{"report_id":"a0211a7b-4dfa-4985-9dae-60d18ea5e575","version":6,"status":"done","tags":[],"date":"2025-10-05T20:14:21Z","url":{"schema":"http","addr":"www.qu.la/paihangbang/","fqdn":"www.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"162.210.199.85","port":0,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","fqdn":"ww1.qu.la","domain":"qu.la","tld":"la"},"title":"qu.la - Dette nettstedet er til salgs! - qu Ressurser og informasjon"},"submit":{"url":{"schema":"http","addr":"www.qu.la/paihangbang/","fqdn":"www.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"162.210.199.85","port":0,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-09T20:14:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"ww1.qu.la","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"img.sedoparking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"syndicatedsearch.goog","ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2023-04-14","domain_rank":5365,"first_seen":"2023-09-25T09:30:59Z","last_seen":"2025-09-28T22:16:45.190841Z","alert_count":0,"request_count":7,"received_data":180408,"sent_data":5189,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":65181,"first_seen":"2013-05-06T19:11:00Z","last_seen":"2025-09-28T22:16:45.793687Z","alert_count":0,"request_count":2,"received_data":2237,"sent_data":1005,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-28T22:11:46.355495Z","alert_count":0,"request_count":1,"received_data":159754,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"img.sedoparking.com","ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"domain_registered":"2001-09-18","domain_rank":591238,"first_seen":"2013-04-22T22:23:29Z","last_seen":"2025-09-28T22:23:25.398918Z","alert_count":1,"request_count":1,"received_data":15620,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}]},{"fqdn":"www.qu.la","ip":{"addr":"162.210.199.85","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"domain_registered":"2013-02-25","domain_rank":0,"first_seen":"2025-07-21T09:29:52.20553Z","last_seen":"2025-09-22T00:24:04.526258Z","alert_count":0,"request_count":3,"received_data":26690,"sent_data":1880,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"ww1.qu.la","ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2013-02-25","domain_rank":0,"first_seen":"2025-07-21T09:29:52.208371Z","last_seen":"2025-09-22T00:24:04.504728Z","alert_count":2,"request_count":2,"received_data":26038,"sent_data":1456,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=cl-047%2Cexp-0051%2Cauxa-control-1%2C187408\u0026client=dp-sedo92_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww1.qu.la%2Fcaf%2F%3Fses%3DY3JlPTE3NTk2OTUyMzgmdGNpZD13dzEucXUubGE2OGUyZDE4NmI3MzRhNC40MTg5OTM5NyZ0YXNrPXNlYXJjaCZkb21haW49cXUubGEmYV9pZD0zJnNlc3Npb249ejVBcEN3bTN5bVE2UWZpUTdDejc%3D\u0026type=3\u0026swp=as-drid-2445610912134376\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107\u0026format=r3%7Cs\u0026nocache=3331759695238911\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.qu.la\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759695238914\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=https%3A%2F%2Fww1.qu.la%2F%3Fsub1%3Dd25fab83-a227-11f0-a400-fef3821d3319","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"df458ce22eeffbd97935ca4a933a7771","sha1":"4e6e01c44f1c316e20b8924fae97f35126c8aeda","sha256":"6182a553b7cf71a6b10a0eff1d3bd2ecfc3d49365740b7b69d6f050c7b0d94d8","sha512":"a52aa1f1721fb85f49815687e6855900b0be044eca5dce3c50d3830ab0cea36b289fa6cf236eba49e0bcb95469c423f09dae522794c2bdcfa62395a84a79da20","ssdeep":"","tlshash":"900152860c5a0a71db77414eaa4b3be0a85d10b032533581a54eb9dd247dfdca63e2aa","size":851,"data":"","first_seen":"2025-10-05T20:14:23.808689Z","last_seen":"2025-10-05T20:14:23.808689Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"407068d03b42c8ce4e27a913656a562b","sha1":"2b7425f98aadec17300ed869de42e4ff36dfa091","sha256":"0b64f6b23a570769b713ea18ecc1cca56d4f27477fc13d4037f1968d7d165778","sha512":"c6d655e86ab6da0fb32520994af5c2212d4ef031732a80268215ae0a837915d5f402a5d41db14142ba4649ec52b50807701397802edb4d40aeff2b03880fb5d8","ssdeep":"1536:HdzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:p4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"90f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","size":159036,"data":"","first_seen":"2025-10-02T14:16:21.813324Z","last_seen":"2025-10-06T20:56:46.419146Z","times_seen":2105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","fqdn":"ww1.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"c52dcef9bd75df3f41defb10b3e0c6b4","sha1":"a7111f1da08b6372e5c496f8aa5e22be746e485c","sha256":"41e3ffc70807af211a512782c3b34e33ac0cb9d73e12f1964d49c486877c1aa2","sha512":"4da36f72e2f94ca0e443d28575734ffaf85f1b815cebbd0170f347ef78b646520b4c4c968e1a5dde23966df58e3c4905ca98714d5784dbc2f4ad20d3b28710c6","ssdeep":"","tlshash":"9181f90e09c656f5df9412d8b9023e001aa960637108b9ececfd894d1beeeed153135b","size":4009,"data":"","first_seen":"2025-10-05T20:14:23.810021Z","last_seen":"2025-10-05T20:14:23.810021Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","fqdn":"ww1.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f580ea0afd6182fa3b02c249d8a3771","sha1":"e939caf069f09b6c73940c0c354ddfff817be7c8","sha256":"3c641384ad68d3b7ae4bf1887185c4a400830c9eeccb1e8d2f99075404bc7820","sha512":"bdeafd6aa5afa46247ea4163d82d2113563f28296f047fad686a8e0c267b545b055fbcbbce13719a8371e8d32e3daa14a576f85aa42a6f7f6069e1891a8c5556","ssdeep":"","tlshash":"24f00cb13a70034ac632f71be2d601917e69c023c041f9a271be90200fc8a274aa0ba7","size":622,"data":"","first_seen":"2023-07-20T08:11:13Z","last_seen":"2026-03-23T00:52:59.160883Z","times_seen":62252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa3bbc833a94bf0d6840d5e56e038a0e","sha1":"1c04911ef230da56d048a1fa8fdde56c93720fe2","sha256":"ac6e8ad6f8f43ec6e8884cc4d55d465ab07578245ceff1ecc6ec8c2cc01a2a43","sha512":"2e39395ff09ea37d884e40d2b1bd2262a24155cde635f518d2a2a88183b219f090f801b231eb00706d684870588c124c13a99ebe7e0dc95eadbd4c2e1e85b0cf","ssdeep":"1536:5dzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:X4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"00f34acd73a1702243a395b4607f018fb13af865a84c88a4b199d8e47db4dad4277fbd","size":159038,"data":"","first_seen":"2025-10-02T14:24:34.239269Z","last_seen":"2025-10-06T20:28:54.930047Z","times_seen":1304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","fqdn":"ww1.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"978e89b89f929ebbd0a746295eafbcbe","sha1":"6b92ab60432c1e5a8aebc60ebc94f1f24c28cea6","sha256":"848eaac812a5c6ef9f75fc33f2bfbb7169bfea60bc4d4a28a7e77d1737ca42ac","sha512":"c7b6c342a6cc4121c889e38dc07ec85f7b3b1ff7811c0babb5f5abaf39a984424751eb1a7ff400e9bd45f0d49e96be85ff30023dfe9de0b3c0463e1d136e42d1","ssdeep":"96:zQIHrUsXy9Cp1OuKfIqT1M6BXXjgXnB9qPsBJaqJ4uSnx73CUnKVGSrbH:jrUs2nDxQqPJTuIRIESrbH","tlshash":"26c194723145347a4aff0751206f1f14b67ae8533a08b419b028b7e82bebd5744dbb6a","size":5888,"data":"","first_seen":"2024-05-23T11:11:38Z","last_seen":"2026-03-23T00:52:59.161451Z","times_seen":188504,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"53a557946308585635eb80aec5326b9e","sha1":"544b125203bfbb516566a63c9ef3dc57e9c06df9","sha256":"eff95f5e15f8aa8c8b8c0f3aaeedba0091c1ec9732d78b6594c9ceb26c8eff28","sha512":"31c607e84c67799c8bce08e64fdd2c0164b164752ef3d7b1aaa9b2dda5b749e5064b44a66ae53109ccfdbdf7c6760bfc074502f65de4f4ed1fd6c50963885872","ssdeep":"","tlshash":"2621bb6e4c50822f2eb23edd285bb604fa235420e089e1d0c48cf9643979fd3882d9f4","size":1293,"data":"","first_seen":"2025-03-02T07:28:43.564096Z","last_seen":"2026-06-09T20:12:24.441686Z","times_seen":123281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.qu.la/paihangbang/","fqdn":"www.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"162.210.199.85","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T20:13:56.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qu.la","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 16:13:58 GMT","end":"Wed, 31 Dec 2025 16:13:57 GMT"},"fingerprint":{"sha1":"65:AB:46:CC:29:0F:C7:68:47:2A:DE:5B:F9:5C:E6:43:BC:88:52:70","sha256":"24:95:CA:5B:20:5E:26:AD:6A:5E:35:94:B1:46:5F:75:EC:46:24:3F:45:BC:44:B4:E8:00:93:E9:36:A8:C1:27"}}},"request":{"raw":"GET /paihangbang/ HTTP/1.1\r\nHost: www.qu.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 483\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sun, 05 Oct 2025 20:13:56 GMT\r\nserver: Cowboy\r\nset-cookie: sid=d25fab83-a227-11f0-a400-fef3821d3319; path=/; domain=.qu.la; expires=Fri, 23 Oct 2093 23:28:03 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":483,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (483), with no line terminators","md5":"6e45ad8f597915309077f4d7e7080ae9","sha1":"e8dc74e8733a7b240b941a5fdce7e1e4f5bcdb41","sha256":"cbd0ed6eca31c70b54bf7200b7bd893af0c3bc3b7c7f0050a830a320bdb860bd","sha512":"0810e24196aab81e4568cdbcb6a2525f67606f249f3f6a80bec073ca31853e8ad31c6db160133ed7f680b17ce326060f532c4b154633826ac8498d7e3f046669","ssdeep":"","tlshash":"27f054fb5893cccde1d029c18ea8fe4440c4818024acf47492c45cc87b3825dcc41134","first_seen":"2025-10-05T20:14:23.793105Z","last_seen":"2025-10-05T20:14:23.793105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":217,"dns":0,"connect":96,"send":0,"wait":96,"receive":0,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","fqdn":"ww1.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T20:13:56.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww1.qu.la","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Wed, 08 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:06:AC:81:D9:70:54:44:BB:B0:45:9E:52:96:A2:A1:0D:13:16:71","sha256":"5C:71:04:37:95:B7:C5:D7:2D:54:E2:89:0B:AE:C3:80:63:31:A2:4F:D1:6D:F8:E7:13:0A:C4:8B:9F:26:F7:FF"}}},"request":{"raw":"GET /?sub1=d25fab83-a227-11f0-a400-fef3821d3319 HTTP/1.1\r\nHost: ww1.qu.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nCookie: sid=d25fab83-a227-11f0-a400-fef3821d3319\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 05 Oct 2025 20:13:58 GMT\r\nexpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nlast-modified: Sun, 05 Oct 2025 20:13:58 GMT\r\npragma: no-cache\r\nserver: Parking/1.0\r\nvary: Accept-Encoding\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_DEv+h88hh3luTirK5jNiadtJ3DkE+Ze73xwZvOq+sdIw2gqKdLHKAYjJXrhuRvW3nEsI6xDpq2rSIOePl9+B5Q==\r\nx-cache-miss-from: parking-7fbf5fd67f-xhcp4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25195,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10651)","md5":"9605c0d3a570c3f9b0c04e641eeb42e8","sha1":"2997f14a83968c871cb4b736ac25a9946a46f1dc","sha256":"097a0d606318380dbc839015b66c8a0bd535ea6fd31d96253b5c3b2f978f90bc","sha512":"dddbe0432ba27d5eaa20fce423503ac5bed460642ed1bdf35c3eb72e20c16de8157aa6f3055fdef898d082436405fcaa33ca58fae9e8d2fa4af6bd911416286e","ssdeep":"768:5imrNTN1L6CjosHimwwQbQlUtullxgBXkKGBTuIOESPO:5/vfQbQlUtul00KGluBESPO","tlshash":"20b2fa321a842575f2b7865db191bb00b724d813d5066da9f46cf3b8cfcad9706e2f0a","first_seen":"2025-10-05T20:14:23.794743Z","last_seen":"2025-10-05T20:14:23.794743Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3774,"timings":{"blocked":1858,"dns":1533,"connect":25,"send":0,"wait":58,"receive":0,"ssl":298},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"ww1.qu.la","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/adsense/domains/caf.js","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=cl-047%2Cexp-0051%2Cauxa-control-1%2C187408\u0026client=dp-sedo92_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww1.qu.la%2Fcaf%2F%3Fses%3DY3JlPTE3NTk2OTUyMzgmdGNpZD13dzEucXUubGE2OGUyZDE4NmI3MzRhNC40MTg5OTM5NyZ0YXNrPXNlYXJjaCZkb21haW49cXUubGEmYV9pZD0zJnNlc3Npb249ejVBcEN3bTN5bVE2UWZpUTdDejc%3D\u0026type=3\u0026swp=as-drid-2445610912134376\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107\u0026format=r3%7Cs\u0026nocache=3331759695238911\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.qu.la\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759695238914\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=https%3A%2F%2Fww1.qu.la%2F%3Fsub1%3Dd25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:59.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 05 Oct 2025 20:13:59 GMT\r\nexpires: Sun, 05 Oct 2025 20:13:59 GMT\r\ncache-control: private, max-age=3600\r\netag: \"4607749269932262089\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159036,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"407068d03b42c8ce4e27a913656a562b","sha1":"2b7425f98aadec17300ed869de42e4ff36dfa091","sha256":"0b64f6b23a570769b713ea18ecc1cca56d4f27477fc13d4037f1968d7d165778","sha512":"c6d655e86ab6da0fb32520994af5c2212d4ef031732a80268215ae0a837915d5f402a5d41db14142ba4649ec52b50807701397802edb4d40aeff2b03880fb5d8","ssdeep":"1536:HdzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:p4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"90f34acd73a1702243a394b4607f018fb13af865a84c88a4b199d9e47db4dad4277fbd","first_seen":"2025-10-02T14:16:21.813324Z","last_seen":"2025-10-06T20:56:46.419146Z","times_seen":2105,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=col6p6gl2cqv\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bs\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=5%7C0%7C186%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:14:00.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=col6p6gl2cqv\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bs\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=5%7C0%7C186%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Va95JLMyDMFZxO-Tb49R3g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 05 Oct 2025 20:14:00 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=ycf17mk009cr\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bv\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=5%7C0%7C186%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:14:00.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=ycf17mk009cr\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bv\u0026adbx=290\u0026adby=90.23333740234375\u0026adbh=535\u0026adbw=700\u0026adbah=171%2C171%2C171\u0026adbn=master-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=5%7C0%7C186%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-fGjrzBJBv1Kop-jEbsdB1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 05 Oct 2025 20:14:00 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=g2ngjbg2lixq\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bv\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=1%7C0%7C190%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:14:00.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=g2ngjbg2lixq\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bv\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=1%7C0%7C190%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-MKguTEv2_xQ659X0lnuA1w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 05 Oct 2025 20:14:00 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=cl-047%2Cexp-0051%2Cauxa-control-1%2C187408\u0026client=dp-sedo92_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww1.qu.la%2Fcaf%2F%3Fses%3DY3JlPTE3NTk2OTUyMzgmdGNpZD13dzEucXUubGE2OGUyZDE4NmI3MzRhNC40MTg5OTM5NyZ0YXNrPXNlYXJjaCZkb21haW49cXUubGEmYV9pZD0zJnNlc3Npb249ejVBcEN3bTN5bVE2UWZpUTdDejc%3D\u0026type=3\u0026swp=as-drid-2445610912134376\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107\u0026format=r3%7Cs\u0026nocache=3331759695238911\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.qu.la\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759695238914\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=https%3A%2F%2Fww1.qu.la%2F%3Fsub1%3Dd25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:59.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23000000 HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 173\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Oct 2025 12:28:25 GMT\r\nexpires: Mon, 06 Oct 2025 11:28:25 GMT\r\ncache-control: public, max-age=82800\r\nage: 27934\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":200,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a12df2436667e359ab4623080d0a6fed","sha1":"e62f87b1d55545c0836af1cd8d849b41d9ed5f4f","sha256":"245be54e1421d7f071cc82866858258d5be20e08b1ffaeb4d7f59106d1805fd6","sha512":"e73926bbc4f11c6245517744c42e80635951f4ec2352eeebdb07a3a1e808f1cd08db838c54596728f4c1346fb4b6cde76851662bbe16cb6f409f7b274268e152","ssdeep":"","tlshash":"d8d02292c2186d28c51e82f0c37c712a00ea70a2238c00ccfa81a300720c8abb861668","first_seen":"2023-05-09T10:40:20Z","last_seen":"2026-03-01T19:00:52.571164Z","times_seen":68919,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":51,"dns":1,"connect":8,"send":0,"wait":9,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"172.217.21.161","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=cl-047%2Cexp-0051%2Cauxa-control-1%2C187408\u0026client=dp-sedo92_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww1.qu.la%2Fcaf%2F%3Fses%3DY3JlPTE3NTk2OTUyMzgmdGNpZD13dzEucXUubGE2OGUyZDE4NmI3MzRhNC40MTg5OTM5NyZ0YXNrPXNlYXJjaCZkb21haW49cXUubGEmYV9pZD0zJnNlc3Npb249ejVBcEN3bTN5bVE2UWZpUTdDejc%3D\u0026type=3\u0026swp=as-drid-2445610912134376\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107\u0026format=r3%7Cs\u0026nocache=3331759695238911\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.qu.la\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759695238914\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=https%3A%2F%2Fww1.qu.la%2F%3Fsub1%3Dd25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:59.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:07 GMT","end":"Mon, 08 Dec 2025 08:36:06 GMT"},"fingerprint":{"sha1":"CB:ED:08:40:60:28:21:1C:F0:5E:4E:70:F4:A7:21:B3:2D:D3:A2:41","sha256":"38:2A:CC:C1:33:BE:46:EF:3F:1F:4C:37:EF:65:6F:51:FD:55:86:1E:B3:ED:83:0A:3F:26:E1:6D:19:97:C6:9B"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://syndicatedsearch.goog/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 270\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Oct 2025 13:34:20 GMT\r\nexpires: Mon, 06 Oct 2025 12:34:20 GMT\r\ncache-control: public, max-age=82800\r\nage: 23979\r\nlast-modified: Thu, 20 Jul 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8959ddcd9712196961d93f58064ed655","sha1":"62ab1e38e7e9fbf58a04381b76c2d96a9c829f24","sha256":"17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7","sha512":"5e9effa313c30b351345db963238b4afd0728ca302fd79a853c80c89f042266d44cc1d29492520fb0fa80b47135e54e6963dfc21972f6b236b84c1da2fad809d","ssdeep":"","tlshash":"2ae068fa82846d044a8543b0ee09a7a442fff076535d90bbc1e4e6fcb0489eaacd2745","first_seen":"2023-04-08T10:54:48Z","last_seen":"2026-06-04T20:40:23.121535Z","times_seen":243745,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":49,"dns":1,"connect":9,"send":0,"wait":9,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qu.la/paihangbang/?ch=1\u0026js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc1OTcwMjQzNiwiaWF0IjoxNzU5Njk1MjM2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMWxyMnZrZXVvcDR0cjhvc28wMG9oOGMiLCJuYmYiOjE3NTk2OTUyMzYsInRzIjoxNzU5Njk1MjM2NTQwNzM1fQ.ioD27R_QjyRVyGLkbZnzssjwy6c3548qaTZFxYHnc1Y\u0026sid=d25fab83-a227-11f0-a400-fef3821d3319","fqdn":"www.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"162.210.199.85","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-05T20:13:56.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qu.la","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 16:13:58 GMT","end":"Wed, 31 Dec 2025 16:13:57 GMT"},"fingerprint":{"sha1":"65:AB:46:CC:29:0F:C7:68:47:2A:DE:5B:F9:5C:E6:43:BC:88:52:70","sha256":"24:95:CA:5B:20:5E:26:AD:6A:5E:35:94:B1:46:5F:75:EC:46:24:3F:45:BC:44:B4:E8:00:93:E9:36:A8:C1:27"}}},"request":{"raw":"GET /paihangbang/?ch=1\u0026js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc1OTcwMjQzNiwiaWF0IjoxNzU5Njk1MjM2LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMWxyMnZrZXVvcDR0cjhvc28wMG9oOGMiLCJuYmYiOjE3NTk2OTUyMzYsInRzIjoxNzU5Njk1MjM2NTQwNzM1fQ.ioD27R_QjyRVyGLkbZnzssjwy6c3548qaTZFxYHnc1Y\u0026sid=d25fab83-a227-11f0-a400-fef3821d3319 HTTP/1.1\r\nHost: www.qu.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qu.la/paihangbang/\r\nCookie: sid=d25fab83-a227-11f0-a400-fef3821d3319\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 11\r\ndate: Sun, 05 Oct 2025 20:13:56 GMT\r\nlocation: http://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319\r\nserver: Cowboy\r\nset-cookie: sid=d25fab83-a227-11f0-a400-fef3821d3319; path=/; domain=.qu.la; expires=Fri, 23 Oct 2093 23:28:03 GMT; max-age=2147483647; secure; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":25195,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:58.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:37:19 GMT","end":"Mon, 08 Dec 2025 08:37:18 GMT"},"fingerprint":{"sha1":"71:09:AD:C8:6A:D2:25:DB:C9:D9:5E:5B:C1:06:E1:0D:D6:39:D6:F0","sha256":"A9:72:F7:39:49:86:27:92:AA:EE:65:04:99:A9:0E:A8:02:70:01:E6:72:46:C2:FB:DC:5E:5E:6B:DC:B8:27:A0"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026YEr3CiF6AuQqLspNobyal3ji0SyqxBLn=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Sun, 05 Oct 2025 20:13:58 GMT\r\nexpires: Sun, 05 Oct 2025 20:13:58 GMT\r\ncache-control: private, max-age=3600\r\netag: \"7635061815429571906\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://syndicatedsearch.goog\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":159038,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2840)","md5":"aa3bbc833a94bf0d6840d5e56e038a0e","sha1":"1c04911ef230da56d048a1fa8fdde56c93720fe2","sha256":"ac6e8ad6f8f43ec6e8884cc4d55d465ab07578245ceff1ecc6ec8c2cc01a2a43","sha512":"2e39395ff09ea37d884e40d2b1bd2262a24155cde635f518d2a2a88183b219f090f801b231eb00706d684870588c124c13a99ebe7e0dc95eadbd4c2e1e85b0cf","ssdeep":"1536:5dzXuns5esCuVrLUNuEj8h7ZUwTC4zdEVKiSpxqec/V6XckzgGQNN3524a+PEuft:X4tjepDROwxdQWP6nXGrpz+PjPb","tlshash":"00f34acd73a1702243a395b4607f018fb13af865a84c88a4b199d8e47db4dad4277fbd","first_seen":"2025-10-02T14:24:34.239269Z","last_seen":"2025-10-06T20:28:54.930047Z","times_seen":1304,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":60,"dns":0,"connect":9,"send":0,"wait":21,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads/i/iframe.html","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:58.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/ads/i/iframe.html HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/html\r\ncontent-security-policy: script-src 'nonce-7tgV7I1_bRhpPDDkBjI4MQ' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none'\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ncontent-length: 729\r\ndate: Sun, 05 Oct 2025 20:13:58 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\nlast-modified: Tue, 17 Sep 2024 06:00:00 GMT\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1560,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1559)","md5":"b6d196be39751b4065aaea5cdbc657ed","sha1":"dfc3aa6e4e2030a50d4398b525539b3108a132f8","sha256":"d7219b716df960eaf78448a7a1f42fbf44c53cbbaa4ff059288c5833111035b1","sha512":"ca9bdb9c3abd5f8d76f980b40b4e64bad77116c7ec608127e97e1eacaafb87da7d5db0025034c243464f275093039b3faee30d9c54602e9c0667364beee55fde","ssdeep":"","tlshash":"dc3190ae4c50412e2d723d9d2d9fb604fa135414e446d5d0c58cf4793979fd7882a9f4","first_seen":"2025-10-05T20:14:23.799852Z","last_seen":"2025-10-05T20:14:23.799852Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":64,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww1.qu.la/search/tsc.php?ses=ogcdlEPcwzUkB9nLYGLwkE7U83BonVgeoD6XKitZ5UG73Rh_1876cgpxI_5wF6YGD4z9YWAVFEMIVIoM5oe1zknPIWNHdzSseIqelvHNfH_nAOkPUTBBXsBSkASSW8U0hsLGfgcnJOv-9MhsM7dTRAazgb-73dgzwlWHmXge3-Gwtex1Kvcthbj-vix22fwYLOtvvjNsUH5NS61n08opMb2tIPkhmQdYsehukd7bIDnkwgs0am0KwELF-xE10ZyzcWWDWdqyofQSXpu3cWYJbYowRBMoC0TE0Pyzk-128UUWvWb9LXtRw_pMlDjVajZweF4-PGC9xk_51YiWrIWru-zRAzfl7yoYDcmK_5gbm8lSsCQ-C3SGP_VtJZ2tB4\u0026cv=2","fqdn":"ww1.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"64.190.63.136","port":443,"asn":47846,"as":"SEDO GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:58.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ww1.qu.la","organization":""},"issuer":{"commonName":"Encryption Everywhere DV TLS CA - G2","organization":"DigiCert Inc"},"validity":{"start":"Tue, 08 Apr 2025 00:00:00 GMT","end":"Wed, 08 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"94:06:AC:81:D9:70:54:44:BB:B0:45:9E:52:96:A2:A1:0D:13:16:71","sha256":"5C:71:04:37:95:B7:C5:D7:2D:54:E2:89:0B:AE:C3:80:63:31:A2:4F:D1:6D:F8:E7:13:0A:C4:8B:9F:26:F7:FF"}}},"request":{"raw":"GET /search/tsc.php?ses=ogcdlEPcwzUkB9nLYGLwkE7U83BonVgeoD6XKitZ5UG73Rh_1876cgpxI_5wF6YGD4z9YWAVFEMIVIoM5oe1zknPIWNHdzSseIqelvHNfH_nAOkPUTBBXsBSkASSW8U0hsLGfgcnJOv-9MhsM7dTRAazgb-73dgzwlWHmXge3-Gwtex1Kvcthbj-vix22fwYLOtvvjNsUH5NS61n08opMb2tIPkhmQdYsehukd7bIDnkwgs0am0KwELF-xE10ZyzcWWDWdqyofQSXpu3cWYJbYowRBMoC0TE0Pyzk-128UUWvWb9LXtRw_pMlDjVajZweF4-PGC9xk_51YiWrIWru-zRAzfl7yoYDcmK_5gbm8lSsCQ-C3SGP_VtJZ2tB4\u0026cv=2 HTTP/1.1\r\nHost: ww1.qu.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319\r\nCookie: sid=d25fab83-a227-11f0-a400-fef3821d3319\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 05 Oct 2025 20:13:58 GMT\r\nserver: Parking/1.0\r\nx-cache-miss-from: parking-7fbf5fd67f-487td\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"ww1.qu.la","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"img.sedoparking.com/templates/logos/sedo_logo.png","fqdn":"img.sedoparking.com","domain":"sedoparking.com","tld":"com"},"ip":{"addr":"205.234.175.175","port":443,"asn":30081,"as":"CACHENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:58.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cachefly.net","organization":"Cachenetworks, LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Nov 2024 20:01:06 GMT","end":"Sun, 14 Dec 2025 20:01:05 GMT"},"fingerprint":{"sha1":"E3:21:BF:A0:AC:70:6E:19:F1:83:A3:CB:83:F9:6F:0F:E0:46:F1:3C","sha256":"0D:FF:60:D6:18:60:C6:38:90:5D:DD:55:2E:87:EE:3A:E5:96:78:0B:5F:68:E8:88:AD:AE:1A:BF:51:59:94:83"}}},"request":{"raw":"GET /templates/logos/sedo_logo.png HTTP/1.1\r\nHost: img.sedoparking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 05 Oct 2025 20:13:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 15086\r\naccess-control-allow-origin: *\r\ncache-control: max-age=604800\r\nexpires: Sun, 12 Oct 2025 20:13:59 GMT\r\nx-cfhash: \"def00c11b1596db4efee6a9fbe64fc27\"\r\nx-cff: B\r\nlast-modified: Mon, 11 Jan 2021 07:44:34 GMT\r\nx-cf3: H\r\ncf4age: 0\r\nx-cf-tsc: 1729867994\r\ncf4ttl: 31536000.000\r\nx-cf2: H\r\nserver: CFS 1124\r\nx-cf-reqid: d8d5e2c28eafd89baa91b07a283ec2c0\r\nx-cf1: 11696:fA.arn1:cf:nom:cacheN.arn1-01:H\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"CacheFly","description":"CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.","website":"https://www.cachefly.com","common_platform_enumeration":"","icon":"CacheFly.svg","categories":["CDN"]}],"data":{"size":15086,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"def00c11b1596db4efee6a9fbe64fc27","sha1":"bd298981e6d8d7e4ffa18abcf687041f4246672d","sha256":"95c427fa3143b1896faf42a6406686ce7602cb39052081bb32d12b51c9e047e4","sha512":"c056e95dbfa1aab3a50dff18c6d577dbffea72c93316ffc53b6b7aa41dcc7707a810d563894589a7305de0b76610f88150b2034670de368773b2b356f14ad30f","ssdeep":"192:jiHSINqv0tJ30DezSfPAXTZwC3D2N2xp1Fd/ar/+zi3LHZNwkQH0iWpXDt3TN8rB:jzAnP9j","tlshash":"31623e0bfd4bc358ce50b23ae67c4bfb6361d8c1b090a7e257d9d51aafa7b014c9a011","first_seen":"2023-04-14T07:11:21Z","last_seen":"2026-06-10T02:15:25.265899Z","times_seen":237013,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":10,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-05","alert":"Sinkholed","trigger":"img.sedoparking.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=txmkg2uq172i\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bs\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=1%7C0%7C190%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:14:00.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/gen_204?client=dp-sedo92_3ph\u0026output=uds_ads_only\u0026zx=txmkg2uq172i\u0026cd_fexp=72717107\u0026aqid=h9HiaOJu1sjF3A-tndHwCQ\u0026psid=7446205343\u0026pbt=bs\u0026adbx=490\u0026adby=1010.2333374023438\u0026adbh=17\u0026adbw=300\u0026adbn=slave-1-1\u0026eawp=partner-dp-sedo92_3ph\u0026errv=813237002\u0026csala=1%7C0%7C190%7C41%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ldEW3Z2WCxmr7g6ej549eA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Sun, 05 Oct 2025 20:14:00 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-10T02:14:21.808818Z","times_seen":16284503,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.qu.la/favicon.ico","fqdn":"www.qu.la","domain":"qu.la","tld":"la"},"ip":{"addr":"162.210.199.85","port":443,"asn":30633,"as":"LEASEWEB-USA-WDC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.qu.la/paihangbang/","date":"2025-10-05T20:13:56.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"qu.la","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 16:13:58 GMT","end":"Wed, 31 Dec 2025 16:13:57 GMT"},"fingerprint":{"sha1":"65:AB:46:CC:29:0F:C7:68:47:2A:DE:5B:F9:5C:E6:43:BC:88:52:70","sha256":"24:95:CA:5B:20:5E:26:AD:6A:5E:35:94:B1:46:5F:75:EC:46:24:3F:45:BC:44:B4:E8:00:93:E9:36:A8:C1:27"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.qu.la\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.qu.la/paihangbang/\r\nCookie: sid=d25fab83-a227-11f0-a400-fef3821d3319\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: max-age=0, private, must-revalidate\r\ncontent-length: 9\r\ndate: Sun, 05 Oct 2025 20:13:56 GMT\r\nserver: Cowboy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":9,"size_decoded":0,"mime_type":"image/x-icon","magic":"ASCII text, with no line terminators","md5":"d8f4a1993546cc4b850cde3599e27aec","sha1":"094b763b4cfcc0b05e5d040581cd513c3ca08067","sha256":"907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9","sha512":"7c696247f98aa6fe4e1df001fd6029abbbccf45b122d65dfdede8f8a400cda775387c657f96bd1e4e52da7409187892b1f0786c54d835d2e44227b2e1335eaf6","ssdeep":"","tlshash":"4a50000c0003030c0000003000c00030000c03000c0000300000c00c00000000c000cc","first_seen":"2023-03-08T07:11:06Z","last_seen":"2026-06-09T22:05:16.763021Z","times_seen":20533,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"syndicatedsearch.goog/afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=cl-047%2Cexp-0051%2Cauxa-control-1%2C187408\u0026client=dp-sedo92_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww1.qu.la%2Fcaf%2F%3Fses%3DY3JlPTE3NTk2OTUyMzgmdGNpZD13dzEucXUubGE2OGUyZDE4NmI3MzRhNC40MTg5OTM5NyZ0YXNrPXNlYXJjaCZkb21haW49cXUubGEmYV9pZD0zJnNlc3Npb249ejVBcEN3bTN5bVE2UWZpUTdDejc%3D\u0026type=3\u0026swp=as-drid-2445610912134376\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107\u0026format=r3%7Cs\u0026nocache=3331759695238911\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.qu.la\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759695238914\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=https%3A%2F%2Fww1.qu.la%2F%3Fsub1%3Dd25fab83-a227-11f0-a400-fef3821d3319","fqdn":"syndicatedsearch.goog","domain":"syndicatedsearch.goog","tld":"goog"},"ip":{"addr":"216.58.207.238","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://ww1.qu.la/?sub1=d25fab83-a227-11f0-a400-fef3821d3319","date":"2025-10-05T20:13:58.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"syndicatedsearch.goog","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:39:16 GMT","end":"Mon, 08 Dec 2025 08:39:15 GMT"},"fingerprint":{"sha1":"06:38:C9:AB:6C:EF:48:88:4B:DC:BA:6F:95:B8:B5:19:D9:DC:3B:43","sha256":"94:6D:D6:D8:65:56:22:30:39:89:18:F0:C9:C7:8D:72:6C:B6:67:2F:82:DC:3B:34:B5:D4:00:60:C5:36:E8:C3"}}},"request":{"raw":"GET /afs/ads?adsafe=low\u0026adtest=off\u0026psid=7446205343\u0026channel=cl-047%2Cexp-0051%2Cauxa-control-1%2C187408\u0026client=dp-sedo92_3ph\u0026r=m\u0026hl=no\u0026ivt=0\u0026rpbu=https%3A%2F%2Fww1.qu.la%2Fcaf%2F%3Fses%3DY3JlPTE3NTk2OTUyMzgmdGNpZD13dzEucXUubGE2OGUyZDE4NmI3MzRhNC40MTg5OTM5NyZ0YXNrPXNlYXJjaCZkb21haW49cXUubGEmYV9pZD0zJnNlc3Npb249ejVBcEN3bTN5bVE2UWZpUTdDejc%3D\u0026type=3\u0026swp=as-drid-2445610912134376\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107\u0026format=r3%7Cs\u0026nocache=3331759695238911\u0026num=0\u0026output=afd_ads\u0026domain_name=ww1.qu.la\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1759695238914\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=1194\u0026frm=0\u0026uio=--\u0026cont=rb-default\u0026drt=0\u0026jsid=caf\u0026jsv=813237002\u0026rurl=https%3A%2F%2Fww1.qu.la%2F%3Fsub1%3Dd25fab83-a227-11f0-a400-fef3821d3319 HTTP/1.1\r\nHost: syndicatedsearch.goog\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ww1.qu.la/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Sun, 05 Oct 2025 20:13:58 GMT\r\nexpires: Sun, 05 Oct 2025 20:13:58 GMT\r\ncache-control: private, max-age=3600\r\nx-content-security-policy-report-only: default-src https: data:; options eval-script inline-script; report-uri /csp_report; referrer origin\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-WDHvvvYmWNYJXBAk8yNAMg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 3196\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":14613,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (13816)","md5":"0f8a4fa644fe56af91b6e96562fcd48d","sha1":"da82991b8bceb9ed8a0e494dbcb8ef8b607e6c50","sha256":"1e43bfa211d43d24e01b85a65832dfac79cf655fb6bfc3f4002ac59be78a49c9","sha512":"1fcbce18650039770248604430b2970fa8bcd328526321562dfa3773fc95df667005630d1a96dbd6da7ccb91165925a30859ca4096438221730ad4c2d7aac100","ssdeep":"192:GE12iMpgbamHMDnBh7VJWrFsQEsQoGsQsLOIHtbQpk4:Gni0kMz7jpQnQwQsLO+Qpk4","tlshash":"9162943764a2172d4903dc541b2a6f6dd181d43ac46b35e948e35f25c7ebf828fe228e","first_seen":"2025-10-05T20:14:23.807134Z","last_seen":"2025-10-05T20:14:23.807134Z","times_seen":1,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}