1701706248727,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww1.localdatingladies.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww1.localdatingladies.life/\r\nContent-Type: application/json\r\nContent-Length: 1633\r\nOrigin: http://ww1.localdatingladies.life\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=235bd613-70ec-466f-bbfa-d8fff5e685f5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Mon, 04 Dec 2023 16:10:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 22\r\nx-version: 2.110.4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=235bd613-70ec-466f-bbfa-d8fff5e685f5; expires=Mon, 04 Dec 2023 16:25:43 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-07T01:10:50.543916Z","times_seen":406937,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.129","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol316%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol464\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.localdatingladies.life%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=8891701706248131\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.localdatingladies.life\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701706248133\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww1.localdatingladies.life%2F","date":"2023-12-04T16:10:48.692Z","timestamp":1701706248692,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 07:40:52 GMT\r\nexpires: Tue, 05 Dec 2023 06:40:52 GMT\r\ncache-control: public, max-age=82800\r\nage: 30591\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with no line terminators","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":165,"dns":7,"connect":8,"send":0,"wait":8,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=vxrleu1vqdjn\u0026aqid=AvptZaXgI_OjxdwP_q6qyAw\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C435%7C65%7C17\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww1.localdatingladies.life/","date":"2023-12-04T16:10:50.156Z","timestamp":1701706250156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=vxrleu1vqdjn\u0026aqid=AvptZaXgI_OjxdwP_q6qyAw\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C435%7C65%7C17\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.localdatingladies.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-uc7XR42Wi9l1kB08ojc3Gg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 04 Dec 2023 16:10:44 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+533; expires=Wed, 03-Dec-2025 16:10:44 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T01:13:53.40593Z","times_seen":14764996,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=5vwy672sy1pn\u0026aqid=AvptZaXgI_OjxdwP_q6qyAw\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C435%7C65%7C17\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww1.localdatingladies.life/","date":"2023-12-04T16:10:50.657Z","timestamp":1701706250657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=5vwy672sy1pn\u0026aqid=AvptZaXgI_OjxdwP_q6qyAw\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=5%7C0%7C435%7C65%7C17\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.localdatingladies.life/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-47XcKH7ZciahjP-Lf6Ffyg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 04 Dec 2023 16:10:45 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+847; expires=Wed, 03-Dec-2025 16:10:45 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T01:13:53.40593Z","times_seen":14764996,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol316%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol464\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww1.localdatingladies.life%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301383\u0026format=r3\u0026nocache=8891701706248131\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.localdatingladies.life\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701706248133\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww1.localdatingladies.life%2F","date":"2023-12-04T16:10:48.562Z","timestamp":1701706248562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 04 Dec 2023 16:10:42 GMT\r\nexpires: Mon, 04 Dec 2023 16:10:42 GMT\r\ncache-control: private, max-age=3600\r\netag: \"17662540289770248759\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149649,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1888)","md5":"295c98d1ef062dc83574af065c768d68","sha1":"8db1bf9d4d203fda081389f9099fae82fce9995a","sha256":"0dcbe293f090c78fd766dca3b924bd45bb58ede279aab98705b8e57b6b189c8f","sha512":"8a632735d19cf81d3c07c8902f6e9f0a5693a229ce2b0777ec7b94201f18a067dc24bb469cd2b74699aa7015cbeeff33bd860926a9baf8ec0fc167b0ccc6b3b1","ssdeep":"1536:HrPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:K2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"afe35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T17:54:00Z","times_seen":1154,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trkredirect.com/click.php?key=yrht9zy0mw0ge6nn6sq9\u0026site_id=trback","fqdn":"trkredirect.com","domain":"trkredirect.com","tld":"com"},"ip":{"addr":"88.198.18.145","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T16:10:45.579Z","timestamp":1701706245579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"trkredirect.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Nov 2023 22:21:32 GMT","end":"Tue, 13 Feb 2024 22:21:31 GMT"},"fingerprint":{"sha1":"28:1B:C1:AC:AE:4E:8D:C5:1B:24:05:9B:BD:08:40:63:46:39:AA:18","sha256":"7B:B0:A5:42:24:D5:21:1D:E0:D4:82:D1:E6:43:30:EC:6E:93:E2:6D:7F:57:C7:27:BF:BC:8F:C5:A1:9E:A4:32"}}},"request":{"raw":"GET /click.php?key=yrht9zy0mw0ge6nn6sq9\u0026site_id=trback HTTP/1.1\r\nHost: trkredirect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 04 Dec 2023 16:10:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://localdatingladies.life/?u=6t4ktee\u0026o=u7whw3c\u0026t=trback\r\nset-cookie: uclick=6jyde2fy6o; expires=Tue, 05-Dec-2023 16:10:40 GMT; Max-Age=86400; path=/; secure; SameSite=none\nuclickhash=6jyde2fy6o-6jyde2fy6o-pmm7-0-8ru3-xid5-xihq-4e579d; expires=Tue, 05-Dec-2023 16:10:40 GMT; Max-Age=86400; path=/; secure; SameSite=none\r\nstrict-transport-security: max-age=63072000; includeSubdomains\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":1045,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-07T01:13:53.40593Z","times_seen":14764996,"resource_available":true,"data":null}},"time_used":511,"timings":{"blocked":215,"dns":58,"connect":44,"send":0,"wait":81,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww1.localdatingladies.life/","date":"2023-12-04T16:10:47.981Z","timestamp":1701706247981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww1.localdatingladies.life/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 04 Dec 2023 16:10:42 GMT\r\nexpires: Mon, 04 Dec 2023 16:10:42 GMT\r\ncache-control: private, max-age=3600\r\netag: \"13859965838328933494\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149642,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1888)","md5":"874a9639750ae434c10140eb1a983849","sha1":"075e222560bb798ac08f476e157afa2782d3c85b","sha256":"a49690ce6db822bd1ae860ad7687076d3259019e7353ecdd86cd02066fd6bee8","sha512":"94386e4fbf366ed6f6e27d5f2ae3b6b0b40d1c42df303ed013648c15910a64ea24a9bb2fbfbad60aef361ed2ad89cdf56e50c3a2d71109e78d816e15e656e461","ssdeep":"1536:crPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:32sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"d8e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","first_seen":"2023-11-09T14:10:10Z","last_seen":"2023-12-13T17:50:06Z","times_seen":1323,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":63,"dns":1,"connect":8,"send":0,"wait":20,"receive":11,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}