{"report_id":"bb2bffa9-ddee-4086-abc8-6725be257975","version":6,"status":"done","tags":[],"date":"2023-12-06T01:40:37Z","url":{"schema":"http","addr":"69.162.80.55/","fqdn":"69.162.80.55","domain":"69.162.80.55","tld":""},"ip":{"addr":"69.162.80.55","port":0,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"survey-smiles.com/","fqdn":"survey-smiles.com","domain":"survey-smiles.com","tld":"com"},"title":"Survey-smiles.com"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T08:54:07Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2023-12-05 07:01:09","alert_count":0,"request_count":2,"received_data":2093,"sent_data":1033,"comment":"","tags":null,"fingerprints":null},{"fqdn":"69.162.80.55","ip":{"addr":"69.162.80.55","port":0,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":363,"sent_data":395,"comment":"","tags":null,"fingerprints":null},{"fqdn":"e1.o.lencr.org","ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":6159,"first_seen":"2021-08-20 09:36:30","last_seen":"2023-12-05 19:27:35","alert_count":0,"request_count":1,"received_data":729,"sent_data":338,"comment":"","tags":null,"fingerprints":null},{"fqdn":"survey-smiles.com","ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2018-06-22","domain_rank":63138,"first_seen":"2018-06-29 17:50:49","last_seen":"2023-12-05 06:42:10","alert_count":0,"request_count":4,"received_data":37072,"sent_data":2104,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":55679,"sent_data":425,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2023-12-05 05:13:14","alert_count":0,"request_count":4,"received_data":60905,"sent_data":3144,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2023-12-06T01:40:25Z","timestamp":1701826825,"ip_dst":{"addr":"Client IP","port":48170,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"69.162.80.55","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2023-12-06T01:40:25.750565+0000\",\"flow_id\":1747617109859063,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"69.162.80.55\",\"src_port\":443,\"dest_ip\":\"10.70.215.56\",\"dest_port\":48170,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"3271cf62f45f551e79405f26e227ebda\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":771,\"bytes_toclient\":173,\"start\":\"2023-12-06T01:40:25.482039+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2023-12-06T01:40:26Z","timestamp":1701826826,"ip_dst":{"addr":"Client IP","port":48180,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"69.162.80.55","port":443,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2023-12-06T01:40:26.065634+0000\",\"flow_id\":429212473824078,\"in_iface\":\"lxdbr0\",\"event_type\":\"alert\",\"src_ip\":\"69.162.80.55\",\"src_port\":443,\"dest_ip\":\"10.70.215.56\",\"dest_port\":48180,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"ddb7e3d96a12de225f5c4fca1d2607f1\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":699,\"bytes_toclient\":173,\"start\":\"2023-12-06T01:40:25.791374+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-06","alert":"Sinkholed","trigger":"69.162.80.55","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"survey-smiles.com/","fqdn":"survey-smiles.com","domain":"survey-smiles.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d4d10fdc1dd71231f69781c7877031e","sha1":"c6308e29164f81addc1171a0b6fc3860df683ad8","sha256":"5a87e11882bae58d9ff622c64d67b0358d06a67d2392f47ec3df5c800c5a73e7","sha512":"99b903201003ee07d39d4f761d5778249a68d90388886ecd2844f551de9d44b34be0d05ace9bc78bb561786f8db0a4655e8d76bef6e9cad59d4cd144b95f60bd","ssdeep":"","tlshash":"93e07dec212fb6cff413d4e106e6af909adc2c5100f4660feaa8146b14545a6887c0f3","size":307,"data":"","first_seen":"2024-08-20T16:37:05.939632Z","last_seen":"2024-08-20T16:37:05.939632Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"survey-smiles.com/bolwiPNjU.js","fqdn":"survey-smiles.com","domain":"survey-smiles.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","size":32054,"data":"","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"980fb04d2da5f7f360deea9af49a0fdc","sha1":"d9c762b66a33644ddc28c2ce6c09e1f400df8cdd","sha256":"f9b94b36f3a1ff7c60d1048d748663b9d5592499491f07f7574a6b77b089a0af","sha512":"4a2838554600de0887e6e2b310c1208df772c432a46842f1eb0e73586553b46998291fa5ebd022aeeba753a781a56deb61349c6709be29c976ed58513b0a78bb","ssdeep":"1536:3rPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:62sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"18e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149642,"data":"","first_seen":"2023-11-08T16:34:54Z","last_seen":"2023-12-11T19:28:33Z","times_seen":1308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol48%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol406\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Fsurvey-smiles.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301383\u0026format=r3\u0026nocache=841701826827927\u0026num=0\u0026output=afd_ads\u0026domain_name=survey-smiles.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1701826827928\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Fsurvey-smiles.com%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c4b0341c5d5f5d27110a027d1422c27","sha1":"cd437cab5a9a43f855f2d6bcb7a65a29b6b38d7c","sha256":"7736316d052fff1f36bba89ff14c99ba0f8d31abe12a3d3b4c139b8001bfa017","sha512":"9c5ba991e3aefc13bfee6e31a6cc7e571607fbd4f2560873a968c24a9fc7b2a08060ec0f2212ea23af93e56ac592e6f96d9bd2d3e89c013f22dcc8faf33dc3f4","ssdeep":"","tlshash":"2b01fe9219640172d86b04112d8e3fa018dc1570318b654aa40da8da247cbcf67290ab","size":659,"data":"","first_seen":"2024-08-20T16:37:05.941595Z","last_seen":"2024-08-20T16:37:05.941595Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1123a0a217608d6d401c22547fafb74c","sha1":"bc0e5bb3c8b3c77fcd85c8483a62f56106177ffd","sha256":"39f2992cdab5eafb6182f90b851aa9e7f568d2a3e90fa33efd8ec7cbfb352fed","sha512":"80b609c5cfc686a291884182df93083b320c3eabeb87f3e42ed4c36fbb653dec82189b90e1af9c186ea5143d0e82afe43598c9e858bbcbc66c64e748c1cb643f","ssdeep":"1536:SrPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:p2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"9de35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149658,"data":"","first_seen":"2023-11-08T18:13:16Z","last_seen":"2023-12-11T15:06:23Z","times_seen":582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"69.162.80.55/","fqdn":"69.162.80.55","domain":"69.162.80.55","tld":"55"},"ip":{"addr":"69.162.80.55","port":0,"asn":46475,"as":"LIMESTONENETWORKS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-06T01:40:25.483Z","timestamp":1701826825483,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: 69.162.80.55\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ncache-control: max-age=0, private, must-revalidate\r\nconnection: close\r\ncontent-length: 11\r\ndate: Wed, 06 Dec 2023 01:40:20 GMT\r\nlocation: http://survey-smiles.com\r\nserver: nginx\r\nset-cookie: sid=6a6b8f51-93d8-11ee-875c-068d7f8917cc; path=/; domain=.69.162.80.55; expires=Mon, 24 Dec 2091 04:54:27 GMT; max-age=2147483647; HttpOnly\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":11,"size_decoded":0,"mime_type":"","magic":"ASCII text, with no line terminators","md5":"32682312d17c7cbf18e73594f5570319","sha1":"60e22121bdd0bc71cdb2bae2a3aa577006b2eae9","sha256":"e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47","sha512":"68337debb9cd659cece621af582ae2bc4b56b9cf06b26c45f4d9eb8beb91d3f36bead287218b5aa2bb4853a1cf1a12017ca57318d7e12f489884fdc6b261dfc1","ssdeep":"","tlshash":"3550000030c0300c0000000c0000030003000000000c033f0c3003c00c000000000003","first_seen":"2023-04-05T04:09:22Z","last_seen":"2025-03-02T06:14:56.641448Z","times_seen":15034,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":306,"dns":2,"connect":134,"send":0,"wait":0,"receive":0,"ssl":137},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-12-06","alert":"Sinkholed","trigger":"69.162.80.55","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"e1.o.lencr.org/","fqdn":"e1.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.33.119.57","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-12-06T01:40:26.755589937Z","timestamp":1701826826755,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: e1.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 345\r\nETag: \"BFDEC287B6E8FDD23F30E3D757569C01A296B52A420B6176606E20DC63FCE345\"\r\nLast-Modified: Sun, 03 Dec 2023 22:00:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=17713\r\nExpires: Wed, 06 Dec 2023 06:35:33 GMT\r\nDate: Wed, 06 Dec 2023 01:40:20 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":345,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"8252cf929f4398bab2a7d67a414abf72","sha1":"01e7542d35c57616d22914836428d52017083254","sha256":"bfdec287b6e8fdd23f30e3d757569c01a296b52a420b6176606e20dc63fce345","sha512":"9f26b0590ecdcd9a0cfe2043a0329d2dab5a897f31de0e801dbf608bb1110bca2a4cd8d5316d9315499c0ebdd010088bad9db5efab7a2088ec189c177810ed12","ssdeep":"","tlshash":"1ee07d8617643c588f358bd0fe79d429b933b0aa3a89abf760e8a2d23c43354c70810c","first_seen":"2023-12-06T02:40:43Z","last_seen":"2023-12-06T03:41:26Z","times_seen":2,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"survey-smiles.com/","fqdn":"survey-smiles.com","domain":"survey-smiles.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-06T01:40:26.361Z","timestamp":1701826826361,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"survey-smiles.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Nov 2023 17:11:09 GMT","end":"Fri, 16 Feb 2024 17:11:08 GMT"},"fingerprint":{"sha1":"8F:E9:8C:F0:48:93:88:8F:D3:50:4B:B1:D5:E8:21:0F:7B:77:08:4C","sha256":"09:32:4E:A6:79:E3:78:BC:09:7A:E3:9D:40:9F:04:94:9D:D4:89:89:0D:65:B8:AB:B3:FB:76:C7:7D:38:2E:C3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: survey-smiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:20 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 1025\r\nX-Request-Id: ba9a4ccc-1172-41fd-997e-a3f675793a11\r\nCache-Control: no-store, max-age=0\r\nAccept-Ch: sec-ch-prefers-color-scheme\r\nCritical-Ch: sec-ch-prefers-color-scheme\r\nVary: sec-ch-prefers-color-scheme\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_sEU3PcT8Ryw1ehqchQc7wKmgs3x55pEz5D+P8U+6WLG2dxmItmeVxE92ZW0oIusQwpMY2QuI4qWJ4r1eWZK0jQ==\r\nSet-Cookie: parking_session=ba9a4ccc-1172-41fd-997e-a3f675793a11; expires=Wed, 06 Dec 2023 01:55:20 GMT; path=/\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1025,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (322)","md5":"b9bd573513de327eac3ee2bf4d3c092e","sha1":"e1ae440bc3912bb03d213aadce2798b52a8fd8c7","sha256":"c1b7f925df099425f5e2c40facab55ef0ef9b9f703a353b77ccaddd7fa5db072","sha512":"744eae24b3a9c2fefbf96a2885df65a1a98a4545858ffcf30ed9186f512075653b1441563a8a53b53c2959bb9702461ff5855149acc130c927c7d67a36190edd","ssdeep":"","tlshash":"1f11a8ba242b954a70b285d00df1e61c8c0d3a4d52956c46bddde03b49c03e2d83e2f9","first_seen":"2023-12-06T02:40:43Z","last_seen":"2023-12-06T02:40:43Z","times_seen":1,"resource_available":false,"data":null}},"time_used":908,"timings":{"blocked":397,"dns":8,"connect":1,"send":0,"wait":114,"receive":0,"ssl":386},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"survey-smiles.com/bolwiPNjU.js","fqdn":"survey-smiles.com","domain":"survey-smiles.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://survey-smiles.com/","date":"2023-12-06T01:40:27.007Z","timestamp":1701826827007,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"survey-smiles.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Nov 2023 17:11:09 GMT","end":"Fri, 16 Feb 2024 17:11:08 GMT"},"fingerprint":{"sha1":"8F:E9:8C:F0:48:93:88:8F:D3:50:4B:B1:D5:E8:21:0F:7B:77:08:4C","sha256":"09:32:4E:A6:79:E3:78:BC:09:7A:E3:9D:40:9F:04:94:9D:D4:89:89:0D:65:B8:AB:B3:FB:76:C7:7D:38:2E:C3"}}},"request":{"raw":"GET /bolwiPNjU.js HTTP/1.1\r\nHost: survey-smiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://survey-smiles.com/\r\nCookie: parking_session=ba9a4ccc-1172-41fd-997e-a3f675793a11\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 06 Dec 2023 01:40:20 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 32054\r\nX-Request-Id: 2ccee1db-ba0e-4e10-8330-0b364fa4cc69\r\nSet-Cookie: parking_session=ba9a4ccc-1172-41fd-997e-a3f675793a11; expires=Wed, 06 Dec 2023 01:55:21 GMT\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32054,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32051)","md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":239,"dns":0,"connect":1,"send":0,"wait":116,"receive":1,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"survey-smiles.com/_fd","fqdn":"survey-smiles.com","domain":"survey-smiles.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://survey-smiles.com/","date":"2023-12-06T01:40:27.375Z","timestamp":1701826827375,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"survey-smiles.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Nov 2023 17:11:09 GMT","end":"Fri, 16 Feb 2024 17:11:08 GMT"},"fingerprint":{"sha1":"8F:E9:8C:F0:48:93:88:8F:D3:50:4B:B1:D5:E8:21:0F:7B:77:08:4C","sha256":"09:32:4E:A6:79:E3:78:BC:09:7A:E3:9D:40:9F:04:94:9D:D4:89:89:0D:65:B8:AB:B3:FB:76:C7:7D:38:2E:C3"}}},"request":{"raw":"POST /_fd HTTP/1.1\r\nHost: survey-smiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://survey-smiles.com/\r\nContent-Type: application/json\r\nOrigin: https://survey-smiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=ba9a4ccc-1172-41fd-997e-a3f675793a11\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Wed, 06 Dec 2023 01:40:20 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nContent-Length: 2038\r\nX-Version: 2.110.4\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: parking_session=ba9a4ccc-1172-41fd-997e-a3f675793a11; expires=Wed, 06 Dec 2023 01:55:21 GMT; Max-Age=900; path=/; httponly\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2038,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4001), with no line terminators","md5":"bbe025ee635e769681aa880375531ff4","sha1":"1b545d7eedadb8b5ef21d99ed4f3b7f8d61293fe","sha256":"b5b2e1249c861ac4f5bd3b10a26498a6e9fdbd50fdd0dcc1e288fd78fbdcb5f8","sha512":"08c48d011b247f1e1a3a2d26070488289807bf76b745566548a2325c3f1996e187713452bca61b2c8ceb227e58b520e82b53f7ab9389e61a87cb83bd3c1c2eb0","ssdeep":"","tlshash":"5981b79f8c9a369eeb22994790dc45ea510e1f8b1432500dd59ea3dd8a0eb0f31f023e","first_seen":"2023-12-06T02:40:43Z","last_seen":"2023-12-06T02:40:43Z","times_seen":1,"resource_available":false,"data":null}},"time_used":628,"timings":{"blocked":241,"dns":1,"connect":1,"send":0,"wait":145,"receive":1,"ssl":237},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.132","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://survey-smiles.com/","date":"2023-12-06T01:40:27.773Z","timestamp":1701826827773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://survey-smiles.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Wed, 06 Dec 2023 01:40:21 GMT\r\nexpires: Wed, 06 Dec 2023 01:40:21 GMT\r\ncache-control: private, max-age=3600\r\netag: \"671007550098774708\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54830,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression\\012- data","md5":"0a68506eba89a9fe184d96942562fa69","sha1":"198060e6a39e2ce7a01611c16cc70b2136ce5881","sha256":"4f2316004d6efec65b7bd50e9a9cbd46aa10f0a7653f16739196571f0a325c55","sha512":"2eab2e874a6f16b8eaecfd73a900c1e36a107aac80769ceec99c0d7c0f4bc4341096ed361b11dfb9c44a51cc6bbe721e51017e04778ba6e9732d91a136ff0f25","ssdeep":"768:Vqf2x0/QaHRbNdmVCdf+RjuF622ciS+JLnfNLt2qFr5dsEJBOeCgZqFvUaSsp74I:+28QaxbVGRqFEcATNpH1lJBogZ5gpiw","tlshash":"c033f1c815be204e4b92aa3706d578ba78fdc72849884cbd3ce4a68f414ff8956c394d","first_seen":"2023-12-06T02:40:43Z","last_seen":"2023-12-06T22:31:33Z","times_seen":5,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":61,"dns":1,"connect":8,"send":0,"wait":20,"receive":12,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol48%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol406\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Fsurvey-smiles.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301383\u0026format=r3\u0026nocache=841701826827927\u0026num=0\u0026output=afd_ads\u0026domain_name=survey-smiles.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1701826827928\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Fsurvey-smiles.com%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://survey-smiles.com/","date":"2023-12-06T01:40:27.949Z","timestamp":1701826827949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol48%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol406\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Fsurvey-smiles.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301383\u0026format=r3\u0026nocache=841701826827927\u0026num=0\u0026output=afd_ads\u0026domain_name=survey-smiles.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1701826827928\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Fsurvey-smiles.com%2F HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://survey-smiles.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Wed, 06 Dec 2023 01:40:22 GMT\r\nexpires: Wed, 06 Dec 2023 01:40:22 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-l1_hToD5hQAgG02ZUV2BiA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2561\r\nx-xss-protection: 0\r\nset-cookie: CONSENT=PENDING+645; expires=Fri, 05-Dec-2025 01:40:21 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2561,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (13059)","md5":"1bd437cbc4e39e3d43f77b7a3911cfdf","sha1":"8b997ba42efaefb33b51bb1b57bc998c4023a86e","sha256":"41d85aa34828fc371260f1dc7580955bb4a888a1a9909993f4500b162bc4ce04","sha512":"908d5260a1936006bf995ccfc0e7b4250e586357203169ff7d4388786cecddf5962281039c1d2c2336d28ab0e1904b97a8ddcb26e8aa3ba830b54db75bc6e06b","ssdeep":"96:GE/yk2iwlb5lphMzTronSc90IMvm0yEM6vfNYrWHXM8D1Mw9eDqvnuM8Dow9eDXj:GE12ikpBn9+m0yEMcfWronkW","tlshash":"ec5243377062272d4507ec541b296f5dd181d43ac4ab36e948a35b25c7ebf828fe228e","first_seen":"2023-12-06T02:40:43Z","last_seen":"2023-12-06T02:40:43Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":52,"dns":1,"connect":7,"send":0,"wait":85,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol48%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol406\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Fsurvey-smiles.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301383\u0026format=r3\u0026nocache=841701826827927\u0026num=0\u0026output=afd_ads\u0026domain_name=survey-smiles.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1701826827928\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Fsurvey-smiles.com%2F","date":"2023-12-06T01:40:28.369Z","timestamp":1701826828369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Wed, 06 Dec 2023 01:40:22 GMT\r\nexpires: Wed, 06 Dec 2023 01:40:22 GMT\r\ncache-control: private, max-age=3600\r\netag: \"9277249071508174420\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54837,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression\\012- data","md5":"725bbbaff4454d6569f57fa182a6db6f","sha1":"d47caa6e505cc2fac989fb7bb84634922317ad6b","sha256":"b7bb9aad5181b2c559c2140bdf137b95166923661f7685f13f7454e427e2a353","sha512":"3fbe330edcdf3fdafe679047610e5e1b23049529e7a790f56ace6e0571893ce49e3e46aee1f608551eaed9695e26d350e13cd061587fe6f6b4f54ecb1d87a0cf","ssdeep":"768:1qh0yrJYCjM78CO5Zc9lbkJyiK4fzoULfqzPvSx+MiTtmGgkLC0qjg:1M0myu5+9lIgI8kizPvSx+MiEgLC0Wg","tlshash":"f93312cf25e25b8f0d3b002455dfcaf560d61b1ca3f55199f320724a25a9bed9c9eb20","first_seen":"2023-12-06T02:40:43Z","last_seen":"2023-12-06T02:40:43Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol48%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol406\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Fsurvey-smiles.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301383\u0026format=r3\u0026nocache=841701826827927\u0026num=0\u0026output=afd_ads\u0026domain_name=survey-smiles.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1701826827928\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Fsurvey-smiles.com%2F","date":"2023-12-06T01:40:28.487Z","timestamp":1701826828487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 06 Dec 2023 00:30:37 GMT\r\nexpires: Wed, 06 Dec 2023 23:30:37 GMT\r\ncache-control: public, max-age=82800\r\nage: 4185\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (306)","md5":"fe7dd8c3c629cc6e9cd6d3e4d3cbe905","sha1":"59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18","sha256":"5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e","sha512":"1c663e07978d95c838aed54421a9c725d7311b8c002f436b30555affb26c25f6ebecff6af5c54ef112370a36a5f5aadf611304bffe76a59fb3d206e943cf153f","ssdeep":"","tlshash":"eff055bcd2ad4914a608c7017ef8a5174066f0c563cc01ceee81ac69f0614e43a63ade","first_seen":"2023-04-07T08:14:08Z","last_seen":"2026-05-09T10:09:20.05963Z","times_seen":69547,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":66,"dns":10,"connect":8,"send":0,"wait":10,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol47%2Cpid-bodis-gcontrol48%2Cpid-bodis-gcontrol301%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol406\u0026client=dp-bodis30_3ph\u0026r=m\u0026hl=en\u0026rpbu=https%3A%2F%2Fsurvey-smiles.com%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2898040491288658\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17300002%2C17301383\u0026format=r3\u0026nocache=841701826827927\u0026num=0\u0026output=afd_ads\u0026domain_name=survey-smiles.com\u0026v=3\u0026bsl=8\u0026pac=2\u0026u_his=2\u0026u_tz=0\u0026dt=1701826827928\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=https%3A%2F%2Fsurvey-smiles.com%2F","date":"2023-12-06T01:40:28.490Z","timestamp":1701826828490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 Dec 2023 06:40:56 GMT\r\nexpires: Wed, 06 Dec 2023 05:40:56 GMT\r\ncache-control: public, max-age=82800\r\nage: 68366\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with no line terminators","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":74,"dns":11,"connect":8,"send":0,"wait":8,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"survey-smiles.com/_tr","fqdn":"survey-smiles.com","domain":"survey-smiles.com","tld":"com"},"ip":{"addr":"199.59.243.225","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://survey-smiles.com/","date":"2023-12-06T01:40:28.534Z","timestamp":1701826828534,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"survey-smiles.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Nov 2023 17:11:09 GMT","end":"Fri, 16 Feb 2024 17:11:08 GMT"},"fingerprint":{"sha1":"8F:E9:8C:F0:48:93:88:8F:D3:50:4B:B1:D5:E8:21:0F:7B:77:08:4C","sha256":"09:32:4E:A6:79:E3:78:BC:09:7A:E3:9D:40:9F:04:94:9D:D4:89:89:0D:65:B8:AB:B3:FB:76:C7:7D:38:2E:C3"}}},"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: survey-smiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://survey-smiles.com/\r\nContent-Type: application/json\r\nContent-Length: 1637\r\nOrigin: https://survey-smiles.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=ba9a4ccc-1172-41fd-997e-a3f675793a11\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Wed, 06 Dec 2023 01:40:21 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nContent-Length: 22\r\nX-Version: 2.110.4\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: parking_session=ba9a4ccc-1172-41fd-997e-a3f675793a11; expires=Wed, 06 Dec 2023 01:55:22 GMT; Max-Age=900; path=/; httponly\r\nConnection: close\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-13T03:28:49.348192Z","times_seen":410512,"resource_available":true,"data":null}},"time_used":616,"timings":{"blocked":241,"dns":1,"connect":0,"send":0,"wait":133,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=vcc3l5u1iiq1\u0026aqid=BtFvZdfRAauExdwPqu6D0A0\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=6%7C0%7C449%7C68%7C10\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://survey-smiles.com/","date":"2023-12-06T01:40:29.962Z","timestamp":1701826829962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=vcc3l5u1iiq1\u0026aqid=BtFvZdfRAauExdwPqu6D0A0\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=6%7C0%7C449%7C68%7C10\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://survey-smiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce--olhj5YyhKMtOW4KqB1ytw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Wed, 06 Dec 2023 01:40:23 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+726; expires=Fri, 05-Dec-2025 01:40:23 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T03:33:07.860305Z","times_seen":15089071,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=u73ue8b4yqdh\u0026aqid=BtFvZdfRAauExdwPqu6D0A0\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=6%7C0%7C449%7C68%7C10\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://survey-smiles.com/","date":"2023-12-06T01:40:30.464Z","timestamp":1701826830464,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis30_3ph\u0026output=uds_ads_only\u0026zx=u73ue8b4yqdh\u0026aqid=BtFvZdfRAauExdwPqu6D0A0\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis30_3ph\u0026errv=579967862\u0026csala=6%7C0%7C449%7C68%7C10\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://survey-smiles.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-NKbQbnPYW_yr7wveR6y1Ow' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Wed, 06 Dec 2023 01:40:24 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+476; expires=Fri, 05-Dec-2025 01:40:24 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-13T03:33:07.860305Z","times_seen":15089071,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}